Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
e956641c1adf341824b472a27f897538_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e956641c1adf341824b472a27f897538_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
e956641c1adf341824b472a27f897538_JaffaCakes118
Size
1.5MB
MD5
e956641c1adf341824b472a27f897538
SHA1
8accfb1d1bf535d7820244435d809c9512faf0be
SHA256
24a9327c90fe9b6f8453caaaf09ed495996909d8364f9109fbe7e4643b033b86
SHA512
39b302c06fb8050a88eb14865b60ca7b4e783bcfb481d54bd866ef40d2724e66b0bda64f7b6c51483bb9ec48da870d2d62b719f28ec2a31f34384937134dd006
SSDEEP
24576:wcFxiMcgTw7rCcUYVXPKgrDeOF1MWVHXr0pGzqp3gu8Xx7Xur0EnjnDY3MWm3A6f:wEiMcgTw3CcUAP5rCOPMWVHb0pVQu8Bw
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WideCharToMultiByte
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
LoadIconW
OleInitialize
SysStringLen
�Nx�r�m��9�Y����.��[��c9��=�3�����[WhbCZ�o!����6X}<l��kɔ��f�����$݄@�ἧ� ��� ���i�K�9�d3ۑ^{�������3�h��,Ù� �A�VX����K>��"y2�I�I�㵊#��� щ��|�� ��?O�A�w��g�Ƈ��.yZ֜��@⒞h�5��P��2�-�3F+?��2G:y�����a�,�E�*;po�ݡ���kR����߫�5M����]Ë69��a��òP��IH<���ԗ!.k�H�Y��JF }ǯ�U ����<�`�x�����RP��8� ��u��щh�C����Y��M^����T�!�%&O�����Zz���p���> @�c���7��տf�Jh�^]�V�F�c�0k���bXk[,3�9SN@�m l��f��Y��)~�M�e��V��Y>���a�%�,܉,O��'�I�w�����&F1`<�Ez|A�y�N%������D�u�}L������~hgg4ǽE1�3b�h;�'�'��J�D�G�%�������������8�S~<�]Qي8f܆p���C�a����)�R+8?�َ��&LJ�����+{�8����u��d�KO�4������}�/'6Ą�s�ȟ��N�k=�$M6�,j��x�>��*L��by����Ev0��d�Y�ʑ#��Iuf[�u�������k*c�&�#�ܑ���2$A�>Xd���WL������=�v�{�#��\���UVZ�����*�Eh/$�r$B�.K�n��G�և# �4W��w?�}BȄ���H��L���qA8�� B�'4Nį���Խ��U���bJu�EE���~rd�E����&�a8ۜ�s{ʵ sN��;���1%�IY(OD�v ͡:���|��pbu��!�N�woU�T�o�qmT��썗��q��.�.s;p�B�H�Y��,{O���p��%�4��K��\h��)��D���0��c�X�]@,t�;�UU�]��x�����<1`:��u���9!>�7wZJ���=�g�>���!��#��P����>�3hHd���X�u�[t��5vP�E�Z)<��C�0qX,v�d��{�P�C�1�;l0mCA��c;ؽeeVht��8����lSB�˫�>hɣ�$������v��B��� �M�c{��i�s/���U�J��*��Avtu*�%Gئ�G�f��������"g��(��F�߯h�pS�ب.��q`��GR�>�p��}����1h����[U���/ï?��c�cWJ�S��k9�7χx�#�FCݲ ��s���D{���G`�����0�� D/�JW����c��p S�\�8���Չ=Fr�Q= �; ^�#�N����O�t���a�5�[��r*k^�/�Q���A|}�!^�Sω�[k%t�y}�l$W���+1��.� ��~����WX�9���~؝V�:o�l�Cu1��}�]�f�����\s� Uޥp����f�+>���Y3�� jni��3൵P�Q��q̢���Lg�X����f�@O�5Q��_�������F�Y�|�svUn 6��j��`X�fɃ8�@�C�1 b:XF�x���_�zf�K�%��(h��%�j��������h����*z�*~��Æ�b�ߔ��B5.�|�N����,I����I�����_�*���8uݧiF��j�<�uKI���D�N�-�\���b���?_p'$~����)�_�겷�(jǹ���F}�0��%S����lh~|H���d����`�+��X5��b��Id%zZ�RFE�Q��XRP���������#F](�A�q���_��d��[,w@��*��{�[U��K�vL+��Gg�Z�, `�1�<�A�|%��ɳ���0���d>Ew"�r�)b�|��q�D�e w(p1�p�w�𠤑��ݨ<t�y�,[pvg������ک���hO����>6[7�nӨyG@�SI ~o��K �ɘ��<��.t��� lQ�w}��p!Kͣ-��a"3*���^�m��[�V ���}����U����}�d��hH�r��N��1��)vp��cY��f��ޠ�����B��H��*X��P?�F���u>�\}͵��}�OS�6|���v��1�,�%��wM�$ �������R�Y��L�OsuÙx$솨$o]�}ۮ��6]QK�����F? ȅ�d���og���.*.���{C��8����0R�%i�"�s{��ɹ��qÝ�?�5�@]����>0��m�6��]���+�<�T%�a�>�x,�>����_|���ď Zyy������I}f� ��e��8ApDZU�����^��pP�����aK��*}۷�'J�uz=@{%�Y�ȫ�3�B��c�K�H9-���]� ��a!~{��k+l��}�W������xYDV�����xy����$!����&�;"��x�S2PW�������ެ[cꯕ�L֪-�K��o���B9ib���0?��#}.��z Y�h'�h0 g��f��J��u!��"�b��]�T˄Ȱ^NF�w�?�+�"D)�e+���F[�ҥ*�A��@ۄ���f�~\+��/ ���f���l�)���r��!�g�`cQj�Vg�Z�H��{�L�(�]uPLՋ�� t���V�ڶL�Ѹ��Y���c���QX���-UP�D��r�$��ӽ�Қ5H}&J��t0����RZ���׃���F�]�'*&9��[�3�q��au�dI�"�N� ����궵V}BhY��ˇe�����Bv�D��ʓ�a�I=�,���K��5������Lb�l_G��w��B��P��X��,@e#��PT+@�]��%Q��0��� ���Z~�� æ�_!���^���b z��k<���7������cy#��?��S��|p�#���8����<�L�� �b���#������Z��^�a��ӡ�@��7����Y����g=YUZ�3�v�Bu;)���� �0�]X��Ox�i�[s�G�����l��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ