Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
4b043b49cc8a9d3f8620d6be39c8e62f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4b043b49cc8a9d3f8620d6be39c8e62f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
4b043b49cc8a9d3f8620d6be39c8e62f_JaffaCakes118
Size
207KB
MD5
4b043b49cc8a9d3f8620d6be39c8e62f
SHA1
deaaf5bfc6b0cd6893501c1ed43898f567767e30
SHA256
f8957b77040ff7af6296177f02f5b55814c996ad2884d7f79bbdc849b93dc0fd
SHA512
404ea4715fc26589291be2669819ccfe585b3a9e2cefe9f9e2e4bcfd88f9a6ce16eda06374fb56f925d02bc65d47301a7ec638d399cd8a561583e685b143d956
SSDEEP
3072:SZipq+BgM2OWVWE7XGcjN9iZm9GcFP1H5HLOIc1h3SubaB/C2CU2eHr/hbtX:hpbaeyWECcp9AcFJ5qIUTC2eHr/z
| resource | yara_rule |
|---|---|
| sample | upx |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ