Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
7b1a067fbcf9f7251eb356c50c539ab5_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7b1a067fbcf9f7251eb356c50c539ab5_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Target
7b1a067fbcf9f7251eb356c50c539ab5_JaffaCakes118
Size
2.0MB
MD5
7b1a067fbcf9f7251eb356c50c539ab5
SHA1
5a7daa316db18901dc96cfd35b11a0465adbf353
SHA256
132c350291c541e1210464dbadd1c7e84dd4e1c22dbbd4be6f70b57c3a72a822
SHA512
e3f7de274a403dfe08502f9a480e8e47983ef02f0727c6b4722f265a8d8754fff44c29ec1cc74196c474c684454cc09f1118f82f00ff935220ea1c653e2341c5
SSDEEP
49152:Q7Ct5+bV9ZTR3Q9GsQYnOTLugnOUkkds1yyFvriGqVEBz:Q7Ct5e9ZNtOUkF1fBHqVIz
resource | yara_rule |
---|---|
sample | nsis_installer_2 |
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
GdipAlloc
GdipCloneImage
GdipCreateBitmapFromStream
GdipCreateFromHDC
GdipDeleteGraphics
GdipDisposeImage
GdipDrawImageI
GdipFree
GdiplusShutdown
GdiplusStartup
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontA
CreateFontIndirectA
CreateSolidBrush
DeleteDC
DeleteObject
GetStockObject
SelectObject
SetBkColor
SetBkMode
SetTextColor
TextOutA
CloseHandle
CreateSemaphoreA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
ExitThread
FindResourceA
GetCommandLineA
GetCurrentThreadId
GetFileAttributesA
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetTempPathA
GetVersionExA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
LeaveCriticalSection
LoadResource
LockResource
MultiByteToWideChar
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
SizeofResource
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
WideCharToMultiByte
_close
_fdopen
_fstat
_lseek
_open
_read
_write
__getmainargs
__lc_codepage
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_errno
_global_unwind2
_iob
_onexit
_setmode
abort
atexit
atoi
calloc
fclose
fflush
fopen
fputc
fputs
free
fwrite
getenv
iswctype
localeconv
malloc
memchr
memmove
printf
realloc
setlocale
setvbuf
signal
sprintf
strchr
strcmp
strcoll
strcpy
strerror
strftime
strlen
strncpy
strrchr
strtok
strxfrm
tolower
towlower
towupper
wcscoll
wcsftime
wcslen
wcsxfrm
CreateStreamOnHGlobal
SHBrowseForFolderA
SHGetFolderPathA
SHGetPathFromIDListA
ShellExecuteA
BeginPaint
ClientToScreen
CreateWindowExA
DefWindowProcA
DestroyWindow
DispatchMessageA
EnableWindow
EndPaint
GetCapture
GetDC
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
MessageBoxA
MessageBoxExA
PostQuitMessage
RedrawWindow
RegisterClassExA
ReleaseCapture
ReleaseDC
SendMessageA
SetCapture
SetCursor
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
ShowWindow
TranslateMessage
HttpOpenRequestA
HttpQueryInfoA
HttpSendRequestA
InternetAttemptConnect
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetOpenUrlA
InternetReadFile
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE