Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
41f67e2f796af04e3fe87e7d4ae25bb1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
41f67e2f796af04e3fe87e7d4ae25bb1_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
41f67e2f796af04e3fe87e7d4ae25bb1_JaffaCakes118
Size
241KB
MD5
41f67e2f796af04e3fe87e7d4ae25bb1
SHA1
244e21a548986fab038eb3cbdd7a3440911a3285
SHA256
a0f0c13d76cc117e24c2ca5f943b8c764da742de501560f8d1824e5d5b0b24bf
SHA512
b1c82400fbd4aa6f956bda00c76cbaf273cff37ce41c17f5e5ac92415b805929495c7fe46ec1b5c0463f4dd5efa4744116a9501f3b36bf91f4cf4cc1947039b2
SSDEEP
6144:KkeENDvTSn2SV/GuhYdViC7X57+nMEWg7VBbz8F:KNEND/k/GLPX57+nx8F
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ