Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
4112fcd988ed3c33d2446c55b5ddaf2f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4112fcd988ed3c33d2446c55b5ddaf2f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
4112fcd988ed3c33d2446c55b5ddaf2f_JaffaCakes118
Size
219KB
MD5
4112fcd988ed3c33d2446c55b5ddaf2f
SHA1
cb6b693ab0a43bc04df940c61d841f1b9b9ecc5d
SHA256
6eb466bbd4465424aa8521a418c454a3d9303c16cc829858d7a30b3c59ae895e
SHA512
fa41dc0340dcec2b209237abdc3749fd685dceb969029e9777fed22c668b40fbd154900244d192f76794dd2da47ab1783443e156cf7524c00d26ee492a944ac1
SSDEEP
3072:zQfRqdESOA7VLn3WVhTDURKYNOI7IZKVTT4h2UBmsWr3uAN/SB7lGAfVB0ncvrPD:cbizmVhTAgZKR4wpr3N/SCmVBHjPlt/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ