Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
902e812075ffe3f4b8afc40ac248e8db_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
902e812075ffe3f4b8afc40ac248e8db_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
902e812075ffe3f4b8afc40ac248e8db_JaffaCakes118
Size
1.4MB
MD5
902e812075ffe3f4b8afc40ac248e8db
SHA1
0c570de3a21c059ea66f50ed66b127644e8c4335
SHA256
b90ecef8acb9a2f8e514789b188a8b04dda3055dd25f23455e1a98aebc31a4b3
SHA512
e1e25b8b2e4672d51d62bd6ab4293dc42f6e12c1b3130a87bd3456db5ac874f6546315927eb497ff940f6cc038e08d1f9a7e51653fdf5fd134b54cd8e3ca0b3d
SSDEEP
24576:ZaM84oHVJQgsGNbBNXjo2dj7MM1ebXh040Uf5GtaudomhCI23yvNHm0L4+G:8M84wL7U2pIM1KhcUf5Gt3dI0b47
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/out.upx |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RunSohuNewsDirectly
StartManualPopupServer
StartPopupServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ