Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
26d7e467881d39ccdcd3141cd63f8d24_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
26d7e467881d39ccdcd3141cd63f8d24_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
26d7e467881d39ccdcd3141cd63f8d24_JaffaCakes118
Size
202KB
MD5
26d7e467881d39ccdcd3141cd63f8d24
SHA1
57529c9823526e86e7f115dd529ca6b792a049fc
SHA256
9f208fa7735befa19fb2893db07f7fb4368857dfa6504a80c2d90cf0fea1e3a4
SHA512
fcec08bcbc12fb988fe731f35dcd587a5f28349b961378f4e3db8d501e9e842699597ef80350be30176c7b0a047f6242d13d422960481abc26c0d49f4238644b
SSDEEP
6144:+iOcIXzm0+kxjqaiI6nt51zrOpw6P5b8xJJXOuC7c:+tDz+I2aiIa51Ow6J+T
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ