Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
dd12199cc9c0fe62e193d4015bd8f8a6_JaffaCakes118.exe
Resource
win7-20240903-en
Target
dd12199cc9c0fe62e193d4015bd8f8a6_JaffaCakes118
Size
562KB
MD5
dd12199cc9c0fe62e193d4015bd8f8a6
SHA1
1f9ae89e6aba435a2820527709e771ea64b668e8
SHA256
7eeaf7495550941cd507e42ec5ef2d078a5532814e03316a90e5ce068b785610
SHA512
fdeea6d87fc34d5a25376dc53cecc27bae74b501c3a64929b26a986d6e73453bf4a139a6a77ecc5cef417c2c838ed55c84d06f2c2047f834a2cab1c10b5cea55
SSDEEP
12288:Iu7Y/m0YX5jA7PBmvZU9Jv+eAGdE4t/CuCr7reuKkm4r9G3MMT/:I030YX5jA7PBc67eS/CuCr/enkm09G3n
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE