Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
15fb0dcc528cf27bdab2a39aa3173543_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
15fb0dcc528cf27bdab2a39aa3173543_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
15fb0dcc528cf27bdab2a39aa3173543_JaffaCakes118
Size
241KB
MD5
15fb0dcc528cf27bdab2a39aa3173543
SHA1
660d0e2f9053f7d84985adaee0c09c3feb05bed7
SHA256
c38bedb69826d46aac4c01fa87c3f15fe05ee19b5dddcb4ea66d163a0c06b483
SHA512
69662f7dbc36edafc8c79fe49fc2bd5ae97f7f6bf4208993e3fc40b7dbeb9404f27f535eec06ed3044fe67c2e9ef805707de34111593ff151437dbb488286622
SSDEEP
6144:1keENDvTSn2SV/GuhYdViC7X57+nMx/YCzy0m:1NEND/k/GLPX57+nm/le0m
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ