Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
0d5d2a397132ac3f928a269f9fb05d7d_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0d5d2a397132ac3f928a269f9fb05d7d_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Target
0d5d2a397132ac3f928a269f9fb05d7d_JaffaCakes118
Size
1.5MB
MD5
0d5d2a397132ac3f928a269f9fb05d7d
SHA1
01ed7fb72205eaf4c3a072a1352811bb0491a3b7
SHA256
0534705fbc5f4987cc5b1be009cfa4fbe2c0c7870274a1612c7e29b4e607a73e
SHA512
2418e7da899af8937fc146760ca73fe2c68c5a498e66988aafd9d895d98daad5872d92379c08fb7643789af9aaa63892de531d37d730d632aa1d3da61560063e
SSDEEP
49152:GtNFJYxCLz9VPTk417Z/jD8noomEozXfPR:0FJrPTk41pIoomfXx
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetCommandLineA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
PostQuitMessage
CoUninitialize
SysStringLen
�ϭ,8��0����o& ����X��jc%������H/�P_zd���c�K�q[��Y:?��o�g�q�7:�A��z��R�(�q4�܍NL ���t��ѹ7��~���A�rk̿!C&�zq,�<�$��¼A�e���$��X�]��dt0|cQ�YWܥ�cr��U$�� ?�=&�U����b���c�^3���-L���B���i��������>�%�N���`��9�܄7a����h�}0�ּ���C�k�J��u-�V�WN®�8J���u$�꽖��y���ǰ�4Vtm!��ӡ�f}���D�N���O%�@&�}�ev(dI��Q}��2�H�!פ;b��N!½��Qx��¯�*i~<�����߆��5c��F�����LTD�ѷL\�g��CH30i�8����k�Mg��xt|ƣ=r�,#�kP��\� ��Y�X6�g���-&�=��}�Yl��g�/�{Hr1����8@*E4' F���6��#(a?�^�\��[�S�B�j��)+�����������T?����o�iE���%������m$>>I�K��q�VT ���6�����TJ��$���߶�O� �-v)� ig+�ؿ|��Z�sw���P �!���pۼ6Y̳,�0���6ّ%�|l����0_VdyClr��(���g'����u�tZҖ1��r����ke8�[�&�*N��X�LS�6��3 ���B;�նB:>�;����jx�|LT�����*R��E��B�s�{T}UF~�n�;�J+�oL���ʿ���,.�*R���6<� ��dZW6B�TGaRN��Q�'���ÁNܨP�F�����1�$�wh������~W7��u&Ή�wU{^t���B�]�@m�D �_���ƙ$c��!��}c��e9���/��E�Pj!'AJh��Dej�� ;yI��Y2!�ghk�]��nf��T�:N�3*���4t͝)��|m��,�ݎ��ڈ`F@s:ǝ���O�V$d77_)�Ï'`zNDm��u)_?4�pKDV'��3��Z`�nx �(�UU�!(�bkW�x'�]��8X`�}�B������+Y�2��6�[�-k�`�� 4tѳ���{�HY$��RՅd��ŋ����L�%Q�a6]����衱��0�t�>:'.#Y����ǹ�����Y��'��U��5ʬ di�&��� �R{j�bk����m�b�0t��|k� ��-ƝX.{f����$T���d�Ky���"Kh�O_v����<��߆�.�b�J<���χ÷�% g��G��i.!o�H��E\���4�������N���a���V�x�-"! �4�H�V `ţ+�e"�6h�G�^�H��i;���J����ci�^��,ȧ�L��>I�*I��qM�{a66pbr�E�fɌnq��dwwG"Z��F ��|Z�8yW2N���Y��� jj�)�.Lp����gx��"�V7��ܫOc��^h7��r�0��߂!�a�Rg�PX� +7+�n ���F���27+���*�s�d=Mp��&jbw5����-ʸHK��ɖ������{��Q�0$xI_79E�ꞟ�"��G 5�rN����Dkƃ�:}1� ����`�ۚ�MFDOm��=^���-c���㘵�|��3tI����l�*��������v7��e��WcS� FU.�V�FT�V���_�<0���d3+N���r;ItN���v<:P!/��� �uw�t~�b����>߆`�W��t<W2= 9�p���q���;%C�7o,��P;>^B�ŏ��_��x��dR�+e���&b�7/9��L8Z�wU@�?����$G}I$g��>g��2f������cf��c����o�ȏ���B���lր�b��x� ے��䰎W�$�Ao��g�=�M�!>�n�x��Q�-\�v�\ΏL�l�U�'��;��Y�hOTx����rw7qgǴ����#���6�z9�}`,��#����絢-��$�Dv >9��x^m���~����"�����+oVPx����6�(�N���'���֦|��Iw�ɿ��'T�ׇWa�|u��ɛǯW���B:��#��g�_"�+a%^�28��F���C_ǂ���y>r�)���2��D��A�ڔ:/x��=���U�T�)ř�V|%M��GUE��d��z�l�?�o���h���rƫȿ�fb���rA�wذ�f F�����*m� �xe����+ꈆ���x ~������u�H5yЬOfs ���Y�?T����.���V�wm�P���Q�&B�2�v��(���/r�8��2t�zQ9�2eWVv�[�N�$vf�@w���������Ճ��r�����v���|�E�.�;�M:���@Knn���y��o�%��u&5��LF� l1��X��H��/������O�;�2�Ѩ�5�`�a�؆_ J�����L��ubf��NlQP��BHL�A�7�j���.\�^V�R���nx_�A�PQ���K�D��������ɗ�e$3- U����5�HXQ�};������(���g�D5&t�����F2����� ,J�j� �8��b1��? EY rfZ�����_��n�P�*z4���x{�#Z���^�_�l���h����ۻG�`���ۛ��_�˼Q1��o)�5:v�K���K�?G�jF�j�cL� �����"X���� %���z*� ���l2���X-k�8P#� )��hsP� ���m=ҧ*��Y���c:�8k>�y��pp�� �� �~�D1����s8�v������H�&B�g݄��fԉ����on��@��{$�[qaΗ��l߬.*s2%}���Q�c�&��/��� �����4��� �G���Eܐ[v��w�\#�oB_�oj9B������]��,�6s��f�>4�#�F�{�*��Ab��a�h�4���T�N��:q8{��\'n���vM�۾"9��p|%�F37�������+�\�s|/R�����sj�;?��"L������D���E8US�T7�T請v�C��K�#�cc��v9Y�h؋�Yc^ML�49
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ