Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
d578c455f72b857854f2a5652b434f7e_JaffaCakes118.exe
Resource
win7-20240708-en
Target
d578c455f72b857854f2a5652b434f7e_JaffaCakes118
Size
294KB
MD5
d578c455f72b857854f2a5652b434f7e
SHA1
b94b492bee55409f07819dd4381569e96db8e1b0
SHA256
947b400e741d5433cab366b4646aedd742edb745b39c30acd884d3b3150d0b0b
SHA512
310c3182121be874435f51c9871c106d75932292a266f8c1beb9aadeb676b94226a295e9ce7d9ac533afdca33897a10e32cdfcd55d4abbfc3fcb03223a249328
SSDEEP
6144:NB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSot1j:NaD4ZieSgp/FeH75J7CceoSoHj
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE