Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
69bfa1ddf413cc816d6468cc817a85e7_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
69bfa1ddf413cc816d6468cc817a85e7_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Target
69bfa1ddf413cc816d6468cc817a85e7_JaffaCakes118
Size
1.4MB
MD5
69bfa1ddf413cc816d6468cc817a85e7
SHA1
0a7e523c51323090d98ef5a278c0898c2210d5b2
SHA256
10d04463f84e54c88127f5ec6761f4bad95b6b279fa41da14bf7c4082cf53528
SHA512
a4782de44cfe996d788b701b36ceb4df2c4274056b2155d88849c4ab1a48de30581395a328c85525db05a0d4c4515ef264e8277c50599418173e5efc95ae087d
SSDEEP
24576:iy2TOm8T0/VwNwa+/xZ1F0tNlukjRPsjK5c0irLKJoh25Njn9u5JUbitdi9mEuVY:i7O1Tuc+JrStNluURPsjkiHI2896ng9h
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetStdHandle
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
LoadCursorW
OleInitialize
SysStringLen
!�X����w��w��p����U�'h�8^ ;�+�2'��؇��*Hij\�} ����A�ɍ5Ki�=�^Cu�\cp[pտ��~�Wy�zL��2J!�N���e�v����W�Vw�2��T�YU.Ã#4�N�[�A""*V Qv��#v��a����������B2�v�\��2��g2+k���R��]�v��"Z��9�n�{�O�:ڶp\V �B�=XǴ���J+�s��g�vŖD����U.&@�K�D�Ӗ�H*L-��hX�p6�|�=6NK����D��8} �݈��/�P�E6��-{r��>�M�D؞��R[���r���g���#1�5�T3f���1��J �*؈�@���.Q�4��9�lS)�p����J-y�l%gPׯ ����v�1���U�ܗ7:<��L3L�E���Z<IT��VYrM2IQe�!"�;��R��������y����v�� y `��cr���q�2��e��C�l�����r9Ug���1������T��po� $X�#�~յ���]�chㆉ����>�ѯ�Δ��H�P�� K�wjØ[��:�HU����MZE#Sғ��r�� Vߊ���W{X�:��=;-�z��cg���&�,��X�Xn�SP��Ͷ{���SMv��Cc�xW��S��Z�z5iʫ�@�X���C$�z�i�rW�"Sp�м�0S�0�|:���3��2)u�y����$ �~�_%���$�3�^ d��,�I ](�ߑӦoJB�hՔŚ"�B���Z��r���6q��Hu�㷺P�K��#��}�t����zog֏(����]��'//N[G��2��-+�S���i�� ���r Z�����E)&�����^��,��� 4�p���Ȃ�;�%�gY����l3v���Tkn�2�Y�r�ڸ'�����+��4��O/�7I�>��Υ��F:o�� �R���1%P�|����Q���i[�xZ�z�C��G��K��� u���C�F~�f@2!;%���ڈl��� Ւ��p��7fd����n?�rvZ$Ct���v�k���$ (��f�;�H!W ���Hb��s����<���x�)qʰeWs9Jn�#�D" CM5R�Jp|(мK��WpJ-Q��a��bo$\u�y�^�����Om�D� ��Ὂ!���W�uOjJ��-���5M�<�{���j*T[3[�g�v ��aNUD�f����L\!��X�qF�bT�>-!�\C��õ���5��W��_�t���嫉h�3���Ǣ����֮;G����݁h��x.XY_����aD����9,,��x�'V(?`�PK��Ӏ����4�Z�~��PP�RŽQ�ad-wR������.WxL��.9W�"j[�g�����X���;�5U:�[Ek������D_sk`d�qym���_��d��f�'/n��܆w�<F��{VI�]8�����A���@/Io%%��g����4Θs����4����i����d����^\�9� �@�đpQ�����A��$�Xտ9������Yd�{�7�(��6����١1?��t�G�@ C^k�F��e�H��H�`�a ��v��&��^�C��~f�9eE�, at������ן��\A>�<K��O����l��h�"�bG���<p^���~ ��ؿu��RqR�P�.�t�vk��o� B�Q@���S�+��=��G�����I�k��X���K�w�}=Y�*��5��+XddX�8��5a�g ��|�����U �<,uڳ�7��f�h,`$kQp��}c).G3B�\��ؿi+�O5 *��a���o�_C �����}t�CBjc���ե@ ��bNM�3`>>}e���ꋓZ:����y(�,a��s��mmEC��^ţ���@������0�ld_-S=F���,S2�I��~,��S�c� �t����@�^8��o.^��ڠ�h ��<o��p����I����o |��(,�<�4R+�=��z��$��{�c�MD���j�˛��ryb�A N[z�*V���3�oL|�3=پ�q�3�7�����{�Lj��1�+��:�;ئ*��]{�Ѧ�P(]��2��x�p�����}���bߚ�� ���|)�D�vm`6���o��*kK�Ck����̪�R�q�TZ�K�(l�Dz�qU+bJV'��?��yh>��khc�d/��nIu�Fdt�&�fSP_�x�1p�=��ǯ��Y�"a�����,�^ 3qe�a���2��G�}���z�r���=�'�g��Υ7�$m�¡H9BX �q:�ֹ�%�������C�B��o�v � ��+�����7�I<�ȇ����j=D�O&�U�bSJ�(����K\�����qy����9�}�_����%NFe& s?���fLYe��/�.:��A$��U�jē�@yT&'�ƭ�6cq1Qq|�5���9����EO����K��:/����~ǽ�N��K�X[qP��*侾7�v�h�Į>'�*w����BT�I�RhT�T��h����C�I�k���V��[�Iw"Md������� +�)lB�l��!�{���(�wM�il��M��@���DM��/��a��i�1hccA��bF�KbI��H]��$m�悁�Kw�^Zn q%�3( ,�&��g�"��������x1+���lV+�+�c�L�1�A�z�z�b��" ^�!���`��sr-#%H��q�3}���G����z"��B��v9�҃t���u�x֗V�-��xȌ��%V˘�{ժH��w� b_@ie�q&�%�"�hrF:�M7�D���V��y�ƒ%������_�:~�L��3�qc�WUe�=��:����Ke <e�����K�=�߆/��٥�Z-�+�?��M�B "�mu���e�ju���<tG #�iL�0��v��q �nÜ�&�x�� ��Hka��h]nxѯ���A�\�B}f�[�.�ki�_L�¶Y<p���QR$�h6?n���g�ԁi(M�BOX��h81m��S�NY��vf6�#,5VF^O��G^��@ �5�З��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ