Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Behavioral task
behavioral1
Sample
f4ad3a78e6cd25c8bef9cc28d6e83128_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f4ad3a78e6cd25c8bef9cc28d6e83128_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Target
f4ad3a78e6cd25c8bef9cc28d6e83128_JaffaCakes118
Size
412KB
MD5
f4ad3a78e6cd25c8bef9cc28d6e83128
SHA1
0d5ed2370d5ddb6c1b4cca7238394ea3adee9301
SHA256
550c4e0c3ff1d861a3d2116a2c3e2218dcf2949b32d8304f81312b8fd651b5b6
SHA512
adb9c1391a07cdd862f3475713870deeba600fd8bfeaafc41d88de9b0911045796c69eaaab2837f88eed10916dcdd955185dc578324e9fd04b02cd211a418ff4
SSDEEP
6144:UPE8GFYw4TvB4zTe3z/6cGBj2PUAZURlvpgDxchg1AcRYp4uE4JM:IE8GFYw4TvF2T11DRlvp3iqpHE4e
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetOverlappedResult
Sleep
InterlockedExchange
GetSystemDirectoryA
GetEnvironmentVariableA
GetVersionExA
CreateDirectoryA
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
GetTickCount
CreateThread
ResetEvent
WaitForSingleObject
CreateEventA
SetEvent
TerminateThread
SetThreadPriority
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
FlushInstructionCache
WideCharToMultiByte
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
OpenEventA
WaitForMultipleObjects
GetProcAddress
LoadLibraryA
FreeLibrary
OutputDebugStringA
GetModuleFileNameA
MoveFileExA
GetLocalTime
DeleteFileA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
SetStdHandle
SetConsoleCtrlHandler
GetStringTypeW
GetStringTypeA
IsBadCodePtr
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
HeapSize
TerminateProcess
GetOEMCP
MoveFileA
DeviceIoControl
GetFileType
LocalFree
UnlockFile
LockFile
GetCurrentProcess
DuplicateHandle
FlushFileBuffers
GetFileSize
SetEndOfFile
SetFilePointer
ReadFile
WriteFile
CloseHandle
GetFileAttributesA
CreateFileA
GetACP
GetCPInfo
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
SetUnhandledExceptionFilter
GetCurrentThread
TlsGetValue
SetLastError
GetLastError
TlsFree
TlsAlloc
TlsSetValue
FatalAppExitA
ExitProcess
GetVersion
GetCommandLineA
RtlUnwind
RaiseException
HeapFree
GetTimeZoneInformation
GetSystemTime
HeapAlloc
HeapReAlloc
IsBadReadPtr
GetStartupInfoA
GetLocaleInfoW
MoveWindow
DestroyWindow
PostQuitMessage
LoadStringA
GetClientRect
GetDlgItem
SetWindowLongA
SendMessageA
IsDialogMessageA
ShowWindow
GetAsyncKeyState
GetWindowLongA
GetDesktopWindow
CreateWindowExA
SetTimer
RegisterClassExA
KillTimer
MsgWaitForMultipleObjectsEx
DefWindowProcA
CreateDialogParamA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
ConvertStringSecurityDescriptorToSecurityDescriptorA
InitializeSecurityDescriptor
RegNotifyChangeKeyValue
RegOpenKeyA
RegQueryValueA
RegDeleteKeyA
RegDeleteValueA
RegEnumValueA
RegEnumKeyA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
GetSecurityDescriptorSacl
SetSecurityDescriptorDacl
SHGetFolderPathA
CoCreateInstance
CoInitialize
CoUninitialize
SysFreeString
VariantInit
VariantClear
InitCommonControlsEx
WSACleanup
WSAStartup
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE