Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
f623bf783fa06a2d7d97e58dd45739b0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f623bf783fa06a2d7d97e58dd45739b0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
f623bf783fa06a2d7d97e58dd45739b0_JaffaCakes118
Size
205KB
MD5
f623bf783fa06a2d7d97e58dd45739b0
SHA1
af2aa9f4ef9d340d9b46b282819e23c59887f8bc
SHA256
e567070434fe20d7cef8cb42f2a593e0b5ceaa89e4b680ac478ec8ba897e712e
SHA512
90991a19c18bcfe16432dbef4afa8319f2bf3c8e54539d02d30f033b20ac88c01b20bb1bda7f0121ab38fccca6a1ac999099dfb1bda137e60b1c153b540db86d
SSDEEP
3072:5TKa8NoTi3BaMHjCip1qm+f6T6ZhX+m4rHiTs0CcgwWaWaHPBVetG:5TKa8KW3ICj3pun+DHiTs0CfCPBVN
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ