Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
10c35427f73251dd7066ea5f646a494d_JaffaCakes118.exe
Resource
win7-20240708-en
Target
10c35427f73251dd7066ea5f646a494d_JaffaCakes118
Size
197KB
MD5
10c35427f73251dd7066ea5f646a494d
SHA1
56d4a6547ad3fffbd5a687a33c1d4858a6e00018
SHA256
7030f25f7e10940e7bf68d6109a2777cd3642d408d8dd0abe2d4d32e6da3840c
SHA512
2e7212089b8337b4c65d5fb21628ea03a55373655a20974858819a631bf4e7e5815b0dc74624430cc53ec5e760601afcd5d52678e9388a025409482adf1af9a9
SSDEEP
6144:E1EqCsvjWnGhdoGroYlGR8FnxdjFwQoS3OV:E1EqCCVjTocnPjFnoS3C
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE