Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
faec4098da50d3b7d54c32cb5487a618_JaffaCakes118.exe
Resource
win7-20240903-en
Target
faec4098da50d3b7d54c32cb5487a618_JaffaCakes118
Size
294KB
MD5
faec4098da50d3b7d54c32cb5487a618
SHA1
9fa0202f8e6b5dc57465e340395f028d51c242e9
SHA256
ba0421bb7fbc33a415c09aee0411041060c0fbc24c000f29cc814379391d66a7
SHA512
a2bc061d73d14218ac2cd922f775a8c3987754c6abd7ac72344c4c095999ac505a52b96e3e15e6ae32b83ba64068c571e3301e07b4c1910f38ef07127be79f1c
SSDEEP
6144:FB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSotD0:FaD4ZieSgp/FeH75J7CceoSoV0
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE