Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
ffff41f35f3e0bea5c5197c16fd3abd5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ffff41f35f3e0bea5c5197c16fd3abd5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
ffff41f35f3e0bea5c5197c16fd3abd5_JaffaCakes118
Size
214KB
MD5
ffff41f35f3e0bea5c5197c16fd3abd5
SHA1
325b98657aed3ba60e38fc950ff7f6638b83f659
SHA256
12074b154985517e6b1674008c5f940cedcdab600a9edb3d9286f7a3dfaf9184
SHA512
3026b6a7a2524c057eeceec32ae753d88e775d2d2011c068d56fcd67d9ef27a638a3f1eaf06e11b9e607c33b39b864e92e70f98a9fa5205ee8c9fecb8f283042
SSDEEP
3072:hey25QGmVQ+/FiLotmK2v0J63Doncs8Uy3p9KLRvnslU13V0s6oQR2BbPtjcTL:hyIQcw0DRyq9/slU9V05RIPNcTL
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ