Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
a155ffa0e66b1a1725ae8848fb5d9b14_JaffaCakes118.exe
Resource
win7-20240708-en
Target
a155ffa0e66b1a1725ae8848fb5d9b14_JaffaCakes118
Size
294KB
MD5
a155ffa0e66b1a1725ae8848fb5d9b14
SHA1
697f66c0f03ac785e7fa3901a09119ecf65af9f1
SHA256
bf5fa9a519f335f0d87470808047ce29caf526ad36d78380318c3d0309847aad
SHA512
382e1b8fecbf1368ff6e51b105f68bf8519a23007885b1e7438cd3e558d891883732e542a290b8a8bbe0e577a066ec43ac009bed0c458e757a039229af2a08d4
SSDEEP
6144:VB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSotiw:VaD4ZieSgp/FeH75J7CceoSoYw
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE