Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
02ab00a5382e8df35d31b94603356ac2_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
02ab00a5382e8df35d31b94603356ac2_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Target
02ab00a5382e8df35d31b94603356ac2_JaffaCakes118
Size
113KB
MD5
02ab00a5382e8df35d31b94603356ac2
SHA1
0c8bb46786af5bfe7d7f75ab38a3d79f76f0c57f
SHA256
8d3948e59278e07379459e1c96c4e63cec8cbda955f5ccbb3812a5774aa6043a
SHA512
75fe08c50616f2128b6e4622c813314adc00bd55681ecbfe236101a5a6c0203a58a26360d9c5f7f7fddf744e0e163c93c27ea2b45bdfa1d314c73eab4ad0c74a
SSDEEP
1536:/2EH8cMxvome1yM5ejjEY3jQWgEyFqn2N+BLeOmoT4zC+7/aECp:/mVpLjjdQWgEGJN+ByORT4zCIyB
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ord860
ord2822
ord927
ord2606
ord925
ord535
ord940
ord942
ord858
ord823
ord861
ord825
ord538
ord540
ord2810
ord800
wcsspn
_except_handler3
memcpy
wcscspn
__set_app_type
__p__fmode
__p__commode
_wcsicmp
wcstoul
wcscpy
_wtoi
wcscmp
_ftol
memcmp
_wtol
isspace
isalnum
_wcsdup
rand
iswdigit
strlen
malloc
free
__CxxFrameHandler
memset
wcsncpy
wcslen
_wcsnicmp
_controlfp
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
strcpy
sprintf
strcat
strrchr
strncpy
_acmdln
exit
_XcptFilter
__dllonexit
_onexit
_exit
CreateFileMappingW
GetEnvironmentVariableW
OpenEventW
CreateEventW
WaitForSingleObject
CloseHandle
GetLastError
SetEvent
MapViewOfFile
UnmapViewOfFile
ResetEvent
OpenFileMappingW
lstrlenA
CreateMutexW
SetLastError
CreateProcessW
GetModuleHandleW
GetStartupInfoA
GetModuleHandleA
GetTempPathW
GetModuleFileNameA
GetVersionExW
CreateFileA
DeviceIoControl
CreateFileW
GetFileSize
DebugBreak
InterlockedDecrement
GetModuleFileNameW
OutputDebugStringW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CopyFileW
GetCurrentProcess
FlushInstructionCache
EnterCriticalSection
LeaveCriticalSection
DeleteFileW
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
GetTickCount
Sleep
LoadLibraryW
GetProcAddress
FreeLibrary
GetTempFileNameW
CreateThread
PostQuitMessage
CharNextW
RegisterClassExW
LoadCursorW
UpdateWindow
CreateWindowExW
DispatchMessageW
TranslateMessage
GetMessageW
FindWindowW
wvsprintfW
IsWindow
PostMessageW
GetClassInfoExW
wsprintfW
KillTimer
SetTimer
CallWindowProcW
GetWindowLongW
SetWindowLongW
SendMessageW
DestroyWindow
DefWindowProcW
ShowWindow
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
ShellExecuteExW
SHGetFolderPathW
CoTaskMemFree
CoInitialize
CreateBindCtx
CoTaskMemAlloc
CoUninitialize
SysFreeString
SysAllocString
RevokeBindStatusCallback
RegisterBindStatusCallback
CreateURLMoniker
URLDownloadToFileW
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
?empty@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE_NXZ
?length@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAGI@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
WinVerifyTrust
WTHelperGetProvCertFromChain
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
CertGetNameStringW
InternetOpenW
InternetOpenUrlW
InternetCloseHandle
HttpQueryInfoW
InternetCrackUrlW
PathRemoveFileSpecW
StrStrIW
PathFileExistsW
PathAppendW
PathFindFileNameW
StrCmpW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ