Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
e4021e8615d67a697b44ec4e13d0a06a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e4021e8615d67a697b44ec4e13d0a06a_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
e4021e8615d67a697b44ec4e13d0a06a_JaffaCakes118
Size
680KB
MD5
e4021e8615d67a697b44ec4e13d0a06a
SHA1
d0bd03f898f7e4bf1ce4607e44a1b38efd778fee
SHA256
206e832791ed68936586acfcc20ca61cbe3a567ba9dae23c458dc1645b001fcf
SHA512
58c14659072954eb96f1c7c859a8216854144adad38d56c90e19a6108be855c333db9a0663e010a2c16d73207c0c3c5d5464c4831dd1c8daee2f968e91b6f2ed
SSDEEP
12288:VwEZxZLDznQwo5unUeArTE5yjgcy7LxOuH9/7HPuXRZ8dzfPtfdeEvnrvdXZPTh6:SEZxZLHnQwOunXLpvwuVbKz81VfTFXZ8
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE