Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
17bda2ea8c81d8d96c1dda6282fb7ae7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
17bda2ea8c81d8d96c1dda6282fb7ae7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
17bda2ea8c81d8d96c1dda6282fb7ae7_JaffaCakes118
Size
307KB
MD5
17bda2ea8c81d8d96c1dda6282fb7ae7
SHA1
b9667d5324aeb13f85705d0ca13f513c28c71f6b
SHA256
d8d4e64adaf1d6b23b0ab3b9a25a138637273dc00a6cf2481ef0a33aa1591f86
SHA512
8869d31da1f07708d542ed1c1d09250497719e1a41e076f5ea730a2f2a85de754e7112fa2338d45745d10d836e0c513b1e9cd23217117fdc40e848d4020eb67e
SSDEEP
6144:w7KOHO5HxSWL+LnY5iV1DMNhydDAJvcowjroPbn3sX6bc:QKbRSq+DY5QGvydDAJvRwjMzn3sKbc
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ