Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
fca1a08f8585fb23ae70c70f80d3a699_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fca1a08f8585fb23ae70c70f80d3a699_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
fca1a08f8585fb23ae70c70f80d3a699_JaffaCakes118
Size
236KB
MD5
fca1a08f8585fb23ae70c70f80d3a699
SHA1
d7e9a6112666cae87f963d0628f2d3670e5c7fb0
SHA256
6b4094e46855cca6d8fab07f39690b05f790656688576fa5938dc72090292599
SHA512
713e3978fbc68c5cce520c03b77c21562fae17f057e3e0c9470c444f08438e75e04b140ae0d7e2369421e7ab2069e88d9a0b491bec48830c1dd480b4030aa497
SSDEEP
3072:8lELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqsG/SE3Csu4wHauEk:v3kOMeaavF17EP6qyqsGpXGdM0
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ