Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
215943879123ddb0ad1cbe380ad089e6_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
215943879123ddb0ad1cbe380ad089e6_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
215943879123ddb0ad1cbe380ad089e6_JaffaCakes118
Size
148KB
MD5
215943879123ddb0ad1cbe380ad089e6
SHA1
95559168ee9de82859427a11dcc266bd84fdad6f
SHA256
57e5187e7020b6e11f5d4ecca9156bc2f4bc59692435b08992991d1564d41c62
SHA512
2c62bd92dfefdc21f50322cc499e9a02d4b96b9ae8697e48fc4d13e1e855655ed9b267e3ba97db4d9c1daf7135282ea3f81ee9332546f2ce9371b1137e9b5030
SSDEEP
3072:JsjTdVntR3X7JVZbyebyJhmPSE1wlYHVewSC3dWtnGjXhrEjjGCkY7:JmntR3zMqqgSE1qCkwScIi42G
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Data
Event
Start
Stop
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE