Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
63cc7d97be351b8b042d42c0c2bc98a6_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
63cc7d97be351b8b042d42c0c2bc98a6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
63cc7d97be351b8b042d42c0c2bc98a6_JaffaCakes118
Size
2.9MB
MD5
63cc7d97be351b8b042d42c0c2bc98a6
SHA1
e24a1549470847c10e342f7e5b8c1ea4118ef181
SHA256
61026b045b5634b6000306ac77088ad66c634f6f0150708ac76d17c980d691fe
SHA512
6d8dc9e85092135cdd214888b548467997ec4b75a9a12cbb438b620556690d987de737334e628a00c94c44139fe7351459feb766f9682cc18a9b950fccfe95ac
SSDEEP
49152:kC4SKpAHz2VpkbryPnfxdfNZTRvyTySvtjOqe27dWZYIBYaAf7E:kC4nWzGkbInfDlZMlVBd7EZYItAf7E
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
d:\Dev\outsource\JoinerEx\Source\Starter\Release\Starter.pdb
CloseHandle
WriteFile
CreateFileA
LoadLibraryA
GetTempPathA
GetSystemDirectoryA
CreateProcessA
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
FindResourceA
WaitForMultipleObjects
LoadResource
SizeofResource
LockResource
LCMapStringA
HeapSize
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
HeapAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
GetSystemInfo
SetWindowTextA
SendDlgItemMessageA
EndDialog
DialogBoxParamA
MessageBoxA
GetStockObject
RegSetValueExA
RegCloseKey
RegOpenKeyExA
ShellExecuteA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ