Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
28754bfa04a990ed215933a12b522666_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
28754bfa04a990ed215933a12b522666_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Target
28754bfa04a990ed215933a12b522666_JaffaCakes118
Size
600KB
MD5
28754bfa04a990ed215933a12b522666
SHA1
e44d70037e45d29fdae5d4237f2bcea24eb48ba3
SHA256
236726601335ee3815aa3c0cca10e20553b5700f8e2ad12cb62b0652c7a39b9c
SHA512
5ef600f0b31383edec6e84e071bd0dfd2a0cc3f5469cd3126880233ecd096c42943593fb433cd49783517b40b0458542b34fe83348df0ef378255ed03f9dac69
SSDEEP
12288:YUqC7mosDV4IaZlK8P9M+fPZ5OnweU2p3NXIltivGWFLMB:YqmdV4IqXVtfPLswbSNXyWW
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DrawStateA
AppendMenuW
GetNextDlgGroupItem
SetRect
SetActiveWindow
DrawTextA
LoadMenuW
BroadcastSystemMessageExW
GetClassLongW
GetDlgItemInt
GetKeyboardLayout
CopyRect
InvertRect
PeekMessageA
DrawIconEx
IsCharLowerW
SubtractRect
GetActiveWindow
UpdateLayeredWindow
EditWndProc
EnumPropsW
GetNextDlgTabItem
EnableWindow
CharPrevW
GetShellWindow
PrintWindow
ShowOwnedPopups
ToUnicodeEx
BringWindowToTop
ExitWindowsEx
SetClassLongW
WaitForInputIdle
SetMenuContextHelpId
PostMessageW
SetMenuItemInfoW
GetClassLongA
GetWindowRgnBox
SendNotifyMessageW
GetWindowInfo
GetMenuDefaultItem
GetWindowLongW
GetRawInputDeviceInfoA
DestroyCursor
ChildWindowFromPointEx
EnumWindowStationsW
LoadImageA
CheckRadioButton
CharNextW
MenuWindowProcA
GetAltTabInfoA
InvalidateRect
SetDlgItemTextW
CharLowerA
SetKeyboardState
GetCursorPos
ScreenToClient
SetClassLongA
UnregisterClassW
GetSysColorBrush
ScrollWindow
SetCapture
CharNextA
CreateAcceleratorTableA
GetScrollPos
GetClassInfoW
GetMessageExtraInfo
CreateDialogParamA
SendDlgItemMessageA
RegisterClassW
InsertMenuA
SetScrollInfo
IsWindowVisible
DragDetect
wsprintfA
GetClipboardOwner
RegisterClassExW
EnumDesktopsW
GetAsyncKeyState
GetDialogBaseUnits
SetCaretBlinkTime
DestroyCaret
ChangeDisplaySettingsA
DispatchMessageW
GetKeyboardLayoutNameA
LoadMenuIndirectA
DrawEdge
RegisterClipboardFormatA
GetWindowTextW
AnyPopup
SetWindowWord
GetProcessHeaps
GlobalMemoryStatus
SetComputerNameExW
FindFirstFileExW
HeapValidate
lstrlen
ReadFileEx
GetDefaultCommConfigA
MultiByteToWideChar
SetCriticalSectionSpinCount
GlobalReAlloc
HeapDestroy
IsWow64Process
CreateWaitableTimerW
OpenEventW
DeleteVolumeMountPointA
GetEnvironmentStrings
WritePrivateProfileStructW
CompareStringW
HeapCreate
FlushFileBuffers
QueryInformationJobObject
SetFileApisToOEM
PrivMoveFileIdentityW
SetMailslotInfo
GetDiskFreeSpaceW
VerLanguageNameW
GenerateConsoleCtrlEvent
GetCompressedFileSizeW
WriteFileGather
CreateTapePartition
LZInit
RequestDeviceWakeup
CancelDeviceWakeupRequest
CreateJobObjectW
GetVolumePathNameW
EnterCriticalSection
GetProfileSectionW
OpenMutexA
FindFirstVolumeMountPointW
SetVolumeLabelA
FindClose
WriteProfileStringW
SetThreadPriorityBoost
WaitForSingleObject
GetCurrentConsoleFont
LZStart
RtlUnwind
IsValidLocale
SetTapeParameters
WriteConsoleInputA
GetCurrentDirectoryA
UnregisterWait
ConvertDefaultLocale
GetACP
GetProcessHeap
HeapReAlloc
VirtualQuery
LoadLibraryA
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
WantArrows
dwOKSubclass
ReplaceTextA
VarCyAbs
LHashValOfNameSysA
VarI2FromUI8
GetArcDirection
GdiGetLocalBrush
GdiConvertDC
ImageList_ReplaceIcon
ImageList_GetImageRect
�f ����MWX����yi�ҽP�=�������X�������*'�|��w �Q�y³ԥr��`������A�O�m���#�pU��T^�X0��kh�<��Q�v���ljW�����ʶ"E��|�ÜJ�؟m�4?n��1�\�ğ�o��t5��S�{;�i���VI�r�O���Ce�vܺ�* �2���}��yeP�.��"1$BO�ߣ�$�{9ܲ�K)z����Ϩ�Ú��f\�By��T�L�«�{��p�I�w��ch6oM��_E�9�Sl���}�B+#:z"j_��� <���c��n��Tm���]j�.$-��n$w9�M$��}�O��vP��R��[����M��s���+�C�1)�+h�35+��p�Iɫ�]íbqЇ����IA�c#���5#8�I$��@��Yp����_�f���ˢI��U��"j]bF�l�bx��4����#��1L�7 (�Ee�������J����%��n0�� b��&*U�|5�l#��)�O��Z ��˂G����T��?���m�_/�-^N�e9c�Q�����H���?=��ք�/�ʰ������`q��F���$�\ӡ A:�w�ܠ!�w2!;��ܞ���{�����!�܉��օr�5�d������V����_@O�\A2�p��Lg[?|�pA�zaRs�5"�]��k)��"�Μ��6$$u�����t�����D�NJҧ���J�i1��i���������^��U�ނ/f�g:a�� (�r��4�Rf�%r2H�I�E"�o6�1���`e�)4�D������z��dzq�%q��Z|��0@�9�^�-y�{��T4�$m�s��k㒲�1`�7}�`�����3ַ3����wB���*����|eE�X�&a�+?�~|�ʾ([�q��q�������%h������BC��X���������A����Uz�尷��z �����$2U�������c�=_�F�����E�����uJ{A 3��gy���H Z��욹�0K��t>��T�,���o�Ϩ$ȵЗS:+�E�*�/��\��'�^g��8�����e��Ǫ�!��=��*+�ٺ��³�E�f�ӻ�`Z��?�Rq��C� ��Oè��������������Akk-�J�����<#�����@��&i�s�L�ipR��MݯA��zAM����觽)7x����y�yx�XkoR��P�baM.�A��qs3�jr�R�խ nT[���e�(.qWA� ��/A�s�F���W.�:Gsp!@IH̆�G�7�poi�UY|f�[�m4��I_w�1HY{�pn���=x���h;Զ_�Qv�OF�ɸ� �r�����N��<�������"���aX��R����/T\�n�*�N�`��Qn ��z���[u˨r�������l`��MH!�DF+(*�DK6�i/�I0��I�K~"��J�)����>���7����;��{�"������]I�������~L���O���]ߵ�g"6�M���"\���-x�XR����5_x~����|�I8Z��\z?O���E&8�1� ����&��N��btQ��@�O���6E �q��i��ie��5?�oѨ9�^W!5f$�q� qR!)��)Yۊ>�W5��RK�s�Z�$ʞ�iM3P�������o�\���l�&%sʙ�!����yM���'��Gbix�y�]u��S@��X@fY2d�Ulq��r�$� �d���"9k{��0�医���@O�~��@�:N/N�A��;6�:n͒y�V]�J�>��������o"٭��{��:��j(,�:h�{H�u��Q�xn�O�G<bu��� �w� � ��p��6͜%:�A�� �����H9�h�]�<��N�;x®|�::���ɴ$�XV�8f�5�ʨ��y�;2p #�|(���59���*I2�$��:DX�04?�.)�����,�7H�.OY����{g��b�Z�?�#�@��Cp{�>�㥰ib�ÿ�F�H��f~4hR�&c�u �ny �x��X_���qK3��B�w���VP�<$��|p�rف��1�cRWj���1d�=��NJ�0�IB&�I�v������GqD��!�s���=h�ݻ�$�;;�o���ģ��ڴ��Yϝ )uF�7s� ��f�I�:e�݄&1��1q�7D�wa=����NG���[��/�7�$i�^�Ee��/��� b'��}*֔߾1.� �ܪ7������X�Ś���#{u��Wn�ަ��ꖶ��7�W�&�t��ǘ%g��C�gM��c���Bi�+�k��LM�PR �I�h���B�'��sH�5{TZv�m�j�6Date�j��<NN:��p-�RjW-� wC-g�b;K7}����X��!7Kd'N��羘&�'�5[q裵�i�I�����yW5!�\�1P�g�a��[̜��4{V��f���{ ] ��&��d����(-B��d�5������B1��/?x;;�իW��i�������.�����t(ڕ�w-�'�{��(��z1+�s ����O�~N�\�������S� �3�;�ilĖ��8��V����u�Ȯ�A�C��0�E1x@���뼟��LHT�<���V����C-1�a?[���^���Ȃd��d����RI�.<H��lU(N��?��<��xA�P���ۋ��;�49���!�VQ��K`�"�7���2 �t�C�u�����^��6�p��$�������m�ڐl�ݱ���Cfs��YQ%��k�]�n��@(��%�T7�y�t�f��\q���Q�8����}����b���$�&�gѼ�Hn2-������;��Bp6u������lp���k2�MEG���d�^���Ǝ)L\R���=�E�����a��5[PS�it�`��F��c��bp�_ �!�F|�Ն�zE8��I.�����1trvv�-�����e�h}����"�XO�����F���&\��i�(yǏ��bh��Fu@�PH=��׆GTb�g" �7_���� �54#oɻ�����~|���1Z;����j�O�(j
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ