Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
04cd51186c999de32f000cc9bbb59b03_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
04cd51186c999de32f000cc9bbb59b03_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
04cd51186c999de32f000cc9bbb59b03_JaffaCakes118
Size
339KB
MD5
04cd51186c999de32f000cc9bbb59b03
SHA1
112c5276f4c145d9d2238f822384fce1d414d0d5
SHA256
f8f6d19a0da107f88823b3b5c16932af925cf3f61caf9bd1fe1e77b34984d3ba
SHA512
57ae9519f523a54d5333bb597bb9c330b2fcd966eecc660520e0d85d4f54d5cd70d7afaa7be9bb2ae4eaca7f12a0e268e66208e96e4c2f0327446b1d8989c91c
SSDEEP
6144:sgA5wVdCy6wrbDY0rDqTWC4zEDzKuTrSbxc97cX94CBAHTBF/m4lTHvfzCjdEOG6:fjyy64VrDqTWIzW+9YSCBMk4lTzOdefy
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ