Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
13c4d8bb9dc8eccfd015a481e9208379_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
13c4d8bb9dc8eccfd015a481e9208379_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Target
13c4d8bb9dc8eccfd015a481e9208379_JaffaCakes118
Size
1.5MB
MD5
13c4d8bb9dc8eccfd015a481e9208379
SHA1
fe52f57595171520dec68eadec4b1bd9da96b322
SHA256
1105e3946604376cfeef1943c126a882e5dd166a0901a2c4b9502a01873d7d3d
SHA512
72cfaafd5a1ac7f34682e2d801a3759eb8c6292d8a19696208c436bac38f6e9b9d2062d4675e9c8f509dace26a2ebe458e1eeb9df9f9574f7cdd32bf16a60fed
SSDEEP
24576:Ge+u3vQ/LPalow8hPMfeZGvMnLLDazVC6MEuV8SoU7jYx/jkuGNW2ulFfiHcstpC:rNfQ//hOeg+jazVC6Mv835xLVkW22Riy
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetUnhandledExceptionFilter
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SendMessageW
CoInitialize
SysStringLen
#�ںĕ�/){���RE�K�0!��u"U�����P�4���3����������o�C���b���qY�̩�T9�Kk66U�hx�j�o�:&�s�O,�E��'���d���"$��MP$��\L����j�4hȉs���v���;!%E^��Cb䢧�:���)�I�r��X��-�Ӏ��5KGXWo 0"�����c�22h��Cq눷�q�:�T.�wKw��_6�m��V��8,R[[��?b@��_2���3�F���5G����m 4�TP���=;C�}��{�s������j�5������ o����v���#���n��"��M:i�l��>v�x��gH�\o��qW|u5Ū}߅�h�t��#ڳg�zCn��X�O����È��8j(KJ��^�a�st�v'���+.%&ZV��+`Ee�!�Ɋ.�}u-����d�J{8�\�a�.B��\��,x<����8�"��'��3�a�괰����֊Y����Ë��*��ځb%����a�2���Äm�U��� ��f[WJ6"���q��ܥ�Iј������9�S�G��B� ��>(g|l=wucDo~����w�_4Cc���WW�I�[~Bo��3��S�W�vp����r�ҷ%d��Х�h�S����ڋ3:b�{ӳ��+4ZI�Տ+��k5FW�H���CTׄdbi��s��/��{3U �_P�\��v"{��<,�*���ciq�^����o�3�z��y�x��QI-����FD�|:���|8��P�Q]�;��%k���������4��C�O҃`��j ����,Ϡg�rWU����>y��zޠ����M��[%'ShϺ�^��B;���6�ޏ2���1=�W���Uѿ��k\��{�l��>�<+_��%�61�Z9����p�8����b���}�5�DX4ƒu �9e���A���oQw�s\>�2��<&64H�"�EOlV?.���!c�n���ptk�$N�[��G�Ŕw��j�� c(��?1�RP23F�NJ5��ZE�X��arX�l/B�dX���.L����_ţ�@��'K�r;�;Y�H����N��r|G��`Ťt�@|�@���?�����ʣ���H�/��K���]e+�������� ~ո��UPD�?CPZ��C� ���9��"R���2�X&ui��٠�C��`��H�E���vHnj�@O�" ����2�Dy~��DP�2�h�HU�Io4}<X)3�6vbF�ZZޞ+�VuT��x-o�/{�p�U�빱ڹ�,���⢖�U~�� X��|�å5��*T{��8�C��.u�� ��3e��z���*�ҝ�$U�˦�L�(�Y?�����A`��1 Ӵ�~ !��b�h/tT�~��{��E �T>tdQ9��X��K��;�d.E`1�(R�x�pYY��9d����\����'>�C'0Wa�[<[7�myɱ�ߴe�/�|JT�ی$��l��uud�-�V��,L��E�R����0��.Ox��!��s�?�A|k��\� ���mRx��oÅ�CXN���s*��WUk�1�h���p��<dS9�5�5@~�hE4��^�W��Xr(�y7]�)3W�q �-%ƙ���WӅ��KF�"~"��� ".���:=���-���4��nZY����<t�q��ͤ����6���瞊c,�`�/2�s� �p��L�1hCd�l�e�zOX��pa7ăz>����;-���H��>̥�9�r�bP$jKՈ� #�����+��F�Ēb��/M�Ȓj@��xk���uW��j�j�����\��I# �z�T�����n�g�����%R�� Ѽ�_*��������9zaC����*Nf��ތ,�Q����:�~�;a�����n2���s�S|���T/w��=���ک��O��G��1 �P#�Kxc�O��F�.�AZYw /�����x��Yb����c����3�!����&?1�e`LN�k�:���+N|>N���z���ⅺ�^w�� }]�Ň��_�}Q�+���t��Nf�b�"l�wd��L?�f[����|���C��Ͷ��A�=w��!v�z�<�J�M��L/��ͅ���p�yJ)$ ��}������:���Nsq?ʌZ��f�,GH�Af���N�RФ�o��Z��+ e�g���ܓ�� �E�� J�����r��L�����p�ۣVg$vkeH���3YS���e�J�x��w�T�݆���uءG��ٵ������3�?h�Em��)�7�Η?�R���j�*{���I4����>�]������e�\\X[�H��Sm�]�r�E�Ҍ$=�J�nB��H����y�04� �)E��R"/�Ҭ����� w��F�2\��9+��F�ڗj��[�%�K>��FTM��� ͍���1�{����K����`�����$��$1SOu3���-L�fU2q��l�W=o���3"%#�9�����א_O<+���<��[#�A�e�R�oc���v_����fy���� �`!m%�K4�C�p�*�����Td��i�w(,U'֝���.�����&��PQF�qM<��mJ�fw��R��CF��/�S���z�ddp�����A��8_�H�9�n#��O�����aӦ���HxʹЫ2�i����LEA�}�Sh�sB�� 仓ٵ������~ 3��\�� e�!e��H:ql���7n�ޤ?s�ܦ�P��������r�@�r5�#'���j��"%)P7�~ ���m;[��Xo�ϯ��̎���M8e�D��G=�@q�&Y8�5�̟!�<��U�^����u6�ElY��s�z:��}�`>.Rq�s;��L��}a���� ���*�E�����z�=���,��nq�V�剂!�]��gxJQͤo|5�#��+ܬ��X<kK�S���64���[z��=H������� �<���Nyډ�@u<����y��9��ѻ���B�s�":d\��(A�� K�N�o<[dB��R���#��ćc����53�3_��� �8`|� Ѻ*�3W�v&��-�!/e�u��ȍwG>.�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ