Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
16ca22accbc275a280eecd6188352e54_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
16ca22accbc275a280eecd6188352e54_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
16ca22accbc275a280eecd6188352e54_JaffaCakes118
Size
317KB
MD5
16ca22accbc275a280eecd6188352e54
SHA1
0699c25dcf52155c26a2b1c70e83617e9cdbc270
SHA256
958ad2dc340bf8ddb89fbe6736ec8c45e3dfe9b0c0325ec557f9b1d2b984c406
SHA512
b9867d8c5952f8aeb469d29cdf96c60720c9e12388f7fd54dd85d64e72eb132ed722466d5a7e2d736f1f0a948eda4c6f2dc4ff48edc4a45fbaf27939060df354
SSDEEP
6144:uimBc61GK8LV1KkgbdulMX7+lE1BB3IXd2FksDtgDvt5I:BCc61KLLKkgWo7XzNIXdrsJoti
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ