Extended Key Usages
ExtKeyUsageTimeStamping
Static task
static1
Behavioral task
behavioral1
Sample
315ab600160990866a84e3d22b007b30_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
315ab600160990866a84e3d22b007b30_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
315ab600160990866a84e3d22b007b30_JaffaCakes118
Size
2.5MB
MD5
315ab600160990866a84e3d22b007b30
SHA1
8c6893894317cbc546f7c4119529ba2c14551c18
SHA256
8218ba3b223ee86999d28cbae40e363c177f963c4228b8b2da241734596bf2da
SHA512
48e388a64ca9e6270ceeca2e0a3b7615da8ba4642a4c9bdb4827e6b47ee530dd57197c443222aec65812c63198617814e1ef0bbb68b33ff72cba243363ba1cb7
SSDEEP
49152:o+V4UJxCNP/3dhk6FWl/ncncHHD3lZ6b+aWaSZDSf6cFQk7xzJL:7VJxCNP/39FsdzlZvDSf53z
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
sfxcab.pdb
__initenv
exit
_cexit
_exit
_c_exit
_XcptFilter
__C_specific_handler
strncpy
strstr
_strlwr
strrchr
__getmainargs
_strnicmp
_wcsicmp
towlower
strchr
memset
tolower
memcpy
_snprintf
sprintf
free
malloc
_initterm
__setusermatherr
_commode
_fmode
__set_app_type
_stricmp
_vsnprintf
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
GetLengthSid
InitiateSystemShutdownA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
InitializeSecurityDescriptor
CreateThread
GetFileSize
CreateProcessA
GetExitCodeProcess
DosDateTimeToFileTime
LocalFileTimeToFileTime
InitializeCriticalSectionAndSpinCount
SetEndOfFile
GetCurrentDirectoryA
QueryDosDeviceA
GetDiskFreeSpaceA
GetSystemTime
CreateEventA
SetFileAttributesA
CopyFileA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SystemTimeToFileTime
GetProcessHeap
FindClose
FindNextFileA
SetFileTime
Sleep
GetVersionExA
ReadFile
SetFilePointer
MoveFileExA
RemoveDirectoryA
GetLastError
CreateDirectoryA
GetTickCount
SetErrorMode
CloseHandle
DeviceIoControl
CreateFileA
GetDriveTypeA
HeapFree
FormatMessageA
LeaveCriticalSection
DeleteFileA
EnterCriticalSection
TerminateProcess
WaitForMultipleObjects
CreateEventW
SetEvent
GetModuleFileNameA
SetEnvironmentVariableA
GetEnvironmentVariableA
WideCharToMultiByte
HeapAlloc
SetLastError
WriteFile
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
FreeLibrary
MoveFileA
ExpandEnvironmentStringsA
ExitProcess
DeleteCriticalSection
FlushFileBuffers
WaitForSingleObject
OpenEventA
GetCurrentProcess
GetFileAttributesA
GetCommandLineA
FindFirstFileA
NtOpenProcessToken
NtAdjustPrivilegesToken
NtClose
NtShutdownSystem
ShowWindow
SendMessageA
DialogBoxParamA
MessageBoxA
SetParent
EndDialog
LoadStringA
SendDlgItemMessageA
ord17
SHBrowseForFolderA
SHGetPathFromIDListA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ