Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
845602d74a0a29c04bfd73066b237d62_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
845602d74a0a29c04bfd73066b237d62_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
845602d74a0a29c04bfd73066b237d62_JaffaCakes118
Size
207KB
MD5
845602d74a0a29c04bfd73066b237d62
SHA1
24c0d0c74271e54e1c484cd580ec8f5934a1cf3b
SHA256
a7694cc2d8fd83ae53367888d96c84670bba2e414fdfade2d65a6090ceadac70
SHA512
968c7f5aa8ddcaea27d0942d82432e1695793f2d8e813f606af101bc9293749e38d23b2aad22bf5c29d4e4e294c253f9a553507be8fa776f40b9b31510c1f8e8
SSDEEP
3072:6Zipq+BgM2OWVWE7XGcjN9iZm9GcFP1H5HLOIc1h3SubomLC:ZpbaeyWECcp9AcFJ5qIUw
Processes:
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
Processes:
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ