Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
162f46861b0f47e3f21f8bb41554b160_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
162f46861b0f47e3f21f8bb41554b160_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
162f46861b0f47e3f21f8bb41554b160_JaffaCakes118
Size
338KB
MD5
162f46861b0f47e3f21f8bb41554b160
SHA1
b92288d5eaf4527882c3074005df46b723c7ca6e
SHA256
b2bfaadb61c938d1a2c37dfb4dad7e0ffcd3aee9414e21afc0e57d3900156539
SHA512
7d5241a05212384c332a67da4ae9bb98f70781e31249cfd63a2fe23cf4cb28981fb44511ac1c8cbcb4785b813a0f867f5ec680344452f29659e6553e1f8e0f9a
SSDEEP
6144:vA5wVdCy6wrbDY0rDqTWC4zEDzKuTrSbxc97cqBPit4UB9qcLQE9EiDim3zJE66t:vjyy64VrDqTWIzW+9YqRUL/LQE9ERm3
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ