Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
cd4044eff5bcb66861200eb09e850a63_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cd4044eff5bcb66861200eb09e850a63_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
cd4044eff5bcb66861200eb09e850a63_JaffaCakes118
Size
4.8MB
MD5
cd4044eff5bcb66861200eb09e850a63
SHA1
4d5b45e2849b0a68b6c7d6a44c0fc442bb2655ee
SHA256
e3cf8524369e9a1a8c183e11b16b31eb0554fe7c472b8ff298b0ed4fb3a06465
SHA512
ff5616988cdbec2c7418d722d2ee77bc463832bc34fb376e0cceda4dbc30ce7b2a796027d1f598b6cc27521e09202c292cb43e74c7e23d6a8e6dbcdbed6d6ea4
SSDEEP
98304:ZUkRzaXop/sFBypfb+U+QUMBLn/s0x1308lZb8qZKTYJGb92:fa4pE0++UMBrBAyxjq8Y92
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SHGetFolderPathW
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
�� s&D�*����:�^�嫢6�&pM�D �����c��C�Ջ���ƿ�/� �.�$�|e~%�S�ʼn��0��b����-8^w+~��rzBH]ǘ��{�[�k��?��lC�%�&I�x��Y�!���`��[����G�e�x1�pw�����IC�%��E�՛�9� ��>���8���G��� 7OI�6hsԭ�Ħ�1T��Z��n�Sd��{ ����) MgbBoo[��<R�6�͒VO�C�����9�!�J�06|̟��ϒc���Zc�j`b�M�RL:�R%n��� M���`�u�] �-��J<�b�o���u����W��|���P�)q�5��"p)� C�a��D�F���'w�J/4P�ؕ?P�{�\�-�g;uB:��Qх�8�������oj��Y����+���g@�.�0������ar������(�}���* X��|�L�?V�ꊀ�<+:�d���ؠc�_��osA�w$��&������k�A�{��A�Z��;�=2#�f,�5�/<�KA��<��n[�NB`�o~���ݾ0�6��O�-�7+QC�j9e�T�Q�(��ܯn�P��VÕ��Ո���]]D�t��Vd'��|��"a6��D�hU�.��F�?������T�ME�h�7/���8��V��b �C=��y7=Jr�s�E��lt+�O�Y y�M;؆`����L���"#d_p ��r�i� �+|6'C P�GԚ���gH頟��黜 ���)���=��U��<�@ B��t��5�8;!���������Ϟه,/�8d z����g�b�MT�����X���"��Z�y���«��a��~aAcsת;�.y�M'=R/��^?����{Ē1d���%V�-�5����{��z�)ѣ9� �m$��<#U6�c �"���q������t͛ ?ׂ���ʾ��&�����^�>#�{�f��,��*����S�즜[��o=0������x'טpX���Uâ�P�����f�ύ��<y/��옮q�������I�jqo� *��>�ؠ �u��)� �$Tol�L�Q}��۳=�-}�=,E{�n�ss�!k��W��@�'�4��xO�;u���T��д�Wa1���%%���l"P��z���2,Gc毎�H.E]++%�w���T���� Q�`@�ȉ������ڊ���o��SE! m�.6F��ꑯ~� Jb��J�\T�6�� �u7T���w��7���]"Q6�,�B�ݺF9_�^��\ն��st��2cV�5����:�����E���eˋ�K��:4�5�u��ރ쎖��W��$��X%^�B��2h��L�zf��(:�m�ա�3�+�?d�rP�����d������r�T���h�b�,/�]�p�6 ��+=Ql�L��eXt2�օ�KV �#�Ѫ�x� ���qQ�B.5�]|���AXC|�)�u%$�p�&���u���96���-z_�=���lQa��Nλ�6���Ce���2ҕ���S����c[=2���Տ�y�h2+wzίĴ�;�2��+n�|�}�N��,'T5������s����G0�>������)��.��^m����BT��LKb�#�=o/q����B��� �T�@Qq��/��EH�>�r��k;�.��� ���@��M�L���U+�KXJ"�̞�Ձ�#S܋���b��`pf�j�RvA~o�j�: �o�(,�I�i��MX�X�;�o9%[ʦaR�;�k���s�:�!u�+��Z�?�r��RZW�YP�M��(������ŊR Ʌ���>�gDb�J�_V5z�v�/8ꞧ��1�")5�ďꩂDD=������?�2� 캈+��s2}{�3z�9m/vi�u����s�G����j�����eM��4o�2m����5ʳpH{� *�ȿE��HE�L+O��s�.]�[l����ճ}]�C'�JE�^M��'@o*�����%�=b�Í_�n��R�A�����*���ō� DV�rF!�+�9��'��@�%)���*��L�"dK3m^���$���T&�n�>J8�j/0m)@��4��V�ʹ7FY F��e?����착�ZMO: �s�rQ˒wխΚp� z��Mt��j" ��R@'�o��%� �t4�������K]���4O�(-VU�&�i��> WÊ<g�p��� /��j I|���S�z3�6�;�� ����ϡD9�/ɳ���������s_+�����~���'���8Fgn9�'Q}" � $�Q���w8e��h��`!���M������b����$����qY`kfr�FK�Z��5�~��p�D-h�`r��eo\��?FD˹�w�������A��*� ���O*꤁bGя�ƍ�k�c��K����p�}g4�O,<��V����A����R�븂�Q=�:{����J�=�9}<��]����/���ԉԌG*� q~<�(I�C� ���U���[�FV�<䊨���Q����}�c?L?���!ʱ!��]iܚ<�����n����M������D�k�uJ�¦3�[�2�,] �3�p��n�D-:G!�B�#�&��B�vKB��>�J�ˢ+�x�i\~|RD�[i<�a��8�E��l}�˽�zT����E��~�_+�gm>� ��%�`�a��ӆ�2�������R���I&��X��v��>�qd���rz��o�c�c�I~N�,���Z�F?WE�%; .�PZ��XY?���Q�[��Ŧ�ӕ���W��A�iIsS�c �fQ���*����p�&ɢ�d����% i}P�+�T���=�{Ux*��p��8I#��0��r���8���K���F�&x��c<X�t#���$d:Z��$¸gW���o��F�0<�sL ��z�|y;�55��r�)l�6�5�<�E�)^ B����J�����Ts3��RB"2w�����2/N������$��鿒���3�u�[�;�v���l4 ��T'o%(���
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ