Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
1171bfddbdcc7b8072b92995f07ebd2d_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1171bfddbdcc7b8072b92995f07ebd2d_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Target
1171bfddbdcc7b8072b92995f07ebd2d_JaffaCakes118
Size
1.5MB
MD5
1171bfddbdcc7b8072b92995f07ebd2d
SHA1
9afefee590c0934d1107cea36bae397e37c7147b
SHA256
22eeaaf2d56ca5a8161c824e520bc118ae69a132626e43e725e9313e96960a82
SHA512
78e563599b137310e7dfb6e9efac2bf4d9fcb35110ae4acb61355efa2ca94237f10b6b07b3d2cd311b1917d7cfba406d46257532846d6d2d589a8bbb151cb52d
SSDEEP
24576:eIbexgwv/to3TkvhVbfKEr5Ou5zu5FgJVpOIUqoAJXhS7grpUsd2Vf:NbeVtyTEbyilundIUqx1SaId
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetCurrentThreadId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
MessageBoxW
CLSIDFromProgID
VariantClear
�u1 Hk���%_,��ĝ0c�M��q���6Ė�!��s�B�r䎷�R#o�D�Θy�����R*?<�^ ����N3�|ޤ��O>��;�/N���u���xw#��+�3��"հ�����m��O%�j�+ ��7���Jj���M���0�ѐ�u�ɶ��x���݀�B/����� ��DUЭ"(+����Z~��� ���H��- ��eKCx���Ȝ*�Q}�E���C���fϟ�NŲ5���!����^ >u��&m/5/zz��HT�?Z��v�%c[�����gؘ���B��?f(�����\� a�7پ-zǖl��z�[�Ô��Mښ?;�r�"�\�j�}���⩩�}�&��kQJ��3\�oHD<q~��d�g�+:7MɆ �M��f���Ļ��*�h+�4�����YZ�9�����X6u��!��[��0i+c�r���·��X{�xgv���>�[�t4,KTNh����+v̷GrΝtn���W�$����(J�;���O��\i��<v0� ْ�}s���F܃��ztg�{���v�'!�e��ItS��z��&�hq��m}�^=�����x��wf��s3�ay���A������%��Ov pRւ}x�㨙E�w?��v�mؗ��"F���r�(��E�a0���C��Ato�ʪ)�.��[��tU ��-�]� h��tT��rU ����36��w��5�LS����� #���an)�?u�zyc=8��e#�����Ey�Q�7���-ZN�<�j��LX���H����Z��BE�`/��Y2d#Ht�x����-��2�VJg��S��bxx-�r�����$��<���@5��~�����nt%��6av�ž����gETBM�+@U��N��m����<��9dl�i$_뻞�2o����̮�L���(͑͊����V?�c4n����x?�B�5&`�T��蛼�D�G���;��vv�m ����֢ ����k�)K'��~jv �h�Z���]YN39ur���j"dB2����e����.�T��cĶ��+��M�rn���;�ߛ���ʩ��ۜ`ϖ�kmW��ƜAb[���S({�:�;od�6�i��>8옍�X������%$����L L��Zrɽ�N��a�f��YH��������䳐n�+��( V����wuE�ʥs����S?;�s���MY��g����)�\:��d��w����鴷2��Ͻ%ǟ��,$cp�Kn��ͅ��,�L@���Ӓѱ�x���ք��=���\(dg֩c�f ������d��?Ji�u��b�-~8܅�I�.LJ�R�0��F����e F��&��W]�xǨ(|�FNeL�p�R���M5�z:��C$HS�݊Cܙ�I��>J��e�����$�YKN���c�7S�eU���1n`��T�^Jo���,��XSR�`�n!�hЯd䶈|��,?R|�6�+fo���l��N���[j�y�m4-d�������Ԕ7������jMҭ��([�:�V���>C���X�]+��C���FC����?'�~�7��I�$���`�"Q̧�j��zwu��>ٲ�6��鐑��x �-B����[%cT8�F �}�{ n0���@y-k%������<�G�������Y�k�`�h0Y��`�E\<$�/砿��w[I0 ���<Fgr�q��u��]M:�pc�N�h�����ti������m+[��:+�槊;���v�{=���ULo[�|�� ��{�&Τg���SJS8�(�C������,o��ne�,��35l��I�z ��ݺ����}�0�a �ՀrU�f��7�n��{�D_A�(�������~��[�Vl=�]6*2�����So͍���I]�ە�6 �]/%����_/sF��(>�<$�'r�pw�飠?2�Y���P.�S�!L����I��B i��+���Fd+?u�߯��?<<[Z���/��.����NN��tD���:�hH��5Y�D��b��uۜ���x#�}�ZRGW��p^��/�6��V���.�l,<�Rwx݆�k�V��[�x��!N�2���Rp�~��|J�c#�~��jI�"��T�Bka��z6u�1��G����E��o�LZ�+�w>������� ��K-77�f����,ѵ^��J`�ZIQ#�{,3w4aX���Q7{�%. ��u�P�F����u�\1��J�U� ��2�{���^����R����^�l4��=�R,ʥ�?�}��ƆIޞ,���Y����Ͷ��9}N㚍 �^���cJ({��8�.��_���k�{hR�Г�����˔�]Xi3�m��h����e_ 3���'Z��2>�Y����a�]�ǖyH���EA0[�����㕯)~����<'����+p�Ƭ��xC�^.QT��ր0)Âyk-�sT�]����P�sj�����f���B��|"�=N�9�s���>��Wn�� ��{�,:����߿��?�.����w���������+v~�`�}戁�nsm���G� �`�|z�p6衼�y:9��n~��9Mn��G��)!մ-QV�|96��HįmZ�\�\��IJ��u�^��pI��:[|��������EKY6��b�tP��@M]�,�c��.�P�Y6,�G��oJ56;5���� �,b�㪟�����B���RY�TrA\H�WV(+���G�X.Q��'c���e�6#}�oYGӪ]�me��v4�b2�1��F��3��B�'�n�ڛ��2�o�Q�B��.�S3�8|��� j��>b�Qy{�{}��ݫ�FQ��*�h����#��}|����@&Ga ��[����C�/�c�z��S[. �g];����#`tT�3O�F�t���J�&�o��En��-�,h7�E��{�GE�/U٪�����(�y�D���s�I-�fOC���A!���hU��!26�����T�v� �{2 k� �Ƈ,������m���h߁07d��ˬ_Um%2+K^�˙49�.le+-RC���ZU l0��HnϠ�\ ���.�߇DMw���T��B7p2Y]̅�}ݤ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ