Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
3c57a997581b112c0f17a9a2c31348c2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3c57a997581b112c0f17a9a2c31348c2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
3c57a997581b112c0f17a9a2c31348c2_JaffaCakes118
Size
309KB
MD5
3c57a997581b112c0f17a9a2c31348c2
SHA1
cf98bc4b430f13b891f1a9e893bf1bbb8be45d16
SHA256
5c21746330ec581eb823737095319e094760689f8ce630909493355a9f4ae7b5
SHA512
d1940a7d5ceb808482513764ccd1e5ab45d0048981caf748afcbad77bdfe0a6360ada2d67a466334947080abc2d999bdc433ef969ac0ed4353996625599ed2fc
SSDEEP
6144:Idcah36Ld7aeSZ+sRKriIA04iqBXgVrHTuRDgRC1H4hpzzpxc4x3soSXl2s:Y7hOBad+sRIiYd4ErzEDg4Yh9JcoSXos
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE