Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
d72a9120e474cf1575dde8a94063d1eb_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d72a9120e474cf1575dde8a94063d1eb_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
d72a9120e474cf1575dde8a94063d1eb_JaffaCakes118
Size
4.8MB
MD5
d72a9120e474cf1575dde8a94063d1eb
SHA1
4cca3800bb209d648f262166f30963c55189ccc8
SHA256
e4a33942680ba305200c3e1a24daf67cd67d6eb65708d390d9fea91e20bb28df
SHA512
132f6108a0af8b79b13849ed32130eeeb0b968459c50b9862a0a4550e4f8a68788b5d0d924c0c5a6f7d8f78af06286590e36a04f4fa895e063629bf61c135f58
SSDEEP
98304:e9mNqvVJdm1JVU8lhj3ImE9IcOeT3sB8Jj7eWuK6384d3ID+xFNPdA3IV:e9PJo84ZE9IcOmcB8Jjty38dWgIV
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SHGetFolderPathW
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
6C��h���X,��W�j{��J�S������JC�nBeL�ۿ]��"�$���~%)��N�^O�6�� $y)�k��j;l���3r�u�3�i�#m:���� ��;hB�A�"�3�D#� �p���]�0�r�y��|�@�\�\�I�6�Wi@���yT�H(F��.��+{Y��Z���W͈D��']�yo��tow��DzO���'�٬�yi�S�>�u�2�ߘ�{F�6�ehYܩ1��r)o��_��}��>�w���lx�Ny�<�����q��v�1�����ѥc:�F���E�\z�N��4� �^�~����D��x֥�b���F�c�kYY�s,�;��-�r��W�9rU�o�QV���V����ޚ�"��׆��<7�0Hf�Z-Ć@���#��U��.H��c�ox������XO�_^5u?M�5�ʖ� A����q���/aa�vY�'yYǘ@�D��Α1�Ms��^ނi���>C䓌�/lP ^�yzUI�2��9:eStV�d��IO��@C1iT̖2�@gG�GƑՈW;O�7�q��We�2+~�P�8Q��gK�ۥ�Ţ1��㷛�D��6��v��&�4n �]��~x�ܥU A�@Q�J��+T�}��: Kɨ��-A79ݮ�|�<�k�a��{rw�z�֯�û��!��o�l�X��vXe���4�m��N�v�z��CV$OT't���|q"��1@ܚ�\\B�`R�3�7��.�mHс��3��1�U>u�N��7��g#W��r���������u��?5ĘM>�� �Q�2��k�N�T;0n�e_ˤߺ5O'�ݮ>�;�����X 0}ҽ4�=6C<�q��n 04#����� 4k�j0�:�9��l8�K��AZ<E8�u��e6S�+�F@��psk�Xu8]�{� 2��Ը�ћ���,Xrթ2�(�����Y]R�.%|]���*T3-{�*7���B��L�WA/�2�UTya� ?Û� ʞ XB,�tdrNغ��ؒhD����;���cg٫���k\���� :)�3�r��7���F��I��ډ��H؝If�嶹Q�R�Ȫ��_�����p�K�<j/G���t:� "��Y'��K��. �h>��C��N�<O���ۃ��#D���l�Cf����TN��Ug��1u��j��Abm����ۑ�0@� y��ȩ7�"<��R?I� �D�ړ�1yY�ó)���BhC�1(��/��z�ȉ��^�ꁯiܘ��.T̋Ԩ�9��'�9�Z<�|��N5��A���@����A��9���O���U!��/��L#\������3��>�� ?�8XC$�W�ga4���s�j2t��~��v�ZcQ�?���Tx�'jb���e(m0�X���D��U�6삸�[e*�蘋�n�pߍ���2ɰ6��6�GY:�gP��w Ftv�(�\I$71���q#�D~���q�<����~X�ȶ��6��:X�Zh�1�3<d��( *���ŭ��6 jl�f��#HpʜHГp�P< 8t�����E��{p�B]�H�ST��}EU.�J���l`1+X�ye��~-�F�'r�>�_ B�Kv<,�ň�Ҩ�OÍN4K:�+ ��v�W��;E9אT}6�VdFM���8�)�� ����_�zP*N�Z�%���ȼ�9�A[K�iE�Y�<(�����)?���f:�Z�Bͱ��sn��Y 4:0�?(X�윁�F����v��CU�� �z�a��'1s�����Q���i�|M�P�p�,�)N���]�� ��>������S.T��#�k�4nr|��lA�b����z�jN�����N��c��]TI�3��{ߓu�.0�4�k����꯫hA����~˽������ߠ�[�x~o��&�_4��b��J�X�E�%�k����/�������>�]s�<��^~�.!�zTt�����C�(�}T�� ��͕���u�=�mC�KWΙ[Z�r{���9�Cu���;n� |��܀���DƩ��.��H�o++?zvƨd��m���_�md@1�����[���m��Ɏ�u�S�J0�==��>��:nr�M��(%��b)�mn��:��g*���+��떙4����}�ثg�q�49����6���dh:Q�����ͳ_ֈ��s�)r�F#9'vB��<ި��%W�Sגּ@�c���[bX%|�Nd�h[(rc��u��$�#�����?���ɾ_�z'�g��q8����/DUGO|VN���:��~e}�;#��p�3�J�9�&A O]�U*Qs���^x�S������UP}c즭�M�����-�B\B�Q荅\��y�� )��q��%d�:P3�=L���&�}2���S�m��&м��4�U~�2CZ0k7~�j]:�f@Q�H��F�` %( ������̮ #��>H��%�}S�\pV�s�\����tf�ҥ ��Ȧv�G��W:M��G(G�ry������n$����I�?2��L{do����S�J���x�<��Es�n��!�FqK��������(����[RK�[�X�A6�����/{�O����bDCH�+|f,��% bS�pR������x3��s�P:t�ꮌ^6Y�P=ⵈ���N-8�k^*�9�j�m��g�P,7s1�%H ��� ��f��g`;��go�0҂"��.���FwZD��5��)��OmBOmUg_��8w���g��ާ�g&��c�z\�b����~*�5AaRz��&�G8��WY˅���#]�#8T�Ǡ'�z`��hj�������"��Kx�և0�l�1�ҕiO�^����Rʗs����9��WW�} ctY�,h�w���D`�zìP0�)T�O��02x2Apc �#�N�m�FJ*� V+���|ϫ��u��,�5�M���~,���4���5xK�)�\�{���o��ό������|[e�������k��ո;�3g8�E<�*/������Mfq�Q3��g����8d����ZEvN�����p#�o+�L����힠�����Zpd��CX ����zMwr52��x�s��t}zǜ�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ