Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
b963223160f914e77aff713a6e9366e9_JaffaCakes118.exe
Resource
win7-20240708-en
Target
b963223160f914e77aff713a6e9366e9_JaffaCakes118
Size
294KB
MD5
b963223160f914e77aff713a6e9366e9
SHA1
b7449d61d2b22b831263b1d417f7c13958a4623f
SHA256
82794a04387235cab9f69055948fab80fb45b189953695b3b0052c2ef8420f1f
SHA512
462369c86891ca9a6074a6b7a935ac89867a9a69a19cba2cdfa62cc7145ca37df62a43da21f07480a0dab47c7caa92752298b22aba2d3cf2f67375433f4eeda4
SSDEEP
6144:iB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSothT:iaD4ZieSgp/FeH75J7CceoSoXT
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE