Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
24f01cbcacd5c52577a9d78c3e23a151_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
24f01cbcacd5c52577a9d78c3e23a151_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
24f01cbcacd5c52577a9d78c3e23a151_JaffaCakes118
Size
207KB
MD5
24f01cbcacd5c52577a9d78c3e23a151
SHA1
3b9a603def9e81584c7dd2f1c0d5be7f49255f76
SHA256
0f7d375aac7020fcc2a6dcf49bfbd0006b638afa34421dd225ce4aae4fbfdb0a
SHA512
1d630012f5c29632089921afba0d3dd55f9bd48d966240984e8e9fa420e686cc316307720839ae401b8b27fa9bc10dd4b6fb3d9458af33897a82dbd6ab8fee3c
SSDEEP
6144:R6qTSfqOIlYvWPGvK6zoRIW5diX/2CfPi3X61U:UqW9WP0PaIW5AP2Qi3d
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ