Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
15156ea313c53bc34ab19716875effd0_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
15156ea313c53bc34ab19716875effd0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
15156ea313c53bc34ab19716875effd0_JaffaCakes118
Size
323KB
MD5
15156ea313c53bc34ab19716875effd0
SHA1
9be3073ad2996f81de2dc39c4b7cf6aaf0d8484a
SHA256
bb5977ba13737159b3a102242d219d2be99fec7c8f3b108fbe7a9369ffb39f4c
SHA512
8d866d5054d6e5573d18cc2ee919284f13cf14ac873f670af14e62f0d8bc0966d8b1df1a2390d66fd776b0f0918fbd34a810342cfa2ac837981b14937ae7872d
SSDEEP
6144:u0JeoDtaoZT2VIC2GVWNbnoQXuW893NcpO+ou/2aE3AkYcjPTVVei+c:uAtaowd2GobnoQ+Pi9oujaAkzjLGM
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ