Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
2d9cfc702577e3b32807bc038b685b31_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2d9cfc702577e3b32807bc038b685b31_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
2d9cfc702577e3b32807bc038b685b31_JaffaCakes118
Size
1.5MB
MD5
2d9cfc702577e3b32807bc038b685b31
SHA1
10ce63e7bcc6b885a6cbb85488e78911e3029852
SHA256
10eedf86451ad3be304ec2ca91417b7b6fc00c50019661bfb1ca088b6b1a3e80
SHA512
9c8ac60cfca73367e88f14f2075cbf11e0a6ed96d60509bbabd8b305e257547948241b38e466ac038d972082e1fb1d8529bb8468b855e44737ee463fbeafd65f
SSDEEP
24576:LgLpuRoXgDuyR8EbXUlR98VC+X+3DLEryZbW0PTum14P3fw9CJiVnvCg9iLbc6Vg:LgLURgFyR82XUz9zLiob914HwQJilvpP
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetTickCount
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
LoadCursorW
CLSIDFromProgID
SysStringLen
�:���M�˹����4��B)����x<��w�ˬ���|8�(h>3H��:�����CM�n��� ��5��6��VG��:X�W��A`�;1aT�P��h���f�Tn����K)�����M(0d @����p��Ve� `[�|y^� ;{��Z0Ђ �|J�Y��ȵ�r.��G#�֣� �Q�~�L&��!^���FU��Cy������9��R(&p���b2�k�n~��al�N��l#�;S��:ݿ���A đDN}������b�)�;I�갧��>���ob��[�%�{&%�/��+�{=C��O)!����c|�\��i�T��s�j'`��m�0��H?X6)S*K��9Q[�b���8���k�:������ڑ��|�h�ZK9۱��Xr�0ֲF�qlƣ/!)4���ρN!g�p�ч�Y�E���4�z-��b�e�f ��}�^�V%:������R��K�E��p�`�qͩ�o����L��K>��o TW$���M�opn��F���O������X��A+Ȁ������ఏ+����a�"V\k���~�� ����A��Lg�Q��I">i��6��u�4� �-w���w>�2�FQ$k3M�J͠�#���<l~n���½]�Htl'k���앎L��o( �w��0��B�j%P�V�{�i�j�Ӳ�Ȑbs�k�D�ןJ�8�k�F��Q6ʊ�xB�%�����3h�l�.��]�mzX�ܯ�G��̆�\p@�<���[��~�]�8Qw\��9_P�.C�����l�+���{L21ڸg[Ɋ�{�C�2_@�ZL�ޟ��jL���]{�Y�όZ�axh��HMj�;��7r�`����VF^��v|��isiw�@�d�#/%�V�N ���Nw2���>;$�C��!����}�$V��k�����N<�o������ ��N�̘�ȿ�mY��1��y����M��θM���Y+(�G�0������F� �7�K�ˋ8�F�Z��]���a��Lc��$�N��0P���w�@S�e���:O�8�\�\������F�g��o,�!l�^+S�a��9��:W�V��z�8���t.*ք�~{ ������k�R��4�,7�Dc�ݚ���t��� ^4��w��E����i���,�*Tw�%�77G*����1�u['Y��~�N��!���t���j������ŏ�E\�����9;���?[z�Ƽ6�����:��U�a�|�\/��GA[i�O���Akg��w&[��)BVC]�1��!� �,�������k�.g����m�1V��!�w$���.� �FE���%����&�Q���JI�����_�3+�H����7,_�H�>�W�����4� c#�'���6gb�����Ѷ��Jp�J�t��h�J`]a�ˑ��Fq���*�|^�S����H%�>J�ln?���pIWn��b�"GfQ�p��uC�ʫ�Y����e��������� M���ja/�h��L���ϋQ+��6bO.�1@/$T�X��%�)H��[b���tbq�Dg? +�Yg�8�b�̭I�� ^�&���J�)�����Ȍh�^���.��ӫ�w�W�ŘU�9�`�$)t~}����7 �jd܁��ÿ� Q��=�y�7ŗT:p��]��c��05eJ@P>�i�� ���O?����㐒��p��*%~`���ؗ�I6XċM�j���/�c �yU���7��� ���,��קW�M��X��j��@wl4��y�Cc�6���Ch����4xȒ�uAN��d(�,9ԓ�f�Ë2@?}[���E��ʯ�nD2|���w.N���%�R�t+)�d ��Ə-�NsO�P$k��*�z�y�0u�+�J�G�s��Z��z�y^ܐ�ōfV�j�}�r��1�@u�跳a"}���ـ1&���`���E��*Y�q"������O��* �:�.&Fe'a�wD�G�/MF${�Ʃ�;<n� ��Dd�BΎ�o�� m�p�l2 :߫:���U���T�Wq*[>�=7Oi�J|���%*�"�6��{ԏ�F&����E2��>2�r� 4u��&_E`9�;���M�m�d�t�Y��x�{������Fa*�z�a����h�eԴ�:~5�o�W��+��<y~��7�:����4g5d?��hf:�8�Rl����Eb�ZlL��-�(��6'w�aeh�����k��×#<.��T��.�N�iN�J��� �' l�*K�\�sM�d#�8Kl�s^����O�!�!5dGD�$�����/8�5��氪�"��_%��cԂ+�r��T揄L�:�)ڽ���1��H��y�U����,��� mw�Û���8����3��R� ��T�'�ӗ=Nឃ˫M�( -��C�[�GykG�PxG������(D^�]��C���<�**��Cݿ/3��B�(�Un��J�|?o£�\�2.0����sݤ0m�n-�1+��q�������S��uP5�5/nF�$4s�����0 �2�@��M�-�G��;2}�j��p��=��A{��T��4w�����TR�p�xI���\��U�2$��M=8m��^;�C��GҼ��m�������7���6g��;b��~Y��.S37c���-^�.g*�"�uA@/��}�K ��d�p�қ�a&d���Q�$��)v�(�#����������d:j'��֒W�p=��gF������@?�;���a����h�Z���Q��Zu�~WRp��Xoz�I ���e�a9Q�1A����<<�H��ba������P��}<poX���>ٝO��}p�j�&�2vG�� +����9�k������Y�kМ��[=����ѻ0'PM�SiVI�p�(��s���s~h���8g괄1ќ4"��M�m��+�4~���>:5 �+e�7�x8F�BR������K���b��0���Q7Cd� ���b�� Uc��TΞ�Ӟ����V/����`� ���#����g� ����������6�<I��>ą���Xa�َ /�YA?w����<H�{�A3!��ѕ�E�'�3Ǭ�?�����
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ