Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
573ddffd80502b0a8ccd8687d460a0e8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
573ddffd80502b0a8ccd8687d460a0e8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
573ddffd80502b0a8ccd8687d460a0e8_JaffaCakes118
Size
207KB
MD5
573ddffd80502b0a8ccd8687d460a0e8
SHA1
f4d5ddb28da13fa1d07b52393fc2f592633e550e
SHA256
9aa1b928a7ce1cbfb400d83a3e28fcda49530774029988db815780389ec5a589
SHA512
aa5198f7f655ee30356f47b6ae2dc83eb53e456d459178f934eba527e5ce7a2b1ef2542f4a43e19be5e81eef9913bdf591a654a11fb1b7ad696fe6ad18f84af5
SSDEEP
3072:yZipq+BgM2OWVWE7XGcjN9iZm9GcFP1H5HLOIc1h3SubJ22/3aFIZv1mS3:BpbaeyWECcp9AcFJ5qIUJ2iKAv1
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ