Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
bc09544aa4622a2199351d4069786099_JaffaCakes118.exe
Resource
win7-20240704-en
Target
bc09544aa4622a2199351d4069786099_JaffaCakes118
Size
294KB
MD5
bc09544aa4622a2199351d4069786099
SHA1
d0fddcc62f8f71127088e7cebf5103689c3da27c
SHA256
a0914cf9cfea9269065aaf44a4b464df5f9377025bddc04f3f4b8844121feb95
SHA512
a6693969f8f87705ea8da93e96febec1487b9e3c5e90d7de358c09cb60ff4213fb8a2ad6fa691f794a127dd2ec1e95f64d4ec272e46b4d95d55a7fe478fa8783
SSDEEP
6144:FB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSotcp:FaD4ZieSgp/FeH75J7CceoSoGp
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE