Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
175613f229e4665baf0d9ca7080b8ee3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
175613f229e4665baf0d9ca7080b8ee3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
175613f229e4665baf0d9ca7080b8ee3_JaffaCakes118
Size
338KB
MD5
175613f229e4665baf0d9ca7080b8ee3
SHA1
70bec0f708219c70f50779f1d6f035fe6d26c93f
SHA256
e66fd0b4f5b102c4240358d124738989dba2f5f2bc0ddc7d586cd10dc37a69b3
SHA512
b8392d71c0ce4534a65db880cc90329c69aa1d941fd85d08715eee5c8dbbdd79363e704b85aee83de0e25d2d6b775000dfa9676faace203cdb61e8220d5fe9e1
SSDEEP
6144:bA5wVdCy6wrbDY0rDqTWC4zEDzKuTrSbxc97cV2UHAKm5/byD4ULD9cuZ5R5Xv4/:bjyy64VrDqTWIzW+9YAZ5FyD4U1c25Rm
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ