Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
3e25864a3d2e50b22e9e22b20ce1e7d0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3e25864a3d2e50b22e9e22b20ce1e7d0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
3e25864a3d2e50b22e9e22b20ce1e7d0_JaffaCakes118
Size
205KB
MD5
3e25864a3d2e50b22e9e22b20ce1e7d0
SHA1
ac0bc3d0f96ba379312a4ef38c56d77c3c1eb285
SHA256
e32cc8e4ce325f639b11638f786396c30b5575c595d4a2846534c26f125d5a50
SHA512
62701fd65dfb3fa0d90250933e939bc8503782420c53d8cce5036c657f7b688f57f982d6cab104c7227c63062ecda2baf6fdb674543eb2b01cf1477f4e49fa1a
SSDEEP
6144:OvZ2IZbgekfZLlGGKZp+s8ohYRNudNI6FPNs6/HB:OvZ1bge0LMPjpORN8Ik+yB
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ