Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
a4d5aed39c563219d277283f4f4216c0_JaffaCakes118.exe
Resource
win7-20240708-en
Target
a4d5aed39c563219d277283f4f4216c0_JaffaCakes118
Size
294KB
MD5
a4d5aed39c563219d277283f4f4216c0
SHA1
6fe13972d9d875466290f14a99454933aa3b70d5
SHA256
83ebb67b6fa488090819f188080736537e98cdfdef462b85e25200186451f56e
SHA512
4f235fcea72c8a5f471b23800e72ecd482bbc1c6cdc751145be75d1f7c1c421289b7be836bb9fff18798e79cb438f57abe1190997abbb3aa74022ecb1ade1801
SSDEEP
6144:dB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSotaO:daD4ZieSgp/FeH75J7CceoSo4O
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE