Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
23a69fa9a907cf90d1dcb97108629ad1_JaffaCakes118.exe
Resource
win7-20231129-en
Target
23a69fa9a907cf90d1dcb97108629ad1_JaffaCakes118
Size
199KB
MD5
23a69fa9a907cf90d1dcb97108629ad1
SHA1
77920db0071b106866f5ed51622f63f0e3411254
SHA256
174731a968e22c0ff791675e18012e757a08f35d04dbafa6c854bce353222d08
SHA512
77985f1842251b489252cd800e3a44e3797ca1a1da109aec073a0e4470a90fc5a3db91c8415de763a09ca06039af277458ef0b16b68b25a30b5d0108b56828e8
SSDEEP
6144:us/ESosS0Au0Epc7gDAj5sXIkhovf1VzmLf:38c3UoIOolQLf
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
map1.pdb
GetCommandLineW
lstrlenW
GetConsoleWindow
FreeLibrary
CopyFileA
CreateMutexA
lstrcmpiW
InitializeCriticalSection
GetCurrentProcessId
GetProcessPriorityBoost
GetNumberOfConsoleInputEvents
ExpandEnvironmentStringsW
GetKeyboardState
GetClassNameA
GetShellWindow
ShowWindow
memset
DsFreeDomainControllerInfoW
DsUnquoteRdnValueA
DsReplicaUpdateRefsA
DsAddSidHistoryW
DsRemoveDsServerW
DsUnquoteRdnValueW
DsCrackNamesA
DsWriteAccountSpnA
DsQuoteRdnValueA
DsReplicaGetInfoW
DsReplicaSyncAllA
DsReplicaSyncW
DsRemoveDsDomainA
DsListSitesW
DsServerRegisterSpnA
DsWriteAccountSpnW
DsListRolesA
DsListInfoForServerW
DsClientMakeSpnForTargetServerA
DsBindA
DsFreeSchemaGuidMapW
DsListDomainsInSiteW
DsFreeSpnArrayA
DsListInfoForServerA
DsRemoveDsServerA
DsReplicaConsistencyCheck
DsReplicaDelW
DsGetDomainControllerInfoA
DsReplicaDelA
DsMakeSpnA
DsCrackSpnA
DsMakeSpnW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ