Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
e89587ac75bed9ba5eb2fb8821a27098_JaffaCakes118.exe
Resource
win7-20240221-en
Target
e89587ac75bed9ba5eb2fb8821a27098_JaffaCakes118
Size
1.0MB
MD5
e89587ac75bed9ba5eb2fb8821a27098
SHA1
50da9f4cb3ee06f166794e93352f03979360d06c
SHA256
1467b2988f6e8b1601516682cf5017074c5494cc40aaf3d458360e63d08b991d
SHA512
6d974250395bc945372d4489a22346304764ef9383309461193b0b2b85b083fb365126263c98d821620bc23d0f0e4ff52e1726cca093c23190430b72a36a450d
SSDEEP
24576:rM1iy9cN7tjk3XUnyAmkx3B6jHcDxVX2CI7ZSeovg:Q1iy9SpjX8i6GD2CcSe/
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE