Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
398166fd33734ea6039434725a22ce8a_JaffaCakes118.exe
Resource
win7-20240708-en
Target
398166fd33734ea6039434725a22ce8a_JaffaCakes118
Size
576KB
MD5
398166fd33734ea6039434725a22ce8a
SHA1
fe39bbfcfcf69c9159fe805529a3e2c2fc4a7c39
SHA256
f2ab56754e371f2bfc8eb4710a2fb85787d75c6fc20ccaa4a135f91c99196545
SHA512
c048370110b36631f400958d512b89223a184f64a08a988502f631f5f097be1cb5e5a6b17fd57c833766871e4aaa858da13090a667b60792668ae12eedc42b16
SSDEEP
12288:7aOwfzznaOgMb2AWukCFHlCAwvtBErOTupOL11pxQ2bIUK23TNqOTVvT5:G3f/aPRJCq9AOao1zxQ2bO2JvTVvT5
resource | yara_rule |
---|---|
sample | upx |
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE