Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
44bddc82f90dff6b3e722b7274e1a537_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
44bddc82f90dff6b3e722b7274e1a537_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
44bddc82f90dff6b3e722b7274e1a537_JaffaCakes118
Size
205KB
MD5
44bddc82f90dff6b3e722b7274e1a537
SHA1
0894c1186d5eaf4fa894e70d4d717c30ca5f4c59
SHA256
b899113bfcd34f1a3ae0a01fee3381d929b1fa39544e85e481963179b0eac1ac
SHA512
c4929fe29d14b3d5f3b99524c5e96397eda6e1419f28bb15fad4733260883933f85ba1fcd6583d5e63f6cf0597c9e10fbc13e5a1eb8c403c5b50422753453266
SSDEEP
6144:i0yXtBZbJGMwZdH96WSREd+Y/acdBZBAhk/7kM:i0y9Bu3d9mEQY/rL4y/7kM
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ