Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
149f7f541eca6b92fecec08f11c6598e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
149f7f541eca6b92fecec08f11c6598e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
149f7f541eca6b92fecec08f11c6598e_JaffaCakes118
Size
201KB
MD5
149f7f541eca6b92fecec08f11c6598e
SHA1
12b7e4e84b44ab496108b5c1ef4fd30cdee25ab0
SHA256
d9a2052141ea6e969309e4a1d7bb9ddc4ab30ee1d658f44794b80671a6421c5a
SHA512
031747496a336d74264248a418dff830b56daa273c614520a28093c0e58421b9887422a8e91a2595aac8ebdf2eee6ef8a79d147f0e98ce63b07dd287a45f0df0
SSDEEP
3072:ogoSEPyerJtiRDdIfon6xvc30AeqLHAD2d2nxut4UEpnFVz7FExjYzwO0:K3PyCfOS03iqLgad2nxu+UExFVNExsw
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ