Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
eabcd5ad5d7f607275d3e7a948008757_JaffaCakes118.exe
Resource
win7-20240903-en
Target
eabcd5ad5d7f607275d3e7a948008757_JaffaCakes118
Size
294KB
MD5
eabcd5ad5d7f607275d3e7a948008757
SHA1
0ad19fe3da30c58b0bb84f2afe4fae034be5b850
SHA256
702056c3c84216628098767866fb710389f39f60bbac7c7291306acc68a3b444
SHA512
5b962053ccbdf2bcbca18a520ad9df52e53167d94bfadecc0ed8ce5d7d470c4ed5bbed68c2d3beb17208e83e04809198615187f90992bedfa592a5b170f7b2ed
SSDEEP
6144:dB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSot1D:daD4ZieSgp/FeH75J7CceoSoLD
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE