Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
cf49acf8b440a7280cc937138aed3d38_JaffaCakes118.exe
Resource
win7-20240903-en
Target
cf49acf8b440a7280cc937138aed3d38_JaffaCakes118
Size
286KB
MD5
cf49acf8b440a7280cc937138aed3d38
SHA1
eee2f5413f8fee2c51e637b26e485c692303731c
SHA256
d5cb7d0cdcdbb2c9ba542388b3a329bc8dc8db85354bac8acdcee6f8d80c591e
SHA512
59fb19e9fe18be2ecfa5b985daad49572c7dab3aa622bb171d6eee5e2141179f021aa445e749177365bc0426eb4bdb4294955ae4a39f09d3f5d22631c8c5724e
SSDEEP
6144:MyTYVd5dCC0E8zTSNwpLDPQhmm1rEkosSHeoSFbs:MysV57hriRPQwD+oSFbs
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE