Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
ce3ef1bc2659889da2d51a77ec6f4a93_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ce3ef1bc2659889da2d51a77ec6f4a93_JaffaCakes118.exe
Resource
win10v2004-20231215-en
Target
ce3ef1bc2659889da2d51a77ec6f4a93_JaffaCakes118
Size
4.8MB
MD5
ce3ef1bc2659889da2d51a77ec6f4a93
SHA1
2745cb247f1b610d56a249c824b8e1be52aee971
SHA256
5efe84c0a7d982384bd44bd3161204bdedcbc100679517b10418c217b48a558e
SHA512
8701eca0a7cbe598b25f97fdb80e04eb6e955fa758747b66b60a6081a0a49b84d874bf450b8c57ede82313cd50b7ef9b3afc4179f0293d47831f2ca0646fb6ef
SSDEEP
98304:A5fOg3BX+d4KD7uv7227edga7W8vDUkr7EFaZF+E4xKRc2Q+t4pAhtIQqhMI/:IO5d4qk74gJ2DNmab+vKRlQ+mpAfqhb/
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SHGetFolderPathW
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
�Ftm���ݍx8Y����T�@I�n_B��ݒ�1Hk��z��kH�ϭ��W#� ����"4Y�Nԁ�)��˻��c�l���R����G}��n ��L����S��L߲�^�N϶n3TAo_6������퓯��RƉXrp5�Ʒ�kJ������T��k��%����s���r�#V*ŷ��=8e[K<�U9�N��"�G�z�Z����i��z]I��V�G��KZ��+�tP]���Ӣ��ET���m��0�וi9K����7��D ߨ��8BH���܃�O�#ӂ��Y�c��{#i����J$� �_�����V#C��\BZ)�֛a��R��� �u��35��k��� 8��ɀ�){2�l9�^- .��P����g���To�>����'�g0A�|��!ޫ6���H(���]�ʬ�GF�s�=�)����4=�����2)��:Tz���!�W�q�Vx�� 0��M�q}l�19v��mxD�¹�,�;h��Cz��ඇz�Q��hfz���6�ߏ9w�/e��/N>KT� �|��O.�p�Q�dkf�_㳠��X7��jy��t�.�Ѥ�z��H?�Y�N0����eA����F����2��։E�qe������d�WrQ��q�\�U�hb^N-�� N�4(�o�7=(MN��w�@�?�j�0F�S�h�k*Uk=H����X�:���9��(��g$5�����N�k��NupdkD� n &�uL���(N����Gr�Ļ!:j+��*��+V�#��_�����`���ʜ�s��(?)"�jՉ�2�l.t\.0����ͳLάe��(�{�*R���e�o˟���u����<����?�0(���9q~u�[�2��KVBH�7���+��ִP�����;Sb���k]s���g+�*$H���D�A�ʯqlC�C(_�#R^@=����=;� 5�Wbn�_4�s,8cs\�#���]� �����J����P� ġl��F����M�+8.��9��J���Օ�|W�nI<"�Eȍ?�����`�E�`W��V����M}=�R��[�#A�N1��� ���\�&lc�띷�F�l���S�9��g����o���<y%��S�U G�ʫ!�e6�Sc%��{��/��nH����\��k-\ ���Wg1���L?��d1I����� �E�k�.��� ��Si���|�?��j�K����m���� P�]�J6 ���{֑|(�Ѫr��%r����A�O&����Bt��$'kE_�X�g������%���+G���ȧ-1+���H��.i3=����v���9�(͉k� DІ�QI�;�Ls�yUzR�/�Q�8���Ig8غ۶\�{��V�}j���������#�0|(�*��32-z#j�������-D=-<輳%td�����>��s��d��4�)n�E�r�y��&<oG(T��Rw��������������dL�neR�[ϘݨRf9�Yڦ�\$;t��7=^���d<��(����,��ð�Uc��P�Ku��"�����N�T�Y��l�w�l~����|�=_��w}����n�<M=��lU�aLDV��n*��ft6S�$�D��÷��V`��D�_� ݳ@��}�v߷�)���Z*��lBD�sׁ��%�Z�2�u]�M� ���X=C������g�6���v���[�d^~�OV����iaז�ۓ��=ht1���I��A��Y�"DuNW��/`��ޜ7�~ �u������E��<��@�'��,�{�'��n]0ޑ\�P_Qa�PU�"�c� �:�\�9qg��<�[vk�=��AX����:{@VUQ��N��&9�LV���:l���W���t�[e�6��o��}-�,v�I��a/J�7�}�S��f���`�Of)�_�� ٓ���=�a�ɪ�F�܀�eG��E��1ڗ��V�9�B�d(X�ͭtR��V�'�?��cu�S'M� �fЁ�����O��wJ��]�G7�t#;$��(��G_ݳ�k��oO T"����}�F�w*���ʾ>m�M�����tǘ��v��0�=���9Ţj�ef�T�0��8�4*� �Y��AS:��c1uBf{մ)�*~6��SQ�9e58H@0���?'EFa�q�����˺�h,G���埦�p%:(Ǘ+���q�� ���9�V�d���ܶ�"�R��*���-P=�+ Z�B��l��b����z��~�K�si�P���)�;�==ʛ�6��r��OG<=��ƺ.篦%fuq�:Ҁ�* ���E��c��M��#G�-z ��sd$BV�� q���uDs��(:�����p��#����p�>�+�c#I�O�}wV?_���S����*�BxO���`�]g�ѪX�tg��V(���r�<?��PW��kVȂi٨l&��Ӆ]!�m �T&�-����h{0/���I�-�wLP��h���۳������:�D���` g?"���>��=.p8�S��Q��mS@=Ցg��5dȻݳ?��[����%��1u���}Њ����s�O!Mc���������V�a����6&���q�Ⱦ���#J��0"�$���{�k����G�����E7��T_l�×>��+�N�KӕiV���8|�w�wWm�����yZ��4_$�#&�r�,l��߄�t��/|L������ V�ӝ�Q ]?����/��q �+}�|�c��In��j��v��veZ{EP�n)���(���+�$K���`�Y{�9ĝ��AM������܊�r'�P����r�$PT��ЏA�qHx����0�ȎPw��O)�z�[z���Ը;��1��fu�����x����<��*����1�u�$Z��|ذ�Z�v���C�5_�[���/�[���W��[U��(��t��pY]�-u�(<��đ���i�*#�_����"��s��gby],Y&�x5�ҝ��g�Z7��ԛB �}�8Qk�1����7%�Fe~K��Nf4)����+"��mn�����39,vy��9�@#��dGd��rc_�N�x�<��xmf4 �|��D�%
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ