Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
d80d19b5b92c965fcf1e22b5251b973c_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
d80d19b5b92c965fcf1e22b5251b973c_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
d80d19b5b92c965fcf1e22b5251b973c_JaffaCakes118
Size
4.8MB
MD5
d80d19b5b92c965fcf1e22b5251b973c
SHA1
c0e6268187605194f34c902b7fd62a6708e5e2bd
SHA256
3f23bf02355d1e0430ca89b5b226a1ecd09dbadc8d6576917d6705d52befc77c
SHA512
4cb857cb42a4520f39d2cb3548ecae76c5efa254dccc9ebad698bb5e7ec66b51f8807cab94c5283ed1ff611fe1502ee01d2a66e89907f6d8fa3c9e0f850e9bea
SSDEEP
98304:aToZxWT4cGTNimIHT67TcnfZCBYqRUbeG5EMlU8jVw6Vd:CwWo0mIzIcnfZCiWUEZ8jVhVd
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SHGetFolderPathW
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
�࿙� ����BG2�-QP��)��X�&*"_�2T"���ܫ��*2���E�C�>@d� �8r��s,u�>��m����D�r��(�Y�`���]���yߩ캒�r0�g��c2z,5�W�Z#wV�n�i�x)6KB9��j��/f?S�3����Xw��DS$;��%O������W�4j�R�o{�5|$7�{����w����-y�����sY$A,Q����3M9���n���:�Ay�� raM`�����~��^j(�*J*=M�s�%�1y�y��Em'Q8K�L2Q��B�9��-�8>�A�&쁥v�]�%�������h��}���������4{���A\<�.X��A�"���nx�A��z}�0�.��믡$�>$ ��,i8<���+��q�U�p��-T�I�����@A����9!�����80xQ{V�K�N�6/�|�Bߪ��ؾ����j�Q��NPE��x�(���AAS�`+v�����]��o��.�u\%Uމ���D.)H��,Ɛ��"��o���Cʅ���z�L����M@d<Υ����?N�SB�=#Ln����z�����;5N�>�����Q.)ۘYP��msMX�y+�E��yO�k�?8�X�;^]��c��r������/тp��T8JG NH����=Vl;)e�}�ZS��3� % ��a��Yɇ\�� ���C���0��P2�� �w�R��oG��o�S�G�����rs���.�Q=re�����j�.}?��Cw+_W_'^�����!�i�q̓����I�}����ץ%�O�d��w��?2Mοl|����K�r��{_L����7�R��^c�Y�T��uz:��"��7��P�|Y�����e `h<wu�I�:��U�̀�<$�|j�+(�k�0�&��w(tT�3��xh"S{��:@j%���*X��Q�S�LlP�YOt��&=��sgj�GY$[ a)F�3���u�{��W�����L��dB�T�L���T����ˁfXA�&t� ���6f?�*��)O\�y�a��1#��+��p����Ö�v>N8|pȊoP ��Ү�y�J j�b�o�z@��iDW�ڮ&.��y/uѬ�r究0� mn�Ά<�o?AqvH��yZ�����&\��|k7�ڕy��*��VQ<�����W���v'��b���d#�9(�4f;� [���_e)_����A��z�x����vye�:�9"�L��j+��B����N�⌮�!�^voX��Ϩ�+�#�� �"kf�E:���6����L����uu3���h���[ئ-+�H�u�c���m&�W���L��Ϧ���GWV�ʄ�; K��$<j��Ce92����t������Rpl��{(~�B�,X_$���ce��Qp�H���ĉ��ĥ��o�{0$�R�_�a���%k���VP(w%�WG��V�p����N�F#�ǿk�D����� %�Z�u�2���բ��,��Vu�\�Id�W=|#�2*���nF�3��`��څ==�wQL��jk=�Ú�4��&?������$��m�`%�y���-��a�1���b�!<[���r��^�h-�x�C��.�G)C�`,���w��tge<��>v&k���>�C�0~�$�Y��/��i63t���~��&�w�F�?hﭯ��/ͺ�*��گ�r-�b��.�:sxG2Q]����k�&Mr��a�P&��4�4���3tƓ���^5Nwy�dBl�-ǹ!l �- ^��O���H�Q�7XE�y-p��Dՙ����։�O�+Hg1����-T����(60���e�w�# zp̀@+﹞�t�H�xa�|���6�K�~X���`m)��|hu�):�U���$h�8� ���{����y�!�5J8��ե]6��a��>$��V"L���;ްR|u�t��-��AA:�У�.Y��O*�X^��q�f�os'��(ef6��?�>^w��ɿ����:�Ҩ�W��)Z���#m>�0�K�f��nr����9��ɏ������u����;�|J���th�N���̧H�N��e�z%��)�7���4#)aJ����@F���1+��u��C7��L�G�o�u9e���<�_��s��w��3�;�qub��j�AO#�� W�B�����g@ 8���������dM��5%��^хVҸ�yk��fH�r"Ǽ�<���QA>�`͠����51�0�R��?HC�Ik�|�H��0r�##@H��~H��_6ɺ@����,A�-�J@I]����_�mjȳ�.��)jC{ �t2��Uя���T'<!k�['���!J�ǝ�!KQ�����(��f0���k�A����[�Y���P_��2��;�Df�N��i�ԝ���m�:V�'x��c��A l�p��I��'��2�5��+��z�/�C�tC��C w%�F�5ԽAzM%���� �g��u %�N=~��$id�R�"Bvtw���G�����Ac�CY6<[s�Q�9��iY����i4E��ZFCOnt��i���b�$��*Cy>*����d-��߄���t���9��Ɨc�#g�|إ�@ �!^[$�ܕ̰��9d���^(�2�z��4.�0%&p =���I��вр�[)� ��箃H/�Ì�ֻ�s���I�UA�� &�g���9���̇�h 샆+fb+x���u�ڤ������j�x��r�KW� ϋ q���-?�^��z����2�&竜��+b�����T���v��ӎ`�y�Y��Mu�%<�(2%]�$ޒ��I�"HS^��Z� O7���g��&>&�b��͍ ��Axb���8���|8,l���a3���эq660��q,��g�Te8��"�0�+�b�VgҒ�q3��Oc8�Ɠ��F+-?�o����#�#/^/v�y"���ߣ$����f]�,#X�x��'�5� ɸ�������&K�e��'a~�e�����T�N�ϻ�c����N�O�q��k�oF��,'"_���m���ឱ��gD&.��,*D�X��U0�=�x+�\7�q���ZY"�u P�h�c�7h�w��?lf�l� �
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ