Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
833e74f6d9ce006f929f92fb9e4eb4ef_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
833e74f6d9ce006f929f92fb9e4eb4ef_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
833e74f6d9ce006f929f92fb9e4eb4ef_JaffaCakes118
Size
330KB
MD5
833e74f6d9ce006f929f92fb9e4eb4ef
SHA1
9e9cdcf75a155050db9417c2c3d576d35368ea73
SHA256
bdcd8f14fd869d71cadef10b701461470b32937c92a84dbb081614d9187f0b5e
SHA512
2e4fbc68d7c84ba018fc4809deb73c3f807cf41955858f86ae5fc4176707109f2bfd08c7ea9cc5d0fe505b14c37e746dede6ee2d39ce763a10a937f7ae033e32
SSDEEP
6144:6S+QH6yN8wfRe3q+2ZYbO2PY/eQanlrUGHtXx6n6r0TOxJkCAxUpR:0E6y66e3N272PYXZGHtB6n6QK7WUP
| resource | yara_rule |
|---|---|
| sample | upx |
Checks for missing Authenticode signature.
| resource |
|---|
| unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ