Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
JaffaCakes118_8add3f2d8988b0005f48fdfe22926d09.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JaffaCakes118_8add3f2d8988b0005f48fdfe22926d09.exe
Resource
win10v2004-20250314-en
Target
JaffaCakes118_8add3f2d8988b0005f48fdfe22926d09
Size
229KB
MD5
8add3f2d8988b0005f48fdfe22926d09
SHA1
724390c4adcd4a4c671b30005fa6d94c5dd868ab
SHA256
0d145f4b55bc9ed62af577cb2c028e5583c4636362b411b4be93d73eedbb22cb
SHA512
a4f12534c734ca3397963123c0eac1fbec601518f5796c0edb37281ee84683aba48dba9f69ace9aaf8d0c3c25455252ab2849537221aeeae7707530909014e31
SSDEEP
6144:jHLMK+2vryRIRZ83IIMTMsEmq1dWjy4zXYGMMtH:jVz8YIp9Ey4jtD5
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ