Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
f6e779fb215e2a935f4a802f7f988767_JaffaCakes118.exe
Resource
win7-20240903-en
Target
f6e779fb215e2a935f4a802f7f988767_JaffaCakes118
Size
279KB
MD5
f6e779fb215e2a935f4a802f7f988767
SHA1
4cdc87ed97eeef0f32ca43d9bbf860a0762416c5
SHA256
d011bcd3130f97d6cd1af12ed03b8d480e6bf6ae9f5573212dbd7685d8f2ad85
SHA512
d4a843f211abcf2a5904235cde37e64d467aef68d725994cffa621c74ca91a38f2d012daa03f35acbc5c5b6a9c8e5b2cab24cdc724be66475d4b72249ee5c379
SSDEEP
6144:bfurLgmvI7Vb8hOkx5CSf7oYte13FwxrmM+GCQNRQAoz4oSpN:AAuU4rfxe1VpMT54A/oSpN
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE