Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
24fd576d35782bdda9e3a877694d207b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
24fd576d35782bdda9e3a877694d207b_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
24fd576d35782bdda9e3a877694d207b_JaffaCakes118
Size
205KB
MD5
24fd576d35782bdda9e3a877694d207b
SHA1
c1e8aba79f8c6cb9ae7ed52aba48bdab9f1e3829
SHA256
a0ca2e23daf84ff12c64ec9d1860a8320a9d8d5a9c2a22f8dff8506ae9be9594
SHA512
5078e76870f8497926b2833364cb490d9d5483f5d8ff554e3039ee7f5ce509b1223e99ffb132ea0d7f6f0b44f4c77d04ab12439db89799f1390ae66715d4ab06
SSDEEP
6144:K0yXtBZbJGMwZdH96WSREd+Y/acdBZBANweB4aC:K0y9Bu3d9mEQY/rL4JB4T
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ