Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
d239b3e8dde52cec74ff6978a9949886_JaffaCakes118.exe
Resource
win7-20240903-en
Target
d239b3e8dde52cec74ff6978a9949886_JaffaCakes118
Size
294KB
MD5
d239b3e8dde52cec74ff6978a9949886
SHA1
4766f71091fdc1685522e7b0fb859c9063c57b3f
SHA256
17ef36086cbd644ca44a83a15c96b9c61f778ca6a770732e65e6b04488492bc7
SHA512
ac9e318db0b739dc7efcbfe3e709891ce270ba14b53e017ab234c58d8f4a8e6aa0ffdc3fe14e6c1599d85e1b5af1992307f770edc190b4503a51211de05ddf25
SSDEEP
6144:NB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSotaI:NaD4ZieSgp/FeH75J7CceoSosI
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE