Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
05b73f8edf1148fad63f3a9d81ae5cdf_JaffaCakes118.exe
Resource
win7-20240708-en
Target
05b73f8edf1148fad63f3a9d81ae5cdf_JaffaCakes118
Size
425KB
MD5
05b73f8edf1148fad63f3a9d81ae5cdf
SHA1
35b067aecb873431bbaa936a8724cdcb200da467
SHA256
b72bb569c8fa94507a446d8c12239a8d70c237f3dbdc352ed96414353fc73a60
SHA512
0dc85462074b8bb844d0d9cf1a30363ae5c5967301f07c0e37032ddd30789d862816fdd8ccd55fba70287122ac799fd90ed45a0074f25d3fac55a70ce4e7983c
SSDEEP
12288:ONVeF9ILoScx6FNbKwjG8hRfzCOR92ySCSSGVKB3pT:OrqXx6L2wjGWzbrSuXT
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE