Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
Passwords_Office_Pack_Installation.exe
Resource
win7-20240903-en
Target
0a0dc6cf56e75ae1aebd1dd1e15eccfa_JaffaCakes118
Size
2.2MB
MD5
0a0dc6cf56e75ae1aebd1dd1e15eccfa
SHA1
01225dcc7b6557a10546e819aff78083d9962e69
SHA256
afd96b47485a7158085d5a424e000bec0702b870db95736d1dc9f6897a997338
SHA512
ded47c99a921fe22fa62832db449451337169e979604ba62337a593ab1e69755f55b5d7ddb861ec454a69b74c5fba515d19f47c5ffeecddaadaad4d07f00404d
SSDEEP
49152:ilrS1mhR/IktNQRLJbi6eonfbwqHv7D3G6TGi2:i01mhhYRLJeok23GBi2
resource | yara_rule |
---|---|
static1/unpack001/Passwords_Office_Pack_Installation.exe | upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE