Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
2d33eba374dfa6705b794c4b7f81f2a3_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2d33eba374dfa6705b794c4b7f81f2a3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
2d33eba374dfa6705b794c4b7f81f2a3_JaffaCakes118
Size
1.0MB
MD5
2d33eba374dfa6705b794c4b7f81f2a3
SHA1
80559d60ef2888105886d0356cab4c423928a543
SHA256
2111adc871f95dce652ac2beab90682f9452496cd4c66c98152e2b876501b2e7
SHA512
faec71f56c80de61a901ee66f971d1c2e23ea4ada79725cd5935ef5a5b9f528bde5b31cd705e63aebbe9a1c4a7811f2890f645f7941cc40eac9eaf8c6d0b54af
SSDEEP
12288:AAkN7U/SF7uCIf5wzl/Lf3KWuIcD0vOFieuPFz3PoNEq9LpRiKottnD5UtsMpNqW:6Q/+Iw9zEIgFsPFz3bpRttNk4e
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VirtualAlloc
VirtualAllocEx
GetLastError
ReadProcessMemory
WriteProcessMemory
GetThreadContext
SetThreadContext
ResumeThread
LoadResource
SizeofResource
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
CreateProcessA
FindResourceW
FindResourceExW
MultiByteToWideChar
WideCharToMultiByte
FreeConsole
RaiseException
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapDestroy
GetProcAddress
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
CreateFileW
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
LoadLibraryW
OutputDebugStringW
SetConsoleCtrlHandler
LockResource
InterlockedDecrement
HeapAlloc
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
FreeLibrary
InterlockedExchange
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FatalAppExitA
IsDebuggerPresent
Sleep
IsProcessorFeaturePresent
CreateSemaphoreW
lstrlenA
LocalFree
lstrlenW
GetCommandLineW
EncodePointer
DecodePointer
RtlUnwind
SetLastError
InterlockedIncrement
GetCurrentThread
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
AreFileApisANSI
GetStdHandle
WriteFile
GetFileType
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LoadStringW
LoadIconW
LoadCursorW
EndPaint
BeginPaint
UpdateWindow
LoadAcceleratorsW
EndDialog
DialogBoxParamW
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
PostQuitMessage
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
TranslateAcceleratorW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
CoInitializeSecurity
CoSetProxyBlanket
CoCreateInstance
CoInitializeEx
CoUninitialize
CreateErrorInfo
SysAllocString
SysAllocStringByteLen
SysStringByteLen
SysFreeString
SetErrorInfo
VariantChangeType
VariantInit
VariantClear
GetErrorInfo
PathFindFileNameW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ