Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
6c745b6bdeb7e3e68b7c6aebb9842976_JaffaCakes118.exe
Resource
win7-20240508-en
Target
6c745b6bdeb7e3e68b7c6aebb9842976_JaffaCakes118
Size
679KB
MD5
6c745b6bdeb7e3e68b7c6aebb9842976
SHA1
a72bee8253b80bd8e764aea43e87abc755297f2c
SHA256
20516a8f6ea1faa237afabe0832734cf96158e9e4159e4a2ed74e9e6f8ad76f8
SHA512
e64c2a8c4a33768975cc75b1e39abd5f0dc79bc2835588c39e8982b292a77437c1ffb284f14c79d236f07b55b3c0cec9b890d13b93a074eadec578db967b8d08
SSDEEP
12288:ARO2Q8Iu71MZvr2ymO6l4S+obhFIVgFmO/oG3G+zQmS+Lrv7KXpQB9EzDk8BAZ00:Sm88Kjh4SnbMKFmO/osPTS8v7KXpQBqM
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE