Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
0d17bae9294e8f5d1882a4f584bdb983_JaffaCakes118.exe
Resource
win7-20240508-en
Target
0d17bae9294e8f5d1882a4f584bdb983_JaffaCakes118
Size
576KB
MD5
0d17bae9294e8f5d1882a4f584bdb983
SHA1
e01e33858630768d90ac714c6b1846427fedd11a
SHA256
f1e6a1dba840c296b7e34055f4a4676be9bbbb257067d94d54a88c57add7e045
SHA512
6c9d0f1afb07516107903e17f13e76b62020d919de66c017e5a806d65cd44192e3f2a8e92d4ae6ae6ca6c1cdc596f4ec03489d5d6749c1b109b40bbb4cb8d0fa
SSDEEP
12288:CaOwfzznaOgMb2AWukCFHlCAwvtBErOTupOL11pxQ2bIUK23TNqOTVvT5:73f/aPRJCq9AOao1zxQ2bO2JvTVvT5
resource | yara_rule |
---|---|
sample | upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE