Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
847e6a3a8862fbabe00c9bca05725ab6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
847e6a3a8862fbabe00c9bca05725ab6_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
847e6a3a8862fbabe00c9bca05725ab6_JaffaCakes118
Size
236KB
MD5
847e6a3a8862fbabe00c9bca05725ab6
SHA1
57349fdad2943f822d89e81e4dd17c300091addc
SHA256
6afb80dcb68046bcf89cbb998c6b88c5066d02ae74c4a9b95a6c4e097e2e621d
SHA512
f6cb574a2d23b89a5b388796ef3e04dab069d8fe00c72a4985219cba37ea4934b743ceb205ce5ccd9716198921c286504ee04fbfa13d31cf581372802e4ad59e
SSDEEP
3072:BlELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8Pyqs3s9Y0wQYhEfJ:q3kOMeaavF17EP6qyqs4YLJSJ
Processes:
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
Processes:
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ