Extended Key Usages
ExtKeyUsageNetscapeServerGatedCrypto
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
dd860f6c241eda3a033ca04994927a0e_JaffaCakes118.exe
Resource
win7-20240708-en
Target
dd860f6c241eda3a033ca04994927a0e_JaffaCakes118
Size
679KB
MD5
dd860f6c241eda3a033ca04994927a0e
SHA1
fcec933e5949c700200e87a2ca28a61908d059f0
SHA256
1208008177ed9ce388d628bf80fa55377dacdaf9ef32b262a82054d6354d910b
SHA512
c9a3ca3792d51a82697f5e64c9d6df26e688579ed024b867a1bf5c4d23e65d95358dae19ad9e49e3106bcc851244634df9d944f96a0c59572a791afbf7a2fe17
SSDEEP
12288:4Q+8YcSdcdp7GqDd7o4YINDz6/AAgYShiuFfIihBtwVabCMUA4+6vlF7M:0iSmrpDd75d68hiuF5H8abCMUN+YlFo
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageNetscapeServerGatedCrypto
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE