Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
1708d71396302c23be48709be6013c38_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1708d71396302c23be48709be6013c38_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
1708d71396302c23be48709be6013c38_JaffaCakes118
Size
236KB
MD5
1708d71396302c23be48709be6013c38
SHA1
c443f6f490196e3accda3b776e365222bbddce34
SHA256
b0c9a1a64e3ea4207b5111c9e3288f7d97d5eaa49c05fa6ed66519cd81c88d31
SHA512
90f79a6dc51156d2eb1561e20d35f171f068eb0074c6ed6eea11a3a57889fbef27ad71de0d8fee4931d445229cec29f2ff56ba16b52fc5fc6ebd5d2ee0c2d3fd
SSDEEP
3072:ilELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8Pyqsqtr0CDQX7ObFiF:53kOMeaavF17EP6qyqsqd03XVF
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ