Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
1c58ffcced145f36c3d0b1d3b5105eae_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1c58ffcced145f36c3d0b1d3b5105eae_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1c58ffcced145f36c3d0b1d3b5105eae_JaffaCakes118
Size
190KB
MD5
1c58ffcced145f36c3d0b1d3b5105eae
SHA1
77c6149b23f4a9ffe1b04ce705815e88b43cd161
SHA256
c30cf89181269dcd69d56058cac8bfc138051920dfb79e25b07c856ae26a38ff
SHA512
e058f2f68e62416944e774293df52ae8614ccb84f82efbddbd020f48bfa631980d84bb3fd9935a7a3ba44c599d97ee26eb936890e01f4491b372cf3fa4d9b381
SSDEEP
3072:HFVTw5u66hpacNMlkAii7HpB7Q42oRgygAa9BjPmBzoO8ra:HFAu6xcNMlkkyH9Rmma
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Data
Event
Start
Stop
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE