Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
5e3476a3d123edd6607b3eb77210aab4_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5e3476a3d123edd6607b3eb77210aab4_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Target
5e3476a3d123edd6607b3eb77210aab4_JaffaCakes118
Size
694KB
MD5
5e3476a3d123edd6607b3eb77210aab4
SHA1
733662a793ac1d2a3868714defe45b05fa7007cb
SHA256
16913c5b5a7598bb27ab261f304bacc4dc76e85f7cee0c7db9b5254dd2f2974e
SHA512
564eea8d8c3d646c6fdf0390cebde4c9cc41893f7bf1589b6664fc0c11d13aa91fd57b23d76801053c8103d8229ef12b4a9b442c8201b423efda020f1f1df131
SSDEEP
12288:itr7XPWTjPrOoFGpMYhRf01iMWO2IEGhQ487un+E/A7sO61dAGz:itWrOOY7ff0kzkR7mGz
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
lstrcpyA
AssignProcessToJobObject
LocalFree
GetCurrencyFormatW
GetTimeFormatA
FindFirstFileExW
GetSystemInfo
GetConsoleOutputCP
SleepEx
TzSpecificLocalTimeToSystemTime
EnumLanguageGroupLocalesA
GetModuleHandleW
ClearCommBreak
GetTempPathW
EraseTape
FreeLibraryAndExitThread
GetPrivateProfileStringW
TlsSetValue
PrepareTape
CreateJobObjectW
GetACP
GetPrivateProfileIntW
GetSystemTime
MapViewOfFile
LCMapStringW
SetCriticalSectionSpinCount
EnumUILanguagesA
WritePrivateProfileSectionW
SetLastConsoleEventActive
GenerateConsoleCtrlEvent
GetWriteWatch
GetProfileStringW
UnregisterWait
FindFirstChangeNotificationW
GlobalUnfix
EnumCalendarInfoExW
SetVolumeMountPointW
GetFileSize
FindAtomW
GetLogicalDriveStringsW
GetStdHandle
GetThreadContext
WriteProfileSectionA
ExitProcess
FindActCtxSectionStringA
BuildCommDCBA
QueryPerformanceCounter
CreateTimerQueueTimer
GetConsoleFontInfo
lstrcmp
CreateEventA
QueueUserWorkItem
FindFirstVolumeW
WriteConsoleOutputAttribute
OpenMutexW
SetFilePointerEx
GetProcessHeaps
VerifyVersionInfoA
GetFileAttributesW
CreateNamedPipeA
GetSystemTimeAdjustment
HeapWalk
GetModuleHandleExW
LocalSize
CreateFileA
HeapReAlloc
SetEnvironmentVariableA
SetEnvironmentVariableW
SetCalendarInfoA
LCMapStringA
SetComputerNameA
GetLongPathNameW
LockFileEx
GetVolumeInformationW
ReadConsoleInputExW
GetConsoleInputWaitHandle
SetPriorityClass
Heap32First
EndUpdateResourceA
GlobalSize
GetVolumePathNamesForVolumeNameW
DeleteCriticalSection
FormatMessageW
FindNextVolumeMountPointW
GetVersionExW
ReadConsoleInputExA
GetBinaryTypeA
GetNativeSystemInfo
GetGeoInfoW
TerminateThread
Heap32Next
HeapLock
WideCharToMultiByte
VerLanguageNameA
FindResourceA
GetProcessVersion
GetProfileIntA
SetFileShortNameW
WritePrivateProfileStringA
QueryDosDeviceA
TryEnterCriticalSection
CopyFileA
GetStringTypeExA
DebugBreak
GlobalMemoryStatus
GetStringTypeExW
IsBadReadPtr
GetCurrencyFormatA
LocalFlags
FindAtomA
lstrcpyn
DosPathToSessionPathW
GetConsoleAliasesA
RegisterWaitForSingleObject
DeleteVolumeMountPointA
HeapCompact
GetPrivateProfileSectionA
CancelDeviceWakeupRequest
GetProfileSectionA
GlobalLock
InterlockedExchange
WinExec
FindNextFileW
CreateHardLinkA
GetFileType
GetStringTypeW
GetFullPathNameA
SetCurrentDirectoryA
GlobalReAlloc
DefineDosDeviceA
GetPrivateProfileStructA
SetFileAttributesW
ReadConsoleOutputCharacterW
FormatMessageA
ReleaseSemaphore
WriteProfileStringA
GetPrivateProfileSectionNamesA
ReadConsoleOutputW
RtlZeroMemory
RemoveDirectoryW
SetFileValidData
ReleaseMutex
SetThreadLocale
MulDiv
Beep
VirtualFree
EnumDateFormatsExW
PulseEvent
FindFirstFileW
LZOpenFileW
AddVectoredExceptionHandler
PrivMoveFileIdentityW
ScrollConsoleScreenBufferA
GlobalWire
TransmitCommChar
SetProcessWorkingSetSize
VerifyConsoleIoHandle
GetLastError
GetCPInfo
EnumCalendarInfoExA
SetVolumeMountPointA
AddRefActCtx
SetSystemPowerState
ReadConsoleOutputCharacterA
QueryDosDeviceW
SetStdHandle
GetDiskFreeSpaceW
CreateFileMappingA
FindNextChangeNotification
HeapQueryInformation
MapUserPhysicalPages
GetNamedPipeHandleStateA
GetStartupInfoW
LZCloseFile
WriteFile
RestoreLastError
UnhandledExceptionFilter
GetProcessPriorityBoost
GetPrivateProfileSectionNamesW
EnumResourceTypesA
VirtualQueryEx
FileTimeToSystemTime
FindFirstVolumeMountPointW
DelayLoadFailureHook
SetLastError
FileTimeToLocalFileTime
ExpandEnvironmentStringsA
GetTapeParameters
GetConsoleKeyboardLayoutNameW
ShowConsoleCursor
IsBadWritePtr
GetFileAttributesExA
SetLocaleInfoW
BuildCommDCBW
IsWow64Process
MoveFileWithProgressA
EnumSystemLanguageGroupsW
SystemTimeToFileTime
GetCompressedFileSizeA
InterlockedDecrement
BeginUpdateResourceA
LZOpenFileA
SetCommMask
FindNextVolumeW
GetCommMask
LocalLock
CreatePipe
EnumTimeFormatsA
GetConsoleSelectionInfo
GetVolumeNameForVolumeMountPointA
FoldStringW
WaitNamedPipeA
WriteConsoleInputA
CreateMemoryResourceNotification
CreateFileW
SetComPlusPackageInstallStatus
GetCommandLineW
GetSystemDefaultLangID
SetTimeZoneInformation
IsProcessorFeaturePresent
WriteConsoleOutputCharacterA
BeginUpdateResourceW
GetDiskFreeSpaceA
GetNamedPipeHandleStateW
BuildCommDCBAndTimeoutsA
CompareStringW
RegisterWaitForInputIdle
QueryActCtxW
MultiByteToWideChar
GetVolumeNameForVolumeMountPointW
ReadConsoleInputA
WaitNamedPipeW
EnumSystemGeoID
WriteConsoleW
OpenSemaphoreW
UnregisterWaitEx
CompareStringA
MoveFileWithProgressW
PeekNamedPipe
GetVersion
GetModuleHandleExA
GetCalendarInfoA
GetUserDefaultLCID
CallNamedPipeW
lstrcmpi
GetComputerNameExW
LZStart
FatalExit
GetUserDefaultLangID
EnumResourceLanguagesW
LZRead
ReadConsoleInputW
CompareFileTime
CreateDirectoryA
InterlockedExchangeAdd
RemoveVectoredExceptionHandler
AddAtomW
GetPrivateProfileSectionW
EnumDateFormatsExA
GetShortPathNameW
GlobalGetAtomNameW
ClearCommError
CreateTapePartition
MoveFileExA
FreeEnvironmentStringsW
ActivateActCtx
HeapDestroy
AllocConsole
GetVolumePathNameA
TerminateProcess
SetCommState
lstrcmpiW
EnumResourceLanguagesA
RequestDeviceWakeup
GetLastError
GetACP
AddAtomW
LoadLibraryExA
GetCommandLineW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
BeginDeferWindowPos
AnyPopup
RemovePropA
IsHungAppWindow
k�!�AK��UV�9̗�J�d��r9�+�c=rd�Q3뷭o��C�/�D�e��6���_�S_�h��,UX�����hYBr�����^�8��;�[�I�����M��=У̬�R���߶�[ n/0Y�3fK���r߈��d#՛@zw-�����F �,:�r��YîH���W;p<+��~P�x檬���Ʀ� �n4�P�3X,��F}�L�2����hE�6��ĭG/8�"I=�&�p���钩���tgS��%����]�cƓ�.;���8[�'�K_���$3 ��U����^C�0��"Íi��w`��WÔ}C&.9qӦ��Ʒ�ݨ�&F-B���ZZ��^w.���C��&����__�����!Yt�X��[�G�ƻJ7���X���*y�+�e�>+��ۀ��E��E�o�$�����ۄ!�;l��x�ГV����Y�y$�$�s|A+jY:E�����gBX7R��n,X?"C�o�98�>v���&-�&zN?�lW��JU<@T_��JH4�9F��~����6?v]�>Ԧe��)wk-��b�������av,rzH�.1`�8cÖr�3V�wTH�kYb�Q�_��H��.���pl:���̠;3�R��6]�j^��t���j��R��,�٨6*�n/Xulb%�q Q"e�����v����5���N�;,)d��`��h�DSTȬ�����\�_�]�&hqQ�md��K��[���|��B�x�^ǺzrǠ۱�:��0�S��P5�fH���z"H��_�~~<?v\�c����%��@�9��}��Ԏe�<��6����%@ý�"��Pe8��(Jb���_�B�������9����I匒9v?�Kq�*z��`O6��E;��'���"'��R�]<A}��y��5�V���������(bD��n���6�;�4Pef�k^�/^n��Q*�&������z��I؎��u���Vw��mQ��+ "�!G�����z�\]���}��j�}��~FM�*<]D0��0�����F���AR����.�o� �=�-n����[�>A��q��&-6+��P�U�3��_��8D�,L���ڋ�Έ���|_`�3&%�'��b��oI&��� �10��3�<C���%aO:ec��VgX���1�r۬���^�{��ږ��� yؼ����;���6�iE��'�i�v�~X8b��P��.$����6��N�:a��]���c�����u�bR.Q�켂����tܜ�v0(�} �3���o��p7#e��Q�lx�T�4��Hj��a�Cɽ&Hd�� �}}P�b>�.���d� BrP�� ���|�� Mp&�:��=gFT�6�~9cm$������J5��7�P�ۼ�eb�0�f�R�_�^< �����?q~��?'���6�((:� ���C3�MJ!!�@:Z%���zb����(U)V, �w�z:�ܧ��4"���(�Q<ͺ��xi���aEe)Q��& ��E�����l| ���"\!�|'3h��j��X��#ў���]�¼Q)�'��겺/��-�S��$;,&D����yh� ���_F�~��[鎨+J��EW��'��w�d���,Y�S�l�8WkE��>�3��Y��s��d��b��ZX+�� �|�tS��Ѝ����˂�d�b���'���3��B?��'>�a-��[k2ZSp��t�<��R� x ��N�0IoR/bi�,�iBΫe����<�֪$x6'62��%�*ls� ���c��k����Zj�=\�ЃC����yG�3�h#� ��X���)!��RƓ�����`M�+�_�^��h�-�v��L� L�����y���^#6���Ɯ�f��~M�ي7�N�c�F^]�1n��I�Ԍz~��_'g�-E`�0�����h��!O�!�ci8���)W ��@�4ȔXS�B߳�w�M-� x��$����q�U �������֗ێ!�F��)������N�x��= fKx�0�.��Q;Q��z,;�#��BA��W��;���O*S{�fJ騒�zㆧG�Cl� �œ��u�܆f8��`A�Cq��GC��:����}��^z��C�����������d���B� 3xM5#���P���-#��u_��|LL�Տ~V+�@DNͧM1g���tr���6�cȶ�r��B�P:Q.��v�Db�Ltc� �v���N��Oș��k#d \,֗�QLi���ȁ P~q�ݞiB�\�eׇ]I��H����Y��|oVO��S���:��i�{�4���j�h�\����8|���QG�q]߮��OE��F��c���őe2C�{Ŭff����G6�)����X������Kxi&͘U\��"�3yCGpq2O�֫}���$�6�������Lm�� b��ĝ[��X�j�DOϟ��� sQ�����.\�&�!O��;��x4� cZԔ�-�jc2�kz�_��Nc���4�y�,��f���� ��F��;��b�П�a}��]�Z��Xr$���m�>��Ղ8 w $1 ��ü�<-��"���^+d�\T�ml�X��`Y�q��[u�h�|�^:��7� ��F��=K^� z9l]Cai��>�W��I�6��eb�*$!Af���B���ˌ����'�r��j��~����m 14w"��K�;c��� �Ѓ�G��A��4�=p����r�N� d�O��`��.B��J��K�롇���:���䃾01˲�x��1�ck���1��a�Iil.�}��v�"��:��V<��*��_�e �d^I��H*cz����1�m ��&�zsrԓ���C}�b�F�-�g���´d��x���j�����Pτ8g4���MH|��с�Gl^��'t�Vv��l��1�=T� L!��Z�O��z��� �2�G� ���×N�7���������`��S�(�#�@ŢPŞ8��j�eN{ [�t4�r�7�U��:�W��M��F�?5�~?ȭ5E���SK���u8�$�Y$��Z�|7E�*�y:�+(���n� ���ey�QY���*���reSt�]jfω�&�,����3��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ