Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
a5872ebd528faba6ee914ea71968ba17_JaffaCakes118.exe
Resource
win7-20240705-en
Target
a5872ebd528faba6ee914ea71968ba17_JaffaCakes118
Size
294KB
MD5
a5872ebd528faba6ee914ea71968ba17
SHA1
dc95d2cebcb03dbfdc25c743d8e090bfb1c21e58
SHA256
9412d334cb0fd055db986b63416a55bd9990ebad875ff7bbfbfe6f1611b01fa7
SHA512
29d383033bb943152ec3ea67dd38c94a737c86eb8042225aa6c6f8971e884e1dc820e9337c3cc2e3af0d2010cb25c562dff365f080163a347a93709a6c5bc276
SSDEEP
6144:aB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSot7R:aaD4ZieSgp/FeH75J7CceoSoBR
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE