Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
4ab6371db020500289652c9574e3d78b_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
4ab6371db020500289652c9574e3d78b_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Target
4ab6371db020500289652c9574e3d78b_JaffaCakes118
Size
1.5MB
MD5
4ab6371db020500289652c9574e3d78b
SHA1
ef20067b57a9aa5a2ec98eda393ff1e82dd8b7b7
SHA256
0650e93b63a6ec4a29832dd0f10b283286aa088ef77d84a241a6a86ceb158391
SHA512
f7c1b2c22b76077ef7223bcded0572778641fff75c5a940eb9a1d5204b3dd411c7477af04e3970088ceb152729015933d9941b990e5f8dd30c4e335249964b6b
SSDEEP
24576:5JC2xIjCcK6MBTTDmdEryK5JkFgDUDwiVdJg3d0qjW/etb6gWmArBS3zhinbjaFF:6UIjvsTTadEP0F2U1VdJg5WY+frwd0jM
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetSystemInfo
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
UnregisterClassW
OleInitialize
SysStringLen
�Σd�0� �'F_��T���*�-�m�H�����S���,�ь��K�k���Y���(� �s8]J(�H2�;��n������B�+�c��bW-�w7|�C��.���Eb� ���[ ,�vZ`4f�I�34����3#���<D����+6�S@���t���N�f`Y~>)�D�� X��k�ey���ʾ����b����b����-����a�9vv߿ó=n2���3X�hSl}�J�W��(��u����M��*GbB8s��9�Y\A��`��]:�;�������3n�{:��|�s�[���ꘀtIN��s�n��M�B����|C#�k�f^�� ��������Q�� ��4�گfd"*���$ޠ%�'ž|7=��9�w��� I�pÚ���%`��nww��7eӠ��9]�ߕ��a��ukr=z>٨E3f�k���]�?��7� ��t�o���$B�����[��na�R_z�~��ױ]�� PWW(��zPdo��߷�H��gB���^ ޝo��^r\g�S���V�劈�ӣmt��\�jv�ů� ��v9R{2�6��%w�'�nkk��շ!�� nЌ�����%�Ym��܅1k��Fc�-����Fw���CX��嵱C���4Jwq��Q �KI����`����>s���HgͰ2�N�)��s��k#^�*f$(ad���]��G�弼�� ړ�u��0� ���,���)o��A[��N6i��C����@��>��R���Y���r��J�u�g�<XÂ� �^Z�9��µŧ�cNE�A�M'�^{G�A���M$��8k��bì��Y{��;�eG$% �����r� ���-��j}N[�a�b�о��}Ԍ'�9�2}��Y��*��#�+�~�&�2�ҖzX��1�o��j�s;�'�d���rJ�s���,�Ns��IS� g�熾��h g����d��r���p�S�_���ϩZ?U3W& rA��K�<�8�y��y2�bϭo��^E�S��W��u�C}�S��7Q���&6C�)�0���"�-d���]�����=PV��1��Y)���-5���".����|ǚ���%y��U� �G�u ��e��ZLל`��⣑3/+�����@1$6�!pP# y��cJN����� ��`ax�E=T�wO4l�C�X+����c=���zf?N%Av�C��e����9�r��2�� ������A2�ڛ�<��_���PM�)��G�Q(6r���[R���5vFs�j6_�R�U5����u�CyQ�¥�� yeόP.�d�|'�����!� W^���O�FLb����ys�ɯ�26�`��K<An�E�������s����t�nAT�'�g��$�#oq�*(��x8(�i�y�����I�7e����W^?�͗G7�uR���Ak�cӓ�Oww��7t����� �O�)�����]���ܶ��T�yb's�C���z(��[��GqD�a.���m�z����p��H7(��P�xEX�AQ���̛��!��: �=��yAy�&���Mk�C@��O�&|f{�w{��?}��p� ��_�ʹ}�.���<��ka*�c�#���܌�aPK��'�`�E�7Ӻ��<�<(�A�HDb)\�7C=������}� ���*��1�mg;�if- {s�k�YU����V��O�o �"��n�~<��T4Z�I+�6 �#�|,�%J+Iq�~�=�G���tP�@�H����K���A� B��T�k�"C�sJBZ*�C*Y��,>ơ�V�^8�ln�Ԯ�u ;�iK$�E��Ɠ-�[~��%d]��j�q4�����*K*98B:��X���E�S.�,�� ��r���f�.ز2���r���x�� m�tRܕQq���B["pd�p�g�ȭE�5ŝT�M������(�N� ϙ7� Je9�=����A�h�NS�;s�A�oi3�G@�%�/�i&n�? �f`j��;�Β9�eܓ!� ����@j[��XMb��l�e0�6n/i?���V� Q�l ȠEK�Pi��/��Kxm�yc@��`�,He�;��=����[/d��]!�����C�-ٸ�l��r6���G#�� O�"?B/��)m/M��-���R�{n�����[��6�v�'{�����7�PL���i��N�rˮ��p����wݸ%Qs���ѵ�<�Z�ӹ�pB ��y�x��L��� �/���8}z!����+&Ea���]2�U=X�.��9k�S���J}�R&z���i�k�s���1@��;Z��?Y�h�A�Y��p��I(^��$����E�$�,��Ό�C��_u�6�������^1���3N��8������wC �1Ph2��Ag��joE����Eg�0��Ty��v;��t�w%?@n[�@����Z����Ht��;H���[�OM��3!�7%��\-��c��-ɿ�����'���6����°,���!�� ����;*,�������X�]F���[p�WFNJ�$V����2xa��ſR��Z�����A�$��I��=��کV+,6�m���:Y������)m���n��մiS����������v�����T�� R�F}x���J,-��������Һq�N�qbp�!����\�.�A�τ�8���SJ���}�. S<ۥ�C�B��I���Sz�$�P��˳�Q��wXͨ��/1�ǵw�Ô:=s�<X.߯0_���ɏ����E�C���h���.�G��{DN8"ud�w������k�ؾ���,��:�j�S�o�Ѵ���#J�a�W��"��C�nG5]�y�����2�|\���?֛f�Up; ;�}�d���k$��UwF2Ǵe�����I2|ұ81<+�.�\�/�� �srКi��m��3+�\��qpt�v�bJ��� �җ0o�&�&�䰖%����dD���W�jz`W̢���Ү�=�h7��+�]� 9Oq�u�1t���K8Z&�T"���^�w��<�yGW�Y�o����uC$��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ