Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
0c310ace3a9afe5a6ba5bf0e1fe4d4b1_JaffaCakes118.exe
Resource
win7-20240708-en
Target
0c310ace3a9afe5a6ba5bf0e1fe4d4b1_JaffaCakes118
Size
312KB
MD5
0c310ace3a9afe5a6ba5bf0e1fe4d4b1
SHA1
57b890c8128737db16bec39aed4b93f15ae4ccf2
SHA256
9db34b22c0b827624932de1550fab5098d798efb859b471ccf8eced8b8332e20
SHA512
2bb5b45da57a1f7685931dee04c43381582a8a5d00e29062cb6ada6eececcd0c78326530b802d2cb2a57bcc12253189d478f6571750c2e43aff9151cfcc28e2d
SSDEEP
6144:HnlEoWaZknVIaVaHl/c+gLzTwWlAdG+GhOYxfdUv2oSKlFS:HlEoWlnVIYIlTQzlCqi2oSKzS
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE