Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
48426f782d37696a52c2723a7efdae8d_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
48426f782d37696a52c2723a7efdae8d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
48426f782d37696a52c2723a7efdae8d_JaffaCakes118
Size
1.5MB
MD5
48426f782d37696a52c2723a7efdae8d
SHA1
f19aa199fc82ea0b9dda673a0e0a9b89a5ef3e7f
SHA256
1605495467025ad3c2e6b78c6ecda0c8293710f688b2bacf3c7b0b2aec2b7aee
SHA512
1a6fac5691f404dc3d2c0066d31be25fb16f8b86923fbc44c06a6f6ef9e55bcb895890275925bae389a9975d3086d41da579fad3564f1b3bee46001dfc72c877
SSDEEP
24576:R4iir0dnxlImC4nf0hgL2ixN7vFRSDFK2SoWOU1SIPyRtepG7JtyV7:7icYx4f0zcdvFRGcYPsrUJ8x
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
HeapCreate
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
MessageBoxW
CoInitialize
SysStringLen
oor��&4L��9�j�$Qn*�"�K?��"�QN��k��F͐c��]�1�:�U}��X�%d�rc�N�]ˮ��`=]n��.�/)�n������YFgm -��N����L&�K���u�n����P3Dsl]3�4���`B��$�?�pAP���h�/Aפ�3��m�=�V��1��^��:�>�7v=o?� �)�!�TE�i������)YT@���E m2�w���}�=T�E,F my��`FՆ�t���� a&��A��g�JmɖS}2��8����0�A���Z\|x����h����#�~�a���"��5��JFj�W� D����^�ၦ�YΡ�Aj3o�a���<�h����� �l>�����i:��>cx?���"o"�$aF��xy�b����7?\��~6��/hƻ�d3�|o��ϩ65b�9�y�f?BeR�a���K���� �^�F!�V��>��יw�3V��r���ܡ��k5;��Y��e2iǻ]�!��-��r�ܒ��ࣆ��3N&�L eD����h�P�W������X�%�T9 { ��w1���<��ʻ+Z��R���꼹�2�2�L7�Uha���^�I` ���f"�Cl���! �9�Í��_F_�2�����C� �*��Z�5E�*��c5��G���S�m���ulk������렷��SJ)ӈg�B�>WQ��$���:�����n |��T� k,�qB�@��,���� ����qq��<�$|F$JO;�+��M*�3��(��@pk�p�F�L BL�H-���0I��V��|-� ���{�Ȣ�7�mX�S�pq"y@�"䄊5��5��ί�VM&��'L֠����V>V.�|��7�H͔�� ���X���pcQc]Y�Ld_ͧa_<Ѐ�LG���q��� 3¢�����X��Q�R����)D�D��E�s�l���ӽ�}�a/�e6H\���ߢ����Ui|��ħ� '�I���OĹ�GԱmO�2����F���G2�_G#i�{����g�C����a�OWlW|�c�E�y�ƣ�����~�`&^��*�����i��b��{�W�.6q�W?��Zn[�2� ��Vɜ$�S�c�_v#ǧ�>O���g ��l ݃!��cy�o���W�/� �wN�@��Gֆ8L�@ᜉ��V`���+wX�&����u%���#3igy�G0�����<<tGy�@ˉ뤧�����T~S�{��5�Oѻ2�o��TA��Iu"�;�]F�����XˈP0L1Η�g�8.�A�F�;�<P��&�Uol��$iek�5d� A���a��[���=Vs��ų+�ő����0�ɼy��3Jg�.�ܧl_��j�!�7f����".���0_:(V�Wħ�B{�T�L�l�c�2�I��>�=|��<F�=Pv�x9��5PAX���)..��)>���}k6��_d��Z�֤�v�� ��z�b�M�-m�Ǡ�`2�@���V��|Y�T���O\t�a� 7��������� q��Ȑ,0]d�7X�ַ��Xq8�}����w57����rMS�����^(H� B�{����)�B*K������;��FY��$k��}� �E��Dv���������/�@<_l�0����\� ���7�bK�u�J:%Q@ yq����R��L�2#bE�Pw�{\�/��w�`���B�>���q��GY�j̏�/��m[ F[�ǎ �E_n��AZ�p�]x�M��p�LnCɳ&'8�Z��:iKg��C|� ���i:�������0����Bv��y�,������,����`3�X�����������Ǚ��_��1��V�+�s:�塇��7���(=o�Z��̓C�?�!RU{�Т=��}5A�ִi��U,,�`.a��uAG���|ꗠ*���v7�� ��X���*z�)��*U�Ml�;�+u�p�`�N�D��]�������c���o5W�������[ ��6~����� ��o��j� P������0�ĥ��'�E�m��\"��5�~z!��v�9Ֆ��$[<^�a~�$*a?@�/����u��!晚$`�}0��]l������=�ȟ���Cϝ b����H\���a�d��u��~e*���j��V/D}���'B�q���:�4��95�1M�������0x���$��uJ�?⎧��j4�{�꜠�k� NK����t��-�ʌ�R��>�"6(0�������k;�L�~/�x+̠ۄ�F֜��ȑ�#!������\Y�츻w��߂@e�e̿��>���ٍ�����e}�BZ�(��8���O�i��{����r�C�H�@�;��Gs.��M�8��<�_�;�^������J� �$r&v�x�B���8f4 ��#w;����u����K�oIPA��e�����.�5�ָ<u.m�aRyi93IjΠ�͊��V�"J���[��(B���A{83�Yk˥ ��[�gj&3'��YQՍ&�.,A�^-��*�e@ǔ������gL�����Q�QA���r]z���3���k60g�귣��$�ַ�z�W� eV ����!I�+ep����9^����S�9��U=c�d�#��H�d������e��%<g��(pV%������,�8��.��M�G�(��M� LDɱyR��=��L4��X�@���,� c���-+�ۼ����y~Ձr\8�R�B:i�yE�R; ������L A�-�C��Jz���>=J�leQ+�}Eq�uyV9�R�(Y��H%[�Z��N�l��AlG��6������`� q�����s�Ut�R��]pM$T"XE�c\v��b���ڬr�&埊�뉗��>��!Wh:"�(�)�!}J��Ë��?�-�W�I���a@��D���i@������>9O�.�@�D�v_w��q�<����F��s�Gy���-Ѿ����Z�!mL���j�daq[)�����0q��\�4�n���pCMb��1�a@��5VE}&����h�l����ӳձ�e�>M.1����F��@剕�B�gX��H�����Jhܦ�#�*��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ