Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
705dd9484fb78a007c8dbb6abe8fd2d2_JaffaCakes118.exe
Resource
win7-20240705-en
Target
705dd9484fb78a007c8dbb6abe8fd2d2_JaffaCakes118
Size
294KB
MD5
705dd9484fb78a007c8dbb6abe8fd2d2
SHA1
9a673e2ec75ef4c3c1f8a034e61f05d1ef645f2f
SHA256
4d5921c08412b090a35942b6a6043a735e0ffdeb57c41a9ca3026b6423ae488c
SHA512
32a6365e106e9e8fa1f405ff5a74b9f6d224e2ff087a939138771824ac126dd5a743ecadf44399122e25cf95231658c89029ff85829a927acfd4b7284c7b2513
SSDEEP
6144:SB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSotQn:SaD4ZieSgp/FeH75J7CceoSoCn
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE