Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
e19cf7a0406a3913119e6a42019a8c8b_JaffaCakes118.exe
Resource
win7-20240903-en
Target
e19cf7a0406a3913119e6a42019a8c8b_JaffaCakes118
Size
279KB
MD5
e19cf7a0406a3913119e6a42019a8c8b
SHA1
12f3a3ff35b1a07f1cae329c90d018d8a0bf6d75
SHA256
1dc81c15d2cbdfb5e790185e1be26d791ef4fa374e8b6dfaa8ce4109e6f4cbd7
SHA512
e789408b2c1042ee9e31110c1765b8a1a0f6fc2ef6946601e02ff1075541359ebc1b33f47ab28ac4e9903e670ca58a48b096a5bf308aaf528eb0b6c865e9da5e
SSDEEP
6144:rfurLgmvI7Vb8hOkx5CSf7oYte13FwxrmM+GCQNRQAoz4oSpr:QAuU4rfxe1VpMT54A/oSpr
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE