Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
372b42b6f29d7cf1ed9d8c72ce0d2a4a_JaffaCakes118.exe
Resource
win7-20240708-en
Target
372b42b6f29d7cf1ed9d8c72ce0d2a4a_JaffaCakes118
Size
576KB
MD5
372b42b6f29d7cf1ed9d8c72ce0d2a4a
SHA1
ac1a833b32c52fee9b0b4a5a0bb37d2e8fd40878
SHA256
fde8bed78d68ea6cb8015989b4a19dbf70745c86b4ef0679373a7128ab10b3ad
SHA512
ec5981c89b45c51b746c807ea2813e2ad08255031c29a4faef58b7e85d9b69a3a3206fbeb3967c1b2eac03a67c42550f869d03b8fec18de14e436427693da355
SSDEEP
12288:raOwfzznaOgMb2AWukCFHlCAwvtBErOTupOL11pxQ2bIUK23TNqOTVvT5:23f/aPRJCq9AOao1zxQ2bO2JvTVvT5
resource | yara_rule |
---|---|
sample | upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE