Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
5724c5e30c3b2af54914fa25cfd183b0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5724c5e30c3b2af54914fa25cfd183b0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
5724c5e30c3b2af54914fa25cfd183b0_JaffaCakes118
Size
219KB
MD5
5724c5e30c3b2af54914fa25cfd183b0
SHA1
00a2824a493519f873356c1702a565b60cc072f6
SHA256
69a87d623ba4411d51e5c491aeabeb68990eeaf3de9ad113be265d4f56be1e0b
SHA512
bf73b7d3fa374c93ecb8dc09a2df0ab06b4e8eebf680808f3d07232b8f93c1833ff866c74ab12cfaef65fe8d6a25783aafecbfe868ed39ca62e8a54e87b46e3a
SSDEEP
3072:eQfRqdESOA7VLn3WVhTDURKYNOI7IZKVTT4h2UBmsWr3uAN/SB7lGXKJ6O+/oLUa:5bizmVhTAgZKR4wpr3N/SC0UAAS5
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ