Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
f38fa7ce83d708dabd88f9e8d4c51ba9_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f38fa7ce83d708dabd88f9e8d4c51ba9_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Target
f38fa7ce83d708dabd88f9e8d4c51ba9_JaffaCakes118
Size
1.5MB
MD5
f38fa7ce83d708dabd88f9e8d4c51ba9
SHA1
d0efc065c1415b651f41aa98e86cdb9b778f1a13
SHA256
16b411dd83cbd7d8e594718fad6840e97683697e89577ee2270717da983370ce
SHA512
afc0a48bc852f5cf9e9af028154fa43d5884cab0a59400d0e1c6c6d06aa7d1321677ab4a121de74ef5a801033a720ce0a030eaef9f545995373201101e0e55b8
SSDEEP
24576:s6JQ9O0dt9eJ9RmoCwl/NwzP6RRviPlm3cKr7A1KkDLe5YTRuHK3X21GMySMtuyZ:s64dt9eJ9NF1N66R5idccKg13LRuQX20
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Thread32Next
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CharUpperBuffW
OleUninitialize
VariantClear
�HH2����z9K�!>mḰ^_�����g�� O1~���[DwC)�/co|�i� �<B�����Ӄg�`B��2IDF�(�&)=����b|��ȌY�˔�;p��lr8�`��A�� �c���Nߌ���PS��\��[ w�C�� ��Y0��6�vU R�7�7��=?����2�@�Cߑ�!�~��,���5b2 |����'�gd�G�A�\�ax+�ɺo2Í���,5*�f>E�)X�8�M%���L�ٝ�Nd�@�N������$�!����G�;<�Ohy�C�p��D}|�������� ��j��ˡA>�UZd;�im[h��c�i�6�R7�N�X�`Rs�xo�B�F�L�m��GQ�S ɥ2�Q� ��O.,��*Eytf�o��o<��O��0��YIu"�X�X;�u�)���<��@8ᅘ[��m�'�Q%�t��t<�mU'�wa�ޡ-q��d/�d�[Y�F�4���,w�l.k%c�㶻OM��fH�՟�̇~�%�x�)��"��y��y)���ϴScǞV�RB��y�[j���u_�ʜЄv�T��������F�^��C�� .]��O�� �\�H�=F���\A���T�aBa~ه�(�r�8o�f{����|���`����cD��F���ia�4�mh\ꚮ4,��Jq �ǒ���)�<:Iż�p~!*j!��;�}��7 ��]��tF�W�������*�n>`��zf�`�}��S�|q~K�>������A�b�:Z��b�@#4�;�\]p~7�"V�.���w�n{ (^���xDV�FB�d�q�6����o�� h�.(�e[h��Ζӯ(!�/��d��5 ����D��R���\�pm�<1:�+҂�u�7�eN�/�����lf=�0����9��7��X�e��0�ϕ<1Y�g��˃�8��{E~��A������۴ލ�-XvO��t6ܼu<��aY�E�B��:��CgrS�0%@�YT�<�l� QG�� -K��;����]��J�pc>�d/��/��e��N�W��-��B�}oqf%��f�H���q_�}g( :仢�T�(�~������U�o`O����/�Pr!�r�@�vc�V�,�/����ŭb�u�L�,�<��m��������S�d��V�~�x~���A���k�� �,�\���m�������vx��`�P@���أ+¯k����*ۗl�XmSV�p�>��� ��d7���9��.��UT�e� ɂB�����T�?Y}��D���<]G���<4%HG��}�{�X�x�y ��gYjk�o:s���7���̐��%]n���L�Y��ӊ��~�q� �akv�YJ��ۖG��D4⹇�~1�I=nQ�?��G���K�H���a�or|s.o�b2��Ym"������ �3`��)Y� �:Y�4���I�DH��톺��^��q7�nVt ��a����r@�SXfw��D�,�Ё[� �K� ��\E�7 7�ư�LI�2�XTʧ�����ٗ<^Į]�W��&�zz��"Jn��M���̈)W��Y��'ϸx��@�.��!�4Z�Ʀ��)����8-H�E�wa�kP�2KF�6N���\�%���ڦx0`�~���R��W�D����M"�)��#��V �k�P���H���q��2h)8��{R�gg�D�N>�5�|In����&&?�a��C�"�ސ0�zƆ�� �Rĭ�r�o�Px��p\s@�6<�c%#Jf�����||N)��N��.��z �HzR���;8y,�����f�X���f���ܦ��B��]��o�s�$}frE:[ Bᰔ������� ��6s�e��Lp���$����Kqyrֵp��q�S@so��L�R�W��8��g�4*j�+-�I�:�O�<㙠��Q{�r{��̓��I�I���<T�ݘ�|�0=b)�nq6���(�`nېV\��l��2|~�?$�T��O}����+���0P�F���.�d�5}V+�H W�>��8�w/�S��%->�+UR������T8Y,z�6R��v^ &�Y�pl+J��8��NTO ��u�ynW.S�\ 8� ���D|u�X|�Lu0�O�~rW�"�����z@�ᮂ_y�܋L���Q^{��p'��Cu��9"w�oᰱ3�.Ҏ��iz�[Vl�|d�e(@\$�Ȣ����g7M�JA`%�T�Ge٨�g�I�C�z;��̞s�8�!Zw�P[d7���]�����q�v(�ۯ�J6��mk��a}a���T�B��q�����J2\�۴UiU�b��LB���俠}��k�D<_��u�3�J=Wzq/�.1�p���7�B���0H����J����Xq'�6��p���0��&p ��a�#�����*~�z\���D�T�mg���|�v���,`��D�@�3��M, �o>��mbR���dw/�ԎsI��5��?�.�G^@�gi�nۥ����R�p��x`3>�N/*��2��EଲM��sp�cy���e�<�zd�|D��t�Կ��x���'����E�����0�r�#V+��=�τ0��V��o�_�����H����)����Nĉ���pǼ��pN)�+t�\��[99�p��s�n�!����(/�H������<��lQ�������a��-�~0�S��6Wr������.L����b}A��*����$GJ��`B�i���gb�T��cO⥀R<lh~��v��Pr��@�������cSr�U��v���@�)0�tu�a�}�V�s� �?W��$����^5O(s�Wϸb���ۡ��h/,��ك���>l�����d5��/�U-�{�/vf��ylE��^%1�R�7.�۳��8|���]� �+�7��/$Ƕ/������}%��p�t���b��>�k�TӐ8��O�R7'��(MPQ�v˽�*��E^�:��8X"_� ��z�}�Ӂ�$ᶌ��m��&g��<FPW�[d�Q£dz��^�@�a۶�� �ok�����Y�j�c�aJMo+
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ