Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
fc79c135f631d4acb52ffe52b295bb85_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fc79c135f631d4acb52ffe52b295bb85_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
fc79c135f631d4acb52ffe52b295bb85_JaffaCakes118
Size
237KB
MD5
fc79c135f631d4acb52ffe52b295bb85
SHA1
f75e37a3bf81e1511e86c1016f91e08bdc3fbcd7
SHA256
112ce9e148217be4b068caa917144b319ea0bf252191058c217012991b4ecbf6
SHA512
1fcb00f5a7b225a357739a005e56d2e9f2526fab03870297d0e3e0f1b3b94c980b8887338a7ed5be28635018bbfddb608f626bf99fd3974df163fb0e1de8af0a
SSDEEP
6144:f03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncB1vIR7ydQ:fc1udnLSg03ymK2Ilm1F4a4kvvIR+dQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ