Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
13ae748dd4db371d1ebc444c498114bd_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
13ae748dd4db371d1ebc444c498114bd_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
13ae748dd4db371d1ebc444c498114bd_JaffaCakes118
Size
1.0MB
MD5
13ae748dd4db371d1ebc444c498114bd
SHA1
250328ed5ef8eccee374eab7e6d5dc08205f333f
SHA256
233f6ad977c94505a9d8552dbdc47797e7e33cc6ec50cf615aea12d884edfc45
SHA512
d5ad2f61562f49513ae3d26714fcd3c9f7b685ebb45ce8c355120ee5666368764162594cb451f6a921341ac2388f0ce25fcb6935023e6ed5aa85ed2d6e745745
SSDEEP
24576:O4JTaRFmXsvIbDO725kcktKgG+aNQsfJTwFRE:7eAsv4O725rtLNQ4JTJ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
GetThreadLocale
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetForegroundWindow
RegQueryValueExA
VariantChangeType
VerQueryValueA
CreateEnhMetaFileA
OleSetMenuDescriptor
ImageList_ReplaceIcon
ShellExecuteA
send
AddTest
a��4�X���2:�R���[2�o����0~T��舜�b����oɞ �K_�!�C��� �O�MA�펩��[��W$sN��@W)t���)�n@�U�� jr{�B���X�a����VӚ�ъ��.���b����m� 0Q�8A�<*���殏a�i-6j���<����vY�Y��ʈv�tK�FI�D�=a0;iO|��#k1�����ݏd���]�\;LnvuM!���z> �v� �mn�|�P�"IJXMu͈���P�i����Ʒ���1�}��J���6�7�&��M^�33�T�mo/���J�� /Ft�K��b��?�4;K[� ��ME���x���+���f��I�K�gP*떀��$͡�e��^퇅����+��E�R�V�� $1k8��BP�O�X���E���t$�.YУ�v�̓~���P;�?��?*�z���ų?k�S}��#�T�s�8pţ�2-L]mb�@!���\���<_uZp��\�'��pÞ|S0��ʐ��j�fm �7+sf�=,)53�����AH�eܠ�ՑӉ�l[u5y�"�<�#^kI��%�g�����-$��#�绢���P���� ����a^6��|��ڳ���3���I���r�>�J�J��OM�������Y�i����$��07�?�}�5 �������?=�`�ll����ߢ, ��.�q�>����OL�y��az�ݿ*��%|��ޘ�8�g�)2O��o�V>O��/��u�@UVx�AҶ)��T7G�=���3��\H���Y�o��+y���ֆy��pxW��5[��k'�P������)��P�r5$��s���sV��N��\T/谇����"m��P66ʖ��f@q� Ŝ �#c6a��D�6�Kp�~\%�d�_�H�].�s�E��CNf��vY�����=bۣ���jn���Ҁӏ68#����zs����A[�fPm��W�2��vZճ;_�P���k][yҕ�e:��whL-� �b��"���_eѻ#���0�B:�Hi��cr��;�u}IjA�~v��l�Z��>% ;��҉u��#y�p���E�<�&�����`���&��7U���~f�����q�kc{���+���ڈ�H��7�h� ��>�o��Ep�E�Zk�����(Y �~���-�χ}�z«�^��=/G�զ���q{\G����r�㪳�Q�����[0Ӷ<� OUs��K]+��N)i��|8��I�C烳 �� Sb{��:�UG��|4�9����o�����{�ŧ>Oد��{�1�2S������b@F`5��s��)��ܡ��+b�O����[5�V��n�S��١�V��� �+��`�-�^��sVW8 ����#t�<U�cDi~#�3�x�����"&>�1�X���:������C��j�aQ���?U�[6|��&�#g.���]���D)�I��4�"∉��hZ�� �۫��\�S��HSx��wS?~�m�����F�L�������8�т��i^��� G9A��/�X�(^�?_��ܰ2!���L�fW��D�n���;*��� Mg R��δNy�b4�O�( �o��OÌ�p��E=�;�m�fj/��'�}��1XG��!=�i���.+�������:�v��I�G�rSW�}-F���̹�,�;x�E�����D�L��=u��EݬwˊSXZ���+2/#/1�N��Y�^�IP��/ag1%��g��'b�ӯ�=i�N\��&ћ� <����:����H��1j�]�9�����f�r�o��D���ƝU�ϟ�;Ct�s��j���{S&ʰ���z�lT�sb�X;E y>5XIt|��xA�=-��\�i��h�f ����SS�IT� Գ��9��B/í~'j��Ǭ��:�}X�FB��Ŀ����N�X�Z�`�?�ʽBY�f�� C�p���W�د][�\x�D�QG��W�!�����W������U����[��ESf #�":4�`��_w%g���n�5ʌ�ҤC����>��~!ʇ � ��{li��gq��k�s���D/0Y�9��8�E:ܕ�8�!LG|?�@Jɠ��"e��E�f���|<��we��8e���6dx9�`$G4��<%�'c,:�Z"5jhzV蜛��-FgJ�r�9�{ӠE=8v@p�}7!v��q���7+b�[z\���>�QIQu�W9��r��~���&������.�"�� P �Rǭ�?�K}7�����M��j��aG��۽Ŵ: �g��s!�*�e& uJ��a���QDv���j��A������yΣ{N:�#> w$�7�#�( �F~���bwd.^��Iw���/X�&��_-�;Gzi�F^\��@Z�x��t�y��w^+mv���>'��f�@����T�FZ��he0���r����U�l�g���ٓ�8�?���*(z?���Nn������n��������$Яd��I����0+��&�h,p;�Z�.K��i��͓����fmm=�!��?1^+/��1_��8pUnq��!����n���1K���V�����G������F�q���[�ѣ�����2�ԝ�!U��^�Wķ8�d�SI�|>�����h˓�?�g�@%�}�p����!C���yq�����}?Yo)�!�] �u|^���+�gi�H��8Q���r������#uʋ͡�?��<��U+�����#�TX�C���)Jc��φjU]��µ�������9Es�C�ݚ0SuW���?����Q��A��l�-�����ɱ�Ⱦ���K7b�Ϙ`��,��۷h�p[��������,K_�����>wyz�B�僘�iՔ�j:����9�$ט5���V[�Z|�U��qy=��{.��_�o�h.h�\���.=�qTý�Z�����?rV٬�;Xs���ڑ����r����6|���oI{�� T�=V�rT�v��R�'�&6�*�����"����BBg_ �����G���8����y�����Hu��zǮ�-��Tۍ�J�$����
enString
installKeyProc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ