Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
dbc7c0699ee892b89f9c3ec8f92d5f86_JaffaCakes118.exe
Resource
win7-20240903-en
Target
dbc7c0699ee892b89f9c3ec8f92d5f86_JaffaCakes118
Size
294KB
MD5
dbc7c0699ee892b89f9c3ec8f92d5f86
SHA1
a92b5212f49dcbd04b84721f29ca883ccffb1572
SHA256
018704cbeb98be4844ec9c2f9f66724f527e1b50ff286397533979f308fecdfb
SHA512
5d22b851372c697b664652c3e36a8534ae01a0e12e4562987168514cb35e9014ff5c39569ff67087adf79455000924bfee7be5df09e6af1dd803ad1d60445da3
SSDEEP
6144:VB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSotGS:VaD4ZieSgp/FeH75J7CceoSooS
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE