Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
4fa9a3923b3dee282a260224a5dd424d_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4fa9a3923b3dee282a260224a5dd424d_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
4fa9a3923b3dee282a260224a5dd424d_JaffaCakes118
Size
659KB
MD5
4fa9a3923b3dee282a260224a5dd424d
SHA1
a5398919d6f993178b785ecaf357ddbe8380ef4c
SHA256
21d37fa8c0cf7667280e0c47652f26c8dd513c46634f706f019861cf336b7b91
SHA512
ccfd10daf32cac8a54577240ae059e2844e1be59d95a4b9c01de0dffa45dddce3d7ad18c76ab5f25cd496b8cef944f04e8896cb64d1a71e60a9d1ddc560d5243
SSDEEP
12288:nE0l2yNAS3f2lVvfc6BGBjJGKCp2LR8JbH+0MH:nEU2gf2TJGBjcKCp2185eD
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetACP
IsValidCodePage
GetACP
VirtualQuery
LoadLibraryA
TlsFree
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
IsHungAppWindow
LoadIconA
�5�������ǒ��>ӷa&sT�����T���"��q+���0O�����-\�|c��=�hEow}7R�����W�F��[���;���*^4� ��\Y�Lv�7@���re� ��[��ƽqٕ��|�D�+�,*�#�x-������OL����`�B! �V��a�E�e�,�d4�n44�Xp� ��^�PF^6D��1���H�<���f����{��� !�'T.%��^���-���l��cJ��`�����ON���1P������٢l�ɸ� H%�x��$���G�`H�w~�f/�-��d)�z�k㲏�$�1�.�h��磻�Ղʺ�_��bu��6c����4���1�o�}$�=%ҽ��%v��}�DG�k��;�{��7�^�Y<+�w��3�Pu7#�'�f�=��� O�ױ7��0�����+�j"�->I����?���B��ȅ��EW�@��O�|sC�윫�w����r]��*ϒ���)r怭*�����c����/����j�&�4�`An��W������'@2v�eh8���Qd����O�`i��HƱ%Lr;ލ,(�����?��<��\ۛ8��^�7���Av8fG�qn�C�ō�����͙ }����%���g9.��_�QKP�#��ZC��\r���8�7����[�@����.�Ӿ��-����S�٪h�;VR�y�c0���$CӫOtM�T ���ʜ'pL�/d�gW|2 �$��p�t�� �Ŷ��[��S�wb����A���+T�~�k��rf ��o��@:�E�z��3-��tIq���H}�_�����gm_k��p9ӱ;5�"pL�9�ڏ�Ӂ��k�H����#_ꋛ�Mc��އ[E�uԟ��@�8�D�l��g�Ĥ��.�0�ό�ǹG�%�lnH���>l-?� )[[6�@����������>��ۅ瓧�@��h݆�'�c��>X����o��vX��J.U�7vP�*du?��<��F0���e��K�(|e˃n��X�ܜ��%�����5�iv������+ )4�]<�<���ʡ��.�S�/g8i�϶��쓈ȍ�+�-*j���_4��\�|e*<��U�U�3M��w�Ai�x�n�e.�B%B�T���� Oe�û!(+�ndOi���)1�q�M0���!I�=1�vXˎ��l-������rʻ?.�����ք�fF� ��0=}'�4_�e^�����F���w?���ki&������|��f@��nz�Kz����>����}��_|Ș��Q�`�Ĭ{��W��D�~*P������t���.��0�w��5 6g���y�K%�)r�S+� �L�Gb1�jRJ��%�좴ʴE��ݪ+NJ ��T����.� ���Q룉�������l�{�q�q��c2.�9I��욿B �d�¢qx������#�$��]I'j�n��|;�7Q����BÉ|e45�=a*g)�e��d|��{�j�]~(}�����s�(���$�gE֩�/j��eC��� 8��Be����5xO���LG����%��r�,�X��c<��� �\c6'���]���L.����(ڰ�����S�����y����Z�:#��Q�d����q�O��5�uJ�x�9y�o��`j����ώe��Sp�,^��7c��Cp���F���+b���!zo,4K�� �gF��~Sd�&�3c���6�/�A3�.����W���,��@�������ϴ���vj�k������[��é��rcm�)�ВUT�P��X�mb+i��}6��$��fE#/�M��NM���0�X�q���)�<g$���^ �4M�eGt>�; @���Tg=��b�U:mlj6�=���"��cY/�,�������e����Y\)R>s����z� A�a���I��KI�<�� 6���e���{>�]������3���k�^�9p�{�U}a�1�5���8����D�u��R�K��HB*��c2RP~Y�}oK/+�E��ET��SA��&5#}�g�V%Ʊb��<^;-+3�/#��˔�ӧ6~��*�ٟ�ӄ]7�����H�ƾ�K�!��b0�?3(�����/"�.v<�&�ǯ����O�`�:r����j�(b�}Ξ�q��P6���2��3�G��'}����|���^����i�_.-4nLw�+t�ԗ���=����I���W~3���5pO)˜\=8M·��2�j�O� �/q���#U���}�}XMc��T��n��zT��G�+i�cQ���D�Ago��K��К��H�Y�6�ة{���q���qMt��/`���9��:��`��L �bB`��- L�:3g�\�-�^(��I��E��Va+s{��V�~���2n4'��P:�*?�B-2[�'ѦܬT���5^U=��Ur/6~-��Я����}��%ZzBr�O�EQe˞�VP���d3�<��H�NW&�ҝ-.ܭt�=d�A�2R=�@Nj���s��������S����E��o�Ez��Bx����:7M�{ ``��}g���k_��?���3��iy�KR ? ULz�a0����j��:aW�k�b�/�*t����ݾ]�~'�N�ၦgK�x�Օ�Y+] ���G�b��A�a�<���@�xO����yd^�h����n��]�jo=4�����w5P>Œ�)���e�J]���]i��՚~w�0��.^�H�x?��4O�+$�\�@$����.b�������g� ��~zq2P/���U����:,��k��EH�ᕘ]s���O��ˀ�����j9a��#6��`�Qx �eaixG�^;�J(�Y���,�Px�*���jH�uK��nb�q��%ƭ����^YM�h@*�)df�N�nI^������4 �fs����Z���<�S��f|�6$�Z�\����'u�1��$�x^�H/Nʜ+<���+]� gC��k ��ic���8�_)�F�X��Բ�9�3�}K�v���,�t��-�y�_�Ō�BUr/�?s''��9�k��@.�B�f��f+�3~gx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ