Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
b620e9c159e957f3fb206c55c84e39e3_JaffaCakes118.exe
Resource
win7-20240704-en
Target
b620e9c159e957f3fb206c55c84e39e3_JaffaCakes118
Size
294KB
MD5
b620e9c159e957f3fb206c55c84e39e3
SHA1
bd1f9185969fa0c69c85b272800a1a47fd95c068
SHA256
2238660a18487dc1d643844ecb9e501c675092449e3bd37b2bf5c8c40923e01b
SHA512
f6f98c227872c93411c2a2f62af953bf84176721cab778aaefc4c47a4e7a5cd76995a6743d13d54f3a542c6f8caf37a108cd6d762d7b00464ab740e30ded263a
SSDEEP
6144:iB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSot6C:iaD4ZieSgp/FeH75J7CceoSoQC
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE