Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
49d7286f754395b45059348dd395a467_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
49d7286f754395b45059348dd395a467_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
49d7286f754395b45059348dd395a467_JaffaCakes118
Size
294KB
MD5
49d7286f754395b45059348dd395a467
SHA1
196fbf90f191bf07795389725b2ff9c4ba3edfac
SHA256
0274973ffb05dc9f0472656622c1a81a04aa679ac6c28a65c29ff110eb37f634
SHA512
4b2fed180b2468d52aec914b651221f774527359eca63f08faa9b903a5f341ac02d81b18fcea74ec74d0b4e2def895c8eae50abcde32a8db4b27817eedcd7226
SSDEEP
6144:VB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSotqb:VaD4ZieSgp/FeH75J7CceoSoEb
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE