Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Behavioral task
behavioral1
Sample
af785eaceb3c7be3f48e068b1deb816a_JaffaCakes118.exe
Resource
win7-20240705-en
Target
af785eaceb3c7be3f48e068b1deb816a_JaffaCakes118
Size
145KB
MD5
af785eaceb3c7be3f48e068b1deb816a
SHA1
32eab4568f4fb3a19691cb61153ab3da4e25e7ed
SHA256
d0e5c106373d5828e3ba6297f49b37b88ab970a4c61dc6f182bd9c9167b22f16
SHA512
dbc06efe4c86836d5bd70cd5170f1c55d4fddcb796fa70b3e7cf5fa780cfd3563fde6d7326963e9c04db36bbb61cb12d4c4d8ddb3aec4e4c62d45139eab4aacf
SSDEEP
3072:QMNehlESTs6J0rBzYBSZ9Qvc/mm+dMo/3FoBbc666L5X:xN9cs6J01EBSH9/mm+dMoSlX
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE