Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
e29e3b2e6644d6a504c203f61f4bc704_JaffaCakes118.exe
Resource
win7-20240221-en
Target
e29e3b2e6644d6a504c203f61f4bc704_JaffaCakes118
Size
548KB
MD5
e29e3b2e6644d6a504c203f61f4bc704
SHA1
89ca8578392bb2ed0279b54bdf83e3e76d23ebd4
SHA256
133f971660b5d4b83acccdf38d5380bd0ab38d69ad2f5ae677a23350b9b3a01b
SHA512
15077e6c3e97c7eb87b7148345fe573ac23dcbd95df7bc6c1363bf9abb99b6a2ff6071161d52ebb42dd83c46628132487c1f04ad91143879716ab8edd0d330d5
SSDEEP
12288:wl/NiIoYAbvZO7wNJgHO78VN4zN8EMDOVUjW3Xg8oSABBT:wZjoY4EEyHWqN6KjzbPT
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE