Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
96e721f64c1bcc38172f0c65d3bde4e8_JaffaCakes118.exe
Resource
win7-20240704-en
Target
96e721f64c1bcc38172f0c65d3bde4e8_JaffaCakes118
Size
279KB
MD5
96e721f64c1bcc38172f0c65d3bde4e8
SHA1
1cdfe0fdab774c8cff9360158621fba02f10a9e1
SHA256
15fc3f9e427b13696a9819bab2548e2cad4a7abb0f939014d5016014b8ed16c8
SHA512
a3cb929e6ccdb11173180e8bd49e277e53449aad8331a129e9f6182edf21f139f90d172e9242ccc60325612e36a085c0baa3d09eadaab057bca82da8fbb4f676
SSDEEP
6144:TfurLgmvI7Vb8hOkx5CSf7oYte13FwxrmM+GCQNRQAoz4oSpP:YAuU4rfxe1VpMT54A/oSpP
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE