Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
2ac4a34e404c1ce731bfd3526a7f125f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2ac4a34e404c1ce731bfd3526a7f125f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
2ac4a34e404c1ce731bfd3526a7f125f_JaffaCakes118
Size
202KB
MD5
2ac4a34e404c1ce731bfd3526a7f125f
SHA1
14ad4cdf4e3eb174b5768713923b24d30cbe795d
SHA256
62746907f265ac510d1c071aa3219c004a5b7d3b35dbd3871ba75c73f53c3627
SHA512
3ff0b4f3baa9d6e3021a174a8d1a39939b8fdf345b468473f7cf786446bc2c8fa56a221b090128d1096c66e7c4ff1ee4d017a2358fa26c97963d6ff4d3d3b0a7
SSDEEP
3072:11lgKarBjCfYJ2Gkwf+uthTGF/Pke0A9Xoi+eMHZV4WoHl85A7YH2w:11mKx+dtE5PkuXohHZVF4l8Ff
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ