Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
5e25347c03a3d6bb68927c1c5644cd78_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
5e25347c03a3d6bb68927c1c5644cd78_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Target
5e25347c03a3d6bb68927c1c5644cd78_JaffaCakes118
Size
1.5MB
MD5
5e25347c03a3d6bb68927c1c5644cd78
SHA1
89c41d9142f362f5ac06ca3bed05cd24089c2047
SHA256
1033472369c6d803a853e478420824ce32cbc40e05fd44d7292a8500df936868
SHA512
50c4b5e481da9cfb5125f828f5db5ae13362347d9df61490d6a2e9c5e4647a5fce51f1136acfcada0bbbc41c303a4ce5923953fb7b846f20a7f0db966bac734f
SSDEEP
24576:Xa+4kbkt3dZqq3oDEEsnUJusi9ClqCeeA2Q2HyDG26IPKZv3trbIA7eAIC8Re6Cb:K+tbkbZP3o7u99ClqCeeATGdvvJx7SR2
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
PostMessageW
CoUninitialize
VariantClear
��KZ"HA����g��[�V*�y�D�,���$��WҡNE�x���sq�5��G��s)$h�Z\��eU$4$`�b�IC,��$m�8���`1J�"'���d�ГoyZHgx��Ӧqs( ����38|4�ȓ����Ki�:q������X�'Z�S�_�O6�<[�3����S5I�;nk���-��$;���m]�R �=�������D>��q���n��� 7w�2:7pv�@w��I"ArNk������� h���>���W��#iBG�rN̔~�\싪�t�:�=x���&���d�L�@����k���l��y@6��5Z���ɚ���ם�U��ۨv�{w���DsFp�tV�a����σ߾`\�3�~��?AC��.REY������2z��D�+YÁR1����ᙹ����f?�BX��T=]U`+���;��5��M�.�S�r:�a�'�R�P�:FN�E�չ��˪ɤ�?�:Fs�b���-�4��,n�D�Bs_aI����yi��῝�?�`����r=W�s�y�M���2�p��6����?��U�� �ih��`*-��診~Ȅ��\y�=�;?��E ny�=k��*� r"b�vh���Q �Ǻ����CCU�K������-��@lR>&zG`��\4�~��=zD�V@�?�^���P�`�9�4 �뗢���D9�͏g��p�@�͠4Ƶ�]�{�U�ߩ���h||mp6A��M�+&�� �"��1��;<)\s�3��I=@!����v�6ݯ�b��z��bc�d�{���ېΉ���'&YFb���BE���5��$[&���1�v~��i.�����W��I,l�̷���ޤ*3֡�k~��EwȢ�ӿ�oͣ�l@�+\���RJݪ�,f,/�='Ɛ��-�AN��I~��30*U��*��\S!NH�+%�:��V� �C�<[(�)@)��I\�V�>���[Ԛ���Duw���U�UZP�ڃAa����~��|�Qc� ��ŗoG�{��(��8�1������/=�7�(���d! ��s�J���2й79��)�A9ݝ�}�S�(���ݵ���w�����I�ۖ2bY}Gv g]�X��&��U,!��a�>���/�@�9��iM�����O:��s9 Ȥ'�R#�W�DmA��j�-[ t����� �f��x�$�����="� ��Ae�����:~ncs�a�� ���1.�1�����<|� ���_P�5�tߚ>�2~�T��_�1���fA� ��ч��N�M��*P_��ó�bj�6n��L�_�����U����6@�B�?`Ě��I�',��xh)V��N:]����jx��g��g��i"���f��q˻,��Ouj�@U+��Q��'��U�.Yk�5O_�L�' /W@F�� ��� U3�o`~�Yb]^�N��Z��)��ɻ�J��4lݵ̔�����I�( 0��j�0�R�����e��D����_�*��~���H�|Z�p5뤑?��v��0��ɀ��:�j�H5��^ާ*��q&v����%$μP�w �P��J��Q귯?�3n���2�_��4���>'+���>�Hz�{Ws�9@&���Gs���GB���S)24��h��/X��h��T�c������!31�C�)��(��L�G�`��[?_D�*M��� =��ZU�~@�@�YHz�S�����5H;���+(�p�fH<��WH��am3�����Z�>j� /���� (ە?���=��ٌM�ʰ�y3��4l<�:e�֬kǹc�)>�%Hs����p2���|������P��y\�3r�}S�]{9>h4_��M����B{�h��9�����(�촄�@�������]/J+�d���ˊq���ph� r�IN=� u��媢���u�V�f�y�V<��l�pY1��|F���%��[>�O�W��5�^����������8Ҕ�>/O���Z�0�y;���"Q{��?!$=�1�d���I��]!� ��ĝ����p���n}����MI]<��^sa�8�s1z%��H��1N4�/�MH�B��U|`�bk��ڐ%�V�4C� 8��'��%sx��C��:��Gx _Q�b����=��D�Ft��A3��:c$˝���d+/���������m�v�����X<��[F���w�b�&x�tY�"���D�'���v�������]c��i5��;�4\��/7�г�<�;t�����ԻLrŗ����%h��Qj/_���t��,;���j�-�j���\"�h���ff3x������?c��'��T�љN��e��/�o��)��:IjZ�SE�X1��k�T���4��0ܿ�M��#�� m������C��/���S�b&�{�;h�"%f9e��F�p@K%>8���~��Tr�o#�t�'D��+�o���s��7���NP ��isK&2V��(�!O8i�����g%ȝYՓDC/�"�v!��ˇ�$;��)a�8q�����qmg+���'�%���ڻ��M˯�)ZG���B��Qs��W9����r� N����������"��^Mq���ۜ�d�,7E��t��CN@[���0��12x�Ѽ�^��T;*Ь-�fN��&�R^�p��S'LQ�k�Q��yܸӭ�H9�D=ӈ���O���T��$�/����>�Z6.�͢��!��I�U!�� ��)!^p� ����)��D]4p�����z�_oR��"c�����Gc��O�&?�9�X�ښ�Oe�h:(��/�L���̏�bt��6�vfX��W�wX���R0������&�a����[�I1��Y������]0M��:������P]�zZ���^�&ײE~5_�O�8��$�/� ��8s��>՝�a�L�%ϩ3���9{�p8�!9�]�M�ә7<�| I��� ��E�d�*El��.n��ߢ*��w�o�=}M�A��N�]�:RȌI2�ƨ��T�ʡU|U���M¹�0$�� �JNM�r�Y�d_��j�3�X����������ߢ��I +�X�f�K�-G"�E��g��o��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ