Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
5351c523dddc690a3c386cd4fb12db13_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5351c523dddc690a3c386cd4fb12db13_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
5351c523dddc690a3c386cd4fb12db13_JaffaCakes118
Size
338KB
MD5
5351c523dddc690a3c386cd4fb12db13
SHA1
06558490be4b9a7c068858c0bbdbebbb92f59a69
SHA256
31458512ea2f246c2ae3d3a3fbc3ec17ddcc27a153b592cd8c3e906b3ba7c2de
SHA512
0712c0f31d5feb4d3c0ddc61c82ec32e1cb99f7dd38e44f61fc01a34a6726750f2dbe756353264857cbe6003ccea656e26c8fdd2e42a74ccf7b5fdb1b6e05b3b
SSDEEP
6144:/jrKGGC+a2rBVY4MK4tlQ7vyTM3PZ/EZDzLd4gewHlRRo+vx:ny+2r3Y4N7vYM/Z/gzLd4gewX5x
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ