Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
28d025468b8b06a76b42e894d0b9b790_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
28d025468b8b06a76b42e894d0b9b790_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
28d025468b8b06a76b42e894d0b9b790_JaffaCakes118
Size
205KB
MD5
28d025468b8b06a76b42e894d0b9b790
SHA1
10e55270eb450ff1122ca5b0baca93feabaee888
SHA256
14dab56e28773e7c456bf7d11a8f6d3207b713d6c840b55a7cf4ecb3a11bdba9
SHA512
3c708e36f0f81d304c65dc2533f28427c7c18fcab5b7ea3d123f361cff186f04febf1c0d6838cf9771fd1f5d02c42135f6773cfb9bcad8aee133b136c43a9c90
SSDEEP
6144:hKqQGZ33GYS29XS3FsJeYFLJ5c2uc0RW2Hzo:gq1Z3S2WoJtuXW2Hzo
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ