Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
ec041ff5c8a027cf300aae7ebd76a52a_JaffaCakes118.exe
Resource
win7-20240729-en
Target
ec041ff5c8a027cf300aae7ebd76a52a_JaffaCakes118
Size
334KB
MD5
ec041ff5c8a027cf300aae7ebd76a52a
SHA1
3952fe5b61721ce6d29f830f00162967c45e2b6d
SHA256
1489da38ac39b2f619b19781832d4e6868c9acb45dd44aa6d8e9bbb14ed2fdc6
SHA512
abc3d6f54190b75485284ee80083c6f63110ab4d532b4b6dcd5f794795207c8d90504851c2b887aa5338d91120d1bd4754451dbb958d242fd5f36e03a7573665
SSDEEP
6144:dQTSVjee54MOO6NQDSRZ1nw8Guc5FY4n/3xgvc/cWrGJvM6VBZh+N2i9F:aTCje0EQDSRfwDuc5Fdnyv+6VHhXW
resource | yara_rule |
---|---|
sample | vmprotect |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VirtualFree
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetSystemMetrics
RegQueryValueExW
CoInitializeSecurity
VariantInit
GetDIBits
GdipSaveImageToStream
PathFindFileNameW
expprochd
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ