Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
ae13aaf537356a803b60c0ff9a870cc6_JaffaCakes118.exe
Resource
win7-20240704-en
Target
ae13aaf537356a803b60c0ff9a870cc6_JaffaCakes118
Size
294KB
MD5
ae13aaf537356a803b60c0ff9a870cc6
SHA1
a5a3587e19fcb2bc24efa8e102298f3d69fd2771
SHA256
4db07c24594a10c9babdf0b5616fcf762de78df5ae9e657200297db53c5b996d
SHA512
cd2746077f3cf9e048022f97ae03bf539310de6662115497a348b4a0f4ade41ad9065eb4bb3fe133cd3baa01149094ac9389fd97263e9fb2bb1ff922ea727909
SSDEEP
6144:FB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSotOG:FaD4ZieSgp/FeH75J7CceoSosG
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE