Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
ad996a68bd58e2050b58d3b467b62ee0_JaffaCakes118.exe
Resource
win7-20240705-en
Target
ad996a68bd58e2050b58d3b467b62ee0_JaffaCakes118
Size
294KB
MD5
ad996a68bd58e2050b58d3b467b62ee0
SHA1
1b2f46a2a7c45d3222c49e0e5da86ef3ecbccb3e
SHA256
988848e2d986d362a2281f867af6cf0375c2d070d1a3a5c836b03c3a38450b20
SHA512
2933d20d3fd72635b819b046b17a4318f0711a7eebf882fbe21f9f5ca1c91eed5d885dfcb3aae38564d5e72d8fd2f0f0c004bdee520d42da4f25090b18231b25
SSDEEP
6144:KB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSotiA:KaD4ZieSgp/FeH75J7CceoSosA
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE