Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
357a9e48de19aebfbbf0a612119b671e_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
357a9e48de19aebfbbf0a612119b671e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
357a9e48de19aebfbbf0a612119b671e_JaffaCakes118
Size
1.4MB
MD5
357a9e48de19aebfbbf0a612119b671e
SHA1
c731c7562ce1f75a008b9eb885a63b4035d8ab79
SHA256
16cf6dc98c7e6deb1a4b53f8ae3e7ae39df050fa8b8b790b14b428514578bca9
SHA512
c76c39654fe041cfb29a9120be0a2535aed2f8b8824bc2201a4994edf355e2fde257ef85d123d3f007817ad0fbacc7787983e0062664a63eb2803e5b4e9118ed
SSDEEP
24576:DT4HvRf+PiI0+TqOdHCW83k6XHl9P01Ru6dPgiCSDHpXFZHDHhdJSxkEzMc+UK2K:DMNciIvuI6U6V9P0C6dNXJXfXEaET+UG
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
EnumResourceTypesA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetClientRect
CoCreateInstance
SysStringLen
%����w���O�I�ћ�t���S�q�FڋQ��B�S�*���}r]��?Szĸ��{�ǽ�״���T��u�#�R(�|���&'�B��^n�1��w&��_̛�2X�m,�<��FV�ڊY�3��(�T�]f���WD?�T�pwL���d�����F��&�{B��j�.�O�k���1�t~���«���o�b�����!�m����y��W�@�gZ(&V�����'��M���碸��� �ʩ{�of� 5IR�lPΝ��@�L��������@#�������I9�� ���N�0����?�� ���a�Kꂭ9��Y�UϽ��=�+`�8_<��9n�{��!����>�Pl9 {�-��9UC}k5-&6c�� �u@��?<H�$��V�fa��������*ERn����.&��.�a;zb�;�I+��L����*���l;���u���;�A ȥ=:3|���<��6A���i�����'��8O��Y���Ӌ��ҡ�B�x*х�B��s���������ۡH�%j�����3D�x��9�}0EIz�������1e�ʚ����xY��ГԿu��L�h�H��sS�g�n���}W����=���oC���!��tvOHnj�3vvsg��]����BLT���s�����5���aG��J�f&����1"L '�&g~$.�a��w�Y!��6np���`�Nd��7�~��:��� u,�q.P���i���=���0d�{Q�7��3m/n��_�|�k��!P{H�2�AL���I:��ͤ�#��bI&ʫ���|���6��a���45F3��c�L���ɨ�rW���rkk�'Z):�}7�\�sY�/�8�f��sL���v�����A�v w}E���S\�I��5���I��Id>�?a-3i�� �h��$�(~2��A����7�$\����9ʆt��('.���v(n[��[�^��M>Z:�Z�ox?��7�sD߹���8{�,�Z��3n���I>Fsb?GI�&~3 �i����&��%UG~}u�S�u�e�����n_�+�%�!�`"��>�l������k]�P��k��t�Z�e�1�"?��ܮ�n1Rj�!���q#|���q<@�������*��4��[�T�%��k�SК'��rq�����w�F�CW�-�"���n�r�ad���^�i�m::��pbf#�_ӯ#��Y��!�5|��Եd�$��t/���HE���W;��i]���ǭJ�i���VWڣ ���m_;�ϴ����������Ua�q��Y�_�'o�,\�l �Z�)s�Ndp!����ƣ�EP��:g^��bx�KE�e�CH�X_�����ڇ��}Q�~I�֥W�O��O��YRP������K�*�!;*�%���?�lm�\g>T��H��+�<l���X�0Q��/��F ����>�v>�i�s}cEO8({�����n�����!�F��RJ��k�;S���xz�K���Q.z��N7!�{#��3���b��v��_zX/�۷1ȕ��,��:BZ%f��j^���]��ogc�h|M�i����t��Ĝ�5�\5]O4�� ����}�j�!^�!Ȱ!ءfoa;�om{�S��cL�0|gJ�U{�O�с��w��l���6.ZԄ���3A?���CcL@���KӅ%|�P��`BG�L�-����H!�ẃ�R��ai@C�]������rG3���Φ>W&-�֘�e;,��v�g���Ի��[͂h��y�^�nB�� ,^����F�ԴH��y��V,J����u����@ ēl��Z�#O��x$ ���웃P�dc����Ƶ���-���b��.+����k c��緄�G��%�0��=A���_�DR�5Ƒ��$�oΧ�-~|��Y�@!����s�r(1T�B)2]�����;�}�tg& <�{1�∅����n��e��@��F��$"��t�>pR`8���������B��_����pF�Oz�߉ ��Y�6Oi�����+?7�b&�i)���r�xُܱ��8�*��O�����[b�*0�n��]x����v��aa�w5^g�m�����e��Ք��ހuBxwע����yw�7N^_t��U�l���q�-��$�U^�}j���m�悎U�>��f��EXW��Z�wl�7��:��t�?*���rp������!e����a�ʝl���m��gN2ط[���'����\5�~$�g��š�������3�E�#/���pXA����]��Q������l�<�5ٞ�tO��#3U���i��3E��g��%6�Q������1,7j�y�6Z�X��_ZO�w���7� �M��|�G r�i��y���@;4��������g[��X<_ݘ䂾n�\��p}�_�A�Џ@6��X�pgPo<��2�й��v8p���0!�~[''�r{�yX ��$�SD���n54l���tg5�+���-��0Fy��p���`gpM�4"����C���yl�����s{l����rj��ڋC������_��x{���ў��)�膶����ĕ+�*�~����9-���>l�Q%�"���d���0mURtŅ�]7�}<jY�5�OuǓ���b���e�K�)����Sd?�F���WQ���g��x)?9�I!�#]�Q�y�{pxg�����:�{���ؙ#�����-+�;d�B����Lw|��*�n� ���%_��"�;:s�n��xm�(�/�;�[��f����G�?���g���.g��_��A�-�n���a���z����H�M���x���%&+�_��<IzLر*�p��` x��C:���c�=����2�6�Cz�a��Ѓ%!NQ�>�C�*n�s؆h�M�uPZQJ��Y����z�ܫk�><���,B8Hvm��A��֡Oƌ�ڛL9o�/��l���o���(�� ���%@� ��,7���]>'{����<2��uL�ߋI�^����k;1^�l�3��DD� i(���""��ßu���*��r0�E�y�sS��W2ۼ)��q)t����UX�%�b�=�weq�H��Bʈ�&�U� 3�UfAT
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ