Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
64abf1d4f8cac925f3b70c28e569dd16_JaffaCakes118.exe
Resource
win7-20240508-en
Target
64abf1d4f8cac925f3b70c28e569dd16_JaffaCakes118
Size
678KB
MD5
64abf1d4f8cac925f3b70c28e569dd16
SHA1
db65a69efd119d2673bf6055d1d1768b7e8ae8b6
SHA256
137bf921abc3af4e8232c29f2d06dfe1bd6de18d2b5bf66aeef2edcc6066ef24
SHA512
fbd540f57c35257e246c9f898a1f7750db37855fe23080848f4a0f247352212c78c1218a4e376a48a39f10d62ac0b3113fc239a1656e883696c656a175bc9963
SSDEEP
12288:yQ+8YcSdcdp7GqDd7o4YINDz6/AAgYShiuFfIihBtwVabCMUA4+6vlF7u:miSmrpDd75d68hiuF5H8abCMUN+YlF6
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE