Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
a5a0f3b842f8c31a68aa21e33cd7a061_JaffaCakes118.exe
Resource
win7-20240708-en
Target
a5a0f3b842f8c31a68aa21e33cd7a061_JaffaCakes118
Size
294KB
MD5
a5a0f3b842f8c31a68aa21e33cd7a061
SHA1
3a42f136ddae4a108be737e223dee38c7a8a254e
SHA256
6722ebd14c7efd359d090a6bc980bab3becfc935a929a50fafc5912000408cb8
SHA512
55505f2c15d95854a75be00d44235a53cfb6843bf604d671c5ab5d335e0376424784b4fbc0190bbac29b7e4e83d2aa3d3d2f4a64f3292b494cbfbfceb4f8cb87
SSDEEP
6144:NB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSotYg:NaD4ZieSgp/FeH75J7CceoSoOg
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE