Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
a4236c564e1a697cc3b95281d3dd3f69_JaffaCakes118.exe
Resource
win7-20240705-en
Target
a4236c564e1a697cc3b95281d3dd3f69_JaffaCakes118
Size
312KB
MD5
a4236c564e1a697cc3b95281d3dd3f69
SHA1
eb28d55711ab8652aed25a88f6dce40269613657
SHA256
8f7291efec6360f113464c572e8cd3f6462d06f9a2cec5013c2c0ef3ef26540d
SHA512
df7adfa156b5c0b6727204cff6a8ceb363a349cccfe672050d321f4ce9bcbf73a94b3fe993bc51c0663647478c727855a088095a41adc8b2cb1d60079d096964
SSDEEP
6144:HnlEoWaZknVIaVaHl/c+gLzTwWlAdG+GhOYxfdUv2oSKlbu:HlEoWlnVIYIlTQzlCqi2oSK5u
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE