Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
ad14b00249578bab993d0359c0368d02_JaffaCakes118.exe
Resource
win7-20240508-en
Target
ad14b00249578bab993d0359c0368d02_JaffaCakes118
Size
666KB
MD5
ad14b00249578bab993d0359c0368d02
SHA1
b4279dd41ad7d80dd72ec276056614e73eac94d3
SHA256
244d1feb78ee276338599f07a1317988af8d34ccf94f7da334cf03a7bc8a27ed
SHA512
89fa7e4d8bb31f31e9db96765b82cd124fc998324062b12776e062a8e2204fb63eebe500ad4cf1bb79fb8083d67dd9d9a7e6d63c832f8d84de56042c729bb97a
SSDEEP
12288:ybDqEkMs4q48IAeP0PifTEurPbvdqJplapLWTICNIYPKMTWN4t4OAUw91zRwIMfz:yXbs48LeP0P8E6dclWLi26KGOqMwIMb
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE