Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
868e9a6df33224fbd09f3487e3b94167_JaffaCakes118.exe
Resource
win7-20240729-en
Target
868e9a6df33224fbd09f3487e3b94167_JaffaCakes118
Size
279KB
MD5
868e9a6df33224fbd09f3487e3b94167
SHA1
a9dda62887f9af3d83ff5f20899ac4312eb74554
SHA256
25fafd1ea1e4f2151b3be2fd77434fdf3d7b27d757f5256d30335444616860b2
SHA512
c072ce079fe71666c50d78dca6e71d43ebcc7db7478b801b99d334866de66f8408cc3a9986637f800afcedd2f6f73848bb6e84e5019830661155291dc626d742
SSDEEP
6144:rfurLgmvI7Vb8hOkx5CSf7oYte13FwxrmM+GCQNRQAoz4oSp0:QAuU4rfxe1VpMT54A/oSp0
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE