Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
42c372aaabd829e52091b2b76a4dc0d3_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
42c372aaabd829e52091b2b76a4dc0d3_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
42c372aaabd829e52091b2b76a4dc0d3_JaffaCakes118
Size
1.5MB
MD5
42c372aaabd829e52091b2b76a4dc0d3
SHA1
e7e23618c81bb5437016a858f949742dbaa446f2
SHA256
1508ca8500d4922633059e0373bfc43b9a27dbd248b3872cde9d65e7a7c2b69b
SHA512
3b1790bc35ff670c3dc78a6441712f74e1123cd7bfc4a54f1d55efbe5b36069a637f09513b55fcc706684ca09313b9e143b8806a553b4b63771ebaa8696b91a9
SSDEEP
24576:fL0WdZOAXVcNPBZKhC2zZL8qRzZT+4FayjyASga9QQbipYbzl4roiwo4HspeLNOG:fL0W+MVSMrYq7Fayjq9Xl48BCe5Og0E
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sleep
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
MessageBoxW
OleUninitialize
SysStringLen
4����"��-X4�?��uX��čP���iCA����=����`I�-�&.]H��u?�C�=O�0��íE�]x^��^��H�>wv��5B;v�`��=�G�K����`���a�[���Z!�%�g6A�yu-�270�Q��Ll��GqF6�v�7k?m�&d�u�nV>|��p,�-1��g"��FHK�;SۨE�>��,��Y�u��.��)��^��#waʜk=>U�U*�!?*q�;㛔;�T�����ʣ���_[y%YzBf��D�d�D�)�_M�E������R0�驂wƯY����� �[��i΅Er�����ed��,�_Nӟ�)�����K�2�{/x� O������iI�9A$�x�&�#=.���s�^{.-8�R9�n�+\��)��)9Q�c�!��6��s&�ɒ0�وp���_>��^Uf8��G��:�T&�{�!�o�5��/w��/1_+9�+�b���uƵ�$�L���"v0��N+ꦖg�j���t�h�o��`�g���z�\놷9ã:�D_�_�Y0l徚a�_ �m&$������UY4�z,$�6������� �ҋ�N�ӥ9i���V}��`���B��kQ������:�p�*E�����:B#ՓW����ݕt���*��l��l=d�"y=���}`-�W�pY�-Q� ȍca��_��gC�P<4{�����ҍ*��H��T���ۼ����`�M#�L�"w��Z�� /& p�P�7���җ����1��%x吢G���\4�}oKf@��p&�]�U1��n�K��~ ��$�s���w��ݩ$j'���;��(�(��_�rd��,U�O_'=l���0↼�ռ�Y>�R�Dž���Ky��d=�+c�z|ؠ���v$Ck+��s���CQJ(4OB��X��G�fg�z �D�:�~���*#h��5xa;�d6�̮�d?3��Xg�F�B3Y>�=����!D�0�i�8�v�2\�9��Q��ci�xAʃ���E�渠���d�?�؋]�����`y�с*�H�?S�ު��䵕<���!�Y |�p�(�Lw���12�bLT�ѿ��}� <F�b[��mU�s��?���An��wp�M�tkc � �(�|=�s&�>�#�sZcx��㵠iU{L���ks����e�:�W*�Aj�27JO_+t��P�N�@�/Z�J|�^���n0�O�������7� �6�£���^�%���(��)p���J�"8Ǭ&��̈�a���K?w���%�����&����|�e� ��� D��{xx \s���%օ!Ecާ��/d���^w��(�[� �a����M���ͿI^�Ղ:���B+3��r�A��B�G���X�g��؝�XV��ڗ&7���uCs��Q��Z7�nT����������&y>��,8�����9pm�1x�{�K�(�Qڪ~wN��%��_|A�D�0�ɴ��&>^D��� A9H��Z�5��=�hE��Ԣ�=����g�������d��hԿ����F豊<J�o��������zo�]�9 ��͞mf���yi�b~�����{�R؏��F����jz>�Z��eۤ)��pT����M� s4�>dݚ�D��kC������F����mIJQ@����kbX*C��b{�Aum�K#+�5b5����@��c��ʑc�*B[{��ڼ����8Ga�"9��2t������6�XG��dHe���B���^V��~������6�7,�tnB��g���D��ڂ�@zl.�2~���P��a'y�ݤ(p\n$�|���ް��`u�C��K�#ɼ��=~��Q� <�K%��:Gj�����F0��Y��e�;�N�o�����v��@�� �+��d*m�o�v�=�j�����m�Â�mX6�, f�zL �`�x(�[��L$���O�͐�N����þ�lP���n���L��oBJ��e=�!�@_>�>�{��bX�K}�e�0����7|:��MK�`w�z�]srw�ˈ;�0�/|酒h6C����9ğ��������u�l�Ŏ�7��آ��T8g*Mg��t���<QB��Q�;F�Mp�x�Y���@^;�Vy��� �锿��Wz�U��B%�ߥ_�]UE��y��Xs��7��F��!���/j����)��[|���zǚ����/9�F�9c:���HVq{�g�����hv0E`wF_����yC�R���z�=o%<��������:���^-)�<�w-�Y��W z "��sc�ìҡ�LM�# Zv�*�O�.xB�̹����<�gyᤝ;)g�82{q25U���%^����[9I����?��X��x���A�����K��6���M!X�a��o��i�"����;���Ȉ"�e<��3k��W�_9�OH�{�#f)�0����$���'��2F�¤`�? g��)�jt�*�>�d�=�R7������7yC�'�� ��3�+8���<8ͷ�&��F��A�$$<Ï�oZ�S�G��ʇ�Y�Ĕ ��^�a��z���Kʖ[��a�JZ�O��ߘZw����^p�TtE��9퓤eA�g5jݛvG����L���˨]f�p��{��}�3֑u+7[%��;�D����u�+֞Sa.kτfbGH���&d�B-�����,H�<������|�m]�H(E��&<�g��[*����f�E�����aX�:{e$�P'3fɞ)���E��%Ի�רff��1#! �Ż�0�Nck�m��7��]��߯���E0s�N� ��<���P�u��0{��B�ӤT����):��P~D�� lnH����MSUs�w���Pؕ0��8����䰝����wo*�)������,�7�p]|��=����@qh_>�{�ۣ�o��הg�V=�"C��nV�o7ֿ�{�Ҭc�֜)��� �O*����y��G@Y �׳$��ą]���$�r�R��:��KC���Dʼn����d������V�b������g)�U�4��F�,W|�ͽ����I�r[r~�d���[�S ^�X#WS��3�6�^�wLǃҝ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ