Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
d2eea610a5440b2b26416d3b1e06bfc4_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d2eea610a5440b2b26416d3b1e06bfc4_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
d2eea610a5440b2b26416d3b1e06bfc4_JaffaCakes118
Size
6.6MB
MD5
d2eea610a5440b2b26416d3b1e06bfc4
SHA1
73663dcd6e50133c5bc04487f2c9c84f331c1c7f
SHA256
c1a04d9cc5852ff599de4f17e100286eb0f65507e88867efc71a3deacbe71238
SHA512
5dbe38610a54622756e563b9a85472f26fced20bebc00659d6fd9d29bd5dd356538233511267db88d04818d639a5eb92e7ca6483471c92f4ec50cbb6fc829835
SSDEEP
98304:eBJbwNdvpKlxJ4+UzlPkqld0PU8N/fT96IeHyQi9eQ5XyDMa/+tCMqEY1:er8RKnJ4+Uzl5dk5reHyQcgMztqEY1
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
RaiseException
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
OleInitialize
SafeArrayCreate
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
����o�~ �ws4 r�%�(���Kj?p���3%����*N��@̐!Q�W��pv��"�!�����+d����e��f��#��W5uI㣃�4-���n2mg)�c6�zr�5�ؼ���]��o�O�|�;U W�p�w��^'��]�1u��N�z����-��s%�3��x6�o<Dd+���~��Ȟ��8�0t�}QM�����]���!�g�M|:����Щ�0֭+���6>�b�NWq-K_�M����#&��\W2D�\Pࢠ¤��v�����;/.�Ϸ���1�C�-)�,^x����Q0��Y��A���8�{��[<��ү�5���<�Osr��Upw�'I����a|*m�r� `�o�����982���|6.W_:��!��Jo QT�p��m��H5ȿQϮ����<���suq���Er~冀!�@+��AH��\�"����b[���Kh���"�r@�.���.&�߂p� ��/7�)A�"1?��ը|���? F�ǃ��ұ��x�6B�J�m ���*��䙂��K��FZ��\{���"����4�-�LO�[�[ȧ���Pq0�wg�r����Фn[���9�GNR��3���ݵ����"��0��c�:Q0@i"����ĵ[�h�V5DŽ)�+�G|�v�����J85?L_�08;�T\'�c�����/�d�~��u�`���D���V��ĖK�~9�r����,CTVH���9�I�b���\�G#�>M�"ZU^s�Z�I@�L?8Z{��<�;�g��s�A���50m�%]K#��wgB�� r!���|��GD��k4=���$�O�w��0%����J�����ɢ�ɞB8@a���u%e(Ns��w�]�J�3 ��ty�r��.���������x)��Z��� ��G�.�αP@L���0��]Q6���䛢1w�5<R=���3�*R&J��������n�=\�����ԉm�χ^*B�6[H� ���]b)%�N�7��rF��CgC��@��E>����N�� &mL���EXב� ���2�cI,��=p�y��*���=�1�Qr"cW�/4�: � b�Uf�W��O�'BD����� � ���!!���ٗ;j���+�G���9&��.�s�({?˦<TYݴ�c������R�ꨰ[+��$w]�Λ��r�_����8�{! �t�n ^�m��UA�L����֘r��-鄲 �ZW��Z���շ�$7�RƏ���mCa��pSy��5��?���Z&l��Sd��8\���3/��� �Z������Ī٨�VA.e��ܥ������!XoJ�T��)�u:�}�8-�L�FP\��< �/��@�&e.y���� O�o�v@����Z�&�Bh�B���3���h���:��d�Sf��}촯�x�G����G�5�~.�XŶx�-7�M��r��+���n�fʺ��K�6�1�;�+�O�ٍ<�.hւ�i`�C3{�J�):��ןij��Ӎ�ۯ* '�n�@�qXB����.�Y柞����Z�R�e�����y�l�I'˪\�K����;���ˑ�e��a�3{ �������yoK��$8���p�f�%@��s�lZQ�`y�v�g�k"�f��̦F��C��,��G�R��Ǭ�ϖ����7&���]����ֆy�<[��_��J��\�ʚ�@�e)�U.-Q&��>�Q����y9 U�#� ���]�����+�\��@YkV�o:�XN �����{$��k�2mv��f�W^���aƖ7)+T���Ss�������0��]�����&1�.�t;,<��z�n���磆�0qn�sX�KQ��`E[���^�d�Su+a ���lQ��Iߘ�~|���M��粅���VyA� hE����?㘯CΘ��Aw}`R� t����"_���� ��n�st��I��dI�u0;�����x6]��OX}u��c��G�J�C�=����:p��֪q��'��%��)x�\8wg��c !��%h��^_�gV���X�y&S��z���E�����������V�w,�KB�e�8�8X�qɷ ~�O�(%�n gԁ,�A<�{f&ŁX��Ǖ�eSP�2fpI��j%uιR������g134W��sp�#��� �@b KT��*&|wl��չEAP��N��TRLqȭ���n��pV� ƴ5Bc ����%�{|' =�Al�0h�y�÷�N�� |��L��;)��mHn��H�B�|��PL9������ {�+Jr^CН��y��c`�VoM"��^�>æ|B�����'\KoQ*8�H�zpք搙C�^������Cf)*���5!y]�����.P�֬=�W��2�.�ߠQ��f��@�4'Tpn�ד �����ue��n��E ��\F�=a5}I�m�$��n:��T^��w�q���3�{wH�2/e�.�ێ,EE1��v�M���.��[#�FF��i\;�·��떠`Q͈�i.�g`��+��jހ���L�h�18���^"�������e��Z�w%�YDE|��ptj.�߃ކ�w�٤_�D���ޏ\"��b�.Nq�B\0q���-Ȋ��,�]Lr\,jl�Fv�1������3�N��rW[�?�����PRN�]����)mt���ˊ��^;͜�-ݱarFD�&匫�̦C�#M�T ';c���Ԭn��{�V°_ExJ$c�$m;�z��Ⱥ�g�:��ȧqrT�9�q �>\�&��`��MK�B1}��Ν��i��+K8�����/��o�(;^�g`r�S�,��)��m��|����]��ۀM�Ԩ���G�l���Q�V"9Y 9�b���ľ�et"�����XB�� pþ 4n(���o}�Zf]nӗ���u��,⾬'̦Xq� U#�]6!?��%Mj���z�t?����-� ~Qf@[🞿��@���i�=��NHK�|�;���ņ8u]��dzd��ҍn�DD�w.m=Aď�hM) t`�Î�W����q�3(r�������RSY��\z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ