Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
fe2d2c94b60e8bc10b3ac7a6dee3362b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
fe2d2c94b60e8bc10b3ac7a6dee3362b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
fe2d2c94b60e8bc10b3ac7a6dee3362b_JaffaCakes118
Size
218KB
MD5
fe2d2c94b60e8bc10b3ac7a6dee3362b
SHA1
fafecbbedcc96973edd251d35f1fdc2316e4b0a9
SHA256
7d84e644bbca12b313c2a14d67d6c6de1f9c0e84c856cb70696a96323bd52f46
SHA512
da84a4bb83733e8d2c51f02d3f27fbb76d062526d481f12ed4fce9a90803f450e9bef59fb2f0fcc1d293c09570a4b9f4224f8d49edb71d988c01bcd562440018
SSDEEP
6144:+Q2E205qRTe5uht1lIJTgUl4epYz4QMLm5cgo:+1N0IJeI1yd7py4dqy/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ