Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
386e0948ed41c36b13037962e680a971_JaffaCakes118.exe
Resource
win7-20240708-en
Target
386e0948ed41c36b13037962e680a971_JaffaCakes118
Size
175KB
MD5
386e0948ed41c36b13037962e680a971
SHA1
a1f13408c87819f10168fd282dc76800239cc3fe
SHA256
2debda12d973aed6bef3cd8444efe4a0c244bd2f9871218b349389b238904e6f
SHA512
f1dbd6b4b93537b3df6df7ff32d6fa901040c0b6626ab7a4a0411121ac6d4c207dda333ad951a64db274c5657824b24b50e8dd28b727a6de923ed7c2c9383c45
SSDEEP
3072:R3DjYM/jnH/nJ99gn5MJjlPLOBAZ1iXu0encNIcoutkjcEmoUKA:R4GrHvJ9ewjpKBAZ1iX7CcicoSq/A
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE