Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
3e5757d854ac1f4369a4dff45266f475_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3e5757d854ac1f4369a4dff45266f475_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
3e5757d854ac1f4369a4dff45266f475_JaffaCakes118
Size
615KB
MD5
3e5757d854ac1f4369a4dff45266f475
SHA1
5cfe93d3c7843d241dde12d41f3214a78553a9d9
SHA256
045b95252f2e2325300eb7a303dc7ee9a2405ac62afe397dea8a5f3316407ab9
SHA512
33cfc78915965d0f9758d7670351a1a5fa3949b118963014700d521c19cd861d9c6f9cdf5c91662bafd6d4574f8d03daf9b6a8b6870461f8b26b8d27a3bf7f80
SSDEEP
6144:fmFw2Ny4zWBgdKKwvbky1hMFpdgCqc1s9igPvE3e2xR3Ry+BMCYtpGaCYTCLFwPv:J9BKy+Ga2iz8AMbhOBwP42+qB42oMn
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetClipboardFormatNameA
DrawAnimatedRects
EnumThreadWindows
ModifyMenuA
GetAsyncKeyState
MapVirtualKeyExW
SetWindowsHookA
WaitMessage
DefFrameProcA
GetTabbedTextExtentW
DialogBoxIndirectParamW
CharPrevA
GetWindowWord
SendMessageCallbackA
SetUserObjectInformationA
GetMessageW
ShowOwnedPopups
MenuWindowProcA
CharUpperA
SetLastErrorEx
FillRect
GetClipboardData
SetProcessWindowStation
EnumDesktopWindows
LoadCursorA
wsprintfW
GetParent
LoadCursorW
DefDlgProcA
SetForegroundWindow
GetCapture
LockWorkStation
DrawTextA
TileChildWindows
MapWindowPoints
CloseDesktop
GetDlgItem
GetUserObjectSecurity
InflateRect
CallNextHookEx
ValidateRect
RegisterWindowMessageA
GetDCEx
MenuWindowProcW
GetTopWindow
OpenDesktopA
DragDetect
RegisterClipboardFormatA
PeekMessageW
FlashWindow
SetTimer
IsCharUpperW
CreateIconFromResourceEx
DefDlgProcW
CopyIcon
SetThreadDesktop
RegisterDeviceNotificationA
GetMenuInfo
GetWindowTextLengthA
BroadcastSystemMessageExA
GetClassWord
ShowWindow
CreateCursor
GetMenuStringA
LoadImageA
CharNextW
GetWindowDC
DrawMenuBar
GetSystemMetrics
InsertMenuItemA
EndDialog
TabbedTextOutW
CharUpperW
CharToOemBuffA
OpenIcon
TranslateAcceleratorW
CreateMDIWindowA
SetWindowTextW
DestroyWindow
SetMessageExtraInfo
PostMessageW
GetDC
SetLayeredWindowAttributes
GetComboBoxInfo
CharLowerW
EnumDesktopsW
ArrangeIconicWindows
GetFocus
IsCharAlphaNumericA
CreatePopupMenu
CreateDialogParamW
CopyRect
SetRectEmpty
SetDeskWallpaper
GetCaretPos
PrivateExtractIconsW
MenuItemFromPoint
EndMenu
SetRect
IsWindowVisible
OemToCharA
GetWindowInfo
AppendMenuA
DefWindowProcA
CharLowerA
AnyPopup
GetWindowWord
GetWindowTextW
RemovePropW
TerminateJobObject
VerLanguageNameA
MapViewOfFileEx
DeleteFileA
GetDevicePowerState
GetLastError
GetProcessPriorityBoost
LoadResource
OpenFileMappingW
OpenJobObjectW
SetHandleCount
SignalObjectAndWait
LockResource
WinExec
RequestDeviceWakeup
LocalAlloc
HeapQueryInformation
LocalLock
UnmapViewOfFile
GetModuleHandleExW
DefineDosDeviceW
BuildCommDCBAndTimeoutsW
EraseTape
SetFileAttributesA
SetCriticalSectionSpinCount
EnumSystemCodePagesW
GetShortPathNameW
GetACP
SetPriorityClass
GetDefaultCommConfigW
GetExitCodeProcess
CreateMailslotW
EnumUILanguagesA
MoveFileWithProgressW
WaitNamedPipeA
FillConsoleOutputCharacterA
FindFirstChangeNotificationA
FindVolumeClose
DefineDosDeviceA
FindFirstFileA
GetFileSizeEx
ReplaceFile
SetMailslotInfo
SetCurrentDirectoryA
GetCurrentConsoleFont
ReadConsoleOutputA
InitAtomTable
SetEnvironmentVariableW
DeleteCriticalSection
Heap32ListNext
GetCommandLineW
SetLastConsoleEventActive
SetErrorMode
GetLastError
GetLastError
GetLastError
GetLastError
GetLastError
VirtualQuery
LoadLibraryA
TlsFree
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
UrlGetLocationW
ChooseFontA
VarI8FromDisp
VarCyFromUI8
VarCyAbs
StrRStrW
SHEnumerateUnreadMailAccountsW
CheckEscapesW
EngStrokePath
CreateMetaFileW
VerFindFileA
VerInstallFileA
WTSShutdownSystem
WTSWaitSystemEvent
WTSQueryUserToken
WSACancelBlockingCall
WSASetEvent
WSACloseEvent
WSAAsyncGetServByPort
FlatSB_GetScrollRange
ImageList_Copy
5*�ֈ�� 4��:����3�l:cCt��K��co~�J����!��ބ���o��� ��#P"�#�f!�،��zԨ� �]�:W/�r5�B����4���[8�0V�Gv����R���6����x���Asz f4��jIz���jU�F¾�@/+B�+��<��-��P�}?�E����n�yi|�ĭd�=�VxZk����߆���*@M�-8���:j,���%��6@��e��;�'u��$�(ZI���e`�������V���^v3��ү����՟��,��180�`�4Gy0�>�_jI�O��}fY��$va �iopJ��� 4�O,�;��K*bXO0~����\y�Nڔ�A�k�F�F^B����G���mY&#J�OBk{��u&ļ6hop���������(��6��C����g����x^�;\� ���ppt%Q~Ƅ�&z���ٖ���0�����AO[$l$�,R��6k��k���i� �/�;�Vd���,��8{`�[;��dC��g��`!ӏ&�*���g��$����jO>C��H�'���A�=y��u�>���t-g+Dk�nX��rsfT3C(I3�qԕ_iW<��|��ʴ|Eב��*�@�+kV���j<��8���4��Ш�m��%NU�U��*7�qE$�@�7�fO�6L~���5�Mx�j����N,e*All=����}�ؽ�׆Ɠ6�`�~cT��¯O�(�P��O�R���\lmi�LtJ��V����Nb0��"RϸZ��ӯ�[ ��5���'�,�p��W9�B�����k�KR��r�a�:��hz�eZ�弱-٫�Q���k6\�� ��u��2�D>���uN4IJ�|�6��5�M�� s�7Ҳ��m(F���X60�⎃�B�2�D�p��j�~Ƒ� ?dj�p\��(�������E�;up6�B j��1��z!N�m�7Vv͒����i������*@�i2T7�x.F�����׆��N�[�\��ࣺ N���fe(�g��5/uL<�0�*��:�w�n�0��]J�����@s;v=�����k����!KMߌ�d6G+�9s\�O!�@P9[ ��������!������n��7o!�s�SP��fN���F�u���κ��ff/�]�5���&q���k_�u��#�]ڛW-ۀs<9�����3[_���� =��snB��='��=6Á=��k5c����k�R�J�*�����T��։6$؞����� H��|;fA��ܰ��a��������\4.�~��Zo�96�lv"%a�RY�����hþ_��l�2��i���7I�[}H�z��@$���Me2!X���f>r��XތY�ɣ%�P�?��e- �m?;N14�;(����������}qSPg1L��^A�6 � %�� GK���墧T���3�e�ϰ� �Nֻ�gn� �i�PE�������4-f���Zsթw����y{�!;�zu��!6�����H�w[��]���M�����Kt8Mdb:�?�ͼ�Fnhx����DY=Y�fr�4f�8(V�3�z�Є����J'[�ܐ�8��1C�_��^f��b:~�A y2��F�4jB� �M]�^Ϯ%�?��~a�5p�R����]�&�:����K}IG��?o�p���E���Y�c���>`(K2���4��-�A�4�u�l���z���t�|=�U��Ja5,U��'"0;&yXK`Н\������F&�s���a�k���"Np�M�~���$w�������Y��<_KYQc��\�r��Fn���u�7~���Z�:>���F�c��%�j����a��;N�}?V:Y���#]䥪��e}�x� �j��)5-���3��� (�A��[�X2(:�����PJ�������Ͷz�ᇱ�K��ؒ���3A&�s�T��fz��#���pމVX���&WzXPE`��ӏ����n��`�ˡ9�W�x<b�,B�b�5�S����$Vv���Ӫ嘺���k� ����J��0����V��! '��PL�����ݺ��X��y��]0ITB?�K�D?�*����K����dN�P���j�ğ��Ш��nl���N��rnIy�`PM��;�]�!�+�� ��'�>�p�v�P��q�8W�5S�7������7j���ݩǑǤ��_#́4�tm%��a����y�wN�{y���1'����`��B��}�Bp��z���tT#Hv��g�t.@�ټ,Y��O8���{Sc�HBR ��]�~Re�1����4�'���u}�V���� ih�O&ηU^8`UsO:0y��D���'D)�z�:��ۧ��a�����B�"�O�Rsu���f>M������+�ő �2�,�k]�1q�n5���d3on����@|�T��5��Z��g�����kȽ���� j����6�+��Yw�yj�|�����\��t���� ˤ�p7F9�����D*f�Ӽ��q���@))�q���$L>z������B�]1����_��!A���u��o���9�P�{�"^�6�����3�nR��������ۍ��_Q�s֧�鄒?ؗ1�v�O��e[���E��c�H�$ ����)KCC��Wڇ�y2|!���n��[/CTi�<&���s ��[~��F�&�N�$�l�J�}���X@�s?�ѣ��;�'{�t��eG�٪�Mܘ }e��]��֭:�H��,�����.<_DtO�͑�j���/���h�$"օ3f{@Zl6鍷�m0��n�"���<��!����!PO��ܖ8/:��ID���q��'��a�R��ɉ�. ����5������B�+�/cgy�TH��XYۗa�R���)xH>k��:M��*�\��P:|�&\�5�|+�s^�j�BZQ~K̲���%C2���AwZ+oa�iB�t�9g��2��;��^;�XJMJ��ɚ(��u��G�g�5�����!��z���� ��je��À�y2ee��:�(�`q�JV�I�Ɋ��L<G�uZ�8���q.0�8.1�������Q=�<����>/!�(��(
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ