Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
90c10d27509645b4ddc4c2a6559f18dc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
90c10d27509645b4ddc4c2a6559f18dc_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
90c10d27509645b4ddc4c2a6559f18dc_JaffaCakes118
Size
236KB
MD5
90c10d27509645b4ddc4c2a6559f18dc
SHA1
89dff962c1545edfabb2adb62326887d62414bde
SHA256
b092e9f9f01da6548182e834d44f7697871d7f57e6315e007c0b68be373cd500
SHA512
f29bf31e68e8f093dff0750e79c512ee810c755eac5a54759ea4ea0c2c2bcc099fad066a7fde37a63e8b2f9159c9e3dae25e615f77944b62c6309fde2cff730d
SSDEEP
3072:wlELL7XOCw0xQCdMey44tVkZj+8FzB7C1XWLmjPUXiYR8PyqswHWd1+ZjSg4obKP:j3kOMeaavF17EP6qyqswI1+Rl4NQR07
Processes:
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
Processes:
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ