Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
0a91440feb680ab62b3811e7e42e8a36_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0a91440feb680ab62b3811e7e42e8a36_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
0a91440feb680ab62b3811e7e42e8a36_JaffaCakes118
Size
228KB
MD5
0a91440feb680ab62b3811e7e42e8a36
SHA1
5d2cf9fdf57d7c5265a722a3f4ca527e6c2bfbf1
SHA256
8b9c0a568fb7f0844ba92c8089e48c67c4bedbb9476e46c53c2f6072b9b4c5ef
SHA512
ca8be7d6c59c74e3aaa77bbffe8dda1a3d18f064e9dfb339d7b88e2762d5866554c371b7775a11ee96741efd89f69a47a3a831903527cb1e4a537a38ebec8bd3
SSDEEP
6144:IpP5KiYCSuSVbTliLDUDNPniCLLiLNiHpTvmlTWsag4e:IpwuoMkBn9LLwcJ7mlTeQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ