Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
16e0940f5fe4f5f92f80181e337f602a_JaffaCakes118.exe
Resource
win7-20240221-en
Target
16e0940f5fe4f5f92f80181e337f602a_JaffaCakes118
Size
576KB
MD5
16e0940f5fe4f5f92f80181e337f602a
SHA1
cfec7f97af3537fdc762f9cf738b575733082229
SHA256
1cf14185377bd02989aeb13044345cad9b6d6c13a2c600df457bdfcc7dd3d30f
SHA512
004b512655fae118c94ff32aac70825286f31308a69e9c709cf65b9a791d37049c21cafc03f154875ad0ac265c9f254a65054c7d251cf8d5a32a5b60a385fd18
SSDEEP
12288:baOwfzznaOgMb2AWukCFHlCAwvtBErOTupOL11pxQ2bIUK23TNqOTVvT5:m3f/aPRJCq9AOao1zxQ2bO2JvTVvT5
resource | yara_rule |
---|---|
sample | upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE