Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
ef1e9c5c6a9625aaab18cc67eec7d773_JaffaCakes118.exe
Resource
win7-20240903-en
Target
ef1e9c5c6a9625aaab18cc67eec7d773_JaffaCakes118
Size
294KB
MD5
ef1e9c5c6a9625aaab18cc67eec7d773
SHA1
78bd709f1403a51362b0164bddf29631cc5c8046
SHA256
376595ea2590af04bddfd8bc58121e63a8b9d640393238ec1ee19ed43ec90242
SHA512
1018ebd5a888cfcc82ef8c631c1928fcce67f57687624e9f848af2e4489eda3bb20ef0cd5edc243c3ce729c2861731b37ed59d00b439c32cf30d8a77581fe279
SSDEEP
6144:KB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSotcA:KaD4ZieSgp/FeH75J7CceoSoeA
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE