Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
cf29a13d1a3b64435df62c5ab1ac2754_JaffaCakes118.exe
Resource
win7-20240903-en
Target
cf29a13d1a3b64435df62c5ab1ac2754_JaffaCakes118
Size
294KB
MD5
cf29a13d1a3b64435df62c5ab1ac2754
SHA1
95fac1dd6b703a70dbaea3b1fde321775b8c7404
SHA256
a5b0694078c54912293bbfe769879255dcb40d4510d1f198c11f49c6877c75e6
SHA512
83e8b9e1e7c8796da84f6d2c6be076a14558a77d777ac3d72ba7608d2a30d2ed8ad43cc1b4f76ae98732af1227894edfb4255989e6201f56b61af21308298b51
SSDEEP
6144:NB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSotVZ:NaD4ZieSgp/FeH75J7CceoSoDZ
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE