Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
3ca6dba7c6a4df64d0df5e47a1f1822c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3ca6dba7c6a4df64d0df5e47a1f1822c_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
3ca6dba7c6a4df64d0df5e47a1f1822c_JaffaCakes118
Size
1.5MB
MD5
3ca6dba7c6a4df64d0df5e47a1f1822c
SHA1
c56d231e02351d5f88ee15e93912fb2b0331a8c8
SHA256
156a270f35cd65307ef6f31b9024734c12f1569568b8cf3378a809676536dc2b
SHA512
e407fad1399bd2a37f5b98e6770d23b8f5dd6049705ced3f8998d5d842fb65fc458923712fe8ed4dac555fc17bb6bf617430ac1a72b33f07ae1426a96b1a6c8f
SSDEEP
24576:HQwQzl2epp2L5rRuYqavL7mToHIWoxxzxABmHz4sTUgpFd8nJKajzsxQTVt+roa2:ZIlr2zuYtD7dQp8urU+bmJKjqarwkO
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InterlockedIncrement
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetWindowLongW
OleUninitialize
VariantClear
����!������^���X�nDWJk��>vc�EA��fFH!�8O���p%��m5�!jmP����q+@{����q�a�|_P�Аd����E�}i���/F�>�����8�NR�_������Y{T�>M��ih���s�`31~�G1Yz�~���ӋrF�plj�����R��Sɶ���\�I��ޘ������7��kG=*����W,�e�ʆ*FK�F\n2�Zŗ-�֏�P�]C��w巹R�}�K�-YT�؈��R��Mͽ�}F��[�&��87~�y�������%\����:(K�:��sFV���4����zxG"�Dj^�����!����U/ z��\���&� �@�%�>���6��v�-�G��6�B�(��9+�� ��d5�L�E̋����j8��� ��T��8;ͅ�ׂ����9,�����Lt��ةu�������ʖ$���+�*��<���$I?�R��vI9P���1��]�!��IŻ��/fd�k .���~���Q����(67 j?���8�H���1���N��� �$r'/cn۷@͐�}ln��6`�b�CͫL�%��.�I5QC���F�P����(h����m��YG��ǗJ�cn�5� >��I� {��IJ����.��a]GuoR�q��. �Z�o�����p�h�p%X�j�3Ҷrz^���e������B�x&�"KC1����z�����cj���h��>g*��d���TģJΧ%�Q,e�h�d��[�c�#2a�=��q���"�cP���)O��À�z�?,z���%M5v!K D�Uv���H̪�U����B�1Ш= �gC<����|�M���b�e88�9�K��@ܤz>�1ɡǍWb���F��'��gZ�[,��nD���!/SgVK��q)�)�n�0}$r����Tz*�r8⾦�#c����}� ��5��3�����Y�pT��T�;D��`kß���!�L�G�p���q~mH>�0�8�5��O8��{ԥ���t �^."�*�p���0d@��U�z�*}�;{�9�mKZқI9�����U�r�gD`J��*�20?��Fd�5 ��R���j���nl�\emF"���P�ϕrb���d�f��h`aU����}o�zzMۙSK't�Y��ou��aR�)'mt�Ps�P�b���c0}#�g�-�&"q�a�xǰ!C*�m�r�+L�`��c`�[��O$x�^����嬩|�r��=X3��e)�kB�٪���/d�;�i�cq������������݉S��Xl����ie$ߋ�`��!uUي�Aj��7����h�o�e:o���6�K�����ۓ����M��}���5�^��)0A�"b��]�|�}�1��KrMB�rp�2TG�#.o�_��p�e�#9�Z�m����3#�-O[�Ӳ^�ʜ���vgVҖ%�����ۻ�̂������ɢʮr ����|��إ�r��!�'�����sS���g�?�ֻl���t�m(�l�MS��`o����ŕd�/�Y�zY�U�WҺ���]��Z`B9Tn�8�.;� t����M���,:�R�)}w=,���#Չ�V�u�G2hÜ����u��7�L{�ބLĬ���P�� Qk";N�L��ұ��k��-b���i��|�IXč^���۲b긹p�Z���j8m���;]����H�u���L`��d��Y�V���'YV\����o�WdT��&��j9<���@b�����7Jmn):�����o(�xP����Tˤ����4�%�Z(�uSE�CJ��������(�V�������{_lV�On���>�2wu�����PiԔA�6�C*hkR�t�V����B;W���s���y�m0��1�Ì��L���W@Ɲ��2*�<zC�1�^���TpU��Y�Y���"�0��F�D�sgg�5��9wu��L�,1Rlȱ�D~dl{-K�����m9��:u�������A�����W@q�� T?���L���C���1�f�=���,�����f���>��e|�P,��z�RU`�6��s�i[�>n?������0�ȵ�'V�;��I������y�j��������p���V��Y�������F_KaA��/q�����HW�_4DJ���K�:)�N����c�m~n�[Ǿ��&��/����d��ُ��l�����>��"?��3����B���і�x*c���Hn�c�-/���4I^���o�t�aT7�D<u�څ�u*U}N`�� �gA��~�K+u��|�,ѢvH<�w�#>P�G˫z,.��R��-]>p�r����G��=�WN���=�?\�?l�x�R�%��QM($~��'������!Jp�-\�^��]�ytd ��V��k��dO�̮~�a�͊x�W�N�}"�`>oL( ����5~ߋ@-�} �ߚ��|ؔ��n㊏�Qz0i�;y[.�dr0���WM��%[���&<<}E/�� �(��'��XP�X�����9����D���)�;�����x�;�j����R����Z��%�F㡨��6 ���e`�?��F*� ��A�֖t�V�߹S��g`���M.Gj]��n�sm�;<!�q�Y��9���R"v[�:�5�96�X�ᨨ�L�}�5��$�m�C> �fYO`a\��/����۬��__���w��@PGp��_�]<���'����x�QV���WXY�H�]��M6H?i�ڼTO�mG?$ �����>�w$�sE[ڡ�����))���_dm�bY1d%�-u�}��Zc�Gpщ���B���k(��H-����p��.���˴��SƩY�ۓ������w��ljˤ�.h��Qb�{+�����u�t��$hT�zO)�7~�5h�u�a٬�r�Y9 �+�R��P���$�����}�y�J�n��5�����Sb�K��d�fF�����w0z�,�K[�3� o��vg��A��N�/z1(V+,�/�R�l_W�ڹ�F���g��D�lJ4M��K�dw[�!Qmj���r�p2->�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ