Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
fc0cd3b6dd473e7fcf73a6cc5619dc3c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc0cd3b6dd473e7fcf73a6cc5619dc3c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
fc0cd3b6dd473e7fcf73a6cc5619dc3c_JaffaCakes118
Size
236KB
MD5
fc0cd3b6dd473e7fcf73a6cc5619dc3c
SHA1
f19e3e7839c3b404266caf3d34a4fc336b9c0d49
SHA256
e61461e24597ee1dfcdcf7690df2721efc3491646a63b2da904e78ec49fb2d86
SHA512
97c5f224d29fd2984d186b0081a892afa53b850be79693f090282f9ec2cc2a50fb2f8ccb94353faae9a5086a558db9e5d54107037732c753161bc7a1411efd13
SSDEEP
6144:I03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBFT4znqd:Ic1udnLSg03ymK2Ilm1F4a4kjEDqd
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ