Extended Key Usages
ExtKeyUsageNetscapeServerGatedCrypto
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
f428e6b1a818c57314c2b549e8d96759_JaffaCakes118.exe
Resource
win7-20240319-en
Target
f428e6b1a818c57314c2b549e8d96759_JaffaCakes118
Size
666KB
MD5
f428e6b1a818c57314c2b549e8d96759
SHA1
7b043834d708ea998eb281eab79450ee33755277
SHA256
1279357604c977d7cee8944bf5abf8e9f15873c2efea6de543483da3501e7a58
SHA512
eb786be973a51c4b8736b78e29860431347e1f65e6823b66ce0e9b1af5b4a346f0f2fcc3ced0b8f21abcbe330fd6a635d5484587a11a993fb2195a8edb48b3e8
SSDEEP
12288:KbDqEkMs4q48IAeP0PifTEurPbvdqJplapLWTICNIYPKMTWN4t4OAUw91zRwIMf7:KXbs48LeP0P8E6dclWLi26KGOqMwIMT
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageNetscapeServerGatedCrypto
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE