Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
d5472c25cb3264f4393053a5f5974f88_JaffaCakes118.exe
Resource
win7-20240903-en
Target
d5472c25cb3264f4393053a5f5974f88_JaffaCakes118
Size
294KB
MD5
d5472c25cb3264f4393053a5f5974f88
SHA1
e10a58f57b0c887060c4f447e768ad1ade1a5015
SHA256
027bbb546882ff4b7b50412c67b041c9cf4eab6389d2a020880ee6ab5f92fdc0
SHA512
0695120b8631b9334cc85901c78b6d332663122d5cf64c2f975de499e0dc283e3e1cc66d3237e29e4a4c1170447836bbfdfd5534a4016678528fb012cef61741
SSDEEP
6144:FB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSotbK:FaD4ZieSgp/FeH75J7CceoSo9K
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE