Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
7b7be5b6e39c62d66ab145390d300f91_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7b7be5b6e39c62d66ab145390d300f91_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
7b7be5b6e39c62d66ab145390d300f91_JaffaCakes118
Size
1.5MB
MD5
7b7be5b6e39c62d66ab145390d300f91
SHA1
d69dd3c7d12bf71028675db62b46f91bc2510637
SHA256
240ba596bc5f0b994fd79df0e7061c274d2f6984991276f4c353730b355f5b70
SHA512
9b3de7433f458582660f7b2ac16dea8013811eb7d7a8f844051afdca4b052b1774abc7500aa49beee1059a68b47d098638d61ca8c6907fee13e23907f7bc9207
SSDEEP
24576:VApgQUAA/EqbHadM7TubGuEv0zPufYDHzuQNBppWM21bECJqhBnV6:SuQSPad0GGuE8zPBDHz3pYM2yCJ0BnY
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
HeapSize
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CreateWindowExW
CoInitialize
VariantClear
�r�ь<i'x�(��K�<�Y!O��"���u�ܿ��96@�4����l�D=O���8~5f�Y������¾ox����KX/*�K|�o��������S "��n�"V�Uq�8�����sl^��^���r�S��->&�� ��/$�� �Q�G���n���W��8Sj�I���q!�vJ�L0>�I-�C��¾�������ښD��CN�fۓc_b/{�`1_7�-&)�(D�,��W��Qv��T�|6������r�Pu��i��i�z\���}7�� ���6�Q}hP�N��W�O��Y��'��Ӱ�UC0�Tw�YE�R�ׅ�Ԭ�~d�Mr�4Iܤ�O2��oq���Pܧ�V������5�c��v6�P�!m3�g� ��N,�7~�E���<%z�N~58+Z�ć�� �9pa,wԂ�T�4;��-�@��EW�����U�������_��a��Ɣ���/B�/=�EY�L��ޚ���ZْJ������t;KCb��/�4�Z�6�QLd�Jg��P3Y�=M�o�8��i��*8���Q�ՒY=T�y�� ��۵ \ME� �3���aqT'mX��wc �9�g�)�S�U�|~[�I"1dP=ܒ���hW����S9�V��k˽|g�U�lN�H,�lei�2/�0�L&Z7���)�[���o�c�JG�㏗�4�l�>s�=���#ak��l�}���&vsׂoT�K��jYe$�v~E���^Y�r@>�J @F�a��F`����'�� HE�'�%i��~>g��fe�\>�T�s ���}���gq-:k! �%_C�Rx����D� ���5��~1V��V.4uE����xa�?�7i�@����T=�ѱ\O@�D:9�b���j�Y|����m�Ү7��� �L�]\��k��Ԕ&�F66�B�)�fFk\����.I��`�����S�uLb�(�\RnAf���mƵ#�m��}���%��|�ѻ0}���I���$��,��p��H�2���3m�0��Xy�bv`��uJ�b|"e6}ǥ�E�����V⪑Qz����;�_�ЬO�ѕ-v�8�X�<+�S�H��Pܾۋh?��#����oW�U� ��edQ Dβ:�(��f��)�����Q�㦁��{?�4l� Y� ��| �p�~��� �\�M�.��VK�0a��_���=L'�EΜ�sB��B-6�\���]���%�0�Zt�2YG����EM3�Bv� &X�(Ʈ�����Yo)�r>Sی��>b�D:�~�����ef�j�u�e2��Nr�O<�R�Bȅ�Ϗ�����|������dқ#L�~���Rtn���N�����ݲ�ƱAf���@�3�XZ��D��MEx�)��p^\Xe2��K�,�'��T�:Oˎ��}�F��K����A�W�P��,�cDͬ6�@Ȧ��Z <� ���="�s�U<��B]��X�6+R��7�;C�zj;�����F�)8@!��J���#$��i▸@]�l0r)���M2�����)��Naf�����|#y����҅�O�Ǯ8������]���[��A�2�t����{�Ws�E?��R��(+���b=R(�@��� ["8��U�\�(���7���R������&vgӘe��GnBY�?h���6�q��L�>�o�'}�>�^ǻW�qbпb����8��_���A�Mܗ��˘��S����)���^���Y�=�'e_��F�aI�'���V�Y8��A�K����v���i����z{J\�@�1� o;��gqV�R#��k�cn�*�M�s���d|.TeK���_��c�Ie+өL@���^���f��W�L>P��x#��ZU��RV�R���6���A�e��]F4aJ��er+��>�&�[�T���T�3k�������EjU�+6��(�惐�h�O/��;�ٞɽ7�n0G���c� ���xT����X�D8英�ZK.�zg�<a��W�(P���l/�p˝�1�;l��G~�������"���1����|�Z��|v��0�͍x�{u�ryA\�:����S}=��X��K1��R�y}<u>#?%G�/�n����9�C{�>���z2����Z�k{,]W]>XbA �U'��*\�.6����2w�aZ���~��o��Z�3���O����|�6^�g�_!���h=��@��}T��`������:e.���핢t��c���c��QU�y�T)͈�����Q�3o�8��Ee|���į��~m{��<�+�a�b���[Hg��p��<h3�&lU�j�L�> �u��(��^�K� 4��nM�jo2�XK۞�S�A>�3� �,�a��o����G,۷�[��x�y�cE�L��hjd��8�Ѭ�ë́ˬ|�Q��ynN���{B���24����&���YQP��;��iN ܶ�u3�=�1�}[XB7�|!��?&G�v��ƽ�Z�^<8�e�Rwq�6��2����|��V�kԭn����5��Zאa�.p,iK�Ņ��ɸ�a=I�5������g5ɋÎ�ɂFPEj�{U�]�5�������9�XX�@�V��h���]g��U�1�����`+��,��1�~���ѵ�{L��1n��oQ�y�"��`����D�n��1�1Y�п&����)� *����4+#L�_��LB|R- ��[ŕ�yD=:"�ʵ��6C���6�:!�H���f1_�����>ez�u�K��ҵ�Q5b�u��J���fw�V61l�Lu� �6�5 �BV"5�t�)f�ZҲQ��@L�Gz�,��v2�����2�s�w8:��q�,��K��(��al�0��Y�K,(?�p�T���z��c�� t�ѽ1>��F�ƞ�aK���-�onYd�P���'�P���@q�#�4����_�˹F� �\1͏P�;r�Сy/��ŚY�AY���ÿ8*3�܅�������E�(D6����m�ضh�ud�3SH�w�����J�n }�r �(+@��N/>��0����=CM���F��9�k��!Vk=���2���]4H����'GEA(5��r_t�LS����
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ