Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
b4ff9803dcdd786027edf24190073e47_JaffaCakes118.exe
Resource
win7-20240704-en
Target
b4ff9803dcdd786027edf24190073e47_JaffaCakes118
Size
294KB
MD5
b4ff9803dcdd786027edf24190073e47
SHA1
9266ae3fae0be67f35b47d63d02e6609e906b2e5
SHA256
1de4068b6e00589eb96a7d495a71938e8fc0e506263790823d4a8e3b2075a362
SHA512
cea45c872240a098e637c89c6fa2e8e146e1b8ef4b98e41de459f14ff5cd136209ea6f9ff9fa7c89c3b848a70ca283086d888da279b66a15dbbf909143ec3d6d
SSDEEP
6144:VB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSotnp:VaD4ZieSgp/FeH75J7CceoSopp
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE