Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
becd824f5d91174120a776362a24abf9_JaffaCakes118.exe
Resource
win7-20240729-en
Target
becd824f5d91174120a776362a24abf9_JaffaCakes118
Size
279KB
MD5
becd824f5d91174120a776362a24abf9
SHA1
b57175eed34ff0b54b0bf104e0d4cc6d15ef97e5
SHA256
d44c1d83bf664b5be8f8d19a99f399570a452210454108f5b1c33f9aeb151a7b
SHA512
4031e18c3c7ece0618d20852cd6f2c19dceb4edd1c577f5f63a3d69eabcc7197a1013065f9984538d0ad2bf55feed26ec11661239f21596cb4f2be2dc16d0ca7
SSDEEP
6144:DfurLgmvI7Vb8hOkx5CSf7oYte13FwxrmM+GCQNRQAoz4oSpP:IAuU4rfxe1VpMT54A/oSpP
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE