Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
e18a5e766714796a8acdf7e7c601f0d8_JaffaCakes118.exe
Resource
win7-20240903-en
Target
e18a5e766714796a8acdf7e7c601f0d8_JaffaCakes118
Size
294KB
MD5
e18a5e766714796a8acdf7e7c601f0d8
SHA1
9e2c2024c9d2e780e36912ec9c9fb1ee1ad231d0
SHA256
62cdb596f9307189bc4ab8bb39af93ad1a8420cc4d834d41f8523818e4032075
SHA512
f4f04f6149fa01c0afd227fdbe992a060d78c2f7ed66f77c3b28519bdfcc18cde088e5eea489dc56ac6f39dad3d4c6b0b77455ccc540ce894914aebf89228503
SSDEEP
6144:dB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSotBr:daD4ZieSgp/FeH75J7CceoSoPr
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE