Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
9eeec5f9b9571f39af4fe8a700f9e4a5_JaffaCakes118.exe
Resource
win7-20240419-en
Target
9eeec5f9b9571f39af4fe8a700f9e4a5_JaffaCakes118
Size
680KB
MD5
9eeec5f9b9571f39af4fe8a700f9e4a5
SHA1
f4c75af9ac05b65cc870ee691b5538148065de62
SHA256
058ca38da15e615a2742a4b143e9f4bd15c936fe79edd8bfb62f24428e65f7f7
SHA512
68afc65d7c42a39dc1937cba537f37d64ac5e540375f0f45674f2bd4c61c4a4f3a262627259b05282668d6c8b1c4dfacde072505314927be5b7953b5ea2ae207
SSDEEP
12288:VwEZxZLDznQwo5unUeArTE5yjgcy7LxOuH9/7HPuXRZ8dzfPtfdeEvnrvdXZPThC:SEZxZLHnQwOunXLpvwuVbKz81VfTFXZg
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE