Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
1f8d20176ea5ecd18e183da1a9fd7828_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1f8d20176ea5ecd18e183da1a9fd7828_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
1f8d20176ea5ecd18e183da1a9fd7828_JaffaCakes118
Size
4.8MB
MD5
1f8d20176ea5ecd18e183da1a9fd7828
SHA1
5e19c2f4494de663d7049a8ea716d6c7c981871f
SHA256
f201a3137568bb406aa998cfb578143f7f0ca10c7f146fb99f0d247e41e5b85a
SHA512
76fe3fef2384cbcfac7f80caf9dfc04f536d3e9cc39d0dd71a7c09a66bb1faa6ec194a3663e6312aade1dea916f3f8acb752001eeacd6ea411c9400476948934
SSDEEP
98304:Zo4IxDQDqlvu5nbJKrqitKPovESgQduu1Tj6lhmVlF4nNvnjcSsuV:Zo4I+DqlvKbUIAvE4kuJChuP8NoSsuV
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SHGetFolderPathW
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
��t]u�U��+ ̚.w��xB������Z>k�4}� �˳c�������������G Ce��Z1)���Y�ڽ�i���tV�[���ܳx��Z�q���BT�pP��q]Pr�,���2�ASbb���334�Q�q����/�/��_��)�5W�q[�.@�ǖ-2����m��}�Olx��<;�Yc��}2~����'!��ۧ���M�ܹ�&O`��'}s]��NKM]5n�?W���-�C�z(s��2�Yw�AI�W���R�0�g�Bs1e!�őRe�j�����F��zB��&��+5�L���������z!�����}qB�c&vǰ4�b�?&�A��Cz��?hsȀ�ǵ������@�a��y�Fw���q�vt�I�t��*���7T7�P���o��%����zuc}�>~.� o�<�r`���|ܘ��y&�9��D�8ݚĤ�[���Y�3��5�����+�/�`�֨� sx*3؈:�d6�N\����k"��k��%*�6���w����Q�g�|ȣI�(�e�+`�=KF��6��W�9&��4@k+HE�s��k����q|� ��A�!��3��9�3$�RU$Dz�,K��ovC������N)_���{� "%�<9YS���>w��0��[���3��r�#��m��Vɸ-i�l�y\8G�N&�Ϸ��'QJ�������� �������=�P��lJC?|����i�eX�B�뜻Qܬ#��|�[��&��cU�z�C��_��&U�_Ȍ�ptkoݹt��Pv��'V�vbn������9T�����)>���+��3�?�m�������u�s� ���w�m�B�m�皑�z��@ZY�\k� ��]��w�����RK�o�s�yQ�~ʟ72�Gag����|���ݰ�#ر9ُ��;ߚt��33@���k�m"��0���p�2$rK,vT��; � �"lƋLf.�LO�_!��� ��2��G\��2����Uj ��o0~���B��.��Il[��@߀R��������H�n`m��.�ϱ����;l��\�F K���}�> �$�vZ����M���,-�:vPf��@t�Z�|SnR{Uã���*�-��>Jd"�����7Ci�ڢ��'��|sDr;��#���7+���o:�;%�F��� ����vR�g��М��l�1c/�#6��]��A���گ���v�4�y�����hİ����9�5�wf9��k����MF��Sr��\�i�9㷶������$ei�L�ů[d�şA���cD=k���9V6�< �1յ+ō����)(��zԘ���k�� +�tc����#�R�h��*p�B�Oj�Q���fHVƷ����G���M*E�W�� /��4��%8`O\�W8�j�~o�Abղ��0^n�����[\���p�W�_N��d[k?��)�G����K]��^���l�?�V�7/���u�P� �K���:U0�����hsmF�/���$Ά��,�Qc�R�a˨�(���̘�S-���M�Z��U���&��J���_k%���S�JC)�:�[��<��K���w���=�^4�{���J?7Y��gbJC�s�B: #ARP�2�sYk#���)��y��jg�rGt�Syܙ��N�Q�zքBL�%5}!ʮɟ���4��͖��;�6����s7�H�ߌDj��k5A�#�'�nu�s�xb�8��lj�-�� ��^�5'�����������g�V� gl������Xc�i���+�d�f)�O����F�m�V.�����r��-��ڞ�-3��V�@@P��*�|�Q)�͑�{�)�|�r��� 9���_���`!v:��6}o�����;\����O��x�m���w������m�f��T�\�h�wuI�:�QP�1@"K.B���}��+��Sd��q���� ��?1���=2a��C�c��E �h*���%S>J�����k���Zun�g�Z'x��Uol��0'MPd��B.�"�����/�c������E�c&^k�H���,g��=�{��C`�}H��{�]�����;4�>bP�B���;Yu���C����-��}|��� 1�6�PFS�E��Τ�}�$��������l�ca�����.1���ֲ�8����M?u�^�3mB��������}�U��>p����Еr2�j��W�����q�>���c�TM߆,����ϑ� FB��b�.cA��p�_�eR�٪ֈ��U!J��_�2�n�� R�yc #}V:���1�?��=G84� �wl�3�E�E��4����������,/���m��r��Š�\�`����Z�?��>A�e_�^��z~�,�\HM��$t����;���U�! b�Q2N�bd�G���3�Z�l6e�ź���ruƱ�&�������AMÄ?�?�q`|�9�fZ?��AM�S����Nn�ƽ���`͞b*5�����"���U�����(���n��� ��\� �F�ʰ� ��3&���|g���8���SE�'�3�fXC���Z�V8��Z����$��-��awW��kZ/��%Ѱ:�Rr_���_Pa�����-N��)ؘ�����=`�̥��з�И4��ج��M~\�� ���n��i�C����LfZ鉁�f���\��\�_E��,�jG�`��xDE{�����XG� �5�o�����)'��wl�'�ApI|8{�h��"n\�9�p�G�{��UA�&T>N,\�If'�-�D���+;��DŽ6��ZĊg����<��.���-�9^�{��ȃ�D֞����1����ej����yg� ���^��n���`�2�)����T��$k+\5ebA�x���h@;\ )� �hYn#���@����>�e�w�]�Z��_7���_�� ��h�dܻ����p9����)\��r���T3��ft)�� ���I�q!�QcS�s����4cz�&$]���d��ݛ�����8��wL ���bm����/�A�����4q�D
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ