Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
040db1dfcb9374ec8e5bd660f3fb3d33_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
040db1dfcb9374ec8e5bd660f3fb3d33_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
040db1dfcb9374ec8e5bd660f3fb3d33_JaffaCakes118
Size
203KB
MD5
040db1dfcb9374ec8e5bd660f3fb3d33
SHA1
be1758a605c33a5524254713dce2218a86a97ea7
SHA256
889b51c68ccab017b632c88abce71f23cacd69b10472eca9c7367e4ec49709fe
SHA512
aff43513623b000eb9d1a7f9eecb33a15e70c9739e22f146144123ef2da1f2f9b98b064d34d794d01012db2fef685dafa237e9d7f2c0afb5d3e981019bee7822
SSDEEP
3072:eZ6r8aaxBbOIdbOpqSfX6K83/GzJn6TdLr0GVJ3O+pgfD7s3v/oLD:W6YhbiIdoqSvz8vSnURe+u3s3vQLD
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ