Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
d4442c00a9598e353fa25ef9bd6daf12_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d4442c00a9598e353fa25ef9bd6daf12_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
d4442c00a9598e353fa25ef9bd6daf12_JaffaCakes118
Size
4.8MB
MD5
d4442c00a9598e353fa25ef9bd6daf12
SHA1
ee492fec12196ead167b8c8067216403abbf1a27
SHA256
49ec41af9f0d6090143c56f6a0ee31d5e85c80d14d5eb4e4a559b105f496bbb3
SHA512
4634ae3f6740d09f34d1e1879ad53f0fbaffb4416eaa252f221ec050f2719ed36105ee28c1187c3e453f46baa6a8a99663d65f30786141f3e59c15a441f34785
SSDEEP
98304:1N60Vr133jeTvymzNsG998Vaiwy20r8IzYBBUmv1BaqIawvV:1N6u1336Ly2+GD8Ezy2dBUm/IPV
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SHGetFolderPathW
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
�A�m��� S]�M{P�#(��/���e&Z b�hP���|���T]�}FHUzQ���)�ľEn+�~XS�x�]���Ҋ�N5g�i:`ݞM�����oZ��-6����ZP/*-���,��^03o(�y�T��OW����4!M���ku�9����]y��$\�%�T}Q����a�t�u12��rhV�&���2�{���Nctf�NP ]8b�:�2���Vs�c) ����Ȓ�DJx��JԆ{:��&��UF��j��H;Z:�o'^�U'~�b(�E+9������<�nRPh�S���5}��ɨ(=е��32a���o��o���I��Ʈl�#(pT��t�����XcI�laU�MC<���yW<��7����;�~�%X@�d� �{u7a���A�H"���ޕ#�}}B��t��F�#�ݕ�S+�@k�{�����\|�'Ӎ "`F�V��:�0�M���O�;Q䩔����k�=���;ҸG��i��/�Sl���V�F_j��R�"ܮ��$,Ha��s���S��i�OP�I��`��}g�M4Hν�(�����@�mԿ�G,eJ��{{��[(��c���r�e�9M�p��ѭ��m]lR���G�8��:��jMb!���c��e��s�N.zˈ}����!���7B���I6��?VR�p��1/�K�/���ώ�y�P��5�h���Ӡ�����Di!�����3��y;��tZr\##N$�]@��x\�v��*^FQ����WCW������%=�O�r�P# b7Ͼ���'��1�����;6��Q�&4q���8ļ�7��#έh����¿��a��ܹZ �W�#!����k���Uվ�E�K��[Y~_>�6��/�����G�]�}���1���ڐߘF`��t=��Y�''��\/k�V�����eSc�"ڋ7Hi���u�� ;�;��)�b���B�S ��t[l>D`\�|�� ��/CFH9�_Tq��*��\�#z6�.V��.����������`�g��� � �"/Ryƨ�ˀ��n.��V�Sz1 �b�-�v҆9��ͬ�Z+�]�f5Lj� ��TZS.��l���}j_2+*��h���^��A�2�W���>iK^"6����h��<�p�h�*w�8X�S�����_��A|���F�54�<�"�p�{칼F�5�r�.n�6-�t���5 �7~��{M,�F�B�CQu���;�X���@�ͧ����_�mj�X%-y0t�菧?�[�͈���Qn<��n�5�[�ҳiҋ����/��ᩯ��]r�nO��J��e�����=5v� �A�L�y�BP�� �THC7��Ʊ *n �SU�C��đ����o�Gi����}KJ1��f����魽��S��Y:��5�g� {�`���ݛ)�ʿPPÑ���p~���A�S�����b�z��z�� �А���������aѵp�����*D&���:W��6��zځ1��Y�k����{�lC�z�ȶ��I� �?�ve�k�⍝V�Wņ��![3ZЀ�4 �7ҩͳ�.���FR����Z�b:��D������+�C��ɵ����<��|q�7E�g���������?��g r߲ԑK��ʷl�n��T<�������)�hD��y��ݒ)/c��4ē~m���0���qT�������ڟ,;3�C1���X���7Q���n-z���5�W'|�j�a 6=TO��~�8��YF0��ú��NJDE��9�S3�{'���� QK�E:z{�Go�=�x���?�m� ��YZ���c�LW&�����ԐF[bp�����X�N7Δ�M�8��\����[=��U�E�I�|�xx�ξ�XvQ:5�q�Y)����L��N�&�N��hD�߯7�9�J��<���Bb1mNW��#���=�6Z,a��NA>3a0�yb��~�e��0�g���#�zJ�Z��ŢⰥ�x�Z�Do��<���F�3VN�����d�@DE[E�',t��1�C 8�]8�6T9���n�.�͘��/馘3��q�^�1_�.�A���o�����a̗�����S��N8�|+����!�Hς��=�]^� ���K2B1{��,�(v�D 8��̛��,GLj�v��Ӻ�ahS�\<(Y�*.�Z����a"�f�~�J�;��~�aOc��L#�t��Q���z�CX)f�S^����">��#G'�s��?3�3�������=E�V�|�|�$�s�|hf�a+����3�/L�E ����?4wi����� 2���ΰB���yc�ҿ`1;:X��U����=)����!3\ӭg���'f���if�^���.�yB r����5ֻg]�g����S��w7�Q�!$T}ᥢÅA{l<#f ��:'���J�R��W�u�ZC�0S��-�N�`�w��=o;���/��-'X��]�p5�d��/��ꁍ�/�F,ٜw��*�tep8\��,�y@����$%#�xa���`ݚ��T�H���uBw��k���j��q����YŖ*%R�Z����ěU�'��Vԛ��hCD���75�u1k�ݓ��� ��mtD�z��ӸMC��Xİ�����e�����T�v�A�=D��j��%�<#���I?3�PJ����g�Y� g,� ������u{Z�>~�ˁ��~��ׄqo�a:K��ڕZ�R�~��R����`{���̚�a��+Q@^��>5u�G��OP���]��*ܧ,}{Gy��F���ۅ*pn����Q`�j��������xS=�FVQ|ߏ���y�E���ۨ5q�D��dJ��)_�!m�iƭ��8 w��LN�'��帧��4;��t/ �s�pЁ��D�l����N4��������s���BjE䫃lR�ߤ������5�œ�9��Q50��ls1t��4�����+�g>�&H���N��}�4��3��^��I��*Q#g$���*tyI�7р��wYJ/���G ,N1�]\y$j��l���o��V0���f�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ