Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
143aebc09e2f3e47424fe6bd659bef13_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
143aebc09e2f3e47424fe6bd659bef13_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
143aebc09e2f3e47424fe6bd659bef13_JaffaCakes118
Size
323KB
MD5
143aebc09e2f3e47424fe6bd659bef13
SHA1
992755a3c315820935712dc51bec86bebecac29a
SHA256
511804c40f1f829e92473a452e03900ac9a48eec342f2d81aeed0f09d6a4d6fb
SHA512
0fea436cf326c851735b82d8697725a88787ed52e48e34743bae8fc978a34c244b22e8f7a8090ac46c1c2e52aa22064a32776ce898b920b834367c56f9ed7852
SSDEEP
6144:u0JeoDtaoZT2VIC2GVWNbnoQXuW893NcYCdPyrH/fOjHtlODMizWU49VV:uAtaowd2GobnoQ+PidBKHXOjCMizc
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ