Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
04579b71fe05f9c58127112a73c7fed4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
04579b71fe05f9c58127112a73c7fed4_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Target
04579b71fe05f9c58127112a73c7fed4_JaffaCakes118
Size
1.4MB
MD5
04579b71fe05f9c58127112a73c7fed4
SHA1
a6829c726e5cd1415aa8c679cd92d9c0e2c6ecf6
SHA256
bd164326a4879d19bc9ba07537bd5a055cc61484dd93046e8d171d86eeab3b95
SHA512
34c38bc00184c6ef86b90f954207e965d838a72153a4b59b048e05378145de5ff90054e3158c79b55de3e9d6a9f52fd93be2242c053d09e8b7984ddded09a8ab
SSDEEP
24576:n9qJjHChzLCV9c0RDhTZd0t7Ctnl9SuisiL9Uje1MXeiLKyMrYcseJFd8IJE+nap:niQiV9jh7i29l1Y9Uq1aoU/exbhyXV
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
EnumResourceTypesW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CreateWindowExW
CoCreateInstance
VariantClear
ϓ���DH�}���8wE8ꎇ穟�����ղ�vK1Ƈ'x�ٗ'y���a6䩋x<V44o�8:�,^�&�7�TSlX<�"�:�lD� pW�T���ҝ"(m$l�D>I ���5�5�W�?�zlև����������:��ʂŀe>�z�V��L[�Y����^I�'h��j>,TN�����$!��������)��:<B�Ϸ�؞{���qF�2�V�66������*t%�������@\A�8E����@�i)%>rʮ=�9 ���C.j��8���j�Ϋ��~-�`�F�Ox��/�]oo8�|g��K�2NR�� ���nÐ�j Tx��RF���\e:��َ����|\;k��l���� ����| kɃ{梩Y������X���s֎���ꆑ���j��:��8SV�3�KiX�����`8���7G���%.����eN�e�x��h�ޥ�t�v����g���>�g�)�U~� ���殓�P W��5���q��z�3Q� ��X~��%?�� ��8ߞ�� ^(���+6+�����n� ��n���TwJT(ܮ�d��!�e�|��{NWð��U~�� [O����{P��m������D�^X_��3����Vv�.���X*�h0>����\F��� ��5���ờ��G?����]:��-(�[��Z�ncV���>z�<'�� �*�#Q>��ii��@G+�T���]�i�;^�b ~á/K�<�m��^7���Q�@� �4)������l ��H7�$���� ����Ԇ�<�a��^`NB5@ܔ�;�V;�f���ø�!�����JB���]#Lљ5 dzڃ+hx�ԓ�ʠ�tQ������=�@�Zi�b;��`)q��l�D�/�q�~��*~_���H���&���bNMv`�F�����K�GW*�M�`��"����f~0��EgT�ПόŇ�����<�ZXY�� �.��^�r�wg��ޞ��/KA���3����v ���G���x�+L�ʯ�}C\�{�M�Tk1�����G�4�ja���?Jb"� �" '�P֮mFRa��H���˔�>�`�4u�`�wM��7��q�q�b�p� �^z�;6QZ5x�q_�}��I�CB(��(ߩ1<���|*���u�ّ����M���HE�9!n|�ɚ���:�f1�j".@��/�]:�"5w{|T"��ȕ,��|�Pf�x@k�"$p}�%fv7Jgr�-�]�� �r�unF���t���j'����J�k�����{9�D��#�sϳ�>��E�I��J;?�݆0F�����e=qe^���@����H\��PӅ9�V�5)Ҥ xi�U��[>~�./=�_���|�_~R82�PϹ�AΠ#�r��Y�P��:yI"7cZ����Lg*?K�J�oc�j��BI�|Ð�,� �6�\E@�7�ҿ��ƴ,>�.�)�i��1J�,j��z���{a��t )2�b�T�?�'.x�H�r��2���,�Ώv�\MW���n�}�X��$�{���*7��]�dۣp�ܶ$�IRI��@�r�A�|�U:��Y����F1�u�&L2&Z�~���K>��\��K���Zg {��4��k�������4�̗Ի��t3�o���C. �|h $�p�f*���Nqk`d�з��~��H����f��&Xdǃ���~q��ܧ4�������0� ��1��P�l�z�F.��%�FR|��P��}�P�vd̲t�1�w�ɱ�~b�`'Y�:Y�9j �i��h�t�#F#S��k�"��m����R��ͫGI9'����fltn�R����ȿ�G2Z�^�!�����KY+�^�=���T��'a&T ������Fl�8���ep�eu���f����(`<����b��:������P�Y� d�I��*��X�^�o�������P�������N��ry�]-߸�w���5{��3�놔m�5m(W�Mj���R�) }�`g��h�s�̫��xo�7��4D=#נQ�c� ���@�E��Hc��6�'=*�FRz�+��.��{ۋ��FRk-�L �A�&�/Hpx�S� �t�M.HOA�pp���{���+bRxx�Aݙ������O����(N�}D��g{,r�^ӬnU���E"�E����?��l��[2�e(9!�� Uphqz^�-���v7V����a� ��3��E��s@�x���xFA����[W)�8[�]6�/%�ݺ����Sk�y��>��Awn�2���`�#u�������E/v�$���o�<r7�}o}���Z9:Y!<G:2�� l�/e�� ��C��Mz������d�� jEz�R)ގq�� ,��]j�Ķ����S+Ӷ2��$7ujۓ�u1A˿�6���;ӝ����ڜ�(~rUq8�����g8�������P3�5*>؝1!�D��؏(��,��}q��r�0&(k̢�Ms}�B���حO �´c�����^���Qz�_��m��29�Ye���+�uE�䣇Z�)���]D3(�Y�cҮ 6\���`�q��Q���+`�K������q������uo[F�t�}�����oI�6�Ϗ������=���o��\PZ��ϯ�FE��V%;�|��_)��b��~����d�}�� jƀ���p8�c���c��>c��H��[@fY�C:M��P.��@����G5�kz�����E�ʎ���ߦ��z���x��T��;�� _�CYZ{��ME:*�5�q���Ε3[w���a�ԃ_}Ð��wȅ��f��(�1g�qMh[�����?����Z.��~�7?w�yj��=�T{�"�j���HG/ �� ��M��v����E�ؓ SJ� �;��7�[H����G�m��[��c4��Q3&�n"=H,dm��n^*3,�S������z[�� � ��N9FB�*Vi��X�����}�Io3ͮ(W*�a���z�����`( ���[0wG3�?^�k(����n��;w������`��.�lN�d��Hx�bʡ��>�n#c�M!}0� �"��HY"y��c��I�Xe�A�@
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ