Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
5244e6b24514fcfe98cc7644cd60317f_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
5244e6b24514fcfe98cc7644cd60317f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
5244e6b24514fcfe98cc7644cd60317f_JaffaCakes118
Size
162KB
MD5
5244e6b24514fcfe98cc7644cd60317f
SHA1
ea7094f34d1125b78bd1d21a5acf2611713b7048
SHA256
0e29df07e1362f167a2acfc9d7fbd0a2b0c12501e84b669bcc54bb62e004ab23
SHA512
aa97ee69bfaa0e3940aea9d9f5b5b5f0c5f2fcf348713a48e6d04fb62b2ea202bdc77849b66937a7d45bfc44000867af6e45675e2ea72be0d30f7c7b9252d92f
SSDEEP
3072:Q7CwwBvtrGzz2OhLpXqeAWcMbFppzBoKAuag+h1d0WsFR:i0dtrOiOhlXqCl5pH4h1d0Nr
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ