Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
68c029435ce8ac5ba5af33c7235156bc_JaffaCakes118.exe
Resource
win7-20240704-en
Target
68c029435ce8ac5ba5af33c7235156bc_JaffaCakes118
Size
4.1MB
MD5
68c029435ce8ac5ba5af33c7235156bc
SHA1
e513c67372bb573eb20493efdceeb2a2a4813fee
SHA256
1dcda297b4401c37903cbe782ba53bb3f0d4cfe40a42593b610b5dc6b5ec6324
SHA512
ff5e7810916ff14a22fe16639949e8b70714f6f5fbc8907e43c31c0e42737c7f6809002c6d1a84c7611be68f5a3ee1511074c4f8e91a6e8a1aa394a5beb0cf27
SSDEEP
98304:zR0KgJjrSQ7U3SpCOWI2WvoabPqsWRN6wrdGs8:l0fxj1IQBbZWRN6wY
resource | yara_rule |
---|---|
sample | themida |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE