Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
fb6d7099be1ef7fc0df3c9bce2663d75_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
fb6d7099be1ef7fc0df3c9bce2663d75_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fb6d7099be1ef7fc0df3c9bce2663d75_JaffaCakes118
Size
7.2MB
MD5
fb6d7099be1ef7fc0df3c9bce2663d75
SHA1
f38b5785e9524796b62c36ad7edb176756f8158f
SHA256
9c6c4596ea4e086e27109c59773712318c24fbc0fc1ee1a01fc44674b83249b5
SHA512
430659878e2fd53286b85755600c49d8e84f521ca827c3f011d53178a012bdb45a015e0f7f7b2f0f5d56818c39d535620325a9c019e5d27eca0010acad7da10b
SSDEEP
196608:LMKublu/UYu4XvBOj3UKB7urZPq8uvFl8:LMpbw/lBOjny9PvuvH8
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
qdv.pdb
??3@YAXPAX@Z
GetVersionExW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetWindowRect
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
RegCreateKeyExW
CoTaskMemFree
StretchDIB
timeGetTime
WTSSendMessageW
AlphaBlend
DllCanUnloadNow
DllGetClassObject
DllUnregisterServer
`�i����nqw�MV��w�<P/�ik3C*��9@������]����Rk�NL*\�MQ����q*��EDZC*����CpdB3�|��]���Du)���E�_%������ʔb��R�Mzw��§*��,��jgB���g�7PQ`]��_��^!��Ը�Re���xr�H!����1Ȓ4'\7t[s��h�t�}�c=�;ɸp����@���=5�R���.Խ m��-έ����?(^�g���5�Xu{��=�f�����^�б����a�F��k1�T��΄ �#��Ch���ξ������S�������E�d���?#����Uӥ�$'��ͬTuEs2�R� �=�SƬb��\�Te��߾��Oa�C�)���j�v���MV��p?�uвlv���о��92k]����=`�շ<����)B�N���w�?�kO�kν��c .�NÄ<M;tN=� ��4�;��|c�=�c��҇R�y�&�T�.�7���^�M��+���]�Vk����z��3���ZG5�i]���~���e;ք���>�]Le�����V��;'���dy���p��L#$���.}�G%ـgi.��t�J^� c�-���1is����7� 5�!��u����%�4������t����m��X`#De��[6n�錅�'����#�( p��{�HQ��r"����%H� J�H#�x���)��������k��^Z�������3�j@m"�ExK�j��<���"a�[���Ȱ��\t��_����#��'P~�_)�J �q�E�R咩�w�"��0�����>���e�%]����y-�cQ�꩓T �ҔS��K�3��"����Nʮ6���ËI�?T�jq�����yW�{�����y� *F�s��g����h� "�e��D�eL�]�VG>�9��ڃ����i"����Bls� �t`����<pJTE�6��1&g��R5����7������&J20�6���ڡ:ѵhP����2�r�/��yDP�R.��v���8/4=�6CÅ�E*0�L 1L|���o�$���Pu�hv�g}"s�ESx��5,��$��!G����";8k�V�K��� `k��X�?"��.[f�*��Y���ihܬ[7���Y�f�����j����4���L�yq�#����%ϧ��x�\�-��kmN�Qv��rw�� ۯ�;+L�$��Q�����KZ[Rˊ.?{ ���MOAR���rkA�h.���r&@Og���tH�8��QCT�̵ɺƀ�GItлz�9����o�w�<�렁a��s���x���+�pV���� .Fًb���,WE�l��3�Y/W���D=��B�o s v��DpKW��r�9�n��4�b�<���<��&y,,�@�T2 M!��1\�cvN��S[�w�{6�\Z�StI������!J���%צ��vb<F�a���뱏�0�Y~�Ab�ʹ۾�bف��9{��R�.[гL^x���5�(cv)�1��X�'�/�b���K�*�P�F����3����1�*��#< ��ӽW�d��U�@���q7z�U�M��wj��?����f6i�T@���5߱��v�� p�s�p?]��c�1�Z�w��][�����.��-���hOd(��3��4��V�Ú6b������x"F=/ ֡<�/T J1dx)2����y�M(��2�L�1�2���;�8^�� W������� ?��)%f#Hy��V�j�7��]ͨ�nw���v �:�$�m��Ϊ�X]��k���~�*d�4L�۬���{\h�(y@k`M.}�X����%jшv���0j9�x�|W��ZYR�">)nz�P'�t� }w�I]�rA��B!�Ȃ�/4٫����9�a��A��g_�W�n��}{� b�ŗ�P�v�۩n���!����=l)ڈ����B��od��"L����%�)@G�jw��f:�I�=������?��j5�����,i��t& � �,Wψ�������a��W���ƅк��dY��()dnM�Aq��R[���J ��r���U��qCs��F~^>��������W��\��$u �� ��2y�2Fa/4�� "9�x��U�Y�Uey�����Ǭ�QkH�;>J��uȷÍ�?��d\|JD)�Y�C?�l�$�_�ev�B��)����KW���9͌��?S����v]��E�t[�\�T�֢p)7�S���|�Q�9f��j |J֮��g���O�[���o؋��/Lj�\T�ӂ�����aP��)���M�;7�6��1��l)�`� �R52��k��w4�BJ���*N~T1f��E�`���"]���窽$@,KZ�:�w��&�u#l\�&���b�'X��d��?��#?�ճ:t��0G��e#fpD� �|�Ha����B�)3�V~�$���8#4H2R�X�DQ��F�%b��u(�������A�=e����B]DE+P�N�>4��/����>^��L��'ټ����Kf1�.�?-B��?�i��ҤFa����Lu�j���7��_i�����{�m�.�@s+4�V���k��L%M�)���Ɖ] ]�Ώ$���螂_7���AdEjf( ����wnf4ygL�L����c�$���L�a� ���)��N^SMƟ[.�!���b�h�=Ik�6����r�{2��?�F�� ��4������6��K�[Ұy��Y4̟�6��b���7��˖��+SQ�T��? yw��4�§�)v�7��iyk�`g}~*����'�@o��nT��0X��/�����]��Z���@����P��;h0<V��&��� 뻕O3V�Ћ�F�H��W��F�io�/����i�|҈b!~��h)Fv�TtB:�|'g�����O�����p�J��cʠ��;��l\%� ���j�s �&����mz}2ܯm�ECE�fQ�#�GX}�!*CgX2s�(Ex�����`ʶ��������?��맢������y����m[7T��E%e���bIt.��(�\�p�z$b�%����HJ����ۊ��tY��s�U
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ