Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
20db6de35adeead40c65b476e98d208e_JaffaCakes118.exe
Resource
win7-20231129-en
Target
20db6de35adeead40c65b476e98d208e_JaffaCakes118
Size
1.0MB
MD5
20db6de35adeead40c65b476e98d208e
SHA1
8fe06ab7ce234af11b7d0b23ec0bd7438b6a387d
SHA256
21b4d37ec341097ab97e24aeb90f62502449f593538b48c3c975d628da8b7b73
SHA512
8d7a6f7d295ee7b2a75a186aeb89bc15816faa0b4b75c936be1c07cfd0d435d770bdbfd19334fd5610e8e1829b337c81873c3f9ddf6bdaab3c2b2ccd115b01be
SSDEEP
24576:qiqr/tl57nqplxTAJaAFJglaKJDnduj2NbL+J8Bt88THX922jxRf2:qhr/zQplp4vgMOndugaeBt88DX4A0
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE