Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
9491403a8c610af2d702bd57f90a58d1_JaffaCakes118.exe
Resource
win7-20240704-en
Target
9491403a8c610af2d702bd57f90a58d1_JaffaCakes118
Size
294KB
MD5
9491403a8c610af2d702bd57f90a58d1
SHA1
e3385e8aa2463069dc7f8248ea4d9c1782ea7cf8
SHA256
66f96f66288983525fdd6e0398ffc2dd3058a534606beee6eb2f94df7d0c247d
SHA512
d34ef2ceac675750e41932f87627b367105e3798bccb1d8409e15f8c9f99e0ded6766bb3856b43b56ed5d1dcf400ffae830bf1249163993a6b2f2e3d2ac9430a
SSDEEP
6144:FB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSot3I:FaD4ZieSgp/FeH75J7CceoSoNI
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE