Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
1399ef776657e7ecdd46bc86b93867ef_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1399ef776657e7ecdd46bc86b93867ef_JaffaCakes118.exe
Resource
win10v2004-20240910-en
Target
1399ef776657e7ecdd46bc86b93867ef_JaffaCakes118
Size
226KB
MD5
1399ef776657e7ecdd46bc86b93867ef
SHA1
780c958e8ecb46bb6ea32bf2bf23ec8c9c632758
SHA256
c1c59bcae405f55b55df6a1512ffeb6b608a1d31f99d8473f10b28f5b0467306
SHA512
df6c34b96fa0a21fb01b922061c6dfd948228175d6a0f38995e96018bf8f78a5528292455fc4793b7d45a7ab823d892a3b20e8e85b6bc1b31b62edbcbc910e79
SSDEEP
3072:oVXL+9oqMmKBbBrOoYKUcKuX2b+H2ZKV2AX4f3su7up6rixz2uKiYRsotiz1TOUL:oUQBhUaGbiLk8g3HCWO2uKiKiz13L
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ