Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
a7664579832941216399fa803e69e3f8_JaffaCakes118.exe
Resource
win7-20240729-en
Target
a7664579832941216399fa803e69e3f8_JaffaCakes118
Size
294KB
MD5
a7664579832941216399fa803e69e3f8
SHA1
7d198d011200f1e192793378cc9bc0d8f424c015
SHA256
6b95aa59ce19417234e3f770a50b5888c8ea3ebe08b315fb361a28f3f7c7bec9
SHA512
41b251b6c649b68ffb6dcc88999f80c393b05a6c4a02fbb7acded80d1a7e1911d4a2d76ffb5c4e5fe65de5b25c4ba6dc5e1a6c271ebc5dc04c36bb362b75aaa8
SSDEEP
6144:1B0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSotl7:1aD4ZieSgp/FeH75J7CceoSon7
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE