Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
a6e3f8e5fb92eef24709c60210788691_JaffaCakes118.exe
Resource
win7-20240729-en
Target
a6e3f8e5fb92eef24709c60210788691_JaffaCakes118
Size
294KB
MD5
a6e3f8e5fb92eef24709c60210788691
SHA1
691d1410f9f4bb37f35b2f882da5fa2ebef1509e
SHA256
477177aba5a2f1b67afc59d1108d28f056443aa82606419019141f8b538e3856
SHA512
a8f940bda548f9920ae85e9b96729162f37248112848833b32fccd51d93b1b20f24dab657e639092de316c4ab7757c6e263abea680be370f6f6764102df3aa68
SSDEEP
6144:VB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSot51:VaD4ZieSgp/FeH75J7CceoSo/1
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE