Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
bf2016c600d8583a48f11fba92d72723_JaffaCakes118.exe
Resource
win7-20240708-en
Target
bf2016c600d8583a48f11fba92d72723_JaffaCakes118
Size
294KB
MD5
bf2016c600d8583a48f11fba92d72723
SHA1
4eec4de1dd080b773193c9c1104db3ef1f6178bd
SHA256
f52eddbefb1240b891bc9a200f6f494c0fbeae541f107448b13e32942e423416
SHA512
f2bc5a63e0804b77b7c94bc7baedbff8ecbb74621410ac28d3fc7f3ea97ef1218ed169cb8d7b6bce960fd0cb56d4abffd198317808909250f27e1ff1aebe9f3b
SSDEEP
6144:dB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSotPK:daD4ZieSgp/FeH75J7CceoSohK
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE