Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
d67a3593240cbcaf4f2d359d11e60b70_JaffaCakes118.exe
Resource
win7-20240903-en
Target
d67a3593240cbcaf4f2d359d11e60b70_JaffaCakes118
Size
576KB
MD5
d67a3593240cbcaf4f2d359d11e60b70
SHA1
bc294b4e892085a217e93dee1818d98541399f06
SHA256
aea7f438c646c4d53e4226db2e514102bdcf7505e5c484129dbbf0d18486ad56
SHA512
d1817d1ea24c32edf7395be1ef8db5c842d02fde25455fe3d40002579a065e866a4fe89cc97ebbb8421af9a5a810a3879520817c8819ea11618ecebf56626fc5
SSDEEP
12288:TaOwfzznaOgMb2AWukCFHlCAwvtBErOTupOL11pxQ2bIUK23TNqOTVvT5:u3f/aPRJCq9AOao1zxQ2bO2JvTVvT5
resource | yara_rule |
---|---|
sample | upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE