Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
30dbab6f9db859e10db45c03e4fd7c7b_JaffaCakes118.exe
Resource
win7-20240705-en
Target
30dbab6f9db859e10db45c03e4fd7c7b_JaffaCakes118
Size
574KB
MD5
30dbab6f9db859e10db45c03e4fd7c7b
SHA1
065762ffbd41441ebcc6019cdcb040674c298aec
SHA256
a4e94377388d887069e63b2085e9bdbe374ce167dfd11af7c498cc52bd87268e
SHA512
233826a6976b811b9e5bd217ce77ad0fec4b3998c0f17be0ec0a1540814c533f398d6a44846127b5ec48ebba670158deb2663d35702fb3d10d6c3c47827563c6
SSDEEP
12288:FFcTU6lk6OzFIzFxQsXXQrrBx7zDYx8pNZG4u3sICJ0KwMMCSa:lveZCsHQjvDYx8pNpas7pwMMCSa
resource | yara_rule |
---|---|
sample | upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE