Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2b95276166c5b9244416054e4e4f4591_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2b95276166c5b9244416054e4e4f4591_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Target
2b95276166c5b9244416054e4e4f4591_JaffaCakes118
Size
1.1MB
MD5
2b95276166c5b9244416054e4e4f4591
SHA1
80ed616640d1d020fe76709746838a65498d4423
SHA256
a644bf5388ed7d8812283b4bac0053174a5dd0db251aa0dc2f5b9ebf63da7a9b
SHA512
933a2ffda292054f81717dfcaf144fc18109a6b5856e54faf494d63c80142968c4736b19ed4bd206d304a961983dec5bc724d2708f1d17c44b41faa549b4300d
SSDEEP
12288:dN2gjJOKqHPTz3vegVwWuAav0luz21pHwSWEmxRlDdtXg7rQR+Ugy1ypFiuQ519n:dNBLEPFwWu5p8Z4VZmrQR+xCuQ519dqk
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\pj\Svn_Product\Bin\Exe_Shell.pdb
GetProcAddress
LoadLibraryA
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ