Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
443e1ebc05817fc57193de9eef3d6e87_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
443e1ebc05817fc57193de9eef3d6e87_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
443e1ebc05817fc57193de9eef3d6e87_JaffaCakes118
Size
205KB
MD5
443e1ebc05817fc57193de9eef3d6e87
SHA1
0e67ae38658d1aee18c8c47bb94c94adbbe6d749
SHA256
241a55fd44768150238d938f89cc05d0796cc0548efea9be1828abef35125f26
SHA512
1defb2ee8ab487c8a4a78cbc2a11d874c47d03c39ca55c10b61f7256cd4c818b5b4ad830bb3b53030bc32f025aa0c9201295e2e70e00810f603b2f13decd475a
SSDEEP
6144:c0yXtBZbJGMwZdH96WSREd+Y/acdBZBALZOGRozWL1:c0y9Bu3d9mEQY/rL4lOGGY1
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ