Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
04bbb6bd89d6f83a2e8d5a998b3f1278_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04bbb6bd89d6f83a2e8d5a998b3f1278_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
04bbb6bd89d6f83a2e8d5a998b3f1278_JaffaCakes118
Size
328KB
MD5
04bbb6bd89d6f83a2e8d5a998b3f1278
SHA1
f7bf8f7a20185a54e5b197f4bc029b5f70775c5c
SHA256
ba64aa6f9549e26d9798e1becfbdaf0ec473d8623fa6247b497f0c31806a4fdb
SHA512
b94d882c9c60bf42d0155c74a601724b6a8a712d6586520c69fcc3948bdb5f7cc800ea1b35b6813ddb26c19f16d5dada4d88903e3d4e6cbeffeb48756ef97ae6
SSDEEP
6144:4eXA47CURW+eirtnIwE0XzBTjrBLt4smgZgIggseJIyQq8afIszVc2Z:4eXv7tRWwnIKBTjx6smg5LtvYafpGy
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ