Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
10ba44b4688dde0f1584a3cafa30e104_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
10ba44b4688dde0f1584a3cafa30e104_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
10ba44b4688dde0f1584a3cafa30e104_JaffaCakes118
Size
338KB
MD5
10ba44b4688dde0f1584a3cafa30e104
SHA1
0f569de8986c6ed23d94366f8495838166e447d3
SHA256
95b1cb8ccc837c39c52749346e4cbef48e58ea244a462e6b0c2dd12ac50c5942
SHA512
453909a002a0a2056bf3140637bf3dd5373422aa6b01981d2bffb31a2e5a0ee990c47e866fe85b823baa078754dda2bf94b94e5baa5aa2984fc8ac0c70d554fd
SSDEEP
6144:8A5wVdCy6wrbDY0rDqTWC4zEDzKuTrSbxc97ct3kyC8xc2hjvDnmYnDIHnc:8jyy64VrDqTWIzW+9Yt0yRxc2hjvLmuV
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ