Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
d63287b6d0b665a4dcfb8d7c37cf6a9d_JaffaCakes118.exe
Resource
win7-20240708-en
Target
d63287b6d0b665a4dcfb8d7c37cf6a9d_JaffaCakes118
Size
576KB
MD5
d63287b6d0b665a4dcfb8d7c37cf6a9d
SHA1
00649a6284d2ad5f07e4544eb0b99b85941be4a0
SHA256
358a3e0c94cedfd654fa129e96707956e628d95e572a83644427d6e032a1569f
SHA512
9bd35984468f56713ae10d699ae2ed9fbbab4ad613a60420248a0c37f7fd9c5f09ae6b0f797ee1f625cdb3ab1b02f63a751635401aa90d50e9a1e9fa4813bf92
SSDEEP
12288:5aOwfzznaOgMb2AWukCFHlCAwvtBErOTupOL11pxQ2bIUK23TNqOTVvT5:83f/aPRJCq9AOao1zxQ2bO2JvTVvT5
resource | yara_rule |
---|---|
sample | upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE