Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
0e14d1053e36e0f3b5ecbd47ba9688c1_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0e14d1053e36e0f3b5ecbd47ba9688c1_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Target
0e14d1053e36e0f3b5ecbd47ba9688c1_JaffaCakes118
Size
1.5MB
MD5
0e14d1053e36e0f3b5ecbd47ba9688c1
SHA1
cbf8dd87ef9d658e2458b3bac843908114404b64
SHA256
047d51700a2294ac2c3919692b07f395330314ecf474ced312049fce98c3241a
SHA512
4e77acc5afc480d5dab1d8a575d56a9dfe3a12b9308cc381f7eb15b8fd801b18e10c968a23c1e8bded14e4b6a60bf49a55ba6dff56364fc7432011a1f9d69252
SSDEEP
24576:PWz28UFX08uQ86s/ygGnDCSjHuvvLdnIWTGjK8yi57FR/8K9cxXhei5PNpqqd9s0:Oz28UFkgs/yJDd0ZxQKDizSWeXhPPN9z
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
HeapDestroy
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
UpdateWindow
CoCreateInstance
SysStringLen
2����{`�p\o��X�������-�((�w*�\��N� �Y�]>�|B˃���M����:p�)��8<��Lm3<��hS��z~�ko���tЀ3� "zW�'�Kh��xsM� �lѓ7a�57��̅T[w�i�<V���7-���]F"ؔF*�qħI�5xw-)���k��z�$9$��u���ּ�u��t$S~7�!8��)F�q^��^cBP�]C�[�%":��g�X��:�%�t�U6h{Q*��y�@���+0f���t�>9�F�7�"5�� �|�P�jU��zꌇ3<{�<b R_pp����M�!h�j���m��H�x�-���]I������{ ���$ =m QG3~KhC�s�*H�Ӫs�Dp�*z�#c�����Ч�9[�����9�jg�hR����j�:0���R~b[�`\���N0���o���8 $*I��5��H�s�U���������RY�dl���#��|�F�0i%����k[��6M�q\�Ҏ7:i?'W�G\�?sMq�T��v�oC��n���;3x�m��`�B]�I��=e��P9ڻ�v��q5�_Zs`0���[ZYRKFK��n�sU*aŅ�[&�Fۦ�m���4��]������ �I���x|�T>�R�&]eG�0�^2ci��sղ�[��݄�7M6��(��ŧ����m���S�� x���c�6K�����$�by�Xpqf�W�.ۧ���!t'�3S\���T��ܰ���Sި��K<&^�h��c�Y�8'� ��L'�K��u� nFñ�������E��Үl r�J�Y�ɚ�X�r��,�\����=;ˁ��j��}+6�"6Ah��d܃Y!�'��ϿKYȷ�����wr���Y��N��<�q/��?!)���.T8�������)���a�4Eq�K��iD{4��́�e��Ể�7����6{ �{}��+˧�-'ß=���gS3ΰ T"�I���[�@� �~a�)�+�@�]w��hw��,��q~6R�O�J��ތ�%%#S��S�<���S��?��9X4dC����z��4����0�hj�lI.�v\bƻ��K��S��b����-�OPƽ� �ȇ����s٬��bぴu��'�@����qՌZ��V߆�w:�4Bp��qY:k���vX�-�!���կ5FA5lt�bm�����+{;%�9�a⋒�q�y�_����W���P�1�k��v�v�ۼ�6ȮZu�G!�^��a_����m�?�Pذ~��Q� K� ��@�L���Xts��5�݃�98"n�$\���_T�\��q�2�a:� s0����?�*� b��_��n�:������_Y^�p������%�����c`P�ڃ�dR)P���X'�(QO�x�{q2�z����2�S�{�tY����?��ُn1��:۽��$iD��2k��R��u"8H~ �$��m�����t������VI_��B2�t$ⓝCP���b�~������P��ߊN����xՊk�� P�"��~���z CJQ�����st��ix��MR\���*�P%--w� ǬE�G�u�,��B}�aD�bfm�T�dS&�\��j:=��E��.��T�ڰ��La��υ�mt���9<��d��W`L���;Ąa�1����.ҍ+ ���v���j2��"ÕM������ S�|�`��{�4���s��r�1��jN�\���O�a��\�@����$��� �xC��}����3�A3��F2����Ǔ����_�� ��Vu��z��U�f�6ab,�M����;i���#$��ک��������;-"���U�{�&���"|dĜsp�%7ߜo�̳.U�ޫ:NQ�9�� ��*��{�`������Զ�z�Gۺ���:�Y:�ۏ9wY����b�� 7֒���[)���i�y���^Pו��:����|{����Q"B���m�(1�ը�ࡗ"�#iU���И.sD���8O1�})H�X�4�<�(e��a��S���ͱg������uE���˰����S����[I.w7�t��V�KKIP;s�d���,���ڐ4����|iM�H��s��M��j����ʸ��1�l*1y?����6Af:�e�x�pà1�q�BY#���?�f)u� ijb�l?��;G���" �?Z�[�-فh̙���cv �<s�B%캝5+�ms@�,E�h�|p3K��*������x�_����&�Z��{����*��b}���I:�&��I�gK��20��a��)��U&��3o��Ǡ:���!�*U��� �X���(+(��XR\ ���֫�GfR((�S*��P�˾�)e�OH�P�N��X{������o���%�����e|ڻ���i���Lć�,�]ݎ�Ka� ��b�J��V%��M�@T�Y��&K��Q�� �C��m]��ʆ�J�aCI��E�5ڷ�TAq��f�h�I{�w�x"5en��Zq�����&�꺒��}��g�+`f���*��i��,ޛq���1��N^Z{������U�<.�-~�O��Qu}�,p���9�d�����7��* L���u�TҪ�NVqf>��N�Q�9�"���o3�8��~�Q�=��f0�딘��"�6Jڨ�az`��Bmql�ɵ�`\K�̳�ߣK��8���{�Hk+Xvzt|~0S��/�k��^�q 7s$���r�t�Ӂ� ��R��6��ܣq:�|�Vszof�/�L�ϿP�� ����џ���.2��c�������E�~�J� �DtX�����w��3��'�����)��ߩ0�>_���>��3٪� �L�y�4_�`>a:h�S*�n�'>Q�>֨���KTЍG�+�Bĺw�,����9ߏ ��g8�諾��neg,��~���4�������jYě�K�u^'�9��ۄS;dRBy���;��!�o���-�E�0��j�q��5i�.�N��(�<�BYPr�F]��U*����|e�m�'J�3f����7���ɜp_�U2Ž:[֛��<�Gb���]b��xW~#�9��Ɲ��@^h<2�� td��c$�,>c����ɶ�XC
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ