Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
3a789dd6cc68e7d06446540b2cdec3b3_JaffaCakes118.exe
Resource
win7-20240704-en
Target
3a789dd6cc68e7d06446540b2cdec3b3_JaffaCakes118
Size
576KB
MD5
3a789dd6cc68e7d06446540b2cdec3b3
SHA1
515346514956731ec17708c08950ab37dbfd0ff7
SHA256
af7b8c883773f9db39ec9f94c24f806436f4c5ee30d9a4228fc485b6c49b46fe
SHA512
6bc920de3f2db0fce59a280e69c9d5396836e5ed1f69052a45c87fa9cd18726cfe735f4a4550987b78b57376e8650ac68f2365bd2896baccea7d95448e55f817
SSDEEP
12288:saOwfzznaOgMb2AWukCFHlCAwvtBErOTupOL11pxQ2bIUK23TNqOTVvT5:93f/aPRJCq9AOao1zxQ2bO2JvTVvT5
resource | yara_rule |
---|---|
sample | upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE