Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
0f31ebc2426d7745d2107a5c1d1e1d31_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0f31ebc2426d7745d2107a5c1d1e1d31_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
0f31ebc2426d7745d2107a5c1d1e1d31_JaffaCakes118
Size
4.8MB
MD5
0f31ebc2426d7745d2107a5c1d1e1d31
SHA1
82ae176ba79d95b156bf97aa6d45f39a9cb837f2
SHA256
1c5aa3953179ab9c458b6d1baec31bc5ed6222643edbee85d41931cecf3992af
SHA512
0582fac941852ddd7b9ece71a0024603656f712382eea78b3f9567498541a9797e7cd464935835e073b682ee5285482c607dad866cf32474bdf1b2ebdf13fb26
SSDEEP
98304:R2dd9+oSE+s+eVVlAnhp0YqdiMGeu/AVYzAOUfE+MDaxr+1AAcinkV:RcmEj3VlAhAUMGy2aE+N1MZdkV
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SHGetFolderPathW
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
����z��9_��2��8��Y,�n� �Յ��q�>B�L��9GN��/��~�Z�*K���`�a��X����O,�F?q�c���|{��p_,@~��-?�B��+��s~S�q[��l�� ��<9����oS����Œ7��������_ڤ��:��Xq���F���[FؠdXR��T��42m���mj�ʆ�� ˗&N��� �<ç���9��o]Wi�)�o����@�e��z�h-l�t�e�F6O�]�����'& V_�qM��{J;;��zffo���˥U��BRʷ�Xq����)Y\�����T��^�5�D�ʱG�]՚�gL�^�̞��� �AhM������P0iB��R����>P���غbÁ3Z���K���/�%�8��6i��a������K��Vm�=-�o����G�~@������Ҙ#;���:�27H�s#���3���퉘 N?W~��O�?(���\{�H�>%�'��Xڱ�����_���r 9E�(c�@EX�������z�b>сO�*�Si�3�!�NBg~<�� 1Q"�[��$���N�q����LmZ;�^�5�КNhC�qDǠ�+�CR�ɺ�ڢ��y�[jΨ��{��hJX��È�x��wM����{�7��$�&:��C���w�5�����3�����4�~�Ҫ}d���S�O��*��g�X�/��a��~��Y�L�K�ġ���i��Y|��~��RD��+m�`F�V����h�hu��j����3��[-T�kb���t`�"� ����J�']p� ��|��w����'����_p�����.�3�܉m�D4��DB`��Q�~|o�����n�8���e)aA�3���{��?� �7*��71�sА7�R�z��o@�>�����y��� �_֩�~"�_KjA��K�,Q�a� ��J�! ~)|� �q�W���p��8��e��8�Od����+���+�ĐwO �K�h�o:�t(�M?��A�v����u4���Q���/���=�'�o���?�$w�K��Օ��}Н�Վds,I�NQxj�GG=�����Ȑ��c���^����G (�lqQm�$1:���[2}3�u��t*��]��������̠�Yٕ����к��9�F�[��Ф�W��Y�����d� �_0k���T�;��#PR)��!"� ��H��G�g��S,�Y��<#�#(�GM*�T<��~:4 �e&Z�&gF� cڌ�˟ �yr�1#BN�d�V�D�L����d���`���{+�E�,BPG�k�E�c��(j`��{/�F�j� �����]"a�C-�~��&.p����W�f2���ZT�c���f���~K�8��.��=���.�o��U�1h .�7��8XK�v,���Ei����@w%�8�`G��M��CA��m%�A+�RӞؤ�is>V:��ժk���{V�^U�jjӖ�ʹ���:�V��#�vgZ-w��tcK�'pSTb2���QQY�������!�xl��&��3N6�Ё:-�Z�<�:*5Џ�����7���Zz��:����.�?�9�8]Z�� G��O��*�!��я�3��#���h�·����f_*'N��QI ٹ�$����� tq_� !���HeR�A�ט?��F��\@%�||Fυ��+�t��Ei>��䶁Ֆ�!��R�芯���"�ȊߤAR��Nhy]+K�<m�>]��.��?��nه\�oh��Ĺ.���1�<5т�Bf8V�릙�!�����qy=]}����ߚ�S&�'r�t�a��d�xc:��Iҋ�v8��˃�̯�&b�"�KuZ�h!�J�w� #���{���4U2��^���sV�ng_���9��_� ��7���;�巏��L���\zΐ�rL����oǰxV��$�(hj�Iy 0�ˡoW�K;W����9�߷O�c��"Ϝ�> ��_2N͝x<���s�Ҟ'$�ս��e���Ox���L���Q��P6p9��N5�k�Q����p�n*��A�r.���Ns7���쓋��~ 脟d��$��I���u�R���H�Z�"�wP�BJ�Å�p)5�a����,�]<w$�Z���S��q��S6H2kP��]��)�%ȣ��'Y���Оr�Y�4*�E��Pș�O*��#z?��݊+��kF�\{]�0l���u�a��au`�����+�9��R�:,n�x�� �z�;�r��E�(}����"�b�B������|l� �E����1ԧC�S���T�-Cj�z>�����Ó�/{�*l39D�[^���P>B��.z�b�ߧ��K��}F0�;�7�%Z&���?m[�ee�I��F~�%G��`���a��Min[&�- C6=�J�G��p۴�e����<Af2NDiڳ��φ>�ޅ�B c:������lv�'Oj80��luwԥ}�>M67�;���<G��v�`�\$\=��!�����,���^��������5qfO-� �߯�g2�@���j3�6��( ��Z$�d���]nGޫ����Aw�LU�)�,$�0�R���ٍ �/nDn�����'���k��dy*���~8�)6��cwa�� LɹZ �9�[|P�A������7��^�6�=���yGxsv��X���8�5IBr��=�I10�,���0~^<��% ��V���_4DN�'�2��?�~������0 �}i-4MP���x��'71E�)E�W1^��;6#x�����C�΄��/`�,�m�68����A� |�9�~i�n�~O}�u� �pƏg�F$�=�HS�V3�/�^�^͓]������F���,O�ʖ��Λ���G[ć�;��;��x�����:�$ե>��V*��U���A̫Dj0VX��\p�D�2�ɠ[��y���k�R�����Q4ꥰ2ų���t�upG?�X2�e���=F�f�A#�I���} *�]�F��ꜜ*8V�IԂD��6��+�mu�c��YhI�E�|��t�$����q��N ����n7��q7s"� x����.�+�k�}�W�%���
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ