Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
b815d3c7941859dc7ceb4066f499750a_JaffaCakes118.exe
Resource
win7-20240705-en
Target
b815d3c7941859dc7ceb4066f499750a_JaffaCakes118
Size
576KB
MD5
b815d3c7941859dc7ceb4066f499750a
SHA1
798c17c91bde955eb1514167d470eafd27b06bff
SHA256
521feca6e5c0180e42a8f57f1ed834e07361f63b725d75e67c70397705901a75
SHA512
2d8e22dc18a04e35ff427578cd2a665fb64c3fb655f5b82335a80cbcde997ef3c370ac5fca7761312753e68fda06bffb6fa92219fd614665498fb9afdc8f603f
SSDEEP
12288:zaOwfzznaOgMb2AWukCFHlCAwvtBErOTupOL11pxQ2bIUK23TNqOTVvT5:O3f/aPRJCq9AOao1zxQ2bO2JvTVvT5
resource | yara_rule |
---|---|
sample | upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE