Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
0ee9c1eb1f58a6d23af1c2c940dee7f6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0ee9c1eb1f58a6d23af1c2c940dee7f6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
0ee9c1eb1f58a6d23af1c2c940dee7f6_JaffaCakes118
Size
193KB
MD5
0ee9c1eb1f58a6d23af1c2c940dee7f6
SHA1
060f614e92a54e346be792641cea352e615e51fa
SHA256
9bf696d9505b0003ed9370c7104758fa7d3b5003eec123f068a0db7e2febc2be
SHA512
d1ecf2cbfa060909fce4cb34456751280fdcd2f8727cddd7b490d943e244ec236b1014c5302f18a032cbda4252a553c821fc287eb2bc608a42bc8f2f3c564cd8
SSDEEP
6144:Z7oBtDkJ3abnk6cV+EwmAoBNcX2NOkpwCi21gRQnfRpwIgI:Z78AqbaVcmAo7cGNpwCi+eQZ2Ib
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ