Extended Key Usages
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
5ecf7d65ba00c492339db85856bbe024_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5ecf7d65ba00c492339db85856bbe024_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
5ecf7d65ba00c492339db85856bbe024_JaffaCakes118
Size
772KB
MD5
5ecf7d65ba00c492339db85856bbe024
SHA1
a1b66f4b4e897356f72b83d03519d43e2d2327ee
SHA256
219c702988dc209659c0d5affa826aa8896e02db6ac57fe371608ee906d184ea
SHA512
b4f13e84b120a078ce7d179e37ad2fa9f2acaf3f62968f3c6a4851c3ea7c1175c59d394f820772fae49bd9fca950570819162a267593d9f7c1cb8a40c724fe99
SSDEEP
12288:QVCSFSEvZIZvYrsUwkwxizgPsYmBwolM+e5KLehq/JZZtcaC0fBPsSpBX:Q7SKoUXwkRMCK5oKqBxcaCGsiX
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IsDebuggerPresent
LoadLibraryW
GetModuleFileNameA
GetModuleFileNameW
WideCharToMultiByte
LockResource
VirtualAlloc
TerminateProcess
ReadProcessMemory
WriteProcessMemory
GetThreadContext
LoadResource
SizeofResource
GetModuleHandleW
GetLastError
GetCommandLineA
FindResourceW
FindResourceExW
MultiByteToWideChar
FreeConsole
InitializeCriticalSectionAndSpinCount
RaiseException
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
GetCurrentProcess
GetProcAddress
FreeLibrary
CreateProcessA
InterlockedDecrement
CreateFileW
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
CloseHandle
OutputDebugStringW
LoadLibraryExW
GetOEMCP
GetACP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
InterlockedIncrement
Sleep
EncodePointer
DecodePointer
GetStringTypeW
LocalFree
GetCommandLineW
RtlUnwind
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
IsProcessorFeaturePresent
LCMapStringW
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoCreateInstance
SysFreeString
VariantClear
SysStringByteLen
SysAllocStringByteLen
PathFindFileNameW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ