Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
eff6109c74c67982284b56b011bc7626_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eff6109c74c67982284b56b011bc7626_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Target
eff6109c74c67982284b56b011bc7626_JaffaCakes118
Size
690KB
MD5
eff6109c74c67982284b56b011bc7626
SHA1
88d4a61505722888a01af96a5a5a82b44fe0b697
SHA256
22ee311e86364cc391f3732971254bfc878a0db5a65c7be5079d6baa15e8d044
SHA512
4da8a4a54c94ee95256219cba82f5ebebf814733acb5810a61af44936042b9ca24cd4f7eb0de30e00c32eea966a666c70f408be467bbd33b86c32cbb728f2a08
SSDEEP
12288:uGQJcCvSvGgrYO9TaWGGGFzPHCLMrjNX85+CbjD1h4ROGF:eaC6vjnGGsERvAOGF
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpyA
AssignProcessToJobObject
LocalFree
GetCurrencyFormatW
GetTimeFormatA
FindFirstFileExW
GetSystemInfo
GetConsoleOutputCP
SleepEx
TzSpecificLocalTimeToSystemTime
EnumLanguageGroupLocalesA
GetModuleHandleW
ClearCommBreak
GetTempPathW
EraseTape
FreeLibraryAndExitThread
GetPrivateProfileStringW
TlsSetValue
PrepareTape
CreateJobObjectW
GetACP
GetPrivateProfileIntW
GetSystemTime
MapViewOfFile
LCMapStringW
SetCriticalSectionSpinCount
EnumUILanguagesA
WritePrivateProfileSectionW
SetLastConsoleEventActive
GenerateConsoleCtrlEvent
GetWriteWatch
GetProfileStringW
UnregisterWait
FindFirstChangeNotificationW
GlobalUnfix
EnumCalendarInfoExW
SetVolumeMountPointW
GetFileSize
FindAtomW
GetLogicalDriveStringsW
GetStdHandle
GetThreadContext
WriteProfileSectionA
ExitProcess
FindActCtxSectionStringA
BuildCommDCBA
QueryPerformanceCounter
CreateTimerQueueTimer
GetConsoleFontInfo
lstrcmp
CreateEventA
QueueUserWorkItem
FindFirstVolumeW
WriteConsoleOutputAttribute
OpenMutexW
SetFilePointerEx
GetProcessHeaps
VerifyVersionInfoA
GetFileAttributesW
CreateNamedPipeA
GetSystemTimeAdjustment
HeapWalk
GetModuleHandleExW
LocalSize
CreateFileA
HeapReAlloc
SetEnvironmentVariableA
SetEnvironmentVariableW
SetCalendarInfoA
LCMapStringA
SetComputerNameA
GetLongPathNameW
LockFileEx
GetVolumeInformationW
ReadConsoleInputExW
GetConsoleInputWaitHandle
SetPriorityClass
Heap32First
EndUpdateResourceA
GlobalSize
GetVolumePathNamesForVolumeNameW
DeleteCriticalSection
FormatMessageW
FindNextVolumeMountPointW
GetVersionExW
ReadConsoleInputExA
GetBinaryTypeA
GetNativeSystemInfo
GetGeoInfoW
TerminateThread
Heap32Next
HeapLock
WideCharToMultiByte
VerLanguageNameA
FindResourceA
GetProcessVersion
GetProfileIntA
SetFileShortNameW
WritePrivateProfileStringA
QueryDosDeviceA
TryEnterCriticalSection
CopyFileA
GetStringTypeExA
DebugBreak
GlobalMemoryStatus
GetStringTypeExW
IsBadReadPtr
GetCurrencyFormatA
LocalFlags
FindAtomA
lstrcpyn
DosPathToSessionPathW
GetConsoleAliasesA
RegisterWaitForSingleObject
DeleteVolumeMountPointA
HeapCompact
GetPrivateProfileSectionA
CancelDeviceWakeupRequest
GetProfileSectionA
GlobalLock
InterlockedExchange
WinExec
FindNextFileW
CreateHardLinkA
GetFileType
GetStringTypeW
GetFullPathNameA
SetCurrentDirectoryA
GlobalReAlloc
DefineDosDeviceA
GetPrivateProfileStructA
SetFileAttributesW
ReadConsoleOutputCharacterW
FormatMessageA
ReleaseSemaphore
WriteProfileStringA
GetPrivateProfileSectionNamesA
ReadConsoleOutputW
RtlZeroMemory
RemoveDirectoryW
SetFileValidData
ReleaseMutex
SetThreadLocale
MulDiv
Beep
VirtualFree
EnumDateFormatsExW
PulseEvent
FindFirstFileW
LZOpenFileW
AddVectoredExceptionHandler
PrivMoveFileIdentityW
ScrollConsoleScreenBufferA
GlobalWire
TransmitCommChar
SetProcessWorkingSetSize
VerifyConsoleIoHandle
DisconnectNamedPipe
GetCPInfo
EnumCalendarInfoExA
SetVolumeMountPointA
AddRefActCtx
SetSystemPowerState
ReadConsoleOutputCharacterA
QueryDosDeviceW
SetStdHandle
GetDiskFreeSpaceW
CreateFileMappingA
FindNextChangeNotification
HeapQueryInformation
MapUserPhysicalPages
GetNamedPipeHandleStateA
GetStartupInfoW
LZCloseFile
WriteFile
RestoreLastError
UnhandledExceptionFilter
GetProcessPriorityBoost
GetPrivateProfileSectionNamesW
EnumResourceTypesA
VirtualQueryEx
FileTimeToSystemTime
FindFirstVolumeMountPointW
DelayLoadFailureHook
SetLastError
FileTimeToLocalFileTime
ExpandEnvironmentStringsA
GetTapeParameters
GetConsoleKeyboardLayoutNameW
ShowConsoleCursor
IsBadWritePtr
GetFileAttributesExA
SetLocaleInfoW
BuildCommDCBW
IsWow64Process
MoveFileWithProgressA
EnumSystemLanguageGroupsW
SystemTimeToFileTime
GetCompressedFileSizeA
InterlockedDecrement
BeginUpdateResourceA
LZOpenFileA
SetCommMask
FindNextVolumeW
GetCommMask
LocalLock
CreatePipe
EnumTimeFormatsA
GetConsoleSelectionInfo
GetVolumeNameForVolumeMountPointA
FoldStringW
WaitNamedPipeA
WriteConsoleInputA
CreateMemoryResourceNotification
CreateFileW
SetComPlusPackageInstallStatus
GetCommandLineA
GetSystemDefaultLangID
SetTimeZoneInformation
IsProcessorFeaturePresent
WriteConsoleOutputCharacterA
BeginUpdateResourceW
GetDiskFreeSpaceA
GetNamedPipeHandleStateW
BuildCommDCBAndTimeoutsA
CompareStringW
RegisterWaitForInputIdle
QueryActCtxW
MultiByteToWideChar
GetVolumeNameForVolumeMountPointW
ReadConsoleInputA
WaitNamedPipeW
EnumSystemGeoID
WriteConsoleW
OpenSemaphoreW
UnregisterWaitEx
CompareStringA
MoveFileWithProgressW
PeekNamedPipe
GetVersion
GetModuleHandleExA
GetCalendarInfoA
GetUserDefaultLCID
CallNamedPipeW
lstrcmpi
GetComputerNameExW
LZStart
FatalExit
GetUserDefaultLangID
EnumResourceLanguagesW
LZRead
ReadConsoleInputW
CompareFileTime
CreateDirectoryA
InterlockedExchangeAdd
RemoveVectoredExceptionHandler
AddAtomW
GetPrivateProfileSectionW
EnumDateFormatsExA
GetShortPathNameW
GlobalGetAtomNameW
ClearCommError
CreateTapePartition
MoveFileExA
FreeEnvironmentStringsW
ActivateActCtx
HeapDestroy
AllocConsole
GetVolumePathNameA
TerminateProcess
SetCommState
lstrcmpiW
EnumResourceLanguagesA
RequestDeviceWakeup
AddAtomW
DisconnectNamedPipe
CreateMutexA
LoadLibraryExA
GetCommandLineA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
BeginDeferWindowPos
RemovePropW
IsHungAppWindow
DrawCaption
�L����"d:��puC�C.ͦ��w��Z���5���%�K�a(9n;�C�����|H4%9F2?����MӠ'���Q ���s%L{b�cNN<��u�!���W��{��ɠ&D�m[zu�k��B�ζ�����?�,Y� �_bH��!��� A����.�����$���Y#Zd=���N������������"�n�]�����Y�qf�Q�Y-�7���,�����q(~1r�7A���j�� ��>������@����c�Y:U�IJ�K�*�p��:�t�B�b�,�ǻ TxP|�qm�ـ1�*7=�������ٍPz����{�i���jjl��Q���2 C}@oJ�N�l~X���@�A�I���d_��.�jp���Eos���I0&�ke+�.�hhO��8M����7&������;7�o�Q�o����:�p^s���{�=� �!����^Te&��3��m��|������w�9���dl �X�ǚ���=Yp�gDV�<~t�w����7Ō���T1B%����\�&_Q��$�*K�*;A��7�_� ͚n�@k���)A��t���d��I�ـ�i�0.�#���>�d�g���(�!��B=סH���+�(��Xs�"67k-$vV�,+�updܐ�i;�iTtD���t(����)ٙ�?_\:*�<�K�K3���I�:)��w�ţR�nh��Ţ�F�Z�����R�W����&����6���%S�N��u�`!��umSݍ��8XR����-Ȝ���ӗB�)���ϓ9,kV�y¢�<T(d|sF8�ҝ�J��ѡC{0Jʊ)�}��T`��ef��y�q]/�|��:�9�؟q���{n�n��G],'�>�.4�{3= � f������^֬)u��'�g��tޟ�$�r[�U����^�r�Wg³a��m���=(�GMA(ȼ���ۻ4�OKı�d�9I�I�X�h�,T�-��2b����J\�{�7�zbڼ�)\����{�i�/�њD�e5]Uh�@���,J���DZL��^*#���w�kNzz�۴(���xN��b������"�\V#���߄���A8�Z��UF�x�'(<���8.p;|�Y(����Thj�.*H��%96��맖m㲴��لε���^�3C�RH@�����Q���߇�-���zM3E/�3�C�\� ėW�")�w�d=���X����x��(��@�&?�3�ztW!�Y��S �O�+���),DM�����9:��T�e���[or ���6��D�_�ů��1�`�J��� ����a4��Iʝ�Q�#��p�����=��"��A����R��}���A�+p[�.6+��,.� �括�l��('�ʢ{S�i<m���U� ��e� ���`<kFsaj����.�k�����p�L:��1E@�1!h�5���7�-�5ǥ?o��k[�D��@_n�o[[@l����=>����VCⅲ@��U�|��$��7 ��|� ��B�6S{�ٗ�*/����t��)22��K����E������*��ꗱ��{�5�)����nڮr"C���[֔����v�����"���Ճ���?�;�������7I��a����a֫�|��$�p:�������v�v��h� ��^&��x0g5�Q&����������̈́�+S�٠���b��4��П��0�,Bq��;!܍������M���t�_�ͽ����w�����mB�4�g����?�6˭�!`��Ћa6V���I��O[I�mA�[nV�.<����� ˥A�P��5-���{� ^ǰ�.ga�GQ��I�Oo�H��)ES�6�F^4�SW6��S��T����2��y���1� ���t\�? 7Z�o|��!�q���ϊN����4�GG�$�C��#�{���r��AO>�k�A�=��Q���+��r�So����)��ݸ,:�_���K�$��0�ޝ�I�!�aBhh 8�-/�x����x��.hʙ9b��ă?��O�Ӭ�u�#�J &N��V���a�_�ؾ*��M� G�:��WB?,�����N3����1����JB��0����t�+� d�S|���L�<h�w���`�j�2�z�ܦȨv�B��q%��'x���NX��/M�����ÞN���[I��,��a.Ň�>��Y��C� <p��t2j0�bH��ε�@�`��g`�r%v�E�x�5p��I*��%�i�(��=��>"xZ��hG�R��,�����L��{�>�W�T7uޝ�6�K��'�Wa^Y�/�H^��D��^F`==S�dd} ���nbÒ�q W�����)R^=z�u3u��]�2���z�>��]���p���W+�Њ&������1�p�h����,�e`N�0����6iT����`����9���5S�����4�a���JC�\��W�9��-�l�l�8|�4����!��R�+ K��(�m�`�K .�XXnБѨ� E����]1�k��7�R�(ݹ�uz2����v�ngG�� H���ң�� K}=L�4�ڴh����8��њ?�P�âϫat��������/��I��5(�M�z7�{5k�i�[�s��pjh����㲟_�>MêY�"%A���P2<�s�衉�D� ��9��sW��*Fn��{��)�u�S���A�́Q>�,��qY��\��F�~ :�����N���@?G�W������!�� ��{�����䤢�/H�x�8�D5���F,>��>�t�0{��{;#��� �ۤ_CB�Vכ`7t�6?�����q=�g�-��D-�!Z�)�����Lӯ�+%��a�r�0X~8�!�nST=�����W�]�jGjM��ZzX��O��DhX1��2�Gqq�Y����^��b������c���i�������eH��ܤ6Z��4�C��>j�c���ұLj��w>Oq��RP�{B���Mݙ��On�C�キ��M���z�,Gj��3�����/�`��z i^����q��~�Gl42�@N4�P�wr~��q{M�r=���'=����|��D�;�Bz뭩�5�����%OW�},�6�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ