Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
4de4aa923eb8500fe5c63dc66d4c3fbc_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4de4aa923eb8500fe5c63dc66d4c3fbc_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
4de4aa923eb8500fe5c63dc66d4c3fbc_JaffaCakes118
Size
619KB
MD5
4de4aa923eb8500fe5c63dc66d4c3fbc
SHA1
31f7d5377b0505ca3a1b75e68d7d887c77958850
SHA256
055128ffcedb9dc46bb9b7936a38dbe341469c5b6f494e785191d309874d8ed8
SHA512
a0d35f6a597ee1d6495765ec0271e6e6f04156e46eb67ca285d237cd8bce24ce8d49bdc4b389e55bd57e44a690373e173032b3d4e29cf716e948947368642ac7
SSDEEP
12288:/HjV6zaE8BMbkvvmx1/ZWfvsXNDVMbhOBuP42+kC4fRM4:M2nLvmDGEXNxQhH42+N2
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetClipboardFormatNameA
DrawAnimatedRects
EnumThreadWindows
ModifyMenuA
GetAsyncKeyState
MapVirtualKeyExW
SetWindowsHookA
WaitMessage
DefFrameProcA
GetTabbedTextExtentW
DialogBoxIndirectParamW
CharPrevA
GetWindowWord
SendMessageCallbackA
SetUserObjectInformationA
GetMessageW
ShowOwnedPopups
MenuWindowProcA
CharUpperA
SetLastErrorEx
FillRect
GetClipboardData
SetProcessWindowStation
EnumDesktopWindows
LoadCursorA
wsprintfW
GetParent
LoadCursorW
DefDlgProcA
SetForegroundWindow
GetCapture
LockWorkStation
DrawTextA
TileChildWindows
MapWindowPoints
CloseDesktop
GetDlgItem
GetUserObjectSecurity
InflateRect
CallNextHookEx
ValidateRect
RegisterWindowMessageA
GetDCEx
MenuWindowProcW
GetTopWindow
OpenDesktopA
DragDetect
RegisterClipboardFormatA
PeekMessageW
FlashWindow
SetTimer
IsCharUpperW
CreateIconFromResourceEx
DefDlgProcW
CopyIcon
SetThreadDesktop
RegisterDeviceNotificationA
GetMenuInfo
GetWindowTextLengthA
BroadcastSystemMessageExA
GetClassWord
ShowWindow
CreateCursor
GetMenuStringA
LoadImageA
CharNextW
GetWindowDC
DrawMenuBar
GetSystemMetrics
InsertMenuItemA
EndDialog
TabbedTextOutW
CharUpperW
CharToOemBuffA
OpenIcon
TranslateAcceleratorW
CreateMDIWindowA
SetWindowTextW
DestroyWindow
SetMessageExtraInfo
PostMessageW
GetDC
SetLayeredWindowAttributes
GetComboBoxInfo
CharLowerW
EnumDesktopsW
ArrangeIconicWindows
GetFocus
IsCharAlphaNumericA
CreatePopupMenu
CreateDialogParamW
CopyRect
SetRectEmpty
SetDeskWallpaper
GetCaretPos
PrivateExtractIconsW
MenuItemFromPoint
EndMenu
SetRect
IsWindowVisible
OemToCharA
GetWindowInfo
AppendMenuA
DefWindowProcA
CharLowerA
AnyPopup
GetWindowWord
GetWindowTextW
RemovePropW
TerminateJobObject
VerLanguageNameA
MapViewOfFileEx
DeleteFileA
GetDevicePowerState
GetLastError
GetProcessPriorityBoost
LoadResource
OpenFileMappingW
OpenJobObjectW
SetHandleCount
SignalObjectAndWait
LockResource
WinExec
RequestDeviceWakeup
LocalAlloc
HeapQueryInformation
LocalLock
UnmapViewOfFile
GetModuleHandleExW
DefineDosDeviceW
BuildCommDCBAndTimeoutsW
EraseTape
SetFileAttributesA
SetCriticalSectionSpinCount
EnumSystemCodePagesW
GetShortPathNameW
GetACP
SetPriorityClass
GetDefaultCommConfigW
GetExitCodeProcess
CreateMailslotW
EnumUILanguagesA
MoveFileWithProgressW
WaitNamedPipeA
FillConsoleOutputCharacterA
FindFirstChangeNotificationA
FindVolumeClose
DefineDosDeviceA
FindFirstFileA
GetFileSizeEx
ReplaceFile
SetMailslotInfo
SetCurrentDirectoryA
GetCurrentConsoleFont
ReadConsoleOutputA
InitAtomTable
SetEnvironmentVariableW
DeleteCriticalSection
Heap32ListNext
GetCommandLineW
SetLastConsoleEventActive
SetErrorMode
GetProcessHeap
GetLastError
GetProcessHeap
TransmitCommChar
GlobalDeleteAtom
VirtualQuery
LoadLibraryA
TlsAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
UrlGetLocationW
ChooseFontA
VarI8FromDisp
VarCyFromUI8
VarCyAbs
StrRStrW
SHEnumerateUnreadMailAccountsW
CheckEscapesW
EnumMonitorsW
EngStrokePath
CreateMetaFileW
VerFindFileA
VerInstallFileA
WTSShutdownSystem
WTSWaitSystemEvent
WTSQueryUserToken
WSACancelBlockingCall
WSASetEvent
WSACloseEvent
WSAAsyncGetServByPort
FlatSB_GetScrollRange
ImageList_Copy
5*�ֈ�� 4��:����3�l:cCt��K��co~�J����!��ބ���o��� ��#P"�#�f!�،��zԨ� �]�:W/�r5�B����4���[8�0V�Gv����R���6����x���Asz f4��jIz���jU�F¾�@/+B�+��<��-��P�}?�E����n�yi|�ĭd�=�VxZk����߆���*@M�-8���:j,���%��6@��e��;�'u��$�(ZI���e`�������V���^v3��ү����՟��,��180�`�4Gy0�>�_jI�O��}fY��$va �iopJ��� 4�O,�;��K*bXO0~����\y�Nڔ�A�k�F�F^B����G���mY&#J�OBk{��u&ļ6hop���������(��6��C����g����x^�;\� ���ppt%Q~Ƅ�&z���ٖ���0�����AO[$l$�,R��6k��k���i� �/�;�Vd���,��8{`�[;��dC��g��`!ӏ&�*���g��$����jO>C��H�'���A�=y��u�>���t-g+Dk�nX��rsfT3C(I3�qԕ_iW<��|��ʴ|Eב��*�@�+kV���j<��8���4��Ш�m��%NU�U��*7�qE$�@�7�fO�6L~���5�Mx�j����N,e*All=����}�ؽ�׆Ɠ6�`�~cT��¯O�(�P��O�R���\lmi�LtJ��V����Nb0��"RϸZ��ӯ�[ ��5���'�,�p��W9�B�����k�KR��r�a�:��hz�eZ�弱-٫�Q���k6\�� ��u��2�D>���uN4IJ�|�6��5�M�� s�7Ҳ��m(F���X60�⎃�B�2�D�p��j�~Ƒ� ?dj�p\��(�������E�;up6�B j��1��z!N�m�7Vv͒����i������*@�i2T7�x.F�����׆��N�[�\��ࣺ N���fe(�g��5/uL<�0�*��:�w�n�0��]J�����@s;v=�����k����!KMߌ�d6G+�9s\�O!�@P9[ ��������!������n��7o!�s�SP��fN���F�u���κ��ff/�]�5���&q���k_�u��#�]ڛW-ۀs<9�����3[_���� =��snB��='��=6Á=��k5c����k�R�J�*�����T��։6$؞����� H��|;fA��ܰ��a��������\4.�~��Zo�96�lv"%a�RY�����hþ_��l�2��i���7I�[}H�z��@$���Me2!X���f>r��XތY�ɣ%�P�?��e- �m?;N14�;(����������}qSPg1L��^A�6 � %�� GK���墧T���3�e�ϰ� �Nֻ�gn� �i�PE�������4-f���Zsթw����y{�!;�zu��!6�����H�w[��]���M�����Kt8Mdb:�?�ͼ�Fnhx����DY=Y�fr�4f�8(V�3�z�Є����J'[�ܐ�8��1C�_��^f��b:~�A y2��F�4jB� �M]�^Ϯ%�?��~a�5p�R����]�&�:����K}IG��?o�p���E���Y�c���>`(K2���4��-�A�4�u�l���z���t�|=�U��Ja5,U��'"0;&yXK`Н\������F&�s���a�k���"Np�M�~���$w�������Y��<_KYQc��\�r��Fn���u�7~���Z�:>���F�c��%�j����a��;N�}?V:Y���#]䥪��e}�x� �j��)5-���3��� (�A��[�X2(:�����PJ�������Ͷz�ᇱ�K��ؒ���3A&�s�T��fz��#���pމVX���&WzXPE`��ӏ����n��`�ˡ9�W�x<b�,B�b�5�S����$Vv���Ӫ嘺���k� ����J��0����V��! '��PL�����ݺ��X��y��]0ITB?�K�D?�*����K����dN�P���j�ğ��Ш��nl���N��rnIy�`PM��;�]�!�+�� ��'�>�p�v�P��q�8W�5S�7������7j���ݩǑǤ��_#́4�tm%��a����y�wN�{y���1'����`��B��}�Bp��z���tT#Hv��g�t.@�ټ,Y��O8���{Sc�HBR ��]�~Re�1����4�'���u}�V���� ih�O&ηU^8`UsO:0y��D���'D)�z�:��ۧ��a�����B�"�O�Rsu���f>M������+�ő �2�,�k]�1q�n5���d3on����@|�T��5��Z��g�����kȽ���� j����6�+��Yw�yj�|�����\��t���� ˤ�p7F9�����D*f�Ӽ��q���@))�q���$L>z������B�]1����_��!A���u��o���9�P�{�"^�6�����3�nR��������ۍ��_Q�s֧�鄒?ؗ1�v�O��e[���E��c�H�$ ����)KCC��Wڇ�y2|!���n��[/CTi�<&���s ��[~��F�&�N�$�l�J�}���X@�s?�ѣ��;�'{�t��eG�٪�Mܘ }e��]��֭:�H��,�����.<_DtO�͑�j���/���h�$"օ3f{@Zl6鍷�m0��n�"���<��!����!PO��ܖ8/:��ID���q��'��a�R��ɉ�. ����5������B�+�/cgy�TH��XYۗa�R���)xH>k��:M��*�\��P:|�&\�5�|+�s^�j�BZQ~K̲���%C2���AwZ+oa�iB�t�9g��2��;��^;�XJMJ��ɚ(��u��G�g�5�����!��z���� ��je��À�y2ee��:�(�`q�JV�I�Ɋ��L<G�uZ�8���q.0�8.1�������Q=�<����>/!�(��(
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ