Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
098991f84057ce18270f1c45c8549151_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
098991f84057ce18270f1c45c8549151_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Target
098991f84057ce18270f1c45c8549151_JaffaCakes118
Size
1.5MB
MD5
098991f84057ce18270f1c45c8549151
SHA1
b0d5f715f7e75e4f2fd4e7520ac3117b468b2062
SHA256
1352fa592db9f1c6b1b070de55ef3a734407deba43d6208b1027cf96ef08013c
SHA512
623a2338dafe6fe3701bd3363bafb30c5e0ebb929b2eab1f0d55018abb06fefdf201c762a07a43b3cc9ded38d0e645548e1d34719a1b9d7b08db675ad1ae3499
SSDEEP
24576:t/s6EyXaPB+V4fpFY1WXC8IGe/+sTnbBm6ZaQZlhrIrEnfEOlQ3idml1+2RuHsYG:NEmi+mxFY1WXC8ITWi1LZaAj8rEnKikb
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetConsoleCP
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetDesktopWindow
CoCreateInstance
VariantClear
'o�R��|�8�eA1'��:�^M&�C��bӱJ���������Y-��T��;��E��ǿ:�g�����*ӽVD+-����@�M���8"C7�p� 7�G���C�PJJ��b(�Ɨ9%�wocTQ�RHL�/�HwZX�V4�6��m\q�S��������q|a7�DB � ��&s����2�f�:{�?qp_���<:O�����N��Pj�$�K�%�=�G�Q�& V�ߣ�y��Oh���q��������,��@8��;��#�@�_N�)(��Bq�.���e�uh��Cu��[�M�T�ۭ��b6�#v������<$HY A�<�9'9 ����pX�A��+�Ts��E�H��U�����**{���4��� m���Eb7�"\<(ٟX� ���5�L^��9l7�ߌh �ݠaA��i^:#˨r�F�U ��=������(Et�rk�����@�S��1�Lc��zb��2��~��#�T9��e�����m2���<�����dU����<3�/ ����KdVF (�UQ���*�рa� @4���&��K�{�I}�t�����{�Y���PO��8��t��Ͽ2���U� �Ͻ �����P����_|�B �R0��;���!}!|@O��Y\ 0�n����4����e���&�*p������^ �d-� ����u-�]������*���2��@g��87^�N�&Z�;$��Aar9���F\*����ڠ1��P��qEc��xR�������Ʋ`�Y��X��s%���_M����x��٤�G�T�>F]���H��Qh��uƸ�]J���������!3�f�7�����n��{`^{ ��0�����)k�^Q�\��M|�B��m�([���� �~˶���2��Y fx켩��z���wY<ުC�����U]~��E��U���t"H��A���s��^�F�~�� b�ϥv����}_BU�b=�`��3����E��k�Zn��~�A�ƛ%��9���h$%;�'�LSy����tީ�$�-M�h�g��}1�o*��0�\�*b_�C$�Z�б�`�r� �e��1:G���O������K�������O�=����I�쌃o��a��^c�"M$ɦE2���!^B�#��(��1D4*ܪ��w̅Jpu��(��wf�.����W�}F �N?��פI������|���Y���.�� ?�E��fy�[]�����Ï���(!��>�x�FR�\ٱ���O�̀�}ק�\���m#�L-�7��'��>��_j�oe����;3������� r�N�1���/iY��eV�����9@�@��)�3�+��L6���y�Ds4?���W�sn�b� ��,h,¨ODH����%T屹h__t{��CB � �p�?ʙ��1�B]WHã���SLLP1�Ml��^��a�,Xgm�i��p%�R��-��� �X0�C��J�~Ke�x��� %����~�\���:Z����X���-��r��ܦ`?:u�4�����N0�pfΪ����I�}��AFoW5��%cC���%|����qׁq�8�04s?��_49 a���ӸW���,|thh�~��]�Y+{8b.ߵ 5�Kq��@B�nPV,\_[���lj7ྲ�κ�b=f!�D����@S���O�g"|��"��^�F����<�|8:z��cOa7 u�wi�o�ϰ�(�&�~ ������&Ngw������7K�z��d�e��gB�S�����s�OCW�(���M�`�yd!���O�U� dtH�7��Y��|ndD�*���D<�(3�?n��1�{����Jּ��bW$OdE:�����`j����,�����MxTnΑ__�$H�a���\'=֤��ض=Cf�^ԍ��Ca��ڤ��Ϙ>���c�F���F��at2��41h6��d��������*��ѫn�ür3�9�ؘ{���F߷!UC�����)�ϝ����� �^�+����"'���=�����4.����X��0�(�ԞwA���X�����O�]z0��%��/�����$���ώ�?с1`���ԺJv~��s�3�Z�A٩�`�^���ع�'�9�1� BZDs@ETV�)uT��BK�d(�&|�����#�h��t#�Q:_��fٌS���X/+0|#TV,hQ� �������\F �*�43�@j�?�E5q���[ڞtc;ڵ��������o���4^�U�[H�Z^�K�$���Iv�gWy�P<gIRu���-s�݇��2�$�����)�јaزZDw� *ĺ~1ёQ(Y���+��%30�F�(g��VA���q�*]��[lG��������\���@b��W�ß]������(Տ,���oy��!������s�J������զ��|��.��M�f8aR|2T��}�+���L�3W��0Q)��I͢�X������_b]ۧ����� �@u@>���p,ax!��➡T����JX�Cu�X�$��aB��lȚʾ��|����|�ik��`�n{=�4������BU��z>j��H�2���Ϧ ��K��_w����/4{�'!�d\���i�o���ن8j�@c�}�M�l�;�c�1U�i�J�ve�(C�ʤ����8�� �C�{7�k�r�'��rh��Ӓ���>Y�3��Ҝ��Jp:��>���Y�\4DZK�YbD��\&>��V���>}�V�����5�FJ:4���})@Q{cf�2]�� ��dV��7xIV/���M�����GE�(X��L�8 ��;��e7�C�[���o������o X�KɄC��Lf~����'#�#���ƴ9�?�X}�=�'7,O�Z�$*'�[�p/#�=����tJ�u!I�*>���ܻ`}��>�ɪ�.Q�u�(�sc��LҊ�t��819��7�nDr�Җ��B�� ��%�q���Ӷ�&�ԙ�P�������m@,���{i���|�*$H�^/e/ ��{n;��¹��/$��S w��ԗ)��$.�c�=hT=�ү����`�aߒ��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ