Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
25805a383c0cf885970d8e3def233639_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
25805a383c0cf885970d8e3def233639_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
25805a383c0cf885970d8e3def233639_JaffaCakes118
Size
206KB
MD5
25805a383c0cf885970d8e3def233639
SHA1
3577591a05ff0e671d57715b54a46f02b06eed1f
SHA256
ac94d6c6e46576cce37104f7bbe0bae2df0b81f32e19d544c9f51249af554043
SHA512
d7cc6b1e5b9a6f1e6fbfb3e2cd83df5c5bcd3159ebf59d78a59114eee651aa9814be016867e2f53feacc8b108763b9d1ef55e1968f97bc12128233a78af0e77d
SSDEEP
3072:3P/PSUcHQ+yOWkXYn7JBaczSIzdFGDQRQM6yYP1DauS9/zQ7jSgaeMAMOmQ2N4:f3Sn2OWkXyFpe+VeOQJ0K70eMjOmp4
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ