Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
119258f691fd23ce36c3c8105a73b94c_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
119258f691fd23ce36c3c8105a73b94c_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
119258f691fd23ce36c3c8105a73b94c_JaffaCakes118
Size
4.8MB
MD5
119258f691fd23ce36c3c8105a73b94c
SHA1
4d1af2df4a28b6b174ea53fda108051a5afbb6c9
SHA256
abee3979c5ec6235cc0f9cd420a86957e582268d02bfc5564f979f3c880b27c9
SHA512
3a410183d5ed529f76ea537eeb83ff5bd83bdcf9227fbb823e341f6d342c13b9506f92823a76fc36068bf6aad7ae2c928c7d2a9cef6b74668dd331155ce35d65
SSDEEP
98304:f3OfYUXEzxT9yhySKlWg+FqB2Q/KCDquguywY:f3OfDUzFcPKlr+FqgQ/KCDquguywY
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SHGetFolderPathW
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
SB���z��Wx�i��x��# �*r�@+x���7DJ��>�*�����1�Tǽh�)�d�c���ԷX�|>eHw��AyV`9���_d;>��<0�6��̒TIp�L"�}��(��'�6� D�9�4%�qt{��������;���<˓�C���� H�t|IB��=0w";��M�1|� y�PƷ�_�O����ɠ!��ԓ�8�3N��fє���KO�3v)�����l���WxH���m��hW�9�PQ�!'F�y��j���د?yh�Sc]prI�[��B�5�c�������� ��B�&'T96p�_�U�4��*� ll��p@N���/,IP7z�0&��7�nq�r����dB�*�D?g�ƋR���ds��L�A��]ъ�O��)�8�c��O0���_�(��G� ��Oy�h�ֱJo����y�D�� ����Ȟt%���I�������cR�e��˟���1d�-��E�N��"�s,w8����`n�L�xG �:���S]Sh�a�u+�a���C������t���&M:1 v�e /~7{�3�?��ϔC�fU9��$Qu��9�"�wx�����5� �S�'`;Wt?�}�6��BQS�$�I����C�G�t�Bw�MK�r|�M&�C &�4��]�3���j�ʏG����M��^��h��Tj������a��Ѣ��E{ n\��r����*#���a>�K�KlmU�'��yn����ю��-lK�z/��UU8S�����d��e�FN����܋�}(�����Gԅ�*��V4�mV�MS�q��)��$�~�*�*~K\{���I/�I&ӺҔ��+m�i���)Jjb���k���f���*�J�� p���)����������R�z�_���-8���je<�;G��Opx�W�Iכ�W������g4��x��2�r��X���z)�o-}���M%_��ǜ�C��t;��5���_.4C^Q%��`c��|c(z�`��o��f����#r(�J�T�K~u��d�CKX5u�E7�8��e���������/5�-t2��5�g�R'b}%�����Um���s�N�ʓA��g���C���$��!��2x�Y���`+���Sn�i=p��W��f���K�d�,?.?�Z�6=���W�w��ۙ_��fA^U1����q䱝T��W0�y����!٨�q�L��G�]�`hI,:�Je����D���K��j/���ui3�H}��W�����7=p��o}�d���m�1�� _J�W���#hr8#��l��9f|m��J��W�J>?� ����D=���4��3�֤gd����ͪ��W��N���>������J���z����� �����[Ӣp�t٦�܇��_]\*��Ew�M��z��!)a���`�S�g���Y�`CM�����7����hԑ����c�=qv|��O�O�6X���Q�����e������|8.E��,xH�D�S�-�k��U�?=TXA��8`����m��~'Bjn�u���R��b�v�yU��N��A��pQ$���*��{�N���r&- ��Ι���<Z�<o����G ����6��#�k�ǀ~��㞘�(��yJ�)��ԫ��<4����UG� !�~���p�}bTS s�h7gL���b�0�y���q߯z�zM����7��O;T���&Zi-W��5�G���X��elH�V��́�lE�ҾE ��V�N�� �!�ګ{D�/�Ti�1 Q~ z��] ��@���A��� ��H����L�ҋHa�&,�1w�WkL��]�Ke�"!����t���M{�D��8���/��z$oe��������*h6y]DZ����w��v�<U֛!D|�����+����T��|y����L�̔O��R�2���,}�j.��/ئ���0,���n����p�w��a}���\�,ˍ�`$A㼾pӡ]�_;�H���f�t�8"��i���1�YE��-�|�����6x A'��]�=�����b��p��t�͢DЊn��95�8{pV�D萛�o����$�5x����y %UC�w"�Y�%����Fw�>����)��b��a�dZ��-�kɱ���Jq�o��p�O)0U��$O��"�����������}a̙� ����3���F�K�:���8���G�`^<��z���L���JW�.�,5��f�w�}������FgZB�(Q���3��4w�kI�,�S_����0� �qE�}煤yM��tq���՛#����_��������jl����`�o���p ��B�[A�cfoW��z�n�1e�[��5�����C�8i�4=��,fқ�*��'� (���L�<2m(+a@& �dRy���I�`OV�A���Z�Dw:aY���1�`70ܣliC��)7�K�;���xS �&M�<1�1f��̝�o�d� � fH�%� ��Y��q!�z&�y��!~˰D=`��h@���h8j��|�R��Pگ�c����i�p�Hu��dƣ�vND).*]>� ������8�����@�*��4�����Ȕ�a<������(��(���E�5�����������hE�Qi�%6�����2TX��62�Nm}�2�c��D�����A�-;h�(�a�_BI[�m�\��(Z��~t�!*t�ly.���Y=0��4aJ�.�uIM��뺧��H ��F+��%�\R���c]�RL�y��==!P߃� ��6 � N��:�ry��_�rx��a����&��AĹ���b�:���7g�e��Y��n����r����C��֯C9oO��1���_���/����D/ZgW�9-�8dFK_���$�Qi��j;��n�9�����p�%սǠ�5ys��9Z�ЊaL�*~sg��9���Z��<��Ho=�7i{0g��CX���\��Ȁ4���<� �W��H��Yd M���� %���l��d>�H��-X�����.�R}�l���<��n����t ��Ub�/D�5��/�6pp~����,��h�dI�^�P?v--��@q(����-m/�t�F�U&�>
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ