Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
56e69a31efbb0e489a9c35045ec0653d_JaffaCakes118.exe
Resource
win7-20240903-en
Target
56e69a31efbb0e489a9c35045ec0653d_JaffaCakes118
Size
279KB
MD5
56e69a31efbb0e489a9c35045ec0653d
SHA1
e85a4cfd47e4dddced968b36b2fdec0c83e85ea1
SHA256
a72ae29e4e08549964dd2339378a8e2b61100cb41bd96c52813a5c3283ea6357
SHA512
3fae1b1757e0a943ba188bce46945459ee7d11109c5269cbaf16d655706c0d595312ac23ddba4ee6195a80a085d9041e1d0fd2a20f733decd7170efa426d01db
SSDEEP
6144:jfurLgmvI7Vb8hOkx5CSf7oYte13FwxrmM+GCQNRQAoz4oSp5:oAuU4rfxe1VpMT54A/oSp5
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE