Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
3475f3727cfdc033ca463a58dc57716e_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
3475f3727cfdc033ca463a58dc57716e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
3475f3727cfdc033ca463a58dc57716e_JaffaCakes118
Size
1.5MB
MD5
3475f3727cfdc033ca463a58dc57716e
SHA1
a3f9553f402399d717094ec275eb59902401a1ed
SHA256
1378b3ad8621c3953bd899950931292839c117328fc5d53f3d83c6d0189e54d8
SHA512
26f535aff0687122e523f8e74f01952e4446b9160fb2798111ecff79cc111146b364ed32920d92bcb6d4134df26e2605cf21427483d27d7ac543d4aac19792ab
SSDEEP
24576:K77aSKMz/ygTUcTFio9Jwbw2gN+rpJA/h+Uv/1LTjYmn9gHOSgg5ry8fNBlNdWm1:6GSKdYYo9JAwgTY+ozYmnKPH+ohfJ054
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IsValidCodePage
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
DestroyWindow
OleUninitialize
VariantClear
7��Qo�d��9ʧJ�c�[ t��ܼ�x�*�}���w�H�',��D�>J6c@�,L$q�6gR��c�!ȩ�>�ܶO;@��b�/��`q磖&�%��.���h\˷A�D����\�h�`I}��[z*�`C��.�39�g��=J��@�����^b�؇�F�ma; )�ɵQ D���S��K5P���l�ܴt c���Õ{��5��2�Jn躅��i�^_���O�{�N�6Ã��AOBȆ+,����Ōࣝ��R/�B��ќ?��}�����()=�A��A$�1���2��7!� �/�#���kg��WҮ뉄��˵�$��`]�c$�'�T�Jm�&��fs���D��@�:^���G�,pJb�lġm��a%6֯����Ռ:3]L����H�n�)[&�U���;�@Pm�T�p>*G�J�:\gJ���f��� 2�B�u�{���2-+%�}�;��2��:A�"=��8$��I�U��ڐ��CW�|gf�s!��S�Z-�W��!���z ���>�02�7UM���G�6�� cÍޕpsW��e��z=��� VqF�"R�<�O����9<.�\8E��MB�Y��*8㒼8����'7�hu��0�RWw�v�<����Ɛ�ͱ���y,��"��� �'����&��7�7VD��p���v�>�(࿕k�u��5�;�4��V*��m�m�-/�N*3lQԏ0c`�D�xX)O����Jc�R�`�&��{��J-8ޛ�{����g�����39)���M�O|��z:Nw�q-�~����v��[673�M������R6:7�JL���xKI� �"T�o � �jJP�>��� �:A��8$!E'�1z¯�!��]W/�@� �&�DL�鯢��U: [�?���z[����K3��o��0�_�yx�7YRm��;�a����䕜F��b��m�a�p�i�Ful�k�l;��Q�����S�/%���{{�iڭ�_JuY�C�%W)��(�I�C�<K�Ma�������vt��JU�}�|S\���)���Ҿ7Ish�g�N��ym2�7}��J�}�&�+=���+�̨a�Eï�\(�a�op Ljl��ʖ�Y��S2��2�|���*�kv�',5ߖ��d�X�ڇ>�__��Q���p��E{omb��J��T��@B�G��cQ;;�/aF��"�q�,9�L�� ݊����`r! �"����&�ګ�+�|��0�%G#\�"��٭ם����շ5Jw_x�KC����� �$7�L'X����s��=�sǬ�~3.��)��n(�0B��5��!������Pņ�˶H�Xx�`���մ�C�w�w��� �|*z����sSj�nL�&qm3�X��k�.�8�A��h���5��~5�T�Y���m��w� ���\�6#j�npE_?� ��./_�z�Y�م��sE�Ke����[�L1�d%���@�豕S�n]�!A������e�Tz?��]����3LD���7C9H� g��Ԍ]:��Iv����i�F���K���k����>�g_�_1�_�� ,�v�UbB/��)�u/��D(�p�;������=Y�&�;q�vֺ���AD�#5r�PG������H��@Y>�5�a���w��b�_�%�4-���e���+fyL��nBH76s$Q7�|u�����0.h�x-�w}>���� _ $�"�f\��������}k,@�g�Ό"��BcX.�w�{��J���,:,iī�H"���/2���Hw������X�R�z��2.�ʘfɍ���)~����d�8���0��@Q��o�5���� ��M8�˶~������)� ��/�p�VF����>G<�L���oGmf*��݂�L�^g�t6%Z�}�'�>sG��{a�8�Q��1�?�\f4MG��/��&H���ۧǫ���Yy�"�i%��b�������n��.x�Ic���ZD�P�F'��� p-k� �{�����P2:�&?����ч� �����vϲ�+v�&����E,v���\��z�6��TE����#��(O�Lӿ���'�>�SDO��?�g6�{1W'n;�?��v_-;�s�]��$ߖu�~ /��\E4 ���/�-�%���e�ݚ���4yٛ8d;�c6P�m �}����c�!9���i���ƎE��5�j��������pmT�`(�����5�PZ�5�ڸ�sة��^\���n�Y�B��?�ַ����?}�Y�;��l��Z��`��h@���ݑ�t'���~b�� ��8�k ��G �zn��`)�H���������,~<�a%�Q���D_���t��j&BY�vА�~϶d&�����#�w�"�ӝ��p��'*Hr`l�0�|��x�s4�O5�[J�Ru[��U���a7�Iѥ��ao�E�"��>���[�e��5מ���J���l�Y����A�|�����[-� Of �����Z5��&���^r�{yٸ�����dΘ�{�2��e��6�' ���u p��Zs��l�#�_�Iu_pD��Is}?\�G�����!�����蜓qQ&;<��D���1t������M�*�ik*I;�k.�o/ɑ�7I��:�p�{���.C�����G7� ~��APe9�N!�?�Q��a���3�,~�O��m�T�sz��C�wX�͚z���������D� J!J3�s�'��Qk莖4�`|���OK٨��,�TB�e|�����H��yGn��K�TD/]�ᬍ���݉���ٛ\�Է�7;T��9N%��/h�6SAw W��<9T�c���.݆8��/��F^5�?�X�7������J���ܥ�L��;��������+VG��*�:����1�/xZ�~�2T��ݍ�"Hn=�9� Sl��N�%����\ _�����Ќ|���R�������Z��:���rh��^��v���8�"t\?�#����+��s���iX�@�TY���;|˶%�Dp;~ �U��*�ܰ���ٜd��z��ϧ�A�ɺ�$U�aR٤��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ