Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
deeca328e95645afa08907f9c40a8ecb_JaffaCakes118.exe
Resource
win7-20240903-en
Target
deeca328e95645afa08907f9c40a8ecb_JaffaCakes118
Size
279KB
MD5
deeca328e95645afa08907f9c40a8ecb
SHA1
486c0d453e2e90c16171c073b7f2dabe61051e76
SHA256
961f59af5354eaa07bfc52ea1b34385e6d163cc6ceebcc7d3e380978b79e0aa8
SHA512
af5e8d95af58b9f5b01fc2d7a1899a7c453ddf8e3edfbf35d4ea76eaeeb1cec22380399f816d19e65a83b75422d074bffb8b13b2006c6e28180f9626076f711b
SSDEEP
6144:7furLgmvI7Vb8hOkx5CSf7oYte13FwxrmM+GCQNRQAoz4oSpW:gAuU4rfxe1VpMT54A/oSpW
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE