Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
34d11567afb0318999a9cb6f45bb38cd_JaffaCakes118.exe
Resource
win7-20240705-en
Target
34d11567afb0318999a9cb6f45bb38cd_JaffaCakes118
Size
576KB
MD5
34d11567afb0318999a9cb6f45bb38cd
SHA1
ad09517162a48bcc8b476fb08ab68907f8467d51
SHA256
808e7dee6308ac55eb1c8a2d8ca31d0f68237c2c1dabd15cfebdafe22510864e
SHA512
7811a44ed5b87fe1313b4eddebee88abcdbf7f12e2d3a379e27510113db8c04ae94a9e87fb85edc82453225df94f528701644c7017f2af256cde56101e9242e2
SSDEEP
12288:daOwfzznaOgMb2AWukCFHlCAwvtBErOTupOL11pxQ2bIUK23TNqOTVvT5:I3f/aPRJCq9AOao1zxQ2bO2JvTVvT5
resource | yara_rule |
---|---|
sample | upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE