Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
10811256a627ad370d1cf0cb709f673c_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
10811256a627ad370d1cf0cb709f673c_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Target
10811256a627ad370d1cf0cb709f673c_JaffaCakes118
Size
1.5MB
MD5
10811256a627ad370d1cf0cb709f673c
SHA1
ce4d2f3d9a099176be69b5f8bf0f76131a5e0c80
SHA256
2b462f6dad14343de0075607890befea6e1756528201b3a5025b3642c2888c02
SHA512
ada4f9026f1bbc5908a45688da52fb9f33ba616bbed51362c947cdeb5fefa8805903bbdeaeb0fd50b67bb3e99e45be1b4c6944d73ccb838b73dce155acdb5ec3
SSDEEP
24576:Zxde6uUAqRTf59SHqwy49cjgLfBJ1Y7nFIWy+05blJ02W5D+tuO9jgMEsmHyPigv:xV1f59SzyQVLL1YrFIWu5b/05+t1jEsR
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
TerminateProcess
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
UpdateWindow
OleUninitialize
SysStringLen
#�F�_�����҃���Z�蔄�,��]8i���}��N�8x�G��jw���LJ�7�Ef�Bi5��$�������e�m�V�Ω�?⥑�(/��������Y����v�$Zc[;,Q!d����������u�՟qCc �.eՆɉ*�Ꞃ�^/s�p ��([? �ԟ�s�hOu�����aMpY�9��\\���S� 棢t�WnnI.uQ��.Q��Z��k�/�s��������>�c$ڴg�r�"���f��<|�i{Lg�٢���p�\2��r��0m�%�|��"r�.�!~]��qrc֍x���e�Г�'��~@+|ѼN�x�b<���#Ʈ�@#X��8�z�D֠�0��>K,h�Bs�@%=����e:xM�8.����c�DV�-;D��E\�h�������|Wa[�JՐ�{g�7$>93� 6h��m,�9j�nֆjBr�l?em[j�QT ����1/��h �Lj�I?@����Cհ ,��J�a�� �lZ�Nk٧�J6��ݾ��j�$�4v��I��:u� ��^�,Xa �����T���`Bj��s�wl�Gw�9_p�������8���Ԉ�g�7�T?�9��K�`�V����8�X������M͡7��5�n�k*� O���= �N�x�=c�C����!�(@�(t�ç����oρ�!g$�Cu��G:ϴ@���d��< �=�ܳ��R�?����b�v�H+y[����n Gk���y]d"�Җ�����>�ϐ:K�� �Rk|��1��bϭ�k��&kA���gS�ѽU�T�ԓl�7�햺�F�Qt��%���58����� ��y��aXu\i���MK�4��4+J6z��5G��]����Ƈ���y��~ ��%���p�ɷ0M���^}[��&C���ܲ��{�G� ,껻�����|�1ez� wJu�����.y��2��I�[�Xl��{Z�B]Tc�����Ő�\���F��Z��m���Y�(3a4��?�欹�G��V� 1�8'�y:���G��⪩7+�nZ-�&�5Q���1�L�������� %��堝ӆ�e�]�����Fb��=�3S/���t:c�|Sf%�e�k�i� ��De���'|���P2o���K��T��x��mO)x���.>���a�{e� d�I���_��\�y�V��h�W���3�p+��l�� �O��*?e�贳���BU9�sݹR�8��llq�-���)�ɍ�a ��Ѻ)�����������A�K�<.���Du��?E,l�W����;��}��Z:X�@w���^b�U�3���RD��I�����eێ��A���M}�ic������/ !����'������}Z�#��ގpgT���|t��m�H]��F9�5}|\n[��`/�"��ק�j�����P{�]�x������� D���5�?ԓ�R/�>s/�b���7��>=}����>��a灡?7�Ծ �X'��ʪ�Dofgu�kP��:*V�0�rP�=i-�lt���.���B�VP�7�V��ɾ�Y�M��=�:��5+K��nɃ�'NxH����/�9C7*Q�������P���F.q�M+dљj;����}\aFNH��Z�f/��jO�nP�T`1�P뻰�wY:�'�YQ�����G�2��g�h��p� ��{���kF+��̴ �z��ֆ��Lݛ�:�4�Ƚ<Ps��4���~�n$�^�e[T2z�5mɻ���U��"���p^ٽ�VevL�\�4���`RdD�Y��uv��{�XRt0\�T���$�a������n�v���z53�z��b���My+}�N�W[���(���J���ɑA��U"t�����ݱ\�g�سG�;:���h|y<������E���U���-&`M&�F�m/�^�lg������Vq�E��SN1�E ��u��_=���km<\I(.��tV&��zYy�Q��b�"�q�p�Lp�^�eﶠZ_Z!�>�S;=U��՛�x&Yd���WeO'��s[�@h*����M�恂��`v�����CR��:�� zs��S.9��]v��DI�<��c�+���vP(O��=#����8dW���.�I��Iy�?U~x��WS�C���D�����:R�K��m��*��e�h���m��"Y"�����^�:D'�,s0�����|�uaL��F���xW�ȫ�#컆4*,n��C��R�B��]n�諱 MR����9��Ʉ���O���(�JЗ�\��������#h�?^H�3}g�U;H�_抑bR�-Ć� ������">~4����j�T"k�����8)d����$��RPt/vh�}�q�5���[����QK0��B�Ҏh�;@��Zn�ڠs) ����tg�Z�L-T(�R����dķ��G�Һ�ὪW�%�pN�ƹ�b��~?��S.t�����۾~� �qt�4��<�`�nIU�t�Z��٫2λb�&�W|&�@��f(=�j�5-ݞ�Ml� ��u�m�?`�b��;��EI�8��H��<J��&j��Q�I�����Ѽ�lm�S�nİ�/�!"h��5��BW�ݚE�Î�DGC��h���6`x����Tt�ު�����㗜�\V>�K|/so{� �s�&����3��%؈�Ad�`I����$h��`��t����[fO�IF@c L��[�E�ۘx��[Kx<�'xCV���֠��������6>I�pD[��,�������˻�KPI���N�m�A���U=f� u�q�Æt�s\����t��n͐��K�LFE��)���+�\�}���+d����w���m���|����!� %���phlă��hp�����6z��Š���3��q�G�ֈs��-XQ���P���̍Cce�1�Ɇ�y)3�6 uôE�����I{����\��Ƚ������g��9"9��y�{u�,m*Ԇ�������Mf�"\�ى�D�8�V��ЄR=v)��9_�f�1�ں�����@�7�)�y��Ϝjd������/@umkP�#��<V�7E��r�%X����w�s���+.q��*<nn�� T�$�^�Kf�ÌI��us)6�Wz^�W��e�� B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ