Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
3e9b7744d619de8ab6793a0d2dcfdef3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3e9b7744d619de8ab6793a0d2dcfdef3_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
3e9b7744d619de8ab6793a0d2dcfdef3_JaffaCakes118
Size
203KB
MD5
3e9b7744d619de8ab6793a0d2dcfdef3
SHA1
31ec426dd42985879e37d35c8a5491c8e0e81f2a
SHA256
03feaab555afa849d7a899c45cf5764ad7bd0b7fe0a304ee1e9bb8a6523f2174
SHA512
a19b44cf3bcf1423c785b5c450b8330daae6e5a7e193b03a97046ebbc4a2da7886cd41f175527c4c7e42a7e5c2175dc0b0fd4391f9d935d376cb59719661e0fe
SSDEEP
3072:GYeQ+cjKqdf3WsGa4M8p09WqFIWM3Vh/gjPu+3Ly1aIVA2d94zxZvK:uQ9jKqdf3WsA0WSI/VL+3LyHW2d94za
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ