Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
148d2c18522f06c060514126ffd5349f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
148d2c18522f06c060514126ffd5349f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
148d2c18522f06c060514126ffd5349f_JaffaCakes118
Size
198KB
MD5
148d2c18522f06c060514126ffd5349f
SHA1
b0796e097e8ece9ec0bf4fdbcf716d897c9fc60f
SHA256
0e340d0e1dd229f5a4eac19069cbd392f1c0206c73163809324fdd9b612ba75a
SHA512
0fcc38076798a5be173f39b69ad6e099b55b3f4794331d4d7debb30661c9c4e611d4dad07ca3ca9b27f4023f5797fd624d81ff4c57abf7c41e2fb29122420cf7
SSDEEP
3072:CZipq+BgM2OWVWE7XGcjN9iZm9GcFP1H5HLOIc1h3Sub4sVNHbyRjk:xpbaeyWECcp9AcFJ5qIU4s7i
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ