Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
JaffaCakes118_8a44c5ddbc2a173aac520fb2c74d2240.exe
Resource
win7-20250207-en
Behavioral task
behavioral2
Sample
JaffaCakes118_8a44c5ddbc2a173aac520fb2c74d2240.exe
Resource
win10v2004-20250314-en
Target
JaffaCakes118_8a44c5ddbc2a173aac520fb2c74d2240
Size
237KB
MD5
8a44c5ddbc2a173aac520fb2c74d2240
SHA1
004937868cf9734d1f93470a8fc5bc842a6d214c
SHA256
5c4e8fe7a8a5de0e4b0b92e6349c2b85bf79cfeaaf73533587c8a5bf929c449b
SHA512
e0ec962adaa2125f26227efbbf1f8c3d5e2debfe730790f0bffe049f4647ce469130814a5f0f2cab1d009dbc931fbb69725e138a1def7ee93a67f53b9861b2b7
SSDEEP
6144:o03XFuM4nLSgTh2IcymPCHWIlm1Fa1asHPncBJV6JqK6e1:oc1udnLSg03ymK2Ilm1F4a4kXc36e1
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ