Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
f6a62319b145fcadc92fd13d61bb3f91_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f6a62319b145fcadc92fd13d61bb3f91_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
f6a62319b145fcadc92fd13d61bb3f91_JaffaCakes118
Size
228KB
MD5
f6a62319b145fcadc92fd13d61bb3f91
SHA1
1929125ffbaaee830b7b62f1010214de4f19865a
SHA256
777c9c6c687881bd996750261596364c91662bdad4b1224f19613c1fa8887606
SHA512
ddba7f8eb2b007ab67a5e94884465f7ebcfd0395e5c025a10cca56a811ff991b09bc6c99512cc60112ea96726f50e56d536f51f551c5b44b41dcddbf4f74cdda
SSDEEP
6144:94Q9x2N2h74vSmC/eakYkJ9afR+9ge1LisQOcNeStbn+nBOd:uQn+vSbkYkqfRNe1LiN/btaBOd
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ