Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
dad4e78888a99279397d04b23c38bf5b_JaffaCakes118.exe
Resource
win7-20240903-en
Target
dad4e78888a99279397d04b23c38bf5b_JaffaCakes118
Size
25.4MB
MD5
dad4e78888a99279397d04b23c38bf5b
SHA1
80202bd68329cbc7141b2a30b37833cbc2762e42
SHA256
f0189dcd75202dd0f010602d942f6ee8af86201515553ebfcab04b4a6c76d613
SHA512
673276d7f476dc69fc74a63a2a326f4a27b2945a333089db9edbe56532f9e28e170a19b58bf05bdba03b192874c913bcf0c23c2203fceae722362ab5b78b8ccc
SSDEEP
786432:D8AZ+gKeCTLrXT5MSZkUqhFQfZIvEX3gdEW/ja:IA7KTvjpO1FsJDW/u
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE