Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
90fbbf0bb45fb54b180c2de6b36ba228_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
90fbbf0bb45fb54b180c2de6b36ba228_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
90fbbf0bb45fb54b180c2de6b36ba228_JaffaCakes118
Size
316KB
MD5
90fbbf0bb45fb54b180c2de6b36ba228
SHA1
23017727d5624b33916a6f39d3b0699e45552750
SHA256
83fd2583d5da2fedc157f9082e1ba58c419b5700fa1d6c953df77b9f24683065
SHA512
082528d461b9b9ac171f2119f20bbeb92516a0bb6ce91242870ef250d9ba36d370a61f740ea942721a9236b982c7d796384afbc2a3a160c2ae1d1a6cf7e7f324
SSDEEP
6144:OGJiMpm+TDRlPswEvuB5xJRCSIVnuewQ7hp9L/YiEt3RYpfqZirYePb:OG42vRlPsBvmxzC/GQVptYiFqZirYePb
Processes:
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
Processes:
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ