Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
27805ffdfb93560fe86eaddad6755577_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
27805ffdfb93560fe86eaddad6755577_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
27805ffdfb93560fe86eaddad6755577_JaffaCakes118
Size
207KB
MD5
27805ffdfb93560fe86eaddad6755577
SHA1
439b54abfb0d9a952f32f66e43d7b5cecd1c0d41
SHA256
ee31fb8a234ccfcd431214c9beff6e34c778e22b4c6107d24b5cd7e87b8c90c5
SHA512
2c5cef93f9c191820e3eb65d9d7ad80ff9c6e079b95f4a0faea7f4609cea1313649317913bad484e30f53a554ac80fc2d87a329349bdddb1ab12fee9eba8df47
SSDEEP
6144:36qTSfqOIlYvWPGvK6zoRIW5diX/2I2+5gc7:qqW9WP0PaIW5AP2BA7
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ