Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
091ec0b91a8d5fc4164ef38acf8a6e34_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
091ec0b91a8d5fc4164ef38acf8a6e34_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
091ec0b91a8d5fc4164ef38acf8a6e34_JaffaCakes118
Size
197KB
MD5
091ec0b91a8d5fc4164ef38acf8a6e34
SHA1
3198211751851ee4116cc78c59f7c712f43ba203
SHA256
f5a78ad34ed7d19332e469fa8e3dfaecb806ef04f73e58cf3e4958ce7f400327
SHA512
292186bb872cefc2afe10f7109e9fcfe51623ed3e9ba630a57d0c23efa0bac73417d56edc554f4646449c6bf995cc5431a3be1ece9dfdf70e500ce6ae4aa9059
SSDEEP
3072:d0F0sijmdcUt4sp0aL5D+O+qjvq2UQjFblMEPqs4yeF0NiepOwXXnGe8qimQPvZn:irq8VLl+xGEQp2eDsNeMqiJHZQY
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ