Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
JaffaCakes118_8acce2b65c01733ff4e5644e36d32ac1.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_8acce2b65c01733ff4e5644e36d32ac1.exe
Resource
win10v2004-20250314-en
Target
JaffaCakes118_8acce2b65c01733ff4e5644e36d32ac1
Size
227KB
MD5
8acce2b65c01733ff4e5644e36d32ac1
SHA1
22f410abd72fa67147c5c3c25f92ef299eb0d320
SHA256
4a04ce17687fcaa4b9c7978b3731aa1efb78167844d17bff073cb67ac60dafe1
SHA512
0d6fff4346b5268954e43c22ee0ee3428260cf6531a022a57e1830a56f039bba13a585f046c0c15d3d8e44505407afd0e28222ac35da3716984628bed02ccb17
SSDEEP
3072:ehc0HGMK2VoiGSZIkCuLN1YAlb3+p/gRqXMgpOBKAIkqBVfU/eG+qN0C9ROkK8qW:oZHLhViklN6dKqc3KAVqn8/vvK8qIH
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ