Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
fcf05cdaa48a0a1f6fe2c4ad1f594eec_JaffaCakes118.exe
Resource
win7-20240903-en
Target
fcf05cdaa48a0a1f6fe2c4ad1f594eec_JaffaCakes118
Size
294KB
MD5
fcf05cdaa48a0a1f6fe2c4ad1f594eec
SHA1
a7a4253600559e56014a978293ec7977e60a8910
SHA256
8438688bef12fd7ba859cb2ec06446ba9f0a4e9cd97db70cc05e48be3c264f5e
SHA512
5530c3afd60e59c671fe7e18e36351e60955cee08e20b4660b0e0b1a96bd8f4acbbd0f7ba855379e03c38c34bfa633f9288aec252c3ac6f593d62eae2bf404ad
SSDEEP
6144:KB0D4ZiDCC98YgIG9zdFHf2H7nYMDl7K2YyHi0+oSotFp:KaD4ZieSgp/FeH75J7CceoSovp
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE