Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
07071d1c32452235314c222294071370_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
07071d1c32452235314c222294071370_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Target
07071d1c32452235314c222294071370_JaffaCakes118
Size
1.5MB
MD5
07071d1c32452235314c222294071370
SHA1
9f4ea1773e71eff809b78643c49222c1ebfaf545
SHA256
05b7654444d53fbda164a776d797ea61c288213cc4183d80d82334e73b25a6ac
SHA512
acc9fa8da2d3114589abd2b1ccb515afab9aadb673115002e3c09cd8cec3bd35b64fea72be7b691a1238c3c0aee8e203a16dedad3150c79052c51f808c861a6b
SSDEEP
24576:q+k54ErHOGNEwlQCJpMDQkwd8kamv2afOht5OZ6fgL7uupy6q9VC:eaErHHNHQC6Qv8imht587n3cA
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
HeapReAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
MessageBoxW
OleInitialize
VariantClear
�)Qn���2((�2��Q#��;���]��RLJZ2�1�f��c@��ϑ�� /�����DՓnR?N�K]Ϭo�d���Bw������9Qte�_�E�|�Y "��E�M��kVcm�^�����J~��#�fj�1,�������Xz�.���p�3�馤�O�ى�Y����>�˦�����a�z���h�Q�X �(i��F��c�Cɼ�w� ��P�u�>���qT����+�A��ch�������=��u,҅L*]�>�t@�b�L��z��s^�/� ��tڈ���xo��z�vl֟�J���А�yw���R�A�z�,f=#N�9N j-F�c ����M��g��X�G�8�r�4�a֜O����[�H/����&��,�]ͳ�ԅ�?U�6Թ�W�U�b ���z&C�\�,�'30��TI�k]��e�a�r���|f���i:h�u����]�J������ߖӹ} �}�������t4���3�Z�O;��U�n+5�"8&����K�RƉNoWotX�-,j�E��j\O��:G���� ˻�{�g�RP1U��=���~|i>Nʃ���P#�:���;J��T�K�|�N�4U�ɀ$ k�73g����B������q//���ۋ��VXF�qB�u�=�Vւ�h[o����F�e �X��z;^��d�}�q�4.!:� �|A��nY��u�{����$��g�M�6)�� ���Q��^܊����A��dY��}{�F"W�LL0>�B����Q�?�s��v\������݂�W��(tL� gU;�Y�}#C�������!�� ���j.��r�)�x�7�ֺ�1��!D��;;Si�^�'Y�m.��������@���7&��;\�|�W _lx��ʆU��N�Ch$�ȥR�W�*�����n|"{�!Q1������g�� 8m3e�$:څ���v���d�q��T �=J�,nֶ��@������j�Mv�Ͳ�;r�$�m�@M��yM���l�=*��-��-�V���^�R�}��j��?s{�P���S�Cn(�Qi�� �.E d��8�Z���;�P���~V��3��o��C�m���B+�Z�w<2�C�4�������2# C�JQ����crl$б��A�hwQ����6X�1fo�%�[��Y?s�o��x�B�f��8iv����'�y�-SW�zq3�]����~)��78���^wz��y�&� �]�c1��%�G#����&T Ի��Iu GW�Oj�`�h��A��)��bꕙ�g=�1�N��?Cn���O�Fr�32w3��R�oA�K��T�P �O.ϨH2֜��z��i3_l#�tZ�WE�j;��ƙ���l�j���][C��[k�sb��D�r�A�������W�zy�G�A��{zmJ�u� ��� ��]�b<�����[��Zˡ{�t����o Q��Oԫ�<K��W�.�~�A�ÜS���(ĝ��Dc�j,@� ���]��氇��S(��l�O�Ѝ��l�#�=�X��,s�UVA ��o�ODZY=c Z����0����v>0�����c�f�F��)+���r߮Šد��N|r8�f�Iy�7�z��ʸ�n�.:8�uJm쌵;���1� �z��?�:*.����!���������|���|������j�:����(v��b����6G>#������4:暙��o��O���^�4R�>��}��ǡt kw�-FxضMH���D��T�h���;�ȥ����7��;���_,���/�|?�0g��x����ou��79{���˒�0�r�O@��C�7�o�#�Z<��f��$��P�����o�נ���� 1�����3�[����@���Kg�b�%I b���NL��>�.R;���z�Eʜ����9��2�����4�2J}�K,#i�4��i���4if�h�0�Q���V��!�]�W�R�uEԑZ�Dv|ϯ`0�]�Օ5ͪg,�υ��������Pi��#]��}�o��9h��p���"D�������V�"���Nm�ۃ��Z W�R�c���O���+툄=y��� �ت�\��J�M��Qoɽ��0L�C�����aߺ��*�sQ���Aj���ѷ%��+�욣�͔ ���4�S��Ĉ�ar���D���j%V��$~����D&%�%�`�Ҡ2i�:����C>E�xC<����j ���A~&���p��ޛ�o��:.�ˢ2ҍ�N�����R�c���f��}�6Q|�7X<������4b?WvQ(� e��h[lͶ"�v�"K�(l,)n*�?�__�.��*_��Ɍ��\���nff�db�hA�Z(s����Ȑ���� x\�vSĻ���a)��V�OO�K�ӽ瑅�L8���ޤ��� �ʞLJ:<!%wn�!����B���e�p[��,������dzb����^�%S�=���g�Ot��nFE��tS���*���7����E�+H`U�B�'PЀS�c���>fD(��X�a3��E����_s��^.�����zZ��z Ƶ �[^ $������0�1F(p�e��{�R�L�H�� ۔�M\��A���f:E���a��&F!ή'�;���6����ֲ9 ���8�w� |P騸�7�2���M^�8&�0ms�"$��z.͜-�����$�N��!&�e�P�Z,�$�>����]D�.�l)Tt� �����k��-��_h�H����P�'^(��lu���#̿]ح���'bXa�RD=� �*�C^�h2B��nM���u&"�ܮ�O�������������Y�Uj�2��38�J�����0���Ed�%�7�:��@P�� ��W�M}% �k�|{=���d&��*ӟ��wqg�٠d��T�8��������,5~d=�A�;�[ct�R#p �Km6�GܴݲV�#N�"�3˨��(v���#�-$���r!}IG����$2���k% l<-�+CO%6v�r$�(�Bؠ_���A�J��\���U��[��!�ޑM_�Z��0����J��� ��ӵ����r�9C���aUde)E߉k��`�~��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ