Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
faf830416ee280d4746668363a7f030e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
faf830416ee280d4746668363a7f030e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
faf830416ee280d4746668363a7f030e_JaffaCakes118
Size
205KB
MD5
faf830416ee280d4746668363a7f030e
SHA1
8559a627e328b807b9f531b28e248f5a6f9dfc2d
SHA256
c6396ad761e536615e26575d8ed7257d8f7853e194cdfd289014a5c014c4d846
SHA512
46bc1a4ce95d67cf6c9c03881599f6f7a4f54b2d14009cab48a752c33af9fdc65d5946e66c9571c2dae41ec67397d12092f2bfa1bf03528c0f81ad326efcd683
SSDEEP
6144:U0hfPqsPFbrBLAxNIKgUgk16yr6rGnWUpv:U0hVPKvlgnyPnWa
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ