Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
ffb0d08fc4063aff6c9072621997219f_JaffaCakes118.exe
Resource
win7-20240903-en
Target
ffb0d08fc4063aff6c9072621997219f_JaffaCakes118
Size
735KB
MD5
ffb0d08fc4063aff6c9072621997219f
SHA1
4f80ae5eec62c70ab8e1b760a1f85c93dd4807af
SHA256
2185678dfd6b4ebb3c27c6aca78eb3eecb7d2b8f220cc5108c8b25bb824cc100
SHA512
1fecb964df8e9acef32256775591526d3da45e5aaa574669ec6bfa0e655018f244b878a95cc4d64401480697fd13e3ffe9667129cf91390dd0988e93719aa7c9
SSDEEP
12288:GDkUBYXC64k0ZAQzR2ikexdUWe6tBt1Z1k1u3qTNPgn9Q888888888888W888887:GDkUBYXC64kbexyWeq9Lk1u3QNPv
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE