Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
277489174e53d8bdc6daaf85377fa173_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
277489174e53d8bdc6daaf85377fa173_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
277489174e53d8bdc6daaf85377fa173_JaffaCakes118
Size
185KB
MD5
277489174e53d8bdc6daaf85377fa173
SHA1
e67b6b2737bfa87aa5d1e57ba63b284c1be43b2a
SHA256
6af095a1bfcad62fe5788e03f6cec49899d81e3f49b170b5516d0cd8d7ab6d0b
SHA512
08689ff762616ab60e4330931f71f80eaeb5cd920c06ace177df771c5565d0a547650a90e67cefc3628eac11bcb297fe3671cb34e0f73542d052d1670ada5921
SSDEEP
3072:KVL/TnqMa4/08IuyUkNoCu5qDqVdc72+Q5CMCC8DPN5z7bIA31TzFlYPB:SzqMamIudsc5qqcC+axwPNd0AFTzFlWB
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ