Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
1332c879ebda901176ec0fb7232b5d1a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1332c879ebda901176ec0fb7232b5d1a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
1332c879ebda901176ec0fb7232b5d1a_JaffaCakes118
Size
228KB
MD5
1332c879ebda901176ec0fb7232b5d1a
SHA1
34c75aa10b5bc34e9a8dadaa514b8dae6db39fe6
SHA256
81eb17f1a569ca15d44760d64178186e57b3d13d420f4235da32f56871d00f1e
SHA512
f7a7f509c0c512560b99d4a7961b56ec2c0e05f81d2784cc541912ae3a45fef35cb149783586df2833a03fa9f22a734fb38b82d5955ef68e554e21aedc0790e6
SSDEEP
3072:34yDbB4q4SRTr+kJbLs+HrnSAnrUArz/5Hu4mByfMG5MR68p/tSb37T95vumZ:HbGDSh/JU+LnSAn1rT5Hu4GdNp/tSJgk
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ