Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
4624c8889c4852e56972e12f3e7791ac_JaffaCakes118.exe
Resource
win7-20240708-en
Target
4624c8889c4852e56972e12f3e7791ac_JaffaCakes118
Size
576KB
MD5
4624c8889c4852e56972e12f3e7791ac
SHA1
7ddeb445114786820fadf6ddbf1bd25464cd4f72
SHA256
a95528495caa53c3c187329b2e904b34e53e117a85b02de2992dff9edd908a8d
SHA512
b5523a946ed08baeb366d7e4066af37f0af691db6d006877e07169a9e7d9a8975cccd433b4943b5167845009515102321761b78a90dc8f8008556d2b95f94157
SSDEEP
12288:4aOwfzznaOgMb2AWukCFHlCAwvtBErOTupOL11pxQ2bIUK23TNqOTVvT5:x3f/aPRJCq9AOao1zxQ2bO2JvTVvT5
resource | yara_rule |
---|---|
sample | upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE