Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
a5b69fdd349f98fbd17997af2e99d485_JaffaCakes118.exe
Resource
win7-20240704-en
Target
a5b69fdd349f98fbd17997af2e99d485_JaffaCakes118
Size
576KB
MD5
a5b69fdd349f98fbd17997af2e99d485
SHA1
a6cef95d2ea182fb8e373af58a86e714aa57e2b9
SHA256
65e6dc535f397e5e8de7a518f5c7d6b4d36b57f7da965cc8cd2f34a0d01bc1a7
SHA512
e86f89f9828c38dfcbb036fd970a80be713a45f423faec06babd912d2b93abd0f372d2136cf4876c08300aabb072693f66fb06dee1d0718069e755531b3a6443
SSDEEP
12288:MaOwfzznaOgMb2AWukCFHlCAwvtBErOTupOL11pxQ2bIUK23TNqOTVvT5:d3f/aPRJCq9AOao1zxQ2bO2JvTVvT5
resource | yara_rule |
---|---|
sample | upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE