Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
0d9e54d0610727d1befd1a9cb9cdd128_JaffaCakes118.exe
Resource
win7-20240508-en
Target
0d9e54d0610727d1befd1a9cb9cdd128_JaffaCakes118
Size
576KB
MD5
0d9e54d0610727d1befd1a9cb9cdd128
SHA1
34c6ba7b0fc05538c0307b3d7511458c90dcfcec
SHA256
5f586d58e6bdee14956c53916555d14b6b301cf5af14d1be6711456fe5281f92
SHA512
6705e3ae5097aa1be77f1520e05d00facdff96e4f8eeb2c2d4c2ccdc21d2e48828a168a70c98c2ac14c6bb3b51b8577dd1394d14d4a6bc0763681147b2ae516e
SSDEEP
12288:waOwfzznaOgMb2AWukCFHlCAwvtBErOTupOL11pxQ2bIUK23TNqOTVvT5:53f/aPRJCq9AOao1zxQ2bO2JvTVvT5
resource | yara_rule |
---|---|
sample | upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE