Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
0f62cce735e2059b5f82871c31c5a0f8_JaffaCakes118.exe
Resource
win7-20240220-en
Target
0f62cce735e2059b5f82871c31c5a0f8_JaffaCakes118
Size
576KB
MD5
0f62cce735e2059b5f82871c31c5a0f8
SHA1
c56447e1e26f524b06d5e6e53e4696a419637134
SHA256
6aff619d222b4d62b70311afc54ff21c600a14bc4d41e352bd480c0fa16c5140
SHA512
0188455b19d58c5c36b1de833ff6ee3ac97ac60c475879b03231f4b2ce3954247ec1078f9010144763895fa289fed0080d95a8e4d66139e81f47d350f77ffd0a
SSDEEP
12288:HaOwfzznaOgMb2AWukCFHlCAwvtBErOTupOL11pxQ2bIUK23TNqOTVvT5:63f/aPRJCq9AOao1zxQ2bO2JvTVvT5
resource | yara_rule |
---|---|
sample | upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE