Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
947119bb837d8b28347e7ad14ae4564b_JaffaCakes118.exe
Resource
win7-20240704-en
Target
947119bb837d8b28347e7ad14ae4564b_JaffaCakes118
Size
294KB
MD5
947119bb837d8b28347e7ad14ae4564b
SHA1
3a7811ffd03f909f8e2d2b64261c036d4704c73b
SHA256
dcdd287d3885d17cc656b9bf19c396bad10f12f2b6bb6fa58b915ee1ada8f55b
SHA512
39a16d0abffaeab3a5f54d1bb3d50d4dd38ebcbb519aa53f26f46367fb84942c7f12ab508084e5b1695fcd8f1ef6c051cb6d40a4c83d1ee9c31f39b239e5875b
SSDEEP
6144:FB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSot7o:FaD4ZieSgp/FeH75J7CceoSodo
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE