Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
171b0f7d1bc307324d56d2ea493c517e_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
171b0f7d1bc307324d56d2ea493c517e_JaffaCakes118.exe
Resource
win10v2004-20240419-en
Target
171b0f7d1bc307324d56d2ea493c517e_JaffaCakes118
Size
1.4MB
MD5
171b0f7d1bc307324d56d2ea493c517e
SHA1
af35b03388eb3ecfba6ad7e75bc01ac6a5131293
SHA256
12cb1d123c053cb2154af90b0c9881271fa7e0c2028a166eaaabe7b034611020
SHA512
860398947b3fa2a2b1b84733b129d884da48a10dd51ffd6c05bf5a7720c0ce3859698b71f48f034b7842f55c1b72d597b19c1f9326a2bc2b0e7b98e5be1fd0f9
SSDEEP
24576:XKLzOdlRw1fJbm7P/tAhFIubWXV7NFk9gaq2OTNLUkEbfVbS7A8KB8T0URnfTbPf:XKLETP/tA3LEV7cgn2O8hzVBRUpHvUc
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
EnumResourceNamesW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetClientRect
OleUninitialize
SysStringLen
�}�L�ȳ&�5([/[G�IFֳ�l���+�Î]rL~z-�-��'����&�q���z�����n��hO��n5���g$p���¬}�l��`j���A_z�a>�T���Z5�\p��1ֶ��0~�G �Ys��a2��^59Ţ���]pѨ�������2~C��T����ҏk�e~C�Y�Nt�p��p�-,���۵F-������c�&�X�6�x D�j8��ͧHr~AK���7G�2Cг��i��|#�*ihÝ�:����/m��;�V�V����i֗�67_9�gl��������[�YO V�x���`W�}y�,�b�l"Qp=�Ml���ѕ�;e��W�S�15���3��3�;<|=kRԹ۪1���Px��ϛ[���.LsYO����>��+��������x����6��We��s>e�� ��I�nB<D���ںQ� �M�&s��,!��h������-�ǾB�2.�/O����s���=�hwU8C.�[:G�u���'_���|�V�_q�!A�ٹ�i!:���[��w%����^��h~: v��±5�l���MW�M� �3�����@C�,�l�v%�R37f��{-J���:�B�u��7���#�A:Ѽ�U�;�r�Ac�ё��1��q��d�<�&�yODp�bn�Y�:�=>�lQ��|���/'����"] ����P�+��v�7��?1к��U� }g[U���"�����|�T- Y����H��\;��[v��~Բʐgv�{�=����T(=Ve���d,�w�N�K���S��-� d����IdwiK�do�hF�d5%��hX �$LcH��C�>��y�̂��J]�����D=70�+��� aL�3�p>���������!ʼBn+�|�����SU�b5���tY#AS#��v��T�k���%���6�Fv����*�9�n���J��^�8���W��gv��>��2Aפ<��t��<4| #/^s���� 0w���!tC �/���"�.C`�t�P��3�=���̬H*O��w��?U�if8���TC�� ����lO�}�/�Q�j�������$lw�p*_ia�����9|}���,�#ct��T�*U��]6���6R����KI�&��|�U�|��/��ѓ�hT۾]e�̌�w}���s��Q99#ʷ��i�W �*=�X����`[S����z�*[*V�k����Z>+9�A�#Ҥ�a~0�E�qH�T�bU�$���fji����T�����T-���P}R�t"/��3 ��O�}���/b�L��q��b��� ��2r�F✜�p�4�K�"3]\R-vmr�w���X�[�Ɠ��� �� �fK���4����!����/x �W;�Y�Ta�o3�83�Q�@̌<���5l�7������̝-�I�y��,z!E����r�0b�w����&?���9H�Ha4�2�4"e=Ԇ^ {��N .z����W��S�-����>� (��j�HZ� �"��P.�n�;��! D�� �q���0o��y�@�ʣ�v)�mG)M�0�ϴ"�&'���(L�:z��$��4��7S�X�K���q�]*#r��Ibc��w�����^5�*����s=,a� �h�3�h�k����:]�G�s��d%�����!��~Tڰ�Rܦ������YZ���b�z-��¶��R]+�ݴ��W�9�;�~����}������;F@�뾵X�Y˳��u*�V����)�y�3k��{l\������F���-�x�k���%�?Ж+��K�����\͚z�b�ܐ�yb5�4�P�=����|��je����&�g) ��t��d ���[�N�F�������7oyᕟ��wmL���"�$�~p�v�]��v���6ņ@�b��l�#�B~���(�v?������N."T���Ã�!Ry��Cf���^��~��N�夼l"��٧:�Hv�%����Ð�2������>;C�2���$����tG`v�-OT��aY.�`p���u�ы��e�8�C���7�虃����6 ����h��s��i�����sNAe̊�l2yڕ�?�@��+t�o��KE�o�]g{軣��)�C�a/��%ҝ7��)f൧�Uz?�C��Wo�S�H"�=�9.>m��xϘ�sK�ƾxx��F��@�+\ ,OeE��!��-�[���hT�N������n�t}N�n��G&.��Hу6��^+ �] �z�ޔ��bA��O�V���lzƁ5���� ��Y��!g���L�����c��M�0��\�Ns(n�&����I��F* �lL����J���G�D��L�%�p���T.c���4}F��Z�$i}��2��!S)�T���? �xp~���3I�T_q�h#Y�:-'��#��ᬶV.7C�w!�yH�q(�(cU��b��\���[�뛔d�͝I��ˮO��1k{���q��Y��|�� �3k����'�/�ۻ�D��{`i� �����Z��o�Ҩ�� ��|�m�� Bz��Z��M�\�rq�����3\�E0�^��tif{���z��������P���%��h�M�]���\L.�\a=h�r���ډ�Z�{�p��w������=�C��D��27���zP��^��@_�"r ����bت@`[��HD�"�� R����ϱ]f� �jG(z �� 27n��7P٪P������v�d�5�B��6_y�P��HoW� ����,dI����*Ӹ��?R���6��4ի�+�L�$�f�C̶\���_�O�[r2�CP�ݗ�������m�� ?��A�Y ���LS��b�6��5�bE*��d�k3:,V�J �;Jh�H���|P}5�k���-۩�{��;y���}�������Ӱ�l�� �N�)'�Q�SD��H|n�� +����!d���o�ӯq�w��A^i�)������s�܌���i����8m'�e4����:/�"��Bz����[W�>�OW#�ؾY�zYٿ��"G�6S�xS-8#=�7���{�`�+.V�ځpZ�O�u J�jV�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ