Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
00145a4ab194d4e3f0324cc6d16bff98_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
00145a4ab194d4e3f0324cc6d16bff98_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
00145a4ab194d4e3f0324cc6d16bff98_JaffaCakes118
Size
718KB
MD5
00145a4ab194d4e3f0324cc6d16bff98
SHA1
eb8089a9c9144512bd3ac7d4eb901f8df3969985
SHA256
00c3a23f00b980e39f0072a92365034b7c30c27dacec9f66ad7867de2dccac84
SHA512
618de467d339eb96ba6fc04bb3828d7e6dc12b8ac2d5cc65cb6671ce061cfde4672911203c1e3814936f07556c2559dd4205c7112a74044e00f4fc822d3a43b2
SSDEEP
12288:BASZ6lVrCdN8ca43+edLBnRd4mYCLR9YTR/OsTN00K8:BXwXCDtJ359wmLNM/OsTNA8
resource | yara_rule |
---|---|
sample | modiloader_stage2 |
ExtKeyUsageCodeSigning
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE