Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Behavioral task
behavioral1
Sample
AIRPLAY(20110530)/AIRPLAY(20110530).exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
AIRPLAY(20110530)/AIRPLAY(20110530).exe
Resource
win10v2004-20240319-en
Target
eb6ecd1f1cc2c5752abcb039b69e99e4_JaffaCakes118
Size
1.8MB
MD5
eb6ecd1f1cc2c5752abcb039b69e99e4
SHA1
8cbeb6f2cf26f13f8830d99670350f65095d858b
SHA256
e73d594db1d57279af31fbd0711dd87435deea8fc6e19d4c8e79abe367ba60c7
SHA512
31778c71cb6c9e4b1cc6bd02bd897e9984318f80b39d10ce664493827baa01911bfd5737f25069de8cc62e8df1cbdf641d406638db77716e744a44f5e1c07e0c
SSDEEP
49152:n5RMFrXnVojTq+s+jD7dZ5drwYnYcoDgB4DRnI2y:5CrFojB9HdrwgYcbAnI2y
resource | yara_rule |
---|---|
static1/unpack001/AIRPLAY(20110530)/AIRPLAY(20110530).exe | upx |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE