Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
4536f17d9d8c1d9cd674518fc2fdbaf2_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
4536f17d9d8c1d9cd674518fc2fdbaf2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
4536f17d9d8c1d9cd674518fc2fdbaf2_JaffaCakes118
Size
205KB
MD5
4536f17d9d8c1d9cd674518fc2fdbaf2
SHA1
a74fcacde92dfbb36780454f8da541540f035539
SHA256
7d74448540293a51f44eabdd4acc87edd27bbf8f537921a05a9e8cf4882cf40b
SHA512
a99e8ceba5459f6a5db5ffc6082a8f1d078bd6f9913dd5c92c2fa8851e59da43dc23f9683ae704e0089391aedb372e83363ea10b07fe503bd9e1181e775404c8
SSDEEP
6144:w0yXtBZbJGMwZdH96WSREd+Y/acdBZBAHV9:w0y9Bu3d9mEQY/rL419
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ