Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
f06cd2c566ed54c988047d9a67443758_JaffaCakes118.exe
Resource
win7-20240903-en
Target
f06cd2c566ed54c988047d9a67443758_JaffaCakes118
Size
294KB
MD5
f06cd2c566ed54c988047d9a67443758
SHA1
de5f773347181c4c10edc909fe84a2b262661991
SHA256
1d3d2d114220b69b623142dc2e275d9baff3542d1190dadf1f6736348d1ae80e
SHA512
b9c3d8e719f9403c741706ed8a9377f09710603756141615f8fb64a3e997f6fd5c8a902ae18e90fabe7c91c31507ffc91f468541151bb281ad2975946ddaefd3
SSDEEP
6144:KB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSotVh:KaD4ZieSgp/FeH75J7CceoSofh
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE