Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
3276fa642f1939ddca87a5f8c77072be_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3276fa642f1939ddca87a5f8c77072be_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
3276fa642f1939ddca87a5f8c77072be_JaffaCakes118
Size
1.5MB
MD5
3276fa642f1939ddca87a5f8c77072be
SHA1
751c2f900677214eff7db71a4ba9e969129c7301
SHA256
13ef90bb46afdff241cc9a9e1a142459ba6e6e9a9c9c7f0eb21657433bc2f7d2
SHA512
e59cb3bbc38df9e3c24bd0015c91b5e9251e4f223bca779b7314f28c2ef21a30374f6e4d822d601c5d8e47a3c3ba27fe4114da3ea744db777d5b77208186c09d
SSDEEP
24576:D2jW6DcwZ4pIy0k3vIL50dQMEei3s34n0QYaErjlY8Ki/CHf61sVU:CjRGiyj3C50GeCg40rbrxY83KHks+
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetLocaleInfoA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
RegisterClassExW
CoInitialize
VariantClear
=M�����WYفk��zOz#ou>�}� DŽ�Ҫ��Ü�t�� ��(��i�� �Ѱ���q��{�*�[���x��i���`��X�q������V=׳��O&��}r�Opb�+�����Fh���ҥ� b��#.���w<�%�z�b��]��S9$O��n���\����ې{7t�Q�}^�PC IXS��ģPyQø���¿[���_����)���Q�yx��e6�R�IJ[�c�k��dk��z�oŐBQ���:/!-t|Rp�q#WA���T��N���4�,�k� �pG ^4���WfDb�F�v���X���P�u/��^_�PXpꬫ���i@�is5^'�ժURd2!� G�o�꥟FV�� X��LkI�F��BH�Kے2<�`c�TXo�F��J�m��_X��s2A��g��[+a�}#�0�:����[��|E�:�1�u� +�Y�1�����y(�P���kc��Z|��+=$���.�b(��,�}&���#�%���,Q8?o�Y����n�`3,�����Ag�5_V��{ddx�"W��Ɋv/�1@3���u����WQmſ �>U����b�aG����w/fu�R,�^ �\�1ՙ�Fa:S�z��V�@��"�(w��3+���k���>���<¸n ��s���j=�{�7�G?����qQ�Go�uԗ�ҩ�=)����7��*��h�ǂ���@Ϸ��3�Dicn)_J�Y$GL����ۿ�%ŜÎz��ű1�w�CB��}��uĎM��g���'�Fՠ-eb���lB���e�����3����%BI��3H#7�� О�qk[\e���� ����c˒������� ��C�h*���!R6��&����h�?+� �<��B�>_���S�kn��ʐHe��/�zX��͐鴖�}������yj������э�_�,�v#��i�p���;�/�2E��gA�W�J�C��U��K\��(/�Ɩ�*H%�J_��Y<�6�Ћ7Y��=.�I�Y��ƾ������y��2�-� 8Ȉ�V��_��v(4�C�Z%����O4r�`k�R[�ֻ��(��ħ��_ @9�W�)�����OY��*Y�k�b�����I�����$y��!.�!�d���,�H?�Z��Wlw��Ar�t�8[���!�*�7Z�vڟ��/�<���.j�]k�-JZ���Gѧ�iH��[�z��|��oܸ.��ݟ��'��Y9Ķy�0!�w��:�T�yqƦ���%+�Gx���3颉Sӄ=W/�yMh���)XeM(h_�����X��(ng�����ΰs��l���f9g��=�R�)��S�Y�)?|�+c>m[��=�.B���e�a�AE���0֖�*)nGa[�#� �n�AN9���&�Y�8��*N��F�Mռ<ЏB�X��L�4�x�nQ��k�����@4e�[�q��ao��},J���B�C��(X��r8��R_긞M��x(n@�Jc�I���>�ޣ��@�Ы���# 6l�{ �vF�d\�e��]��zT�W�Z�\3���ǵ���-���~̃�o3�����T�o���7�h�j_�1k��Z��\���-ɨ�Ȃ2�<�ڔl*m*h����I�9�le���ڶĸ����0�T�<t6���EN�1 ���1�R(�J��aՎT g.�����g](;����fJf��BҽI���]gc ���rή��_u� �ML��i p�Oli5L�4ԥܸ��&7sF��(����,lgШ�I��G��΄I�;��]��*S&��{�z0Z���2Y��wd ����kS� P[W�a��%����6%+G.$1��ʜxb]4��3(�\���������*�7�J����AM�M���J�f���=<��L�SR�'2?t�[�J�:o44�f������˹#Q��� �J-A#4?��,I4sr����-/���'���?�ȥ*�Ug,F{Ô�@��,;E��=U��ت��d�p�i�_~V_L#+�G=�$�!3Ī^yH"�Դ�Y���Z�)Wץj���#��7'����AZ]��E=�"��e`f�|�������"�0�de7�V�����U��������%����ayL�v� ���{L�e���8s���O�;�)�� o�5�w�m)y'^F��e�^*M8�'Ib�������(�*?����я�!f���,��!���� ���ﴕ:m�,lqF�'���B����tݛ�PW+g1\9ar},���E*d�f��3�6�نe1� �H�1�.�����ٹyQ��İ�y��/�v;��Ӂ��(m <��KN'�8X #��H����<n8�z����(����7%��3 e:��9z�kiE$}���� �cMm�=����qJ�`� &8١ɾFJ����%�[Dz�[T��nU�ڄ��<����V��bzr�I6�Z�t��5̳K����������x�kslZie2��s�Oln�P��jH��.?���ԉ�~zKB�iӟ1��?6�!�u_�����%w`mzo�vr�1����f�E=D��"��,'���2H���ɹ(���7#��+���U���xCݥ�e��;���G�o�cz�B��A[%�@��/ik���Dv�y3�ts�]a��q�A����7�iyU��6(�L#e$x� !�Lᩏ�[E��Z6.�H��c��ZP��Ȭ�������A��E_���O��>2?p�'��I�o���;U+cVO<x"U�b����չ��GˍDEbw�X�<�,�|L���� V)��)��)0�^�DUCȏ�1�焆���O ;����Gb�a_)��� �-㤴�����f�C�?+υ��T�@Jv�������Kl��Z����S�]WI#k=�'�=Y��A*^�3a;jG�w�/\�����HE�ïމN����㞇|ʢ([�:kl�ͻ":Ap��T���E_/��� ��"��������L��9�}��8�ct�T��*и��o$��l=�y�Ͱ��xxTܻ��Yc�5^˚噽adwl��G�=�.ɀS�ʹ����i`Ϫ��-���OZa��}�]W
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ