Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
dfe1d9e665064714ddbde793f7829f29_JaffaCakes118.exe
Resource
win7-20240708-en
Target
dfe1d9e665064714ddbde793f7829f29_JaffaCakes118
Size
294KB
MD5
dfe1d9e665064714ddbde793f7829f29
SHA1
9ad4184b6267cc62e501eb6f6012240eb5cf4d23
SHA256
312943319a9c674ab9221cb287d03e5a1a903ee18d8c0d19e6ed7e03be430907
SHA512
21d2d653b8666d8186a8d4ab5ee23c0778ca4f9e2a62ec38467fb987bd67c2a6b0d43f5d515f98ffc94248e5c547b2bb8ed6567abab4786af89630425f824834
SSDEEP
6144:aB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSotTy:aaD4ZieSgp/FeH75J7CceoSoRy
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE