Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
d9c78fd7543f8bed75fa812a7ea0ac8c_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
d9c78fd7543f8bed75fa812a7ea0ac8c_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
d9c78fd7543f8bed75fa812a7ea0ac8c_JaffaCakes118
Size
4.8MB
MD5
d9c78fd7543f8bed75fa812a7ea0ac8c
SHA1
5b35ef6957ff5f0a89c10456186dc6c1bb746fbe
SHA256
5a3401e2a283b349077892c16bf5021ef37ae7d2dc2bc49cdbc245e56033a6cf
SHA512
df47472868113e3b82c0a56cfd9798144ffbc3ec045423d1c5de9fe1db675ab366691e46c4ac916a776e4c21e9819af4975639c5ef521982240838b4151d170d
SSDEEP
98304:TwyjCHeRnkssAzbrItl7OHZRHoLm52Kd/GLz9bnJN2ItDn6KKKRFQ4V:fCaR9ElSZJoLm52KdOPvztDnx5FV
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SHGetFolderPathW
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
Q}W�ɚ��t���a�����dCw���z 3�nqϚ{��\^�r���͈)�����JN�^C���GKО�6���3�D��릅���N#�����V��=�g,YQiY��-4aQ!�͵����q�o]�<D��炪�ḕ�8b���*���:E'�)� ��n��4���{@���8`�{�������вmD�BJz���X s�z_٠O��"w;����ą_�e'�"%I��,xd��2��:1+��F���zr8�%�b]���#���z�CF/�Į�2+7#����+���������c��V^ǟZ������-�ﰪ މ(d:�W� �Z�"�AG���-Z�������P��nHH�Q]K�_n|�F�%7�T��U���)���$"4�i,���(M=����sHoIϷ"x�L��ڗ�Z�+ qOJ�**MZjFM������`.��i_3�5���u�"��C��q�ܣ��T�~�Ѧ1��o��\��H�b��y ?�JQ1_��2 ����Q��%�&���ܼ�@���LJ�kho2:�1N��&�R��!���9�������^������F[ ����jH[6[0hP��Kd�o�6�,\� {5��X�(�� �5ZZ�5/�t���/ӹ�y�p�v�f8� ����Z��r#�A�XfW�i�K{�߁�?�#uƫ *8c�DY�����b�A�VnM4�k<��{�aT��d�{*�����h�W��.��@9�yԆ�o��4M�}v��@[�"�ye��D��) �${W3����E� ��'[���OJY������̦A���3��c�s�IX��2HE�`[�֯�Q�hj9�O�P�5�f=_�N������[i����\TH)����g˅�)<��VN=q�-'Nĩ������2�"���ݴ~���m���K��j��D� �t�����{�w�>���i}�!���=�)�t]v���d�_�,��V�����z�iX�٫��O���õ���γW���T8mH����(����]*4�gtT�!��a�%��^x���������ş�������h0���2q^���,��R�Q��偰���P�O�Y/�{v��o���$=z)#+XOOЄ��[�$+x3s4)�lɣ�}?9UV �n&6�0�?u38�{k/���N�X���>{�*�q[�<�uG��s7?�g���P������96�Vנ<+f�>�j��w� ��ހ���w��O�[s���[׳6��"*P�:~�I !��{�+B<�&��D�W�rfE�}�mƍg��5��ϻU��|<��£�[A��P�y���~,�k�R`�<#��_e���L��A|_����͔�X����(t�{���&TJE�mAH,�,�A�`���c�E�~T�yo i%�X��f��W�Z���jҀ�9#�{�qY�s�!�&rK�RaR��6xe���π;��i����+��~g����[��;�c[`}0\-��Г=�0���-f�<|g��@{ �=#��'����U�!�!(�0"l�����V�"�)�/�ѳP���91''�ʺE��MX�Z;Ze��%`��Ѐe�6 {���]���K`�x���eԯ-�q#p�gv � �.�1��S��o>Ӯ%g˔$�5������V�����ay�A��%�9��I��rVuwK.��w��.V��_�>Ⱥ����؈���}�Q�/]��A"����ݮ��@�q=t �Q�3�`{��c���܉�����L.�Wۏ�Uq}ѡ�`fR6��u��HV�6���]���fvg�����Y�a�f�<N�R��<<��%����~qQ���* �"��u��[g�gd$��~db�̛W_B�ڞ]l��[���@��SrE t�`��/�yr�:fM^\+�9�� ��pw7W�ԤZ���AU ��FetU<!Կ����`���C���*w�Q7cc��t$6>?9BJn ��:�0~6s^����B��A�K�\�q� �³A����{N�����2+�(��E�Jђ�������f�Ȍ�y���p�1���j'vz�*��ӗ" ̱��FI5����b�-G34�a����-�H�t��w�����ev!��}5/JT��L��LySG�����j ���Q���hE� |�b<��A�0`1�ӭj��K����QU|j(yG���}qH�Cz-zʣ(r���D�@�֗�!Ǟ�c�����/�79yk�,Y�t����4����ZO���y�e�7zӟ;��}�}��c3�� �N���_�thc�{/�|� zc ���>�~�t�뺙��*���6�.��zg&�M�R*J����G*���5� 3 ݱ�cm��SVTjŶ���E���r&=B��C9z����y��QWiρŽˤ�3n#M=�b>��Æb��/��#.�-�>v��n�����X�8a�MP��܅���t�����F���۷�x���7e�/����eܳ$3۽9���~}���4� �2 /,n���Is��u�M-ݠE� �?� &t�.����%�aFK4ؾ�̀�fB��� ��DТ����/ޓ���N��.�9|�my1#��J\Z4�q���>A"O��@����0y5N�2���=��.�܋�����6i맪9�4:˱W+��.�G�R�3Z�Os�h���m�;4 .O��ٱ�P�eZY*h���N"j��p�`>����xi<�ȣ^��;Nq �*H�[�80p?y��r_'��<*eZ3R�5z���g��dP?��=�{<Ս���*ǯQH_Gk��(��~��zLB��@I���_ ��I;�h��ՊOP��\ۗ��9����7M����F ͕�TxN\�{I��M���w�VƖ�YF�`����'����&�0�تU�fO@��@bR��-.�N�H�6p��K���\����s��>��. ы!��q}���5*1v�lnѼĠ���J��U���n��U2W�e�N�o����m�qr�l��3ژ�-,��!�QTkћ��kW-4ǎzS�C��N��Ո�C�����Kz�u��t:a�":��/���p��OF�tsi��i�*t?NT���|
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ