Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
f6dcaf2e2932ac4c24e5f2862b74a0d4_JaffaCakes118.exe
Resource
win7-20240903-en
Target
f6dcaf2e2932ac4c24e5f2862b74a0d4_JaffaCakes118
Size
576KB
MD5
f6dcaf2e2932ac4c24e5f2862b74a0d4
SHA1
a221003a40dbef4c3161fc39c046a3be448bba1a
SHA256
065b1b37e2d5239723259d52a9b83efa576022861592da51e90174926862e072
SHA512
e4d2343dab64c882be7a8312e87f93c84ce2e464a8a66fd14b2e66e6dc5170b70517416ed2e6f2dc48ded56feb029effffac25511bc4ae73952e206ce0f566e3
SSDEEP
12288:WaOwfzznaOgMb2AWukCFHlCAwvtBErOTupOL11pxQ2bIUK23TNqOTVvT5:H3f/aPRJCq9AOao1zxQ2bO2JvTVvT5
resource | yara_rule |
---|---|
sample | upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE