Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
f59bcb497c0ba56dbb3a4708e6720887_JaffaCakes118.exe
Resource
win7-20240903-en
Target
f59bcb497c0ba56dbb3a4708e6720887_JaffaCakes118
Size
679KB
MD5
f59bcb497c0ba56dbb3a4708e6720887
SHA1
0c8f09df450e32f22a6382c1c449280787f305da
SHA256
2418fbf2d278af729480b38f4a7d0150accced8f562624b3f7a0ffdc7ab0efec
SHA512
f0a2fabf85e61046055c8becaf80b29dc8ffd412374c389db1db20df096d3141ceba156dc0a465a32d4d679d2bbdef87b0bec3d396ce085b0ba40b5883c5d23b
SSDEEP
12288:OwEZxZLDznQwo5unUeArTE5yjgcy7LxOuH9/7HPuXRZ8dzfPtfdeEvnrvdXZPThm:JEZxZLHnQwOunXLpvwuVbKz81VfTFXZ
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE