Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
7c0538ad209c9ce156c6b44b9e7b3504_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7c0538ad209c9ce156c6b44b9e7b3504_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
7c0538ad209c9ce156c6b44b9e7b3504_JaffaCakes118
Size
1.5MB
MD5
7c0538ad209c9ce156c6b44b9e7b3504
SHA1
f2bc72337e1e580d1f4cb67d6a5e3029bbe86cd7
SHA256
13c64bede9e767993a143c4364f190f0ff1f9df5ea8b7c4a5977fa1e4f5a569c
SHA512
3afbee4d98affddc234b691a2bff5276fa91610c60a1b6d00a8844998ae3324703ca78f3d7a72432fe6df8bcc9af2afb737c45b9d243f01bc72ea9379a27158a
SSDEEP
24576:7Ez0zUvTR3wreg9Bq6qwpHpAzhBQIHeEx5IYkkeA81e+eK0Itpq0ICvxC90eeisz:7fgwyIQ6nHezLQIHeC5ge+6I7qKvxliG
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
EnumResourceLanguagesA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetWindowLongW
CLSIDFromProgID
VariantClear
��C���� �Z,���0p4�C�ߟ����M7_�j���9�0�cN���ߢ{|�"�c��_�a��ܪ������LFd�BŖ*�z�WXz;}��u@�$���ک�\{%ir�9������;�x���%5&u����:�'t�YKN�EV^�b��:U��FR�%V�Zr�HMf�tLΗ�<��u���'f�m�F7��&h�����[`%���ѳ�nҫ�]#k� ��0�}��gL[���6�r0L���������Ǽ1�⧖,RĤ�9��(�Z��#lj���C�4����{��}.����9�WA��r^�� �O��H��i3vWh��k�'��-@���CCu��*5��f$+ g���[�!��vT�kJ���:�)�6���g=�,5�:X}�)���C~bX�M1'��ۀB���Ce�5#C��҄Q�7�^�&?���;3����#����K=�_�Csd2%�p��4G�&Sf� ]�;��A���Rγ�#+[0����F���!Ή�>(!8D�^���0���;&Ü�[k�|E�dT�dB�ieK���w�oa�����,K�Ekd�~j r����L���)r�]OϪgY&�ӥ�*K��f��M�6�o����v���&��S��o�D5�E��ۖ]��v�^���8�k+�F��Y �;�['�8�v'�t�lM߀2��Gm/���<L��mӐ9��ݍ�W�Nh��s����1Ŏ�fK�t>���+v�n(�<��� 9(h��X�Jt�y�l�ϣ��aI�Hr�ŭ�U�v�u�t�Tj��Q3�\���ĴT�{�̦�@�U;�v|�_���g|h��_����o8t��=�D��+�%��./���[����݈��T@v�幁'����Is������{� �������_���f�q)ٛ{8�^���i�0Q���#6���콁?�nji��3�A��{��7<]h�r]��A�ٿq���|~����_E3�3#�Ȃǰ� 6��CCh튍2�.=��h�����:�T����+���%�B#*ZR�:�����OQn�?(+$�E���db��®�ӥ�aHm���b��u����ܐ��+ ���3���ׅ �e����h�V�>��P�ON�xu���r�Sb�Pz���P�)��ldX�)r���O�y�^�iG�_a���,�n��ua�����s�,N��4)xo��9�m�r��Be���~�eu;}Ms��[�B����`�PFȄ� ӓ�C�f�+.�Z�I\W�^ �S`7��2d��#�&B�3���/G�;{p^S����0���E��p������^2��(�c��:�[T�H��X��-\��[�I7���CBf�E��)��<Y8�Ϲ��"+�S� �%_�"���5@{�dz�n+�2?�g[K�_�^�1t���(�T_�VV����.��lwz�ђ~H�(�Gp���ݕ�D�1�+G~����s'�l���1��t5y���D ���a��^o�)�2=<�ͣc1��i��颎zY#�45%�Ƚ�̑����۽O*)�A�����iفI��MN-ˢ �[��� X؇=k�=�*������0�z����uZ��T(��/(p'���v�����u�E�W��F(�zAP,����3P���/��L1�����Vi�M�ӊL�`�����#4�d��#�{��y>m9c7�T��L��i��x���=�r{���U����IY3�j�Ev �0�\��6���{߄���*區�o�%>T��#�r�������p��1��m�y˻�q�փ]���V��v�K�4-9�L�8J }t�J< �h�K+�8�ŋ0�'ȆՒ�V����)�<��'��Ќ gs����P%�.z��jM���^�|�ԩ�é}9f����L.X91���v���b#]�a���k"��g���rč#W�+F���,������#��$�E"0}��� �P �]`�3��������`���@�LĻ]��Sz�7�4K���co 6�2�+ a�Buh#��g6��<�vM8�M��>e6yxBq�K���e�WU�k��7�6���vW睦�9���\����&u��@@!F�X�4��M��P�~�S�`���^ˁ ��l���"Մ�SQ.�$� �5�����U�R��M}��,S)�,���;Ж�p�c��\��Z��T�e�Rz���� ÜR)�]0w1�����U�����Q��<d�>�?5���s���%G"�d�(U1��0(�V6}ܙu꒳����:�������I�V�t�1c�EN��,�+h ��J�qE�"����7������(%�x�v�G�Bu�e��5��UV9/r�(��§���Eb"�� ��ƥ��t SA��J�UW�n�"�V�L�-)�ׇ��xk�����G�,}�e��&ʡ���@W��ӌ�2�NJ�v�m+.cJ�K� �%^'t1�n�f�9�&��هy@ HF��<Z}J��ıE��1, �N�pcĨ����[�3�Jo�T���BO I��˝�����F��!Q��Ί�0�����C����2��!mk>�� p�۳l��r���#�}���j��K1计�����#`��N�)�08jI'��~�.̚�/&�IU����&�����"�Ͽ�~��)絇b<�f9:Yǥi�s�}�xwG��9+�tD�Pb @ۄX{�gS��:���k�J���·+�k2{:��Qلi�_ :}��h�T��Mi�>. �BE����Ct<���)������ʲ��&V��{t��ڌ���g�� ��sv%����!w���nT*�c� ��6�7��\���h�֯ �FÏ�6�M>�&�/m�>�����'�-�^&|�g�p�6V%�$��͋�yB����M����������;��E�K���1E���l�'oN& ��-�E�V�)>�AB�Øe��������]���i�_6��$��;�u˖�����EiC�ܻ�/�m���I)�0 ����{�р۔1q�zB;�w]7o^^�'���%i������{{�x˯��]��umD��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ