Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
2fb4d544b302541cce4632f7d493abfc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2fb4d544b302541cce4632f7d493abfc_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
2fb4d544b302541cce4632f7d493abfc_JaffaCakes118
Size
198KB
MD5
2fb4d544b302541cce4632f7d493abfc
SHA1
41d3c8be4cc75a6bd37d3565a0f4180a912487ac
SHA256
dfc9465d30b9fc823e4bdf2bdb2b22e4db3585f229214968ce6a05f815c2272a
SHA512
823a6016c17db711081e3656b1211b529ae214e8b16b1f1260d12b8af3fe0c933740ea8908373de5c971e651097f5d2cd01d17d4709c85969c63a4f4701f9411
SSDEEP
3072:NZipq+BgM2OWVWE7XGcjN9iZm9GcFP1H5HLOIc1h3SubAEPiDE2sCJLcf0:ypbaeyWECcp9AcFJ5qIUA1DxsA60
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ