Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
00c351f7a1a5e4f2d66ca60c13fbdaf7_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
00c351f7a1a5e4f2d66ca60c13fbdaf7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
00c351f7a1a5e4f2d66ca60c13fbdaf7_JaffaCakes118
Size
325KB
MD5
00c351f7a1a5e4f2d66ca60c13fbdaf7
SHA1
bb8a9d128399b4ed14851cb5ddc3052fe0eee165
SHA256
ec2e97e1d22a0f3b3127fa6c03aa474e54128e1d715524a1761e7d6b1b01c364
SHA512
9c8a98b549d25a039143e4cc5b55d8534569b09a23a7210729c1bc4ce8f2f0f1f4d2adecb1825e5caca4ed965f37ff6f2e3c71da1ee1c3fab4358472d959c1f3
SSDEEP
6144:eodYhIX9ucW4Tj5JH5nilwWCO4R0XcfgOKzIb9BDGy:zKhItu9CH8LCxRScfgVzIJBDGy
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ