Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
fbe576318696abf26800c0645478c327_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fbe576318696abf26800c0645478c327_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
fbe576318696abf26800c0645478c327_JaffaCakes118
Size
195KB
MD5
fbe576318696abf26800c0645478c327
SHA1
f90766e4f3631f98ecf326971829fd1cf079bb7e
SHA256
7c731958e75e501a549e387cf384d061d587eada7f3a767e0cc546af3a7ab054
SHA512
1417d1aea49b400dafa649a3257114debddb771a7a316ec0ad22f60193b41c6a86ef12083e09864d62d6c1a35c60332eb227a1bdb181c6179322b877a4fde904
SSDEEP
6144:9U+B2AqDLlBUZpi2Nr28oYdPWRVyExm/pL18B:FwDLlBUZ0e28oYd+RopL18
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ