Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
34a53ee9009c01fa69bb95c5013194a2_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
34a53ee9009c01fa69bb95c5013194a2_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
34a53ee9009c01fa69bb95c5013194a2_JaffaCakes118
Size
1.5MB
MD5
34a53ee9009c01fa69bb95c5013194a2
SHA1
ac86b75c2fc838b86b87364c0a5605a5b3e8eee7
SHA256
05322d87d793a01bae1921b3626a6cf56a9e07e0469bb28b87db2ff125edbd73
SHA512
52742c0f5b4c65c509a88a8c01cfa5f08c5b8c571f8e1b560dd019ca50e49407e0b2f1fcf9e22d301ffab837d6a89e3ae41a73d10ea995f9e92e95847fb22e0a
SSDEEP
24576:/7vciMp4CCkrZ1pTvdOgi5JIo9VAj8LQuQSj5dvc+84RyEr3JdLUhcBx02ExPcVr:TERllrJjcv6ohHQSjnzt3JGW7fyc5
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetCPInfo
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
DispatchMessageW
OleUninitialize
SysStringLen
���s������p�bw����#D �~c�]8�P/�/�F�2�t�5\ʹ)Fn�3T��3���pzX;`?�.f��H�bV�Z�vS��_�4bA G�U���視A���=o0�E�vL�b:���M`P��%@=�Q�?.�/>��F��Y�#Rg�z�����%�6��jV���^�T�XT"V���i�D�_y�h���W@���E�u�Ԉ�@�s<\ED ��x��մ�(Z��GE�vJ�@Z��b>NԺ�^�mx�=��9�Yْ52�.�uD�B�u��M�cp.��٠~�{�Ʀh�I���;l�y�œ ������*i����d)DC���u�uJ�r�_�����X{��b�)vܶ�B�����7� m�?�]a���=L]�6y������,�y�%�B<��sp���2P4�� f�@���w����5aȜ>�?��^74��S8�l�v� _!���(M��zA��}�e�T���[�n���C�2�Dz�쐯����x�y���7�o�s�m�Q�TÝQGɌ�3��e�)$h�E�S�N�W:���:^~���_���4̰�$�E;�+�a�߯��ܓW�r3�3 �4/�ǶsM��Gǚ�܀�:��e7y��]�6S��f�a`auA'��I�t�ݕ�����YÅ��q���o?Q�zI��>�$;ª]$Zeo k,�GvK�̻��jal���Q ��l�O�ӗ@���Vȓ�K�A��� �Q�𮗍v}���α�R�n���NM�ד����h��.��;�y�#�*�qqo�蘽�`���\W�H"b������M�T6�w�0F+L�����+0�9�F�<�5�y���F�#���6� �Qو���]ʭx��mΣ�;� 6��`;PT�o�1Nҋ�O(+������U5 h��攦�7�/���g������H�)�Va$����{a`�-��|`��,���m��������k{� �4]ή�+9�.�ӫ��!L b,�1. @��&%�� D��m�|;o��� *�<��ħ\N���^ڝ�%c(�r�Ӗ�@�o $őL1��LNư�2���]��/V�A�F�"�->�����c�r�"�$i�Q,wX���h�^���*���m�r���<�7]CF���L_Cö��6��f��؈z�*g�2U\P�JF�����¦%(�kq�#��:�EHe�2d��tDw�sY'RN�j�i{�����c��9�4��H�X���Ġ;��?�!�f�euά33;�5vuE��� S �8م��g�Iܔ�N����������@55E"\pdG�������Ɠq� �'I����m��[�jփ��+ĭ�qEp)��� U�C���6}���ee��AP\%�JhJZ��˛����6�叽��A���:�Z6�-�b\i������2�Y�lĥ(_�"�$���N۾��c���m"r��1�60DU��%���Y�I�qGXnYs4�uy�l�����^��H�>r�� $� S�ۮ��ӫ ��ߟ:��u:��K����~ �� �Åj{�3���fj#4I1��z��ր[�NX��À˱����sI�9 vAu�$��C�#-m6+����/���.�C>ű�@3:�o���P�3��B3�P9UG_�K�������ظg�u��ˎ�\�*>j��@�.Z'~cj�5�*�N��f8���@���v��l[?�a��gɪQmzu}�(�%Ǚ���� a��z�V�H�K�6s$���ω��E{��[06��~jM��ř�A�J�HtP���b%U��V��Z��%���2�J.���c�|F��f?��f �1�h��<��{�&��QW`���:I��ף)/�Ȃ�}1BT)5��Ӭ��(� L���z���ר#"ޘ���b��Zw��%f�,��t^<z��m{4���*g�-�� ^H]�l�P�^<O���S�����\�Tk�D��P�֒3�j�ɧ�y;�`G��$~��Y�B�D��I"�DC���b������<�7O��.d4�E.���D� �=�Γ:�w&�'�~�[ݬ�~�;�� �fB�fЁUX����<F ��X�_���?&od;+���zzq����0 HM��;oqg�?�W{JX��/��ÿ�0`��ս�#����:%`�5�Uj�x��n�H�G(�H\jV�u0 �^��wR�>߉'5�&Di�|�G!�!,^���$i������@��L��1�G+(�d�����xĒ7�3qqU<��ع `f@%�6@��)IGqZo���C��g���,��Fd�v��H���b�k���������Kظ���{^݄���+͓�0�҃H��x�y���Rc%����$��������E*����lk��Zf{�W���|��R������K�z�ɋ'���3�נZ[[�C���^��2����'Y�]Ѷh��NU^��sڞ=�g���YX���!;}I�I�\6Zi O��BI�w1�Ad"�Ƙ�;�O!ݢ�P+&��$훑kd�SXBđ��'�%��߳�p�+��ڞ�gCk����j(�4�[�����f�+��8wenB�Z@!�>����7�H���bs��YJ��d��U���&�=�m��4Zn��48����p$;��n�@c�{�ӝ��S�po̳�rk����7���i�z�̳�F���<b��5��|#6="��!Xg$���@G�&��`�+�VHgVihN�sx�ac���Ѝ�H��l��]��8�����Q���N#Vln�h*��n�B ��e���� �LǠ��b)�����c��:( Yy���4b揋��̓|#�~�k�X{v��]U�=c�B�fv۞i� ���.A�,�!�_Gxl�M�R�fJ���a�����s4���>�{__�j� <�x-n%�d3����!]�4�K�"?� -�R��G�&��8�pD��D(�`'8r�r�r� �Jm���>ݬ�Ɠf:%8'Mk�ƚ���l��#� �<d�>K�L�_�b�!a��fDI;��_joPS��Q�A'�_����c�ȿ�D�����fvPD[V�,�I�t;N�f�P`��R_�+Rx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ