Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
ec16b6bb37c0ddac76113a23f87044f7_JaffaCakes118.exe
Resource
win7-20240708-en
Target
ec16b6bb37c0ddac76113a23f87044f7_JaffaCakes118
Size
312KB
MD5
ec16b6bb37c0ddac76113a23f87044f7
SHA1
8ef90a12da6a5f32dbe3ae9448a204817cd7ea23
SHA256
49b6f65102071bdae2dcdecf113157e429dca70d667dd24257b2d645d1606061
SHA512
15bd94bf5215a39fa2e5148de9ac70b6002922dc4f7d0a9d042c06f171645a7584b8f35cf6de4ec3c4d6bcc9248b59daa4208201059fbec94159a76076a01052
SSDEEP
6144:/nlEoWaZknVIaVaHl/c+gLzTwWlAdG+GhOYxfdUv2oSKldb:flEoWlnVIYIlTQzlCqi2oSKbb
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE