Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
f4ff55876b5d5c9a93728db75da5a56a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f4ff55876b5d5c9a93728db75da5a56a_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Target
f4ff55876b5d5c9a93728db75da5a56a_JaffaCakes118
Size
4.8MB
MD5
f4ff55876b5d5c9a93728db75da5a56a
SHA1
0a1a19c049d82c54b0163d1dc85549b9cc941b8b
SHA256
1897a714ee6de0f976456638f720668aec4e80dcab3e8412b040ea63dc25a9aa
SHA512
ffb5b0992353502203da1067fb7da161f208abf4ae426e0c4f545c79399a0a058f8303a5cde830ed31b12d4ff27f764977d5c0ff67aeb66689a282c99d519646
SSDEEP
98304:ssO9tpy8dotcTnOorrCIorOjbPQ2Z/87q+56PweCM50UN0sbV:bIpBmE1rCIoajbPQ2sq+oPweP0d0V
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SHGetFolderPathW
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
�GsNv����89��O,����/qG}J��,�a����x/��[�d.`)V���CDDDs�wd�U��/gu�{���{��|�!HAY��$�Q�\�o#ujWʰ��M�nk����q��R�J9�y��(@��w�мS���>5���I����Ws8�� �\T�;u��/��h!p#�aD�X��4���l�v�It��k�V�1�z+ �w���$���{�6\�gr��&��!���UH� 斲��2���0,wZ�4�1�<jy�Pѷ1UH��\r�9�|!n3���?��(�˟y��{b]���z � �T<i`�gw��q�}� �aM���Y4%�0�n���upn��2Ep�sW���[]�ACs�s4�~Q=�%�>;�Z^1S�N�( ��b���H���ue���2Nmv�J�����7�36P�N� P��� �pA�&B�_ ���T�g1X�z� �~O�c�ݸR*"=�{�M<莀�v\���w�*cN�.��TnZ?X4�e��>�&B �o{q�ٗ����R�~�!�n}��pž��;�k��c$H0���sa�'Ɩ� 4G�p� A�{[C�O��2V��7�ػx2T��Vy��/�P�5"�\��m%E0w�����g�\��ab��Uu+i⤰�����$���ډ�G0�Z�����Q�p��GՅ�֨6��057+����� @&h�MmY���Dj�'���Bͳ�ا���2=�nO3����o�S�nP����_4[}�e=�� ��t�n���oq]YR=�v����`fhIb������q�?�e��6E��]�d�2"� ���T���I�Zq��@���� ��J� ��&DV 8a�V�Gt(�����l(�� &(��H�}R�Z!�K�T����7�E^��w� h��,�"2��P~K�-:L<���'Z���� ��.��M#�E�C���E�������I��|Zk�'�S��v՜5�x����A�bIp����hX笓c�h����4�茏Zb��jx� *�e�DKF��H��s��O_@G�����+��J�}�4]�sʮ�h._H=&�FT�.$Jg�s&�m��"+~�{v%�ֹǻ�$]�2���(�Vv=��]���f/�Xn�57��K��k5F�DyG�ó��Ş�ֹ�\�lR�yS����Eg���A*����#��&��Ҭ/ �F�th1D��SA�|���_=:��xpc4�3kvO� ��FmE�{:R� ̘afާaMC�Z�j.�F����?)�C�AxڳtѕTcY�(��0���Lry�S����.��B� ������Kq�%�)�ٯB&c�9����Š� �cm�$�l���۬2�'� Ef��I� �d J��xxQ��f�,�T�۞1��9�|y1��������S~'®{�����d��Ɇq<;]�^h/��#�͍���/���(�L(ҁ���BIFQÞe�1��I�ߠ�m��ղݐ���6��א��2#�4�f��G���ƣ���-���S��e��}�=�ۤzt�|�Tm���d�������Ƹ��_�P*H8g}֨z�_FD'�0��p3����}c7� ?�d�����c ��S���O����k�����]lxp�%�cE�f_�-� �g@�t����]R�S\3��ub���0t�J��/��+al���>F������t8t����Wax�����@i���m����Q��r�n��x8n:[�r���fR��`�sJ��$�� �d^����j�VNoʡ����?6�c�mXAd���=�� ���E�]�iEtY�M+=�I�}3���m����*gBB��Ye�x |w}��0��;{��{ES���D$O��[S����f���C�?%�T �į�h�� �^��,=�a&����N�p�_.~j�G��H�&~7�|�_�Ӊ��;����2���.�"7~i!��ԮL�W��I�����#{���ac�y�O~`�T�v䟯 � �O��sa*���r�����Y��f|ӟ3����h�*��by~q������`�l'r���Uy��t�Jyw�7����g]�hF�1�����S�k�_��� xEr*�Q��T>�h�����V��osG�2���D�d�l�}65�����'�p����3��Y��!�~���$�6'�b����'��i�;ċZ_���mV�p�X�)R�=��������|( �'��j��?��1��Ռ��g�gl 3L=�F��#��#9�s��B�`�?)8����i��KP�w���] �Na©����2�uQ>�RB���&ڧ�K����i�_ 2dž`>GטܤZa$���g��u#�>ܝ�?�@�j��Ka�E������>�K�J��Xp#Оd�:�����`_L �6V��LYb?�C��X�����)g{���1`���j��3�/�� @f�p�a�^`%%��YT �D��M�þ�O0I�qN}|=��E>V^�6�K:�Y��v�k�]�h��O���i�����%��R�g���@�+�����V(j\{�0�����Y)����@���� VP3h��OO��RL�<)j���ΊZ/8G\!.�`�ҥ�Ve���V�Z�E82������0uVI�� m�Hԧ���2��Q�@v�(0j�͓[��lzu��[�=���3>q��� x�6u��l��gá�_}�?h ��'�(쬴E�2JFsy���x������Mk���k�j:; S{��U&�C�&uW�a3˕�x��+�`��8�T����j�����%6N���3b�Z��6��Ӕ]�9b��sU�tQ�M]������GK룓�� '˞=�.�s#l }�d�w�!��`H�����������o�\�Sb~��|����1`���6��-w�(VH�H8�����2�.��� H8�k����p��\R֑Ъ�%�}��՜�p���$;���(�_�O��w{�x20P�ɩ�%|![��X�7_��GL^(� D�UAc��W��2����)t�� _�����*� C��w��iӘ������9���� �y�<��s���zn�t��]������}ܙ��[ ^U��Zn�撙I�@
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ