Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
71cf1053e7dd0b40c7d4f9d0cde61402_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
71cf1053e7dd0b40c7d4f9d0cde61402_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Target
71cf1053e7dd0b40c7d4f9d0cde61402_JaffaCakes118
Size
1.5MB
MD5
71cf1053e7dd0b40c7d4f9d0cde61402
SHA1
907072ac0933c19171f864cd9485288ce9bc6eea
SHA256
14f91af73b8cb482c2a2bef12a7006512919428cb6b4b08d342570f126f60785
SHA512
e0ca0e914ec23f1f352045d1fdd6e7efbb11565aef62bc976ad7630e99bbae1fb824a7fc0a6b0d7256cd494cdb0b0ffb71f3fa56bc6c3c25bfaa0967f4acb749
SSDEEP
24576:8EXw3CA4cIcem0t43GPaYLCfhqdjkLCOC4dikg+PsX8GBRt7IV8CbYqCqWnbbhVK:GC0tJQYGiYAR2HTp+PsXxBRt7irPCxne
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetUserDefaultLCID
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
UpdateWindow
CoCreateInstance
VariantClear
h��|�͜��U��àk���ÝԵM�u`q��T:LZ��2aū��]P��Л���b�m�^�qȺ)��%��;����ӣ� ��xY_���_%��c]J�׀`ɜ9����k��/%1�,�S�s�J�G����b�"��I������}�$�BQ<Ka=�� �6s\a�a�܈�������oNM�=�US�/�S ��uҨ�/&c�`ny� �,۔re�O��ؘ��7�^)��} eU���s��?�Ql`-.��9��w�n^�5��IZ!'���qc� �A\����A���᭺���:����T�4M�,Vd4�X�k���N�%@`6{%%�p�����Y��-t2��!}!O{�8j�7�V��(Vݿ�a3^��� �0o���]{��ga#`F���j��yDrB}�����6ª>&��W\7}N!��.�a�L e%Իg�l@/V����^u�`ʱR292-����=E�v��KÎ*҃h�X��{' ��K��=�7t�L�5��#Y��&���-=��G6�I9��eݤV,¿(����*M��T��±=�����e��b��eK �K��b��%��0]T���GN+�éF�<�R ^L�Uy9�2�2��E[��(��3�R�F�Q[�$��vA$��I��I�צN��f�r����ot��������('��@�=e"{ �(��r��d�H��z�*Yl� Z�v�����#��ݝ��@��HU����yu�GZ_+����&f���B�R���DP�j����Fq���6�\3�G��lb�\%�W��M` �*��-j �V�;��I�n �[��;��!'[r~D��4�%kFg��;�چ��?����wN� H�}�X�J�����KÄXE���+��N�K�A!��s6^!ۿ�Gx�(&UE2j}����'4��|���C�У�#J�i�4 �n:��� 3�A=�fS�Αg��;Ymmϣ�v�4�}�E�y Yn������k�$'b}Q<*�M��*�B)?ާm��/F���a��խ�:���0��ac��wu��w��K�!�$_�ټ���x��$�ĸ78R�/����e�uN�F��w/z�1G.�c�1R��"�6�6�(d�#1�i{��֨K���u��+e�Bܨ�4 ��*iI������]� �[���>�VJ��x��ǭ�8�͇u�jS3wv��QC'���������gG�56����W���? �n~��&pA�W������".�Z�/�z>���e�؆� c�ba����)�wc�CU6����u6h�t0�����q�T콿�z��4^��-(\(�_�l[ηfV�<Q��"H�;p�+�Z���+����[z���7�J9����m��Q�+u$�9R��>J�Q�+�C�_�G��JR��������@�.QАk��,���M�"�A��� 6�%�]n�V������0��x��ϧvr���l�:9n��<})��~�kvv\�`s�CL@��GG�8��U�0�S�G�"���P���[���|���_I������GQ���+��3�[TF��Y�˱���ex����I�h�Oy����|�>�ڼ��*�WE(rEt|�Z2��`�b��Rj�`FY���,)�#1O����)b�� �����Ul+8*D@��xjz'�4��A�U(�3��n,͵_���8����am�CGds�����d}��,;���`�Xd�/�>)"�Јne��QD0$�r�i����6h@�6��&�TX�o3��$��8�-��|��=����w����/�wl�T:�jh��x�E��Zv�SABF�2(Y(%U��Ap5�l��������v� ��e�\�Y���^2Ţ���;�1��Y# �z;�M���0� ��\��1e�T���ŕ�?�n7����-���ݘ��2}}���YF|KUU��!220���xf���w�رh��S5D�Svg�.j��[������R����6���`����t0�c�"+�$>�:��������"b�bK�ˠ(������&��5b���E��$Ԯ�N&���?a�C�{+����Xb~��-��7XG.��b��δ���3)Ruz߯�Hg�C��4n�ۗ�%��2���O/�P��i Ur�ͤi*���/CdG �<�2�3�-j�K�y ;������~4f��_1l9��{j5LbN���|�����_q�#S?bO���?S��1dr����M���$�@�=�����sO+��HD�§J�gv�R5:�ƪ�[�Bf`�"�N9֯���Dž����k��]�Z�Fͺi�ޖ��N�O����mq�.��]������.�2����3&�5���`��{�y��8R��T�����}�ͨ�^���=�-y.u���k{�����O�SC���ΈtP����"�����֑��>w��2��MI��·���D,�_O�I�Q`"���� 9l��ƈ����4��/�|�]�=�e� ���o�+AgQAOTg��8�LR�t�� $>�i��N�'�p�v���A%��p�����eu�\�������g����Sk��Z}s_�e� ���s�s���Qp48b:B!�90��_�ׅ����ä�Mv��B�3s��I�����R)���0gI)�p�x^G���.r�{��G>�i� X��Re1��+TZ��In6&,#��i��V�l ��Ҹ~�x3S%>5�w ����:��m�(ڞ۬�]�?��~d�rڮ�F$I��iڇ�O����>�D�d5�;5���w�Y�_\��,�&�O���tl�z��Gʊ�;��n2 � (��ȮT˳�x9]��bQĝW!}X۾g���.�Ss6E�F�@{�T0.�6,(%I���G��6q�e5M��G�O�͒���f�ZbQ����E��sr�_�"��d��e����x����';���m�Lw<�R�w�Y�ݳ��Z�{�jҍ��?�C�)����Oac�=/��TF\o��<�a�`������eB����ruZ���d2��D�]M}Z���B�Cn�Lt,A�`?�}���l��I%�*����b�=�.c�RB�g��HTG8;1�Z�/Mv �8
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ