Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
89d199b5ac5a7d1b5f94ccb682a3d5af_JaffaCakes118.exe
Resource
win7-20240705-en
Target
89d199b5ac5a7d1b5f94ccb682a3d5af_JaffaCakes118
Size
312KB
MD5
89d199b5ac5a7d1b5f94ccb682a3d5af
SHA1
e26ee8a65175d301f091db5588635c8fc1a925d1
SHA256
1c1e01f7ae2d5b09526c26447e5be59079853635fa1f681f6219f81cb4594743
SHA512
d30bded72463ca7c8694563c5119e443b46ecc9f47ec502cdb7261ca9a0ac121fb1680d5b547f876f215261f99d7142c506415533ed0816c09436c08c8f8cef6
SSDEEP
6144:2nlEoWaZknVIaVaHl/c+gLzTwWlAdG+GhOYxfdUv2oSKljW:ylEoWlnVIYIlTQzlCqi2oSKxW
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE