Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
011ff4930967b1c19986dbc8bf697300_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
011ff4930967b1c19986dbc8bf697300_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
011ff4930967b1c19986dbc8bf697300_JaffaCakes118
Size
316KB
MD5
011ff4930967b1c19986dbc8bf697300
SHA1
341bc5bcf0d511a37d37a9523794f1020949c8de
SHA256
86183555e7e9ad9becb93dafb0fe48ca1faa93b2a4882f7d3b14219669f44af4
SHA512
21fd79b4a089edc38920744d94d4709bae834dad668822e7687ae01041c17d68e334462ba07a1a321b16ce1ca99f1c3c84bd573e653198a7de64e06b106aa355
SSDEEP
6144:xJiMpm+TDRlPswEvuB5xJRCSIVnuewQ7hpZndOnVhcud6CrkVMFNz6+Kn:x42vRlPsBvmxzC/GQVpZnd4UuB8Qz6+u
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ