Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
cff858b0a2a6939daa22e80ac03cc1d0_JaffaCakes118.exe
Resource
win7-20240903-en
Target
cff858b0a2a6939daa22e80ac03cc1d0_JaffaCakes118
Size
286KB
MD5
cff858b0a2a6939daa22e80ac03cc1d0
SHA1
09bbcd71ef32f3ad31effdc0669a94b9ec2a9a37
SHA256
51eaa6a82161622061bf58b121ad91783a86eda1aa46079b02e7d93e53b1b812
SHA512
7cb31838d08fd7a58dcea83c07d18a5a82f7ecbd6ef3ddcc7c48748428b591a887ade2f560a71a21fa741f54f2b694de2d176eeda49acd69de570071cd933af4
SSDEEP
6144:EyTYVd5dCC0E8zTSNwpLDPQhmm1rEkosSHeoSFgr:EysV57hriRPQwD+oSFgr
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE