Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
8b378d0e807e3636c5e13822ccc44f2f_JaffaCakes118.exe
Resource
win7-20240215-en
Target
8b378d0e807e3636c5e13822ccc44f2f_JaffaCakes118
Size
678KB
MD5
8b378d0e807e3636c5e13822ccc44f2f
SHA1
d4be5490f64cac6fd519a8cce606731964cac083
SHA256
16d12e77f063cd7ba2fbe30806a6312e854a5b99296d45d1aa1b6a4e6b54c53b
SHA512
787059831ae993b07ec71a26995b47258d70399890e3a962c909fcd9e1f0efb97bfdff9b61fb5dd77fc095f2d1ae8ebfc08b6660dbd710a16bddf01f0bfe6242
SSDEEP
12288:CQ+8YcSdcdp7GqDd7o4YINDz6/AAgYShiuFfIihBtwVabCMUA4+6vlF7:2iSmrpDd75d68hiuF5H8abCMUN+YlF
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE