Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
13561e1dcaf7eeb68b0dac3ab7f64995_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
13561e1dcaf7eeb68b0dac3ab7f64995_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
13561e1dcaf7eeb68b0dac3ab7f64995_JaffaCakes118
Size
316KB
MD5
13561e1dcaf7eeb68b0dac3ab7f64995
SHA1
b197031a3ea768b1d28eea263bb3d40e8e93a983
SHA256
c567c9ef204ec750a63c99bd582d245f0ac3daa4c4cf3d4922e0fc73eede0ab3
SHA512
ac09fa5536defebd1061c95c7357a203f3c6c1a78cb464c55a7d373b6b7c14e8e116402f420fc362a6f192ec41f92aafbbf6c5587360233c280826200c4fe699
SSDEEP
6144:4JiMpm+TDRlPswEvuB5xJRCSIVnuewQ7hpktPqHShSaaSVcBxjvnZrOLsjxKb6e:442vRlPsBvmxzC/GQVpktiH+daSVcBfE
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ