Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
4f84a016eaacae4b663416895a1b7f1f_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
4f84a016eaacae4b663416895a1b7f1f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
4f84a016eaacae4b663416895a1b7f1f_JaffaCakes118
Size
602KB
MD5
4f84a016eaacae4b663416895a1b7f1f
SHA1
2a485e5028ab381216108751768d2c5938601383
SHA256
1082c5887e0479f62cd84f8f6b3e21ad5e8295f83fbd1b6cc5cb5c2d1e1386ff
SHA512
d75f49275544e75e5d71d52333da57e78728d10f66e9077710404e98e9ef71b5b905d37c1b433dbef95a68a8615784f48dfecda11c923f0ba1b687f2f96a36b2
SSDEEP
6144:+s6OzpkoLu2CgmPdVuLBHgkfDQgDEYkVr+jOYwxj9Qm3cJvDiArUG5JFJ3DTbUHr:QHPkBAk7FQCFwdS7dDN5RjUQ12KuA8Mo
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
wvsprintfW
EditWndProc
ArrangeIconicWindows
LoadAcceleratorsA
wsprintfA
CreateIconIndirect
EndPaint
GetClassInfoW
GetWindowTextLengthW
ChangeDisplaySettingsW
SetDeskWallpaper
GetMenuItemRect
WinHelpW
GetKeyNameTextA
InvalidateRgn
EnumClipboardFormats
GetGUIThreadInfo
ScrollWindow
UpdateLayeredWindow
CreateIconFromResource
GetAncestor
DefWindowProcA
RemovePropA
CopyRect
SetMenuContextHelpId
GetRawInputDeviceInfoA
RegisterHotKey
DrawTextA
CharLowerA
DrawAnimatedRects
LockWorkStation
InsertMenuItemA
EqualRect
CharToOemBuffW
DestroyCursor
MapVirtualKeyA
SubtractRect
GetWindowTextA
GetWindowModuleFileNameA
SetClipboardData
LockWindowUpdate
GetClassLongA
BroadcastSystemMessageA
ShowScrollBar
IsCharUpperW
EnumWindowStationsW
SetKeyboardState
GetDialogBaseUnits
DrawMenuBar
SetClassLongW
AnimateWindow
SetWindowsHookW
GetGuiResources
RealGetWindowClassW
GetClientRect
CharPrevExA
GetCursorInfo
GetWindowTextLengthA
PaintDesktop
LoadKeyboardLayoutW
ShowStartGlass
EnumDesktopWindows
AlignRects
GetDCEx
RedrawWindow
SetCaretPos
GetWindowTextW
GetWindowWord
GetVersion
GetPrivateProfileStructW
InitAtomTable
GlobalMemoryStatusEx
AllocConsole
GetFileAttributesExW
SetEnvironmentVariableW
CallNamedPipeA
OpenSemaphoreW
Heap32First
FindResourceExA
HeapFree
GetNativeSystemInfo
MulDiv
SetFileApisToANSI
FindNextFileW
PrivCopyFileExW
GetProcessWorkingSetSize
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
TerminateThread
FatalAppExitW
GetFileInformationByHandle
EnumSystemLocalesW
ExitThread
QueueUserWorkItem
ReleaseMutex
GetStringTypeExW
GetConsoleFontInfo
ScrollConsoleScreenBufferA
SetInformationJobObject
GlobalFix
GetSystemTime
GetAtomNameW
GetHandleInformation
SetSystemTime
GlobalFree
MapViewOfFileEx
GetFileAttributesExA
RtlCaptureStackBackTrace
GetDefaultCommConfigA
ReadConsoleInputA
GetCommandLineA
TlsSetValue
ScrollConsoleScreenBufferW
SetThreadExecutionState
lstrcat
lstrcmp
WinExec
CreateDirectoryA
SetErrorMode
GetNumberOfConsoleInputEvents
PrepareTape
GetVolumeInformationA
RtlUnwind
RtlFillMemory
LZStart
GetACP
GetLastError
GetACP
WriteConsoleOutputCharacterA
UnregisterWait
VirtualQuery
LoadLibraryA
GetCurrentProcessId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
AdvancedSetupDialog
SetPrinterDataExW
Q6�̕8\��X��i#��{�> ��]A��"(���*�paH(5nz��*C�Ɍ/��<��_2���=�ktQ֯l9i4fgh��kLZ_l`��d{�͖ż)��}�������5/|�<�i�C�C �xEǧ���e�f�뎽k�W������STf+�rAy�N�b vpV�y_�����;�� ⓼`�G�]5�k�=��;�]mi¼-o�E]��HB�?�V���x�P�:�c���jHf5S��;�C~JPpt���N�w������F^uk��s���)���.�9�c ���O�L$oQ\�A��#�͘�����0�o �0����H�ȊS�O���*��^бF�m�Z��0�]�4O[�4��\�+�й��=~���0��cV�g���~�)>�����w�I}�� ���L�v��ձQ,no�}8CvDGoWK1��(x�|�MXn��V3�=;�5r"|Zlr��S���Y�*�5�/r���/��J�{(�����qDV�ma���\O"��R0�_`�F.��O�����e,�M(7��2�na^r:>���\a�}g$��P��h�1�CJ{�5���',�W��>j0����?�`��u��_����\[�_�*9B�;bi.V}�$�48�sa��e�v�Q*�g�@�l���vD�ǻW/��$ը=@��W�1%PL�8�.yD�Pr�Y3�Ou�:|8�T]�9t���)NSx��2۹����� ���|=��p�9�2cB�[*�݇B$�od�E���3��mY�fB!����Q2��9x�%��;�s�E'���K��Y����P���F��A��G癥�I��5=�V��$��k��.�09Ⱦ 7�F�]Qwk���8!�qm:�Q\�s�3�_��2]fg-�4�dȋ�>ejzL��<v��\h!�e:��0m����^��nH8��C D��������w�K���=��5��W��A*쮀q*�u]n5�3-��=N�%jZ{]A�o�EP��"@9����E#sia��B_>m�?�(u�(1��� A{������/�!����1T��������I����Zd����&İQC�ڤ89c@!��*�_���H��?��Q����JKV9�� �e��S[�0|"K��ډnޥ��qA*/D�c<*3#j�� �h(���euYᗮ,���nQs��!��GU*9I���֦'#8+mBX��J2�C�����60���l�������$�no�Nե���]��E*�:��L���r��ۘ\ �O2;Z�gR�����]n;�vx�y�/2�>(ݦ2]Q%������b^�$��N/�H�]U�?�yB��>�S[�{���۰���3���ҹ�_� �BX�뽐��+�쓅����a��a�r�I�{w���4E.ܬ����_��ڣ dN����l���A��)�����\��Yu��z�s�*�t*��^���Ɂm�l�&0��> r0��jR?6�ev����c� ��5�bM ��r2�<��'�~]�XJ *�D��6���ҥ��(-8���;36�����Dkb^uxH�X�V���Q:#'����T�E{��p �;��7k�㟡��>��Э8���:R���"%��͘b��<�z��Np�8�80�0���+�Ka c�n���#���A����@�f�`ܠ�uQY���.PV��s YKbU?̺��nK��9֞�vQ�R�-�&�<̭�t�CA��`���1��f|��-b�nZdx�5����d�/�8N���N���mҞi?R�:�k��+TP��pbv��a�ƅ��7�P~ݓ��'�J�\���i��ATtj���֦!���Ē��ݎ�Ũ^q��,M�<'��s���`^D�"�{�>�2����R3���X�U!E�&��b��a�s�Un�����x\ԭ;�����]F��\�ߥ��b�)�G�y1odx�G(�{����cl$��{X�:֮��s ���m�LJ��:2hK�ű��_�e�yw=E�#��������oԇ��wB�F��27����H�J� w���Sf��ܾ03�� �I[B�%��a �#u'Z��<������y�Z�x�Ǽ�ח.|lu �I�Կ�b�%��)Кw�kMm�z��8��|-�����P���%I.�'6M��&X��wP4'�S�3�]��oc��<��6�/I��4l�3������!�2D�����4����Q�����-ȭ�`��p{�z�}�pc8N< ���� ix�)$�$|u��� *�� ��3=�T�� �z��,��l�|�ց����;�C��Zh��+�o�L�^nJj8kUu �4 ��^0�S����~7����i�� �|M��"�����(�!rQJ�s� ��é����E��C`��+iTcbL\A�|��Uhz��*�-P.�M>���z�J�_�O}DF���٣9�.�~��#���Aކ{+�D�T�q6C��9�iߍ�9�xA�/�-jF��`��'���E��#��\�3���:���ΜYd0vfԠk���_�q��&�;�j݈_p���R��-����(�5����15�j�P��q���F3��/'�M�Og�HO>�E:�^;[�h�&�1��=�β#b��Ӗ�sҜ�|��gu�1�CK)�)�W��5��5e� �(Z�жW+a���)��{;���*�9`뵔�S�O=u@5���,>�������Z���^y�P��X���fTE���x��K |j��f5y��8��5��c���3�~?�eC�3��� l̺?��c�� ���;b�,�l�<��/����v�y["Bv����̀�J��W�Ir^�j�G�j�*�&��!o���A�:���4Yw5� �e5��H3��a�-��k��q0� M�A\��؛$�Ql=�54��<-an���h�φ���Z$����R����L��_'i=~��V�ފ鳳_�����F��!.��e <87�^�;��^�.��Ul�{�i�t��4��g>]���)�qр-{���S�]�=���066� `R4��?8u�l�/Qr1!��<��|�sDb9��}�nu�Z�u���>�yհ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ