Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
ea1ff194407e37dcdb983c2a073afef6_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ea1ff194407e37dcdb983c2a073afef6_JaffaCakes118.exe
Resource
win10v2004-20231215-en
Target
ea1ff194407e37dcdb983c2a073afef6_JaffaCakes118
Size
1.5MB
MD5
ea1ff194407e37dcdb983c2a073afef6
SHA1
67a05488d22e4f410a9d7893eb1d1c0d13c28490
SHA256
167922d1f38a49c8e578f2d5f40226925e685784d71680df93155460ac711510
SHA512
6143456268593211bd3ef01874de4ba2242e40f938ae374e7c77af2d74a2d67046be3702b17c770a8072f611dc22f59aa12f5d2090a2150015627f9add0d10be
SSDEEP
24576:pB188sDewcqZKWbzKI98KSS5MMZW5Z+8aG0GT47Ynk8JxED1JePxwrWUy2N7aBio:GDewcqZKUzHmA5MGW5KGSYnXqK/v/P
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetCommandLineA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
DefWindowProcW
CoCreateInstance
SysStringLen
L������[Ri�HB`�c��!Qє���������4X^&/ph�������G�Y����"#.�TSiB���7a�o�N��0�6dDS���@T|?�T� ����k�=pU�j-�)5��+�F������D���;�q~��� �[�V���g����<�=�5�о 6K4u��0čɓ�K���-})kHk���V������D(+:�k��1�a��pLr�� �+��I9���tjIXx�cto�acb����P�PG���_]pz��B�C�˸�8{��e�i~���3&�s��0�d�v�ǹ�e$<a���T��Y�5b�� �Aˈmej˛S��{N��:�;�ā�yG�����ȸY?M�Ͽ�����f�)��( |�_�� ���M��kCZ*{�l�(���0h�k>>�b��͝ �{a>��&s1$�K��ċ�'�A�X�j�*ʘ�U��|�()LFT?�Z�~��5�o� ����u����:��D�O����V��s̖|uQ�&Mҥb��t:0�*��(N��5�f��OO���� ���[�W��8p���5��3üf�0�΅���G��"��'���}̧����=���P��Wቡ!��_�jA�8Ё�{I<j*]��[��rN�_>�T���%�2�%p�v�*G?��J},��j1C�#�J��|��e��SOC��*�ٞm�Y~��6�'�њ+�r,��)��s����C,�F7�(BR����ׯ��<@@�yz�m���f�}J�!��f_��65l/�!�0��Z4r��&�5���|�뻳��.K�l9�����ڪ��u矷���i���܋4��ö��Z�~2���!Kd�_�S1�e��v������G�0)B�Bؙ �������p��+n��jQ�#�9E��aM�����{�!�N�T&h}��� lQ�l�E/}�G+?Q�QӻQ'���;�ʐ� ����,@7�3�����k�ʰ�G�h��\���_F�`�IB{Q0w)����A�)i��ԃ{�8����I�|P|1�͙F#)/Jr�o"�ܻ�ry�>Ű[���^������ y�c<a*�S��A%kKr�e�1��-�V��� �b�U6����"�j��J'ERJ���q��apXa�N��w�G�)K��e2��������l�k��!�o 徭���3<�����-1y��nMgD�3�a���UG��A����Jң-�_����o�Rj%e���<�H�� ��;T�8�z�ջCd$Dp���y�ӊ�.�����{� ��]1`�3����N��Q��D���q�*#��e�Ŧ3>�fh�N,0��Iʡ�"��礮�l�q3�/n��{�_�9h�[?����o���}� u6� �%ө�bR��r��D�b�s9_��C�㾽��W�yܾ���4��T]�pݠ<����};1MGӿ��~���A!�xB�-�\�y(b�����r���Ad�e9��C՞j2��z�iX���-��I���͞1�(�c�$� �賝�ڠCuMI���#�k)TA����O�4M&��#Hb�!�j���D �$=�$��Rry�E���8�E��ϲ��E'؎��ZV�0q�[D�o�;h���W^0�`j��ߌ8�[�8�C��v0}d�C���n�$�����(\1m�����V|W�뚼��6���u��哱�i�1jF��#0�qe�����Z��9~��0�:��p�y�g���hZ0����.p�~���&LH��-��,r����/^^�t���b�v7!%��7�!�Z�u��g舚��O0$<>��A�ɏ�">��rC��<����\d�<��H�h�Z3�Fj�7nUu��;�כ�8֙����eѫ�ߗ�3t��uli�� �ɋ[c�$�w����0�E������Om��*�v�m��e{�C������1�<DG���߅�����1Ǒ�߽��/M�RA:�u0x���� I~ա�wG0 ���ai����Ņ�W��"��vջ��F�W��X{g�W�wsF���x�{��^�9�k,���k=��<�}$��8%��s$;��r}=~��/��Y�x�s?R�cq:�J�uC2S��$����Ԣg����W3ah�&�4��Q�u�>�N���+l�ϓ����HB����4Ƴ'���̫/oس!BYs�pQ����P��V+��U��gĕb� rSq#z�e��܂K�Bu��߿�@���|�����w6���K���^�ZR����-ܖt�͇��k�7?�C�Q�D=�̗92�_��O#Cm��R�iw �"%X:<��#G��⨻�����:6?��|�pcx��31����F��~��`^s�Md��|�F|��z1�[���W��f��P�*.��K3�n&+:cr3�ȿ�^�;�<�`3�}UN��ۑ��F Z�RȟwuU��ȌVڍ���* �=��zR.j��1��r*F��Uf�d 4�P$��_̫��6m�K|ɴ���� ����D'_����g* 6���0��q��7\e8+*q�����SUJ� �F��X�\��'ڋH��E�r�^�����"B�zH����dr�&�2�eRď稰&�����������fV�8\����, �QQ�f����ҫ��;�X`��? ʿ(6%q������l��r�P53 ���]����홀�:�������Ӣh�����[��6EhesF���K���y�7��P�#\ ɽdG�#��c:�L���?I]��R�C�>_6T|[�"��nj8 �H��:Ӹ�/O9�w�/���9|j�s[�<k�W��r�>˃s��A�2��<���f�mӺ���u+���T�����_�p}�p�С�٭02�y7y-�` �n?U|�T;�~�/;%�_1��۰�c"F�� $�� @ܦO��Lۊ�M��,�_]��S������!7�W�ݱ�NAp�>+yz��τ9`zI� U���+H���f���F@}&Z�sO�MG�q�T��VW����y5����}�S��"~�d�������w:���<��@�ʪ7T�/�X�_��� ���P��˼����@�ļ��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ