Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
447b1d580eac217a9fe804c3359ed402_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
447b1d580eac217a9fe804c3359ed402_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
447b1d580eac217a9fe804c3359ed402_JaffaCakes118
Size
6.3MB
MD5
447b1d580eac217a9fe804c3359ed402
SHA1
9454a6df8958231d1e5fd3df7ed2acc4056b51e9
SHA256
129df5015d55a478c9d06c0ce7883dde61485c041db18751a83b13a47350b0bc
SHA512
aab0ed058f5b1abb15ac203241d1d89acc00953aeedcb0e6f52dade4def01b47de841eb39b0fc6b8922dadaf0f6703319acf7f0d3f325f0597902980dfc423c6
SSDEEP
196608:u+YsweRyvrZJK2fSo0fYmGv/fzRHXnjCZiMUgjKzbC:ubI6BvXt3jCZ/Vh
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetSystemTime
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
BringWindowToTop
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
SetWindowOrgEx
DeregisterEventSource
DragQueryFileW
CoCreateGuid
PathIsDirectoryW
MakeSureDirectoryPathExists
GetFileVersionInfoW
URLDownloadToFileW
bind
ord27
VariantClear
ImmGetContext
_TrackMouseEvent
GdipDeleteBrush
WTSSendMessageW
��J �H?����.9��X���>_�_t� �hg��e/���A�'����yĤi���������(�)q;��iB^a�B��V�[���^]��Zd�>7��A0O�.� �z��=�yws�g��s?[� YWv=��N�(�B�N+g��O~ ��fL����h��b:��we��r"��A�<ȧ��7��>1����s�{u�5EC����}iU6F[���C~JHd�RF`��ܷ���&x �KcH�#,��u�c9ޫ0���lݬ����,���J/Q�a׳�)v&��av���0iL�>TKO��;G������m���90�*y�Ux�`�a�AL�7���k��B�>�S�Ⱥ���?��l�ҋ��5���W"�<�p�W��K����F �������W=��g�qJ+wq���o.]�A�x�J"�� �̰e/<%��_6;p����I�ZK��֡�X5l+��L5WS�őP����x���3��;V9bb��t ڧnQ�Z��""4�i�D�r���~|�s��!�˲Y��k�.�-4�UX�9>��a���h���Rm?eJM�"ɵsy8��x 4.�}�q`�p�H�=��[6�>��v����˶^0�" ) ���%�x]�*zJ@�h<ʎ��Ne9��`�s{��Ҡ�VG� �Bs��� 9f#?�S�r˛D�I�����W;<���}�����8'�a�P����T_X}���~�A���[���-��`xBt���wUL}�S��e�7��j�!V���Z�!Ʋ��0��ht���zr>���F�V��'��A%=���@�½�:�����9��j��n#Q��N�����7"ڢ�K��@a��DRA"� ���i�Ï�#��@ҡ;c��5-�����,^� G�W��@ {�!��� x�^1����{JW�^��SE����:��cbN^L?�y����Ӳ�����A���Y]�0�������(��<G�V���Ѷwg���ɦ:�s{W �s��@?g�b� x����w�B��w�W��Ր��n �Ut�Lw���^|���Ue�g �%� ���ee�|W� d���% GW�Y�]XmG+�3d! ���?S�e� �����P�O~~�K#w�X���L3��\�`���~S�({Q���P-����K���|�ߎ����d������9B�i9��okp��aN&�ܞU{����:}!|��~*\�36��EL������m���������&Sّ�DC.X�"��w�}�����S���Z3d➸n����d��I\��)͉� �,��}�g6l��wS�7�h�a˹q�;�5�OfY�Է��z�J�ea�#��j�ɝ�%�#�K<�vW�O텱��� �]fNrX,�!m��=�1��7�#|�} ]�O2b!��ف����yr���a�Q"�+R6��B.���Q���9-a:��xlؽƓ ���F�PVwA`���!�{���7����o!K��"8Yhɏ�%Uv�qWv�e����Q�:����7tK(G����Ix�P_�[�I~x���B�%�_� �q�����*�q?�p�~8�u�^��<A�%>*�Kg>ǚ>/�la�F�wV�ŤT�;��e�D>K�&c犪�'!�Ƚd!O�0%�V�D�ZT�T�l6K(��S�`�v�T�]d�{<�g�.�3��5���lESI�y��ƽ���РY-xC#>���]Y|O��iX��a)�%}E�V�Qug۹�♌z*hi#4S��֨���W}gݺ%E�p3M _�@ԣ�9XR���һ9��rF쾒��h���۪Nڅ������}]�fשE�U�H��1p��!� x�O+�����U�ړ����w�^��!7�VTd�l���6��({a��0t��-�����i�}�t �!@ϭ:��<��O!��!�/?�fJ��S|�D�/�7�>P,���أ�6�{Ϭ���Fo|j ���]��3�&�AS|��k03��,�A=�lC���������蟑�:��`H� X`�+^Y��HSҳ�����m����b�H��"����O�����"�6p������r����0��#�I�k�EŔ�կ�v�Q�0��)Q����0�ng�J�a�k!����Rd�l�<�r�`���R��ٳ�6��-x�M�}�/��Q�DG�������M�3�T×���7�%r�#ӯ��7�_��Ӈ��vE�-m�"ɧ����{|p��,�o��k���Zzj�s+��.>�C�Yn�#���u��= ��h�wo�0uh:a���a�={:��ĥ�7�j�8��,=��;e9M0a�Gʮl������G^�IڿH4�d��.'u�Zz�S�ˠ���Oҩ(j���I>IN��d�.3�:H����0���Egiߛ����mH1�D����"H�$mb-�a���g�2<���*�^Clo�k�'~[Q�E��ه���[)�!�`�����}��|��MV^�`�@oY���x(����?o�l�� zM��%���4N$���FLn��D�=�1�f�?�>B����`�Tp��u�CL��~���EF'5�w�^=��/���x�M�&=G���1őb�^�+ܹ���Z�����y� ��}[|��}s�����(C�-��� ����|��"��Bi�*L��3?t*IKms�������x��@�2����w?��p�g&��W��ĸj FI�!��n�B�>��\�V�r��+_7�B!��1�DzF%��b�띗m�d�.��u\�M��ml���������n�ru�����if �)�b��Y����e��.w�U���� �����{0N������^RW_�* v=rA-7i�\] u��V�}6��ZcV�Gu6�x���f��n�ͺn����� �yYST��$��RKxe��%����{����1uOu5*�?}�hP���W��w�9��3:3#j,�x,�xTC���+��[5�ݬ_��\-(��;� (F�M<�мp��&�//����[_d�=E^�G�� �i�tX[z91e���XF����(]�&��������c}�� �%�n����xgH���9����%�0ge��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ