Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
459688c1795fa8b5840d372c379ab12f_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
459688c1795fa8b5840d372c379ab12f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
459688c1795fa8b5840d372c379ab12f_JaffaCakes118
Size
241KB
MD5
459688c1795fa8b5840d372c379ab12f
SHA1
8d0ac5a1db722e21510dfe54e7fbc4d456f11960
SHA256
b2718532b46d71ac8cada275d6bde9d45466ce2c212e99d517aaf65e8b952e2a
SHA512
e67087fdbfb624b1e5263c74042eaeb41b3ad5bc7013286eced3874dec287a908e1538afcea82e8c56e4bb4c7b3efee2cf51ffb76909b44844d12d46b3b6fb86
SSDEEP
6144:AkeENDvTSn2SV/GuhYdViC7X57+nMUH15BQH69Az:ANEND/k/GLPX57+nH15S6az
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ