Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
16af31e50784e3a15dc808080bcbc649_JaffaCakes118.exe
Resource
win7-20240903-en
Target
16af31e50784e3a15dc808080bcbc649_JaffaCakes118
Size
173KB
MD5
16af31e50784e3a15dc808080bcbc649
SHA1
22f6ec6ff5951bb33633a07f63dbeb06d76567e0
SHA256
f25e2c77f0ace22231557adaff7ffebe3d9ef2227489d37c85d82405258241cf
SHA512
c5d4476eb20c9004edf36165ee5576afd5ee77cb4f1a1e4fd2b66a0550cb3780c65e489b3a19307fe5635dfb83947a299bd80a667aeb4eed4bc8b0e12bf22806
SSDEEP
3072:+3DjYM/jnH/nJ99gn5MJjlPLOBAZ1iXu0encNIcoutkjcEmoUKS:+4GrHvJ9ewjpKBAZ1iX7CcicoSq/S
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE