Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
d635293cb90d42629f121c1353d0590e_JaffaCakes118.exe
Resource
win7-20240704-en
Target
d635293cb90d42629f121c1353d0590e_JaffaCakes118
Size
576KB
MD5
d635293cb90d42629f121c1353d0590e
SHA1
ae36bdf16c0232bca97b45f673d84609646714fc
SHA256
b6c63ee31cb99601153a44391d6dbac6ea9577fa360193aa3fc24f101207f1d4
SHA512
ecf5db90a93b722546cde1fb9c5518ae75bfce5db33e6bae5d5abeb04d005c60617e84c427a18bd4275ab5993d70444205518d213f47db46ed73d9918dc4eb96
SSDEEP
12288:3aOwfzznaOgMb2AWukCFHlCAwvtBErOTupOL11pxQ2bIUK23TNqOTVvT5:q3f/aPRJCq9AOao1zxQ2bO2JvTVvT5
resource | yara_rule |
---|---|
sample | upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE