Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
acd7576140f807fe3b3b351bfb7e5d19_JaffaCakes118.exe
Resource
win7-20240704-en
Target
acd7576140f807fe3b3b351bfb7e5d19_JaffaCakes118
Size
407KB
MD5
acd7576140f807fe3b3b351bfb7e5d19
SHA1
6236cc1020d52b99235df60158c8565100c0354b
SHA256
08f61883fcf9f5b88eeae458298747a8afd0b02d9a00f8d22cddcb817c4c218a
SHA512
93c25109fa1f019ed8be17907b1e6cf7c023b0501e87a53313aad5198164a2222b69e800c83b2ce847c6eb4d5ae4177474e9d40775c0b133aeb41d60c57c5bb1
SSDEEP
6144:H52vrQblQpgaV3XvIg5FonA4iRUkty9PIwdl8yoV34qIw0w5X:H1Cpgk3fNFoA4OUkgPTjToVINwTX
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
HeapDestroy
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
LoadIconW
MessageBoxA
RegEnumKeyExW
ShellExecuteW
CoInitialize
VariantInit
HTMLayoutSetElementState
GetAdaptersInfo
InternetCloseHandle
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE