Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
a18848f790b33869e03cf98a96c76912_JaffaCakes118.exe
Resource
win7-20240705-en
Target
a18848f790b33869e03cf98a96c76912_JaffaCakes118
Size
279KB
MD5
a18848f790b33869e03cf98a96c76912
SHA1
8bafd19ef712af8b4072db02466cc9db86c0d31f
SHA256
15c34526442b2898cb005d3ddb2d9e9bd21e90597c0ea9e4481d723f7b38d42b
SHA512
70c1b911c1b83f9d29e21fce5edd4e1ca840720abb97aebb8bc35e5c7416065774c47ce907e29658a5b2facfbb117d67e8bd362cea9e5cd6689ccb707e3aaac9
SSDEEP
6144:jfurLgmvI7Vb8hOkx5CSf7oYte13FwxrmM+GCQNRQAoz4oSpo:oAuU4rfxe1VpMT54A/oSpo
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE