Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
d4692f0789361586bb763edc3cbaf6cd_JaffaCakes118.exe
Resource
win7-20240903-en
Target
d4692f0789361586bb763edc3cbaf6cd_JaffaCakes118
Size
280KB
MD5
d4692f0789361586bb763edc3cbaf6cd
SHA1
368de846d6643e105c9f704e7a8d26014ddb67e2
SHA256
4532d7644cadef7f242ac170b779d62806b0d47a58ef36915a82a079aec229d8
SHA512
0778fa2408586561d005b8e38e9caf7d19ae314cea09ce699b0fa6a6c507059675a84a87273d71649aea15912a4fb04152adffbe85499cb01b29549ec486b4b3
SSDEEP
6144:GfurLgmvI7Vb8hOkx5CSf7oYte13FwxrmM+GCQNRQAoz4oSpBP:hAuU4rfxe1VpMT54A/oSpBP
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE