Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
setup_26.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
setup_26.exe
Resource
win10v2004-20240508-en
Target
2fa43aa0e8c14c2986637e49460b0db9_JaffaCakes118
Size
367KB
MD5
2fa43aa0e8c14c2986637e49460b0db9
SHA1
6878cddf4e9fe719bf015b38657f5bd4969c8a32
SHA256
756a87a2ef3b43db79c78bfc384b7e9303d163b397a2bf5851d00617dd79b382
SHA512
97b2acce5ea19bd56a6f9a2ade73c84e5fd4ea434ea480e0e4aa11d912f4cd133d329ec37103a5b805a1f01e303ed227a712d51c5483ea95507643fb8ebc478d
SSDEEP
6144:RdSqtCJ4TB8n/IbgYc+O0fBthQVL0kmj3xQVtQDOfvSFPd3dp5oJ2:RdSqo4TSnQa+O0DhSL0koMt7fvSFfpGs
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
LoadLibraryA
OutputDebugStringA
CloseHandle
WriteConsoleW
HeapAlloc
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineW
GetLastError
HeapFree
EncodePointer
DecodePointer
InterlockedDecrement
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
GetStdHandle
WriteFile
GetProcessHeap
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
WideCharToMultiByte
GetCurrentThreadId
RaiseException
GetFileType
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
EnterCriticalSection
LeaveCriticalSection
Sleep
LoadLibraryExW
OutputDebugStringW
LoadLibraryW
GetStringTypeW
LCMapStringW
RtlUnwind
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
CreateFileW
ShellExecuteW
_KERNEL32ddll_CloseHandle@4
_KERNEL32ddll_CreateFileA@28
_KERNEL32ddll_CreateFileW@28
_KERNEL32ddll_FindResourceA@12
_KERNEL32ddll_FindResourceExA@16
_KERNEL32ddll_FindResourceExW@16
_KERNEL32ddll_FindResourceW@12
_KERNEL32ddll_GetCommandLineA@0
_KERNEL32ddll_GetCommandLineW@0
_KERNEL32ddll_GetModuleFileNameA@12
_KERNEL32ddll_GetModuleFileNameW@12
_KERNEL32ddll_GetModuleHandleA@4
_KERNEL32ddll_GetModuleHandleW@4
_KERNEL32ddll_LoadResource@8
_KERNEL32ddll_ReadFile@20
_KERNEL32ddll_SetFilePointer@16
_KERNEL32ddll_SizeofResource@8
_SET_KERNEL32ddll_CloseHandle@4
_SET_KERNEL32ddll_CreateFileA@4
_SET_KERNEL32ddll_CreateFileW@4
_SET_KERNEL32ddll_FindResourceA@4
_SET_KERNEL32ddll_FindResourceExA@4
_SET_KERNEL32ddll_FindResourceExW@4
_SET_KERNEL32ddll_FindResourceW@4
_SET_KERNEL32ddll_GetCommandLineA@4
_SET_KERNEL32ddll_GetCommandLineW@4
_SET_KERNEL32ddll_GetModuleFileNameA@4
_SET_KERNEL32ddll_GetModuleFileNameW@4
_SET_KERNEL32ddll_GetModuleHandleA@4
_SET_KERNEL32ddll_GetModuleHandleW@4
_SET_KERNEL32ddll_LoadResource@4
_SET_KERNEL32ddll_ReadFile@4
_SET_KERNEL32ddll_SetFilePointer@4
_SET_KERNEL32ddll_SizeofResource@4
_SET_USER32ddll_LoadIconA@4
_SET_USER32ddll_LoadIconW@4
_SET_VERSIONddll_GetFileVersionInfoA@4
_SET_VERSIONddll_GetFileVersionInfoSizeA@4
_SET_VERSIONddll_GetFileVersionInfoSizeW@4
_SET_VERSIONddll_GetFileVersionInfoW@4
_SET_ole32ddll_CoCreateInstance@4
_SET_ole32ddll_CoRegisterClassObject@4
_USER32ddll_LoadIconA@8
_USER32ddll_LoadIconW@8
_VERSIONddll_GetFileVersionInfoA@16
_VERSIONddll_GetFileVersionInfoSizeA@8
_VERSIONddll_GetFileVersionInfoW@16
_ole32ddll_CoCreateInstance@20
_ole32ddll_CoRegisterClassObject@20
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ