Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
13bab12d611329d20507d52a5711678f_JaffaCakes118.exe
Resource
win7-20240220-en
Target
13bab12d611329d20507d52a5711678f_JaffaCakes118
Size
665KB
MD5
13bab12d611329d20507d52a5711678f
SHA1
72274aba3eda1a0f183d25d5fe92aa20787e8a87
SHA256
5f902c32cffc4c450e18c71df7ad8f421b8c8d5f3af88f72b1105651c0e37b63
SHA512
b7ff7f17bfa2d3cd3daf93dedfaf445b2e1916c587594e757f8b5db16b6d3c82c759d801fc21df05ea53fa8031392cd78adbf9c73b23aff81d23ce582b1c6f64
SSDEEP
12288:wbDqEkMs4q48IAeP0PifTEurPbvdqJplapLWTICNIYPKMTWN4t4OAUw91zRwIMff:wXbs48LeP0P8E6dclWLi26KGOqMwIMH
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE