Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
JaffaCakes118_8abfca22d94ec33ffe67406d716a8e93.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_8abfca22d94ec33ffe67406d716a8e93.exe
Resource
win10v2004-20250314-en
Target
JaffaCakes118_8abfca22d94ec33ffe67406d716a8e93
Size
201KB
MD5
8abfca22d94ec33ffe67406d716a8e93
SHA1
670142ac4fc4a282f3f70b1044df69dff835b9aa
SHA256
99d2612ef9afe26ef72c3aa1ca498f7a6c5a9407d7e5bf7c731fedefb17dca15
SHA512
cd030b7fe7ea83b1f06b4d9583006ace37f7dbf2fe9481c9f8f24a72ed362d39fe1a6e45c1992cdff3be8c1cbdd088a89703ea846553be03250dbd13b63a578f
SSDEEP
3072:aF6uHgUCMahqqhHBot5SqLgoxxWSjXYMbz4mg5mHoSX/PoGyQw0i1PNaGv:aF6OYhHBoLZXYMXymISX/wG8fJv
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ