Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
529df169e5ce3c9665024c9a0662bebd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
529df169e5ce3c9665024c9a0662bebd_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
529df169e5ce3c9665024c9a0662bebd_JaffaCakes118
Size
236KB
MD5
529df169e5ce3c9665024c9a0662bebd
SHA1
65996af8fbb4bd516da21c7bddd796d45cbf167c
SHA256
43140b8ebfc17506575702f65ab53207b5bb4ae6f31707b19867959593dc1695
SHA512
5ca614a0e0c9ddb141eab7ffce3a5b0319e6d5f63c3e4ec921057249aeaa5af0a44f049b3ac29206366e52aa85fcfa70b161f45ebdf89aff759cf45a8e9ce637
SSDEEP
3072:NlELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqsfHzEGZnGN9O3JZa:m3kOMeaavF17EP6qyqsfHzEGZGNg7a
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ