Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
04c87b1c610225b5476d47bce89a5fd2_JaffaCakes118.exe
Resource
win7-20240708-en
Target
04c87b1c610225b5476d47bce89a5fd2_JaffaCakes118
Size
2.3MB
MD5
04c87b1c610225b5476d47bce89a5fd2
SHA1
51b1cfdb37181827fedc00a7f2bda8e487b2c568
SHA256
673761d49732aa92518ac883cc82b47e9ff6a10de4cac1c04b8e2a1a15cb5524
SHA512
7ec53aa6e1f3aea5690899f8d201a4db32fa22148344efb23a1a81949954f9504a78b1b4884627769f6b4c4475afcd588f7843fd940f4841a4435d2adf0c7bc1
SSDEEP
49152:Y9g5rWY+jIPbZ42i+4kFWjxgLku5mMHNgA5wkT98H:Y9g5yY+jIPbZ42i+4kFtLzLNKkTe
resource | yara_rule |
---|---|
sample | themida |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE