Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
0bf5643c0ece4da44007fce948ab86d9_JaffaCakes118.exe
Resource
win7-20240708-en
Target
0bf5643c0ece4da44007fce948ab86d9_JaffaCakes118
Size
576KB
MD5
0bf5643c0ece4da44007fce948ab86d9
SHA1
9327477159e13711fa09f68971c7726a7b46de62
SHA256
699f92b68f302f0a682f4fccc1eecadcfcdcbdd7535cda088ce949cb1d9133a2
SHA512
31d7b755f25bd003eef64f1af7a4fe0326e0bf5620cdc67250864f8a4106ca77ee8717b9a2821005c76cdd0973dc1bf4f9a57236da3fbc2dabf743931732e67c
SSDEEP
12288:0aOwfzznaOgMb2AWukCFHlCAwvtBErOTupOL11pxQ2bIUK23TNqOTVvT5:V3f/aPRJCq9AOao1zxQ2bO2JvTVvT5
resource | yara_rule |
---|---|
sample | upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE