Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
f5af3783ddf3b5c148555102fed3463e_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f5af3783ddf3b5c148555102fed3463e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
f5af3783ddf3b5c148555102fed3463e_JaffaCakes118
Size
236KB
MD5
f5af3783ddf3b5c148555102fed3463e
SHA1
43593f944a1fde64987ece286d8cf4bfc960e266
SHA256
9432d5c1264a8a6834c4953cc8eb45a6259a9298ed03de9f86d3a4c2e16cf0af
SHA512
0efbb8bee96c28d5f4a195e850bb48487e939378ebd41678376967f1930edf2d3c73f3a8670d0c4dbfb8c2d5b5b489d92bab7014bc09a99ad10590106cbf1f0a
SSDEEP
6144:k03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBRtcuF:kc1udnLSg03ymK2Ilm1F4a4krGuF
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ