Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
53149b96fda106dea5ea2355262d04c4_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
53149b96fda106dea5ea2355262d04c4_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
53149b96fda106dea5ea2355262d04c4_JaffaCakes118
Size
205KB
MD5
53149b96fda106dea5ea2355262d04c4
SHA1
2e4cde94d5cffeccda0a6012401c780046b98f64
SHA256
b56f1e6de6e36bb9fc93b4853eed0f3ca6607c8156da60402d9edf69f4b005bd
SHA512
ba6a9d0f3d60c7dae8ed16e4e671dcef97b6f3cb5c9b03fa1efbffa41e910a3137b24b20a5bec5e3bb898d7d280ba84e5aa8888e769d97ec6257fe3c5a56f5af
SSDEEP
6144:PvZ2IZbgekfZLlGGKZp+s8ohYRNudNI6mPCz:PvZ1bge0LMPjpORN8Il4
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ