Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
4d15902064654c0543cfe920b11dbc4b_JaffaCakes118.exe
Resource
win7-20240708-en
Target
4d15902064654c0543cfe920b11dbc4b_JaffaCakes118
Size
576KB
MD5
4d15902064654c0543cfe920b11dbc4b
SHA1
990b7f7f43967b52a3b7c350a12884785af675f8
SHA256
8d66bbbb9f771c34ab053a4b4f2e1ea2ff758c1bb21eb463365aab2a4f37e12e
SHA512
afd36b55f208ee456432f86706f8cc59eca18400b5a06a857a153ea9457f49ae236af2035e1e46c1d340f5b9ced090e32a9fe91a7ffb4ee32179882635453b7a
SSDEEP
12288:LaOwfzznaOgMb2AWukCFHlCAwvtBErOTupOL11pxQ2bIUK23TNqOTVvT5:W3f/aPRJCq9AOao1zxQ2bO2JvTVvT5
resource | yara_rule |
---|---|
sample | upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE