Extended Key Usages
ExtKeyUsageNetscapeServerGatedCrypto
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
eb391cdec6a23747c845765ef683e99a_JaffaCakes118.exe
Resource
win7-20240220-en
Target
eb391cdec6a23747c845765ef683e99a_JaffaCakes118
Size
666KB
MD5
eb391cdec6a23747c845765ef683e99a
SHA1
383c87bf2af29ec17c74d746e7326549a6a87a83
SHA256
11620081063955bd7b404120d6f0b1df12cddfa35391557281c8c1b6ea161af1
SHA512
3c50ca791cbb0cbc44bd8c7d565988cf6d4775da69047ebe01ca655e9188fe5f879dd6f7b69969ecc6ae2a4a637ff8cc99f1ccb9d5fe192ba566393f89969519
SSDEEP
12288:vbDqEkMs4q48IAeP0PifTEurPbvdqJplapLWTICNIYPKMTWN4t4OAUw91zRwIMfS:vXbs48LeP0P8E6dclWLi26KGOqMwIMa
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageNetscapeServerGatedCrypto
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE