Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
0958c8b69aa3efb56890b338466d87e1_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0958c8b69aa3efb56890b338466d87e1_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Target
0958c8b69aa3efb56890b338466d87e1_JaffaCakes118
Size
612KB
MD5
0958c8b69aa3efb56890b338466d87e1
SHA1
6a3c9c44a133bbacc3d7af64f1befd94860323f0
SHA256
16a0d9148125a29aaa0e1759873b949f1a056c236c9ec9dae495cf6b72e09265
SHA512
f17a0a27e1c1112b7f136091cc24cc5f0ec64eadb91a5715ce3074e88d348e72120f43bdc4c4c72579476181c1957407a3e9b5aa33c0aaa688827e30ebe3268e
SSDEEP
12288:bLLYDSnYv3NHOggHIG/u/JJMd6oDWA8AsiQyaoo5CMT:bfhnYv99gHtau6oC8siVar5J
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
OemToCharBuffA
ReleaseDC
CheckRadioButton
EndDialog
GetMenuInfo
SetMenu
IsZoomed
SetWindowWord
GetClipboardFormatNameA
WindowFromDC
SendNotifyMessageA
GetFocus
DestroyCursor
EnumDesktopWindows
PostMessageW
SendMessageCallbackW
ChildWindowFromPointEx
ScreenToClient
GetTopWindow
GetDesktopWindow
GetGUIThreadInfo
SendDlgItemMessageA
GetRawInputDeviceInfoA
WinHelpW
RegisterClipboardFormatW
GetClipboardOwner
GetClipboardFormatNameW
ActivateKeyboardLayout
SetWindowRgn
ToAscii
DefWindowProcW
PostThreadMessageW
GetScrollPos
LoadMenuIndirectA
GetThreadDesktop
GetMenuItemID
UpdateWindow
SetMenuContextHelpId
LoadCursorFromFileW
SetClassWord
GetShellWindow
SwitchDesktop
CharLowerA
OpenDesktopA
DlgDirListW
PtInRect
CreateDialogParamW
GetCapture
SetParent
SendMessageCallbackA
InsertMenuA
GetMenuBarInfo
GetSystemMenu
SetWindowsHookA
SendNotifyMessageW
ShowScrollBar
RemovePropW
LoadCursorFromFileA
TrackPopupMenu
GetLastActivePopup
GetCaretBlinkTime
AllowForegroundActivation
GetTabbedTextExtentA
CheckDlgButton
GetClassInfoExW
EndTask
GetNextDlgGroupItem
DragDetect
RealChildWindowFromPoint
GetComboBoxInfo
GetParent
GetMessageExtraInfo
TileWindows
GetInputDesktop
TranslateMessage
WaitForInputIdle
LockWorkStation
DialogBoxParamA
GetUserObjectSecurity
GetWindowModuleFileNameW
SetActiveWindow
SendMessageTimeoutA
IntersectRect
GetClientRect
MessageBoxExA
CharPrevW
PeekMessageA
MapVirtualKeyA
InvalidateRect
wvsprintfW
CreateMDIWindowA
PrivateExtractIconsW
SetWindowTextW
GetMenu
UnregisterClassA
DestroyIcon
CharToOemBuffA
InflateRect
GetKeyboardLayoutNameW
RegisterWindowMessageA
EnumPropsExA
EnumPropsExW
OpenWindowStationW
GrayStringW
MapVirtualKeyW
AttachThreadInput
SetCaretPos
SetWindowWord
GetWindowTextW
GetConsoleCursorMode
GlobalGetAtomNameA
SetCurrentDirectoryW
ClearCommError
lstrcmp
GlobalFlags
GetCommandLineA
FreeLibraryAndExitThread
CreateWaitableTimerW
HeapFree
ReadConsoleInputW
GlobalFindAtomA
GetConsoleCP
SetCalendarInfoA
EndUpdateResourceW
GetThreadPriorityBoost
GetCalendarInfoW
ScrollConsoleScreenBufferW
GetLocaleInfoA
IsProcessInJob
GetConsoleInputWaitHandle
FindClose
SetEnvironmentVariableA
SetErrorMode
GetVolumeNameForVolumeMountPointA
FreeLibrary
IsValidLanguageGroup
ReplaceFileA
CreateEventW
CreateTimerQueueTimer
EnumUILanguagesA
GetFileSizeEx
WritePrivateProfileStructA
MapUserPhysicalPages
GlobalFree
GetNamedPipeHandleStateW
SetHandleInformation
GetNumberOfConsoleMouseButtons
DeleteVolumeMountPointA
Heap32ListFirst
ReadConsoleOutputAttribute
GetPrivateProfileSectionW
OpenFile
GetLargestConsoleWindowSize
lstrlen
SetMailslotInfo
GetProcessVersion
InvalidateConsoleDIBits
VerifyVersionInfoA
PulseEvent
CopyFileA
HeapDestroy
GetLogicalDriveStringsA
LocalFree
CreateDirectoryExA
GetPriorityClass
MapViewOfFileEx
SetLocaleInfoW
GetLastError
ConvertDefaultLocale
GetProcessHeap
SetTimerQueueTimer
GetCurrentDirectoryW
ReadConsoleInputExW
WriteProfileSectionA
VirtualQuery
LoadLibraryA
LocalAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CoDisableCallCancellation
OleDestroyMenuDescriptor
OleCreateLinkFromDataEx
HWND_UserFree
GetSaveFileNameA
GetOpenFileNameA
dwOKSubclass
VarI4FromUI2
RegDeleteKeyW
CreateHatchBrush
WTSSetSessionInformationW
WTSLogoffSession
WTSEnumerateSessionsW
WTSQuerySessionInformationA
sendto
WSACloseEvent
WSCDeinstallProvider
PropertySheet
4MJE�r���I4^C���o�5a���%/B@.}ѳ� ���sS� Xdrq��ʮ�S�Ö��L�_�}�������H��1��/��k���m|��ړ�6��mZ)�c0��66�f�p3��#,9���$k�+#M�jx�⾦ZT��EN��m�l;]�QR�s8�o��~Ѭ�^3���H�̢��*��I�}��}kSq<�����L=՟,z]�&�9;ɾ�v+W�s�����&��vu���j�"������$ve��1�ņ��LF��E��`��| �OX��R�)�M���1�4���J�>o�f��3�^4{�� �qcH��nN\�ǃ@��`���vHy�ҌR.VV���8sΓ���ʰ"H��$�1B�O�p�)�k�����jqPgAR Ǔ���d� )d*��Z�jқ��6(!=#4�K��]$s�ll8�p��BU�]"��<�o9�]FB��\]18S� ��Dj`���ϓ1�R��b���8�&d�Up|H�gW+$��d��u��zʈ6����=.)����tx�:ְ[ѪA~�/pp�j[��V ��S��q��x��T,�1�/��I�NkSOy�vh����`��$�w�L�/`bvvo���"<$Wpc�%�78W0cf�-ig_-̓�3�9��z����h=�]������ݥ �{W)ʌ8�>�z' w/ԍW,S��hO��F�z-5H]Q?�¨�̕-��'�m.�v@���G�J����Sz�ѹ���a� nM<wV*|�^䏞h]s�u����~���"���jX��l-$\��]c� ��ne�� ����E��8��l��?[4oH[���b!VLJ:k� 0���e̓�ԕY@���lehnWV4���t�T��jƏbz�G�l��ן������tĦ����oT�dvɃ&�Գ��<��A*�����I���k��c��6�6�� ��F�&����5�4��z�BH@�&��o,6(�SeD����G���Yn�Ĺ���s�6IdW�j3z������ ރatX|���Z�E�N��ajj�.Yf��n:o$~~-�M���m`���DP����W�?0�Զ�Ӗ�B>�����E�b�|�����t�DtB���/����9�қ��=�<o� r�9���U�6���l��/�2������[�hN�H�����(����� 9���ao+��PE��5���7�������.�����Y^�h^�s��/ڴ+��vw,üdq _��C����y7��B��+5���6�����h�H�ڰ�k�"��]1��i�d�����;]ʶ Q��jx�_�L�~�`�~�"�� %ƾ?@}Y�4ѻ�Kv(��y���Yxb7"���fl(��/ �����U ����|X"�Ϛ�A�!s�ORJ�s1Fz5jCFՅ�LyW�94u~��DY��pz,*��C�'��s,�Դ�(vL���j ���R?F��G�Π=A���X��G��M�.�?�z�|9�jtY�j�ҟd�Ԕ�+�K�n�\��x��ø�!R�٥�|�Rn�%�R�r'_VOj3NR�$�Z���@��6�u�����if���)U�{N����T���dܳ� ��30��CI���^���Dp�B���<��>��w�.h.�y��Z|��C'A��ﮪ�$����'�"�'��J)�����*�G*���#��ԙ��NI�� ��n�m�OO¬1�f������(�������Ai�%`(b(e�Btg�CH���V<2���$�$��M�����Qi�EY�+�_�Ն㵁RBE���J�%̰6� ��ڙ���W%�Pw��T�|��1�s s�ݼ��Flǔ�l��f�����Sf$� \"}Jlp�t[�87��.����L���=:х1tS�E�|�â��\v �//$ǡ�����똎�� q���Ic��{��l�u�,�i�-gP��-\� G�v�_"����w�c��6þ�]�)�n��/��0��C8��;��(q����HG���Di X����6r��Q/�#�!��[]��&2/e#�ґۥ,eg�����ju�i�9r��.ן�~���D�SKl��!ab��fuG�� ��h,6A�P��QJO���Gi�4�,�f2둷bD����n��hj��*�3A�����ù�Ý�f~lq���S�%��������"7�C�D,����u��s��j'���v�=���DOZ�U���� i��Pp���gէ�v����l��S�Q�q���W���w�D��q'�m���t|� �S��������.nR]0�8Rn���g�E�pN0��C�2a�f���c4EZ�K��c��S��^X�٩�S�9�я��s:k�R��\�Rv�6�)�$9˾j�)��O��w�X����� Z� ��Mm���thJt�W��OV��k����'��ڿ�$�f|����O|�d�6�T�g�uNH�L��\���ϒ9Qn����D������� �i�h;w��I�'���Dp��tİ~�^` 쑸���4���C!���|�-,z�G���Z�"b�~��u��i�n �w�7K�}`P]ѽGUm�����n�iT�Rm�9M�'�=u���~���J�#gW�gYQ�X�${�+k 8Vd�L�!�Je���>[�����T�7�7w�낣mTI�;� {}T��sܕy��OL�у6;(�u�t�_[�ճs-��0CK8"(0X�i�-�Q&0��.��o��1�w����벥� wla�#��ׇ5ū3RM���t��R&W�����f��rg�=�H)u~�1���N�gw� �M�S�_m�{�"jD4��єb�!�1� >�Z��S�7��H��*��k2��S�=W�n�fgՔK�ng�ט�p͵�4�T��ECo^9����R�ҫݢۢj<z\��c�Pl"���TF�xl�?o�poa,\5��v����3Ag�����&1�iAMd�3ؒ�Ku� ÌYGl��"�Ka^��ip��8M��8���UȄ�]�d�XH�Q�]Y���>��/? A�+�2�"1�F��M ]۳)���`R�{G�^�0���
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ