Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
c78f0fd201d895e08ce2bcabebb6476d_JaffaCakes118.exe
Resource
win7-20240704-en
Target
c78f0fd201d895e08ce2bcabebb6476d_JaffaCakes118
Size
576KB
MD5
c78f0fd201d895e08ce2bcabebb6476d
SHA1
fa1daa08a9764ec0b296c99a8c39be19ceb5b061
SHA256
e9c4f033b5aa3afa62e41baed0cea41c5ded8efa22f96828feb6e3abc25523fe
SHA512
df47b62f6a0b295a08c5ff4308ef0550afd6cc5b32174f4cbe5f2ceba15da7d3895b25259796ad120e95ff5bde8c50d617ef98140279958ed44f836a4f4ceef6
SSDEEP
12288:waOwfzznaOgMb2AWukCFHlCAwvtBErOTupOL11pxQ2bIUK23TNqOTVvT5:53f/aPRJCq9AOao1zxQ2bO2JvTVvT5
resource | yara_rule |
---|---|
sample | upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE