Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
00ed9eb83340136aea3db06b22f63213_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
00ed9eb83340136aea3db06b22f63213_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
00ed9eb83340136aea3db06b22f63213_JaffaCakes118
Size
317KB
MD5
00ed9eb83340136aea3db06b22f63213
SHA1
e3c8c151d947dcd5b79a753827459499c6cf4dea
SHA256
d8b85156f4f3f891edecc33f253e4ae3c3b70e75f9034a6cd4e7ab5a901eaad7
SHA512
823bad35bf5968acd3ac99c788add22b94ecccd006a21f0aca571d2fbdeb05d723013a256b0e5339c251c23e0f664e73629fa2ec737c50569ee04ebeec1c2fed
SSDEEP
6144:naG+0uxW6ncmOkK279Aoef2Jhfd1BsjJOICMDfkPK3SCr2OPJ:nCfxWrTkJWfkbu5CjPKJZh
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ