Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
4d800bc3a3e9b2868c6daecf5aec1201_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4d800bc3a3e9b2868c6daecf5aec1201_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
4d800bc3a3e9b2868c6daecf5aec1201_JaffaCakes118
Size
294KB
MD5
4d800bc3a3e9b2868c6daecf5aec1201
SHA1
44f17d29f2b83d2fab8283bb971aedc5973b5774
SHA256
80bd3ed16c0240a4cf8ca350dc30587994956c5a1e76763d68f73ba1bb42de25
SHA512
8d485f81c3634d3a267f61234d3b26339e670d13b244cc0989f846d4cdf10910376af1b3fa35b6a1e13923c8735a47dcb5d0ee958180e0c4057dd3cbf7c2d820
SSDEEP
6144:VB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSot1A:VaD4ZieSgp/FeH75J7CceoSoTA
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE