Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
f3afacf43cde05d7d53ba0d0d60cfaaa_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f3afacf43cde05d7d53ba0d0d60cfaaa_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Target
f3afacf43cde05d7d53ba0d0d60cfaaa_JaffaCakes118
Size
1.4MB
MD5
f3afacf43cde05d7d53ba0d0d60cfaaa
SHA1
98eecc944ca1124a2352a1b124541377ad6ad9e5
SHA256
20dffc7c0be6130789fb965604365ec20a3285ccd79559d3489f57dbf5597de0
SHA512
65f38c7fa0cf5f4e618b3b8b2b28e04b6ce34cf4a7ef86725b653efad78ad4de67fdfe3d8aa690b7e458d313bad0c3724d9715e5889e3445f2db7ff3835deea2
SSDEEP
24576:T0C0arQHUXnEXcDf4Yezz4jX/8lC04XElEJhYyYPQjTH7WZIis64AB9cSH/1LOLF:TDYU3wDY6QEU5NiQCIikS/1CLMZy/oD8
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
HeapDestroy
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
ShowWindow
CoUninitialize
SysStringLen
�z���Ś��q�ư�]����d�8}S���R����NU�f��T�P�)u�F�c���64|�;h�§q��=ae̴+�7�T�$ʰ��I���[}����G7�( \w���������r�g�ʞ����D�4I����u������G39F�j?������@Cޗ[����4!@~��/��a���Db�{�.��,���c�PE����.����-���WL�JFA]��0,���r���E�Fd8sn�g~:�<˞uc�է����Y�Qy'˻Z?2�^����Slu!�Ĥ�2y�o�������n�$�(�Mٸ%#��v�C�[~�ׄ-ש�E�Z�q����≷ft����[a�m�O��B�;�=��`$� ����e˔��|K���$��=7�"3Ǽy2�ke�zg��t3�!�|�(�x�f�g2������۞�;(,���թ��W1��`�9�kC��+5�|/ +��*Ti�E����Q�wxn8��|� [��>��2rRP���.|��J�s&�)�� �A���k��h����#�0,������הV�ޅ���u5?C7���4��Ɵ �%<1��|_��{H@蠵K��{��m2���7�۾��HQ~���{�)�L�f(� ��4��{Q�G�cw�e4���Y�g��[�I�#����&<�p�\JWG\�,�u�����*�w�f�简M�s��rR�O"=��|�d`a�o:\_"I,�����~���s��t@IF-w���Fe�s�侓A�>^`S����d�ux��J&r,�lf���a�ڄ��Y�=��\o���i��>'� v� ���B����y^��~y��@!$���'�����|��䪀$�!Χ�?~�đ]�0Q�lX2�ᭂ���A�/�����aذSJ�D��`]��_��>��v��q���&�[2�,݆��Da��M@x8�yD9=BN��Y �H?Ŋ��~M����:u!JzUO}�<2�M� {Pù�a�֥��;��P�������'8O��j}o�:����S�Wy�ĉ��(�OM���93$�A3�|�=���2���d�t��Y1��rE�n����.�xh��/F��[ٔj�'���������uτ4r����_�r�]��4(���w�$�^���\w��a>�JD/w-�k�ph�El�R�/��W/�v�����7�4�e����������x���]�c��im����P�'*�s��0��� c�'�'K&�)d��`=�< !:��F�W��� �M�������Ϭ<�-Y���7��.�� ����'�SX���~MBc�lP�⤔�R*!�֢�9^���a�{�����e:ˍ���7X���Fٰ��������x��Z�MT��j�r*�"��>It���J��`��������i�n�#�.7\n����o�����ޮ��L�@I�ǠQO��O���@ϘM]kZ2ARЗ��O>#�fo��h��9��v.�8�-\aGe�� �<���,�T�hsK���8D�|jM}�׃�Ph�r�6�i���H�R�hHO���a��=�;D;w��fz-F�9Q�E�����>�����$���j9͟��/�G�J�^tq8�Q|;u��ߕ{s$�^���o��[^�G/�0�\��=�a�]��[㖱���Gw� ]n0R�R��+%��(�g��M�g�8���vZ/U����i���U�[H韖�us{���-�R�+;���|*����ұ���J��� ���#e�)b1ڎq875�����ЊQ��e�I����tS/o`c>i�պH'ԀR���&"c��>�M),=�\�G���9�MYaB�N����nз4��F�5�~u0�1#�I�o�����Vh��ܞ;Uͪ����=m�[x�$-FB�a`e���:�8�����aU���A�Br��i�}>'\���Gf�nw|���Q����r4\�S�J��F��[-�L��J:��dz$���^١:�I��߃r�nko�ko�������J(�.�HX4�!���:���&^c]i��r�A{�"��],�� [[F�>�fQM�����PP!�lO̦�%����}�Ҋ@ �d����_�&x��l#�6m�w�(|���X�#r���5�C�E�R�wA�� ���ݧg��EY)����}������*!zW�?|~hÁ^{Զ1H�f��,!�G�o��0`b��&� ӦzA �w����S;Ul_!�u ﵲ�����M�ad-�P�I��W����b���=���S� ��h�$P"��a2�&�z�����p�V{Z�>���\7}d�)�T��Pa��5#yPf��C���+�9����+O$G ���>Y��Z����䒉�#����,���xt@��$�*�0k t�4l���,hMu����/,B��k-�67R���`�ya����(�%�8�՝3���?Ԧр�D[y�H�[��>-�+ͱ�I��̂$���[7*��3��13�9|b�M��8:��ns��&-7���8ެ�%�2.! �c7u��9�M��8�#�o�c�dm��m��B">�������~X[�{Ir�ރ)p"m�[[`��G��FU��c��(�4{&ه�����g������M�ӀH���x+ ��VP��#b5ҼZ?�}�}ds����+t���]�499�����aq�u�ȭD�NN�=��EJ-i���5�� �8��_��S�,`�m��D7�7����{ٝK���\O��K��q}�1���Da��f���G�-q�5kHM�}�f�պ%1�g�� C�1��.��蚱���X���4e�������,��)~QָK�Տ�)�ZD�x�N%L�x���e�u�wh��[��?@�ْΆ��L� pka��s� ���2�V}�ĉ?E�����6 ��\�έ���UJы;�������H=&Tb�\��!n��AN�m�����r�I��[�3��T�vFR{��H���/��llfBoB^�5��;@�i�����d/cm����t��K�v�zsl�b1�f, �4UZ���%TK�,W�V9v`Ɉ��8����
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ