Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
a48be079dda3260ef38249d12a05cbd0_JaffaCakes118.exe
Resource
win7-20240704-en
Target
a48be079dda3260ef38249d12a05cbd0_JaffaCakes118
Size
576KB
MD5
a48be079dda3260ef38249d12a05cbd0
SHA1
d5b45564b735d8e442fbe5280acc18371956345d
SHA256
5fc75e69145d0668fc1f360f5a957d8ce2468bca636036d90d6e48f4ad7a3d8a
SHA512
10bd143167365290463df57b18bda3dcd514257f997ce846ab35dc8f5b5fb67c5797904e0f8b65b81582f3b7b0295df25eb3caf8f849327695f5f6e0190c4a38
SSDEEP
12288:GaOwfzznaOgMb2AWukCFHlCAwvtBErOTupOL11pxQ2bIUK23TNqOTVvT5:33f/aPRJCq9AOao1zxQ2bO2JvTVvT5
resource | yara_rule |
---|---|
sample | upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE