Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
2fde6ee772922e8d7bad0683f12f7b16_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
2fde6ee772922e8d7bad0683f12f7b16_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
2fde6ee772922e8d7bad0683f12f7b16_JaffaCakes118
Size
203KB
MD5
2fde6ee772922e8d7bad0683f12f7b16
SHA1
c000ef3365f0b2440a814723f6187779891de994
SHA256
f0a18ea7e28d90c128b16c757af2e9709bf06d12d122a6db0021b0a60db9f430
SHA512
27af513da45d236fa01d8fd91a9bae582d876a91be65a71e28723ad090ed706084f77e55a74f4a0571c08ab0170168642a5887f770bea2a903237d0eafe02253
SSDEEP
6144:uTTEGrtLSn6q4Y+V7+xsO2TFJ8/6lKNws/:uTAotOCvwsXFJ8/6lKNZ/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ