Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
0050aa4b824e0ad0b50a60397b08c283_JaffaCakes118.exe
Resource
win7-20231129-en
Target
0050aa4b824e0ad0b50a60397b08c283_JaffaCakes118
Size
677KB
MD5
0050aa4b824e0ad0b50a60397b08c283
SHA1
0414a66fcfc319b1456aa11961d305acc140a2f1
SHA256
13ab33156ad6220a526ef72230136e26f04a9e84508fb9171aadcf46898b6cdb
SHA512
dc3fc3a917afceaad28cdc1a0ce3844a3355ee8bd73db6a859e63cb7dc11d43c9d399408846d0499b2e41272fc6b6c8266628dfca24ea1688188e3cc22d646ec
SSDEEP
12288:+Q+8YcSdcdp7GqDd7o4YINDz6/AAgYShiuFfIihBtwVabCMUA4+6vlF7:yiSmrpDd75d68hiuF5H8abCMUN+YlF
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE