Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
0534b4681f36a812026794a9076c7c48_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0534b4681f36a812026794a9076c7c48_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Target
0534b4681f36a812026794a9076c7c48_JaffaCakes118
Size
597KB
MD5
0534b4681f36a812026794a9076c7c48
SHA1
19307be7a82121a1e5de6667530ebabdfadabe16
SHA256
178be013b0efc52b62310e978e98259b537cf68d0bb69e974998eec6c8374680
SHA512
48047c2e2c232895447affe019d91ee4cf6c9d754d0fab67e2167678dda3e7182bb3bd42ceadcf1611d8a7ac2435529e20031e54f22bbe9c95c30701bbf3066f
SSDEEP
12288:J8MH1DywY+gPgkUxLOEzZmh3peNU72gBgzg+bSbduPg:KMH1DywY+gPgkUTUb2gBgzg+bSbdKg
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
CloseWindowStation
TileWindows
GetDlgItemTextW
BeginPaint
RegisterWindowMessageW
SendDlgItemMessageA
GetListBoxInfo
DefWindowProcA
SetCaretBlinkTime
GetMenuItemID
DefWindowProcW
RegisterWindowMessageA
ChangeDisplaySettingsW
SetMenuItemInfoA
SetUserObjectInformationA
CloseClipboard
IsWindow
MenuWindowProcA
UnhookWindowsHook
EditWndProc
HideCaret
ShowScrollBar
CharUpperW
RemoveMenu
MessageBoxExW
GetClassLongW
SetScrollRange
FindWindowW
SetCursor
DestroyIcon
GetMenuContextHelpId
CopyAcceleratorTableW
CharUpperA
DrawIconEx
DrawFrame
SendMessageTimeoutA
MessageBoxExA
SetCursorPos
FlashWindow
DlgDirListA
TabbedTextOutW
TranslateAcceleratorW
LoadCursorW
WinHelpW
GetShellWindow
GetClipboardViewer
CopyImage
SendMessageW
IsWindowEnabled
GetClassNameW
GetDesktopWindow
LoadAcceleratorsW
SetDlgItemInt
RegisterClassW
MessageBoxA
ChangeDisplaySettingsA
EnableMenuItem
MessageBoxIndirectA
OpenClipboard
CallMsgFilterW
GetKeyState
ArrangeIconicWindows
GetClipCursor
WaitMessage
BringWindowToTop
GetClassInfoExA
GetCursorPos
GetMenuInfo
CopyAcceleratorTableA
SetClassLongA
ToAsciiEx
ShowCursor
RemovePropW
SetSysColors
DrawFocusRect
EnumDisplaySettingsW
GetMenuState
DestroyMenu
SetMenuItemBitmaps
CreateDialogParamW
CreateDialogIndirectParamA
SetProcessWindowStation
FindWindowExA
SetWindowsHookA
ChildWindowFromPoint
GetActiveWindow
FrameRect
InflateRect
ShowWindow
OemToCharBuffA
GetCaretPos
GetInputState
GetWindowTextW
CharPrevA
MapDialogRect
SetWindowsHookW
SendMessageCallbackW
GetTabbedTextExtentW
GetWindowTextLengthA
SetMessageExtraInfo
MessageBoxTimeoutW
AppendMenuA
OemToCharBuffW
DefDlgProcW
ShowOwnedPopups
PostMessageW
GetScrollInfo
CreatePopupMenu
GetClassWord
GetKeyNameTextW
GetProgmanWindow
GetFocus
CharLowerBuffA
GetWindowLongA
MonitorFromPoint
LoadStringW
GetDialogBaseUnits
ChildWindowFromPointEx
OpenInputDesktop
EndTask
SetWindowPlacement
RegisterDeviceNotificationA
GetMenuDefaultItem
LockWorkStation
RegisterClassA
CreateAcceleratorTableA
OemKeyScan
GetPropA
UnlockWindowStation
GetClassInfoA
CharPrevW
RegisterClipboardFormatA
CharToOemBuffW
GetNextDlgGroupItem
MoveWindow
IsZoomed
GetMenuItemRect
FindWindowA
GrayStringA
AllowForegroundActivation
GetComboBoxInfo
IsDlgButtonChecked
RedrawWindow
InvalidateRect
OpenDesktopW
CharUpperBuffW
DialogBoxIndirectParamW
RegisterHotKey
RegisterDeviceNotificationW
SetDlgItemTextW
RealGetWindowClassW
WinHelpA
DialogBoxIndirectParamA
EnumDesktopWindows
OpenWindowStationW
SetClassLongW
ChangeDisplaySettingsExA
DeleteMenu
SetKeyboardState
GetClientRect
LoadIconA
SetWindowRgn
GetWindowWord
DrawFrameControl
CopyIcon
GetClipboardOwner
TranslateMessage
SetWindowWord
SetMenuContextHelpId
IsHungAppWindow
GetShellWindow
MoveFileWithProgressW
SetStdHandle
GetCommConfig
WaitNamedPipeW
GlobalGetAtomNameA
CancelWaitableTimer
CloseHandle
EnumSystemLocalesW
IsBadStringPtrW
GetPrivateProfileSectionW
OutputDebugStringA
UpdateResourceW
CreateFileMappingW
GetSystemInfo
InterlockedIncrement
OpenWaitableTimerA
ExitThread
GetProcessShutdownParameters
GetModuleHandleExW
GetCurrentThreadId
WriteProfileStringA
SetComputerNameA
VirtualUnlock
SetLastConsoleEventActive
GetProfileStringA
WriteProfileStringW
GetModuleFileNameW
GetConsoleCursorInfo
GetCPInfoExW
GetConsoleProcessList
FileTimeToLocalFileTime
CancelIo
LeaveCriticalSection
GetDiskFreeSpaceExA
BuildCommDCBW
SetEvent
CreateEventA
CreatePipe
CopyFileExA
GetDefaultCommConfigW
IsBadWritePtr
WritePrivateProfileStringW
UnlockFile
GetExpandedNameA
ReadConsoleInputA
WriteConsoleInputW
UnmapViewOfFile
SetEndOfFile
SetFilePointer
GetProcessVersion
GlobalMemoryStatusEx
GetPrivateProfileStructA
QueryDosDeviceA
SetVolumeMountPointW
GetDiskFreeSpaceW
InitializeCriticalSection
UpdateResourceA
GetComPlusPackageInstallStatus
CreateJobObjectA
FindActCtxSectionStringA
SetDefaultCommConfigW
EnumResourceNamesA
ScrollConsoleScreenBufferA
PulseEvent
CreateJobSet
GetStringTypeExW
GetConsoleCharType
SetSystemTime
UnregisterWaitEx
EnumTimeFormatsA
ReadConsoleOutputA
GetGeoInfoA
CreateNamedPipeA
CreateFileW
DisconnectNamedPipe
EnumDateFormatsA
ReadConsoleA
GetBinaryTypeA
SetEnvironmentVariableW
GetCurrentDirectoryA
CreateSemaphoreW
GetConsoleFontInfo
GlobalUnfix
GetCurrentProcess
GetCurrentProcess
GetVersion
LoadLibraryA
LocalAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
OleDestroyMenuDescriptor
ReadClassStm
IsAccelerator
CoDisconnectObject
CoInstall
AdvancedDocumentPropertiesA
DEVICECAPABILITIES
OpenPrinterA
DevQueryPrint
SetPrinterDataW
AddPrintProcessorW
ConfigurePortA
EnumJobsA
WTSVirtualChannelPurgeInput
WTSCloseServer
WTSVirtualChannelQuery
WTSSetUserConfigW
^U0�����N�8��g`mQ���+���s�kf����]�X��ӗ�E��N��\Eg���Q����!��A����/U/���h��ߦV5.[��{��ŵ��:c�i��R������n��5�Z��Fw�_+���#|��s�-<]�P�j�vC@�y�p�^�7B���uc��s\c�:�Mw��֚�虑$�^Տ���,DKjFS-��M@ �&^~[�U�^�Eb~E����_� K؝,s��/ S�?��ܳ� 5p�yu2�Ӽ�A!,[vIt���أc3C�%y�꽞�Mn����G *d�ڀ����/L�(������!��^u�b��4�D^����D�'Ǐa��nW�������e�c����Q<�l<к��M(��l�����Yi�U+�� ��pm0a#@�2�[2�E�o»���i)�#mz��X�bqe ��1�B�DϚ4Q^��6�\h��g9�������ٴ�x��S���lV�O�N���ޅ�Z���ރX�_L��u}�K:�<�TŸ}��z8j���H����>��D�Rp�X���ϵն� �t�E��R&��vH�y���N���� ��ah�O���ܲ�f��-�_Z�<�[i�DY�O�oå�swU˱fJ��X�0�0�G��'о�nr=L�j�-���h�cٿ��&������G=��?p�~�;�� ���'PgB��y�����Z/�Gh����� ��t�?P23}������M.�� >�7[�z���)��b%�n܃��'I��у�G�%esJ�aL]1�8��xw6L*���c��/�"u�9���荍㴻I�`-fEx�������@mN'O���2���,af`�U�_�r�{^�F���W��cxqt�K�@��b��[�p3l@)���'aw ���5%���nB�r�h�!%'r���z���p!]�-�Hm��~�@k�-��!�U9.ٰ��>q#j��� �G6���u��}9��� u3!AdU�ăwN�ŽH��%���_#�{ǭs���]3!���������?���o� �'��L�"܂0z;���Х�.��KY��J�%/��3��K�챉 N˘tGq��q��:A&�,�XRE �!5+��Q� �(Fo[8�y<���a�G��g%W*��]|8���[�Ёŗ7���1�p� ����u��9,�j������P�J Dn�߃��^ˈqEk������y��ߡ,�aփ�s��I�����ỽ]����iVG�8p���W��z����Fǻ�J��D t9���sxc"���pC�[��Z5 O�/�ܚ�]*�L�/R#i�P���1�jԽ���"qŽ���>n\��ȿ5d/�.��40�_�r���|�m��5&L���v6I��`⟹��G;q6��#)�(����WA ��?��4��K��bB��d�G`$�-���[��ݛ�R2��Ṍ�m�r����������'��0$5w5�;Q�� � l��|S�3�|�{��6��|[>�Z�#�=����}3�.Zn�? #H�Jw��#5 �����!9��쓯}�qrd������`����f)۞�2�:]�����Ӽѝ2�����i�p�*�Y�a��g�HE�l���\�������%͆C��̏o:��������L �œ�)�����ZYįsX�������g��=Vj�P���j3��Q�=����;KP5�*�o�<o4�)��e8�\:�4s!J�16V�,FÀg��i�I�e�}y?����ؗqN�j����~�[���B/Óz���=��ìW;z��u�'��(��w\Im������L:��Y� &Ҩձ�k�e�kB��5j�ݭ���s�n5{��k�Q�=+�b�����i_�.�L�����Ҭ�!��)u<�|5A��E�nߏ\�c��0��V������vt�z�ň����� �@z�OJ(���$_��>R�n�s$kc]��ሒ�$p���"�lp������96A��?��]8��9�6��-�6RKȉX�kd�hd&��-W�?]�H���>�|�yF�������wf�� R�Β���h}��P~^��u2�����s ������.`��*���q�s�R $�L����w"@qx(j����V�H&�^���c�'5�\0���6�T���� ��^䡵N�r ����⼣eD�J�����"p���˜8�"�Z|j�n�7 �?��"{��JjoI4&��V����R����n��4�iT�Ҵ��g�o�`��>&�u/�^|� ���7�û5�S-�d0�k�/�V]�&}��n�ߌZT� �� �d���%P�k�=f�U��*Z�b�b�U}q9��T��Q�f�{��"!������hܐ��g�X\��X���^��o��t�)�\����%"�KU�gt�m�)\v�8�����Ϯ�X�K����r����:/;�(Q�ol��J��įeV�� ͆h���kv'�b�r6���d�r�m�������Lre���s��輁)�0����]�K���gm(̵��ۚQ�'˰��s7eEJ��.�D�Zmi�XX-@��0!�3�RY]�]0v�.^���x��L������It��Һ���K��O��g8��j]����'�E��`) P'h_�J�*��I��d,�*�����Y;ތ�K�O����a�<��3p@��%^���`#�Jf��(`+�u�;+*?E.R���3�/��^6��;�-�0W�q�Ԛ� ��q��L`5�2�Z�f�>g�\����h��n�zCn��)�t�9�lu�|�?�Հ����6*�sν3f5*��m.[5�2u�e�tҷ ��,Bݳܥ �,����t��WB c}x� �OY�� ���;�ş�0&0ъ�a�%l��n{����ѩ5E��h�`��H��Z�m�����*��zk�� �ob3��R<�d\ FI� ���)�wt?R�J�p>�~��\�9����,�k�H<�_�lv�KқJ��Z�Ӌ `�-�J���{���>X��`{�H���r���TȡM����t�zaq����c�x6���
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ