Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
f3d1c9dbe123288e98ed70d4b6e07094_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f3d1c9dbe123288e98ed70d4b6e07094_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Target
f3d1c9dbe123288e98ed70d4b6e07094_JaffaCakes118
Size
1.4MB
MD5
f3d1c9dbe123288e98ed70d4b6e07094
SHA1
d3bbb82a3bee13666beffcb52371053f014470e6
SHA256
16ae58da53e2b6a1d2da4caa0dc93ee616d512940019cb4b8976d94ac831f0fa
SHA512
31f5a382af32a46a7d0810fa4ba67b54f8e5c9b20b523f5b3af6552ee323ec1b056e3f59a131bf3750314e7f07de5c948bdcad95b032efea1fd69804e89bc8f8
SSDEEP
24576:3VxtPfPFRSTaUG/dzBvk4fKr8LWCWbbUWGGZmygANiXWnHkgACSxsPcBowMw+XuE:FfnFRD59cX3ZbbUWXyA4WHkg/SxsPcBg
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
PostQuitMessage
CLSIDFromProgID
SysStringLen
�F��] ��҄�B*�+�u�þp��4o�l��/�@(��Tg��߂Z���!��B��X)�X6̿7R�/͐r?���г�n�n2�x ��@F}|8���a�y.��^���jSS<#��3{��V�|m�a���У ]��Ӟ��/íM�#�d������\�����v�P�B5�>�0]��?d����D��`��d�߉�p��o��6�|o}��ޔ3��!�~������Y��m��p2�`h�{o��qfآ̚%w�T��g��i�Z��i�&0�Қk}Y���? T��Y���B�����7ۆ����m84���_9�Aj�<!ƕ��Ԧ�� �oB�� ����-���4³/�?Lc|�6��6k���P���A~?d�d����f��JD������㚵� �Mڪ�*#pgӛq���s��id�g���%��F?8��6�_�|�R��@�Wcc8��]����N����Z�a{�{ ���Asv�������7N�������,M[�g�f�k��W��KN�2V���Pט-���'�K]�Ĥ�* �&Q��}�K�2v ��o�IdR��� Y -��d�; X�*@nJ��'�����BM^�+����?�Y{x ���`I9��!�IT��������w��3����QNL��G$����)#c�"��L�p~�d1m�u��zD�}��^�����������bK��OEq�,��/Br���>Z*�*������U�����xm�@WC�Ju[F����r@�;�q�S*U&@�碻!�:�Wʖ�9�*���^����iQ�.��G�|8{Ŕ��ު�;q8U�?ũ=e����'�����9��l �R�� >����ʴ�F\��(��}w�Z0�V��0�9L��s3����+�}毵\c{��,u+9����_j��l}�(����0z��1y�R�����]�̅+���V@��%�� &����ڗ}xS?�����ё��%g�P��TX��g�;;�*�70�]��7���"�{8Sͪ�q����#F�w)��m')$x9������'m���f<��f�'���/��YXW��t��}�T����Π�u���YJ� >uW�<8��ۨ�?��ӕ;��KO��h�b�)�D�,9��{%iW��B}��@�@�MMj��A�U���q�(��~ v͡8��PT��|��wa!����zX,p���ra��2��=j���1'�M�/D�i�x�d�j�d� 40�m���/#-#BН+Lҳ�{x�*d���9��_i=Y��s�p��K��7���'�M-P�9fQ��mN�p�N�S���4��������z�b�y��='̈GJoL24^Md}+�Hx�5�4�H�b���u�vM|��"���(�C"�fm}^���|]鐱E�y%r{1o�"cZH����M���j�i�ED����>���M�6�۹eg��P�沸��Ζ姲I�=F��[��"��tjKR��)��W�Vn��oޘ|�2l1^�A���1:��x�&�d�2�IQh�F4��]��������.<��;�{�j���� �MV8W�7��z���&Y[�� �Kp%̘s�o����~��ȱZ��{)Y���笓b/��FX�\�`{��� ~,c�bu&�Z���j˦�k�[���Ҳ����z��r塛��}��.�%��Z��T��ȣ,��Y-�R�XV��Vj�h����rN�l��͢q�P7`���ԃh{z�O �yOs��B]�ly2*#��_TE�!z#��q�O0�yPb��NAT��� �DVw�\4�3AG<��K�`�w��g0���6;�0��/T�I�{�����2��#<�<=�s�o�$��q��9���v9Sc���՟��x��Tvӌ#fp* � �m,� �F��E�.)�رд��5�:vC�ӹ}-a�-(v�&��~hK�h�����w1\5��`S~�x��e*�"1͕u|�}W�;�HVl7��^�>�4��` z,�>�� �d�x���^�+��4h8�)�F������0w@V�>���q}�͢��W�v�^c4-9շ��0S������s��'>%��ޢ��d!�C�:H��U�M�[��<����to���d�Y�!S���&L��U���ΏU���GD11�!X#8�W۔fe��q��$��ˋ�g�������{�?W~�X��! ��*������L��.6؟��g�g���n�5�9�4D�W ��R�e͟��O�K���;4��Nu?��5�N�f(�ep�"����_j��9�V�7��T���(ե�}g�i�]hD|�"�K�%$�2aT�r�����P*��D�jo�z�$���c��I���*�$J m�� 9�y�HoD���9�c)�{�/B ϞWO�*�O�<]�ʔ������]���Z'�<=��]�lj�I�.g�[��DnNԭ~�g��w03a��j�;�>��WN ����&fT���g$d���s{}&��|���W�ل�/)��Ȱg�5����5��v ����"��í��1�ދ�������)���%40هJv/x��l.�H�N����;m��J�|�ȋ�2�q�9���%�Q�u۹A2=f��0��3����7�6Ŧ�����Xm���A�-�ho����/�Z��P�����I���-���ĥI�@�#�4���@�Y�o�y�Nٷ�!4��=X�,H�&�4�(V!�W�6'�>'@�����?�YJ��]� �o��{�﹁�k���\&9hq�����H�L��] ��˟���2����D��>'���hṗ�v���V�7D�*Z�8�*.�^�8�QG[����#&aq�MٳS�T)�1�а)G����Ns|c�IJ�����@��F�JC|�-m������W���Yh� �"P�Yp��\�!��/G?@���797�{K����(�0�N?,��c%8�.�;��I��>HSx�}���P�(,�T���?�2nP�z<*�1�/���]g�f^+QP(��3�������E&ʘ����!��O�� o)�)Ľq�}?��yq���f��ʯ��|ެ|]�-�>�B�+���y�_5L�O˂S
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ