Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Behavioral task
behavioral1
Sample
0f34a989cf654cfb6c1895aeb71576db_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0f34a989cf654cfb6c1895aeb71576db_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0f34a989cf654cfb6c1895aeb71576db_JaffaCakes118
Size
159KB
MD5
0f34a989cf654cfb6c1895aeb71576db
SHA1
107b593121d077313590b6b0b1a78774aafcff16
SHA256
819b59d25a2e979fda988a6ff4be1d3b9d8fd03c3f55626d433f841884a65c68
SHA512
523dba7edb1ab16cb89a4d0be7bc513cd98d3bb5f6dbd9b42ce4e163dcd87ac43fba69103fade6e7c7c412bfe2fa398c57b2020109d47d5ec375a3f4e21ae33c
SSDEEP
3072:sE5UXKMDXGRrd0kXAd5f0D4Lwk2wE2qWiHfs0q1nFU:sEaXcd0+cl0ULwPJ/i1n2
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE