Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
258df38ff77b73b956f1a3c543b8da74_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
258df38ff77b73b956f1a3c543b8da74_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
258df38ff77b73b956f1a3c543b8da74_JaffaCakes118
Size
205KB
MD5
258df38ff77b73b956f1a3c543b8da74
SHA1
c87481b5a153e2922aa779f2a8a859c5873215d0
SHA256
8ba71d4f3b50e944609af09b7c3ffd63758b22247981b3e2adb8362e3248bed2
SHA512
8d10bc5081d75a3606e0f542c645624926da2273220e7d9648c2fcfe15b35f77c555f8dbf6ecf9822489c61e629ff64257bb7d1b6d582564b049505a491e9acd
SSDEEP
6144:30yXtBZbJGMwZdH96WSREd+Y/acdBZBAzz7e07fn:30y9Bu3d9mEQY/rL4zzi0Tn
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ