Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
250fd4a5224b59efb66b8695ade10a83_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
250fd4a5224b59efb66b8695ade10a83_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
250fd4a5224b59efb66b8695ade10a83_JaffaCakes118
Size
204KB
MD5
250fd4a5224b59efb66b8695ade10a83
SHA1
b728fc904e10bddaf741602fd194ad59b6a635b9
SHA256
4af4acd06936c2b67e91bb27eb064d140ab52a2f8b3455d6d1d75420e8b97242
SHA512
8ecb0527bf4761726acf6c5d4e6c28c280a24dc95c7b8a079cb8a6255d928ad6341bd01ef312bc89b4c5c7eecec7ceb3cdcf5e6e091d34b14e1824d8450b14e2
SSDEEP
6144:ecPoIqLuz+GChekKdevWTkDulHp5M2/G:eMoIYuzkektveU+p5y
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ