Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
fb8b21a229f1ef46cc7f388898a2a221_JaffaCakes118.exe
Resource
win7-20240903-en
Target
fb8b21a229f1ef46cc7f388898a2a221_JaffaCakes118
Size
294KB
MD5
fb8b21a229f1ef46cc7f388898a2a221
SHA1
2e142bb605fb2e2cc7cd960977d4b95891bc7345
SHA256
a741225b884e3e0302c37d34b8509154295fcd9f0919f5207a3e2cf70d175843
SHA512
67f02492f2479edb93a02dd5f79173fbaf4960ce7888adbb05393078eb7c0c024b0122d3e5cca899b50b6df21661575a9eee08f1d9979736c42df3cb01324ee7
SSDEEP
6144:iB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSotdH:iaD4ZieSgp/FeH75J7CceoSonH
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE