Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
f7a92cda1fadeb68e9c68cce50e1d737_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f7a92cda1fadeb68e9c68cce50e1d737_JaffaCakes118.exe
Resource
win10v2004-20240412-en
Target
f7a92cda1fadeb68e9c68cce50e1d737_JaffaCakes118
Size
4.5MB
MD5
f7a92cda1fadeb68e9c68cce50e1d737
SHA1
c917e3f5fc69b2e62d8b768c158bc6f39ed7ccd2
SHA256
f039e6cd5fbec20d4c9bd51aad28ee8eed67c15a1f9d94a1206512666c0cb548
SHA512
5ba8e1965eb61074daeb8af59b0c3a0a5762ade9f07b0ae64e8012439a40e9f6e41c3b46efac76dab07812a8a36043abba8b5af2b1c15c474eb282ac09fd70b0
SSDEEP
98304:7y3lM4Zc/CIWDDausGVbAPSV0D/k6JmmXjIBzm4nMZRgA/P:WVPpIWDxswjW/k6JmmXjIABPh
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetVersion
TlsSetValue
GetVersionExA
GetVersion
Sleep
LoadLibraryA
LocalAlloc
GetCurrentProcess
GetCurrentThread
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
GetLastError
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetKeyboardType
CreateWindowExA
CharUpperBuffW
RegQueryValueExA
RegQueryValueExA
RegQueryValueExA
OpenSCManagerW
EnumServicesStatusExW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo
VerQueryValueA
UnrealizeObject
CLSIDFromProgID
ImageList_SetIconSize
GradientFill
WSAGetLastError
pcre_dispose
WTSSendMessageW
����{�6M��ڑ)��8��8Ys��d�Q�ˀt ���Un+�%7L���y--vО#L��[�o]��#N�ċ�L9��kA��B� ���K,�ļ��p�ِ����"�kي���[F����<#�����=�!E2�*˺�ya��x�A��2�o�,0og��H ��j�ɾڍ5.b��7=��a��/45#��s�="� ��[c?<����������w. �U�ꌟ ��a��������&ze�� 4L���������v���b�G�r p�+�N�5�n��[0�(� GuVLȆ���2e�23EV �w��Ǩc�y�9ƍ��V�tJ㛡��� �+����4�����%�5 '8V�S/Tp�c`��D~��c5d,0� �@��4,�������7�-Zo"eN|�ZpV`+j�sYs���P���k�� G��e��!|LH�%���v`��Z'B�6���Ǚs���x'�V�%<N�f�y��#d^`Y�S*���C�����C(�������h��j��\;�X5Rt,I���V ��i[,,�5����!�_�f--�c+��$p�>��VxK�f�H�-��O'M->�� `-(t��5n������4�tܩ�Z�X4w�c���0�j�^o�B27�V^��-�>Ń��s�%�Ŗ��XWx����Y�^�GR��<2ar/0i�������K96[�c�>k��3�{+�V�jh����o~�ӾF�+K��0(H�E���:(�n�;�W�!��~�Εd���e�J����v�T^k&M��k�"��1|Q�a�G�D�qm����z�z��x4�/י�b�@�t%@"�w����U·�R�7GC�1�|��d/XK�D���v�H���d�>a[�s��t�T[L�c9}:>+���nm&��EDŽ2�ʪŝ�'�SY^[��l��թM bɚ�b���g码C���Z�K�/�+,ش���<�E��d# ��a�;�50N(��;Zh�0��8e��Gj���%�f"��!�r'�?��� ,��U�~4�J��9��|�M�`+BpN�{b598��\�����ě�dnM�l��ai��cO����N^�d�C�5�(}V�Q���@�Q"��z��-���IZ���ǹ���iu;��G���J`�h���$�E�b�g�1�ȑ���:�]j�Yxc*�߳�Z/�T�^h-��.��l�c\K��77"��R08mŃ�Ϭ���V�L���{�`��� P20��y�-b�#�@��)Hr���RB�A�*s!�D���vO�H���&��İ��p�:魑����X+�z�2�)huT&���σ��zF���!wd(�>K4�e��5(=�^�A��G���b���� ��Ҏ�w��o�jt�t\Slw���%��IM�4����頬!����e5�d�����ɸ�8A>���["�4��n�����8�~yG%O�fC�Cv�n���zw��"����kd�+_؋�@Q��9����'q�Zԇ M�KB����M1R\��� �Eآ��Q����-[��-6��|�q�^���8��\#�R%�3��sG�%-0���Cۈ�<F��Gy��)#�WNL�\�f�ދB9�ؔ���E�B�zt��1\h�3?��&�5�Z�Bhd��7�0.½:d���/λg�+� �}������v~�Z$�}�lؿe�,`L��_��Ċ����KSު>����.l�w�~J3�=��K[�������H�PAfaY~b1���E~�[+�Hu���o���v\�0��n<�s'Х��m�S�j��Z�����" �����r��R�[�\9{o�x��.�&ȣ�ţ�~��Т�;"���d��2`��Tf-�� �P����s4��y�����I�٥l�H��!_V7�fW�>�^��"$��}d�1Z���@��b�D�x[ݫ}q��-�����n}JY�ѭwf�J�|�Zn�����VD��O�o�Sް>���@��@H���d=�.N`ANv��*rl�� n}Yu��kv VKX�@��t���2�#�ʡ��~ŵ�h��M2H�����b�U��/}��?d?pn�T��|H��������gl /���SHfG��^�V1����N��C@�������AK�9��1����7�5g�0����J���(U�wղ��JK��!q�����0S�k� ɔ�gwX��X7��3��O��ݧ�.�ֽ�����?>+�[�"y��fy �w��Mv4M4�B�";�~s���q�q$��J�����T��h��_�������{�S0zZ��C���+)��Պ��� efT9ГP�ɉ7j��,3B卑/E7��S�Cvz2���/���6��'��q`���\��z/��O�V <����U��#��ԏ<�*`��Ƥ��F�<_�= &�Wmǐ�E%뜫]$���U1C��.K��5_��L�ę�>�.��Bb��+�I����2���_Ar[�r%;���_��b�g>{��TZ5�M�J3 8�e3�z!��&;<�r��;�jtp�ɹ��*��_B;q�$��Ѕ��ˋϫ\�P_�(���@5n ���}�`���8��c���5�� ��e��� �c|���m(�D:ʕ�7v��"lRJ8�%K7����_a`qI��v_d�#��$ZO��}*��_�p�?��T�N�I57�N� ��Β�Iޑ��i��m�=�I�b���mh��%�0e���0��KxH��?�>=���I��>:��q���(�����r���;�ݘ���RGij��_�h��9U����76��gfw�Viᛝ�� �G�B�p lq~�;�o7az�ZD"< �6_.�P����S��& _Xʰ��m�Q���$�v=o� GG�,��J�-d�G��>�!�F$��N9cb����Qc<��2XSt���m�u�E����s\1M[f�\;?E_-���/�IcQ�Ձ�?'G�� [���y�L��\A�iR/�[��{������}� P�,��4\�qr������}Vw����g�\����<�dYV
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ