Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
1635662736f9b5e9089c0a34fdfb16cc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1635662736f9b5e9089c0a34fdfb16cc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
1635662736f9b5e9089c0a34fdfb16cc_JaffaCakes118
Size
202KB
MD5
1635662736f9b5e9089c0a34fdfb16cc
SHA1
2c8de20ecc107bd1cc49df182f87ae8dc672ca83
SHA256
b7b6ae23a5cb0fa571c3da0f9a6d4b942a493be8586d47a060f8522678275ede
SHA512
dff5e80fd9607d60b1a2650aa5d62f2cf6f33f323b9d966f04b6e50bd5536cdce42c2f05a2c40ba6611a6fcd362cd0bf513e5fbf27ad6683a1a119ffb2872151
SSDEEP
3072:7uxYhpIkxhwuT+vS5s+2x06Hk7BbiRzmGT7zgjiCHpTd5SPrncxi84pqDId82Um:70YhjwuTT396HSjGT7UZ5SPzcxt4pG6/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ