Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
e7316d249b95977a2482611fa67f926a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e7316d249b95977a2482611fa67f926a_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
e7316d249b95977a2482611fa67f926a_JaffaCakes118
Size
4.8MB
MD5
e7316d249b95977a2482611fa67f926a
SHA1
88bd38058e42ea3db55f4dfd2fb8c2d7484e0632
SHA256
c3efba1324b3fffa903e2e9a0e25ff799505ea25b6a48db7acb691f57b0b27ca
SHA512
0980dd50d9dec7146ff0a351cf66becadc97c11b3b13e870d9bf758cb380641ab97ee693d59465b545d84944afa0926a80d43be4ba76ca0ca5d2db1529ffc962
SSDEEP
98304:MZbhVhPGHLuHQVnfB2wzjYZDcOy1yYTsdwmd2BpRQgcZPD9JM0B4B:CMqwZfroLyrOwvLRr6H4B
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SHGetFolderPathW
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
Tn�.ON��2�)��H�g�K��1�Seo�b �N�q�HWcm��t���$+�^�4au"��Q���G-��g��vQ0w�U������ d��V�����w��5�:5&x)';�c%�T�C7>4�+q��m��4�8.��W��&嚍���O�17Z:M�d��U{/q�#�O�\a�oxlh��R��ŤfjKP&B���L�" �2��S�y!�y�>Ybؗ�����(8>�c�R�<��x$�%�*6���$��y�Z���M�)�o��A�(6�le5� Iu���5��=�!|��� |X�vd��Es���U����$����P'�ٚ.�؛V��قY�Ѕׂ����?N~�^����e ���dC�\>����ݞ?gv��r����R�@��ƴ u���$Ē?�� N+*���sf�/7~�AƻBTq;�$�E�7v�.!k��҉T�~�!PU���@Q�D$�b����[O����ā�N����/-6e�ͽ����)��'$ղ,�O�����ҫW�i6[�+�G^���t��̲O ��Vd~���˽�݆�t���8 �H0�0v~����#f�BC7m��s�]�R�W�fºl~��n/���^�M�D�2�Q�G�᷿iHs<XQ�a����z�� ��5(m�pCW 7��w!�f����.{�a�kJ�%_o�B=�4�Q����ȯ$���O(^Ƽ��)L�Z d����6�5���F. C%=��綇�� �}����Ad�`%[�,����W��Pl@rG+!��Q��7]L�5����1�)�}$-Һ�[���L4 ��eϹ��Z�I��}��p�%4F^W�X���A�K��Rth p�Қ����<� 0�^s�!;o���~�~��!��5�g��!��:g���`&L���b6�~.��B�)�[�����Uk����L�y>灵�G`)���B>[�5c�q ���24����p�NXTJ3/���JD��]��0肓o�%F6��s<�ڇ���q]1E���ݞ���: �^�}[���Yn�Y?K��X�@[_�%�]��F�͌�1ͼ�����#� nZ�&O�a�=N�5v���N(���E�9�^�����i�OY�}QW[�7a�q�����Y{��:���h���U^BN���&Lg��;O���s��+��L3%�����%� �n��9*-��{��x,�-���G ��=ē Eq3���;_ipe<��zP|��ʝ�ZW�g�{H����h��֎���f���ETqޢ�Uq�{FP�D���l;����N�%�[�i2��+}揘�^_��)5�t�F-�����&w3�l8�|�gHO�״As���VC�����C�>I'�A���p���fct`�.�>1�w�nʶ����UY[��>��YB$��8�mM�"ri���#u�Bֻ��c�?u�[�l���:&��}8n���@�(�.5�2��u�TQ3�o�> ٓr�^��B���c�.���X�4�z��2�dj�Vni�<�7��L5e 9��X��\�?����t�F�z�#���^�>]է�O�5�w�����&ڻV֎;� [���9�R�b��\ O�]�\�����?c-:z�<�?�u/���@1�U����XÃ�8�e!�-nu�'������UK�� ���T�QF:Ï]]z���W ��%��G;n�TU�|o��H�,P�{3Q8NI��}[�&�+uA�� �/��i�n�H��Ť]N�jh���y�yAc�ۢ1r�]�P7T�LrA��~_�aU#��3w5�vU��ֆ�f4�R}9ڎ�W*��e����|̜ʃ���"�f&�vr�f����?p}�^N��f 2.��cԝ�:�#p������F �$�Qڊ�R��;�\�_F�?�$� sG��Y�����r0VR�Jl?��)��w9� ?h,�f���P%�,@�B�Bj1��,6���t��i-��#&���� �+'9��Wҁ� �}ikeE��}g��x���E����Li�`�/���3ш0#N�'#.ϡL�=�j��*�~Ɉi�`zJ`'1����LJvY�5z�p�G��f�k�j�VqYK(�tB�C�+���, *����5������E��D�!Э����F^��f��+��J�vѿ1Ͼu氘lG�0\p +�@�'3��X�?#3J� K�J��gBk-lwp�,:���c �@>0��R#᱃b���!#��NUr�� ��99�hRuo��*z����3�����sFű�n^Lf����,R �)�\ޢ�|s3����N�˟2�^}��9��Rą�9U}c�M�B�v����Bx��M/JIΩ�T�SH�g��ҳ!��ieG]�D֊�`�vl�s�X"�D@�>M:�F�zTYF�9��BNyՆ4r��LFz�k�X5@��D^��FYh�^d�*���AOv�E�HAb�b �Uq��X��U��Nݼt$S�VJ!�TM�rw0�SQx.�\�{�7�2��@��WR��D0t �TZ\lE��Y�^�VjI�¨x"+�Y2U�|+�E$Ī���U�}���d*����p2Iջ��q�XMBu02���W��YC/�p6=AB�ł.6���4{��ش���FK劽��6}�'��[���|+HC�n)��n4����z����ԕ"J��xjt5��*��6�R��W�F\�P�˴r���W>l���l�/�N=GES8�;��!��U�)n�᠇���~�@�LQ���Bʅ+j�^�x)�s�qh-m��������O�D,�����bxpE�n@�A�E��������з���3ay&���PX\0@1�(���n��sFP��Ë��9�h��v����d~��n��m$��%_��� �QDga��CpU��a��ץHNy�#T�m�Ϻ�QfcP�`�V̠{872�u����0�;v��|EhF�$��� �!\�V}�w|���O�g]��x�>}=�H������#X�=I�)�+�I�+>.ڼ7� �r�I� ���v㧊k������({a����[�O�2�:{��@�x�M����DM1?f�,{�F����|
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ