Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
c953778e0fdd4be5af1edd88c602a243_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c953778e0fdd4be5af1edd88c602a243_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
c953778e0fdd4be5af1edd88c602a243_JaffaCakes118
Size
688KB
MD5
c953778e0fdd4be5af1edd88c602a243
SHA1
7586dda3bb5742b92ba505689e261898f90d7c42
SHA256
75422fcc0d5597f9ba4bbbf0bd44a34b84c60535736681210148f15019ea5749
SHA512
04675984cf15e80382734aede3a573263f35681272128e9742a63a6ee35116fafe30850806cfc3ed35aad73ddefbb085e50e3d47e3f671ba4fc1c744e3563b2a
SSDEEP
12288:Q4WJVgQ18UGcjtafQUIbEaOQrAjlQ7Kni4fQfcN3ebgltvTyR:Q3gxUGchaYU+Ijfr4IjltvTw
resource | yara_rule |
---|---|
sample | modiloader_stage2 |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ