Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
fbce2c09d266c24261f63980a066848c_JaffaCakes118.exe
Resource
win7-20240215-en
Target
fbce2c09d266c24261f63980a066848c_JaffaCakes118
Size
665KB
MD5
fbce2c09d266c24261f63980a066848c
SHA1
ab9c5e8fa639cd115904129bf1a023b21a1bcbe6
SHA256
06ca653c60ee7c6026c85700e1ade37aa838165faf18a0e401c1588c105c6d7b
SHA512
fc329090df1f980d80eadff71008f1e6eb9575e176c01850f420dbcfb21f19d9d670cf463a91990c6de243a51cfda89614239bca71ff38d5fe024dde5752e213
SSDEEP
12288:wbDqEkMs4q48IAeP0PifTEurPbvdqJplapLWTICNIYPKMTWN4t4OAUw91zRwIMfD:wXbs48LeP0P8E6dclWLi26KGOqMwIM7
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE