Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
80c0571f7628139277ce847506c216b7_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
80c0571f7628139277ce847506c216b7_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
80c0571f7628139277ce847506c216b7_JaffaCakes118
Size
1.4MB
MD5
80c0571f7628139277ce847506c216b7
SHA1
4f7f87fb7ed3f82436a6519186fa487ce61fa473
SHA256
2240aeecea74ca3da7ec73d17f0ef1317d7c2438f2c834ddf4778e5285620acb
SHA512
0e704d6b1c501a97165e6e12a3bcbd3366d6351ccf13fc23aafeb05b1d7c4baaffaa396b819d45b9674f6f51720b8725fbdeedc7904e15e30d4b84a3b8a224af
SSDEEP
24576:gjTNSWp2l3VI16gPHfvyzpGaJHGDweLAargUCU7Cp6qlW5ZCAG9DWVk:gXgI1zX6zZGDw2AyBCUD+W5Z0W6
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WriteConsoleA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
UnregisterClassW
CLSIDFromProgID
VariantClear
��4cB��xmC�k�Rc��r�";>���B����$�%��ܕV:q��K����gAOJ��#��� ������%|�{���bV�s��/sPFc���i��!m���D&9�\���!��M$p*hD�\�e��fY�S���"������p(F ���:�����^��lIBpsc��(�L��7��3r�������j�x��Yj>OG)��C�2L�n\�2�r��j�RJկ�.!}bg�<IAlφ)�1�+0���|EJ�u��D�B�Ag�k�u#�k%XlL+��z��M2�͵ �8 ʕ�����h��\c�Q*+mW�}y\"�W=㩄����}����pc�#�t���f�]�;���b4_t��}#S۶#S�w'�Ju�Ѕ����o� h��'ɺ�g0�ym�t«��N5��?ˊx��*T�x��6�M �x�9y]�Zd�u��j��\H����j�]�����(4��[(5*V��' �SX35�G�3+�n���!��Ө빒�;62·���F\Z8�w�dCD��Ǫ ��9��@�lq6.�����yD&���i*�__���O�U[<���h��"Kb�wAs���iOi;6�j���ó�I�D5B���?j6��?�������R���4|�{�k�r+�o��U��Z�fZ��o���@��rx�ٝ�l� �< �V8˖۴7�����_�'��2 J��mbn�(�>!ZH�3ક�hݓ�{��k�ݾ�,:���àtnl����!����_F's��Iqǎ��!dg�>�V�=rB�Y�g�Q� a�$�#����1�/c���$-��NE�V]��� ��E�����~�,�^�:��1�_�G-�l'����iX���`:��5Z�_f��$*����"��TqY��QܫO��s�A�����vㆃ���uu�w���J���<�˙��5�g0]*T]{h_����m���:f�-k�T�ҥ�/�����,�.!��du)�Ri4Uol�ϯh!�J�D�Mo�$ ��{�� ��7��x��(�lPo���%�����K]��m����s]�LWe��.�yq_����J4Ò��ԯ��h�%��#A6w���� �U/���ޜ#(��Oz,� B����^=��w0�Z�0�4����Ƨ�XU�X�y:7�?��<�%��q���Pr4���1yZ�X`>�?�X��m���@q��8��"DY���P�z����LR8AA�r{)��WY�`�� ��jt�2���Җ�30���� J�-�6!��; �l�ܪ�r�sa]�� ��G ��*�g���~~�Wz�%!ې2֍gGD��_��JaZLDo����ZG���,xwTk+E��B�2�yyC�OJ���gS���!< �0�����c["!1���S��q5B6 ��~A;ߝ���QKq�b��e� s߬ ú����6(��y�)o��*����V�p��r잢�sK꾍��1_ ���X���� F�_^��'T���p��Tka��d�c��*xo��ӓ2��Ϥo2�*�@�"�S��3��27�b�Z��U�����=ɴP�:¹�F��c������2b����� �U)������9N�/��s�+!l�8D�����۶��t +#v��W�(Bwi���a�˯ �u��/����՟���,f�G) ŕ��ɵ�kj��9[��_����H^PN� q�Csegeu>��~$�/�0�!u�l�������E�8W� WF��xV��V�������lx��2��� �g�6u���p���&��*3�G�oD�n�i�5KF�<���d��T���tiDuLWn���ˠ�2R��V%��0�����2��������Ş�Q��®��j��C7k�Us�X��|t��ܢ�8����pș�5_��)͋��x;!���ʏ,�܋�f�F��ej��9&u�x�R)e�>@p���ua%N_=�D�B�j�`=��l��dj��M;�/���ZR,����O��a˓�Y��Ӣ���D�vE��|`�x�i���d\�u-�;6��tbdd���9��BY��b���iNYS�� 肆�����<`�П(�ɋ)��MM[����U?ׅ맸���hX;�jc��C���V�,Z�R4w��w%K�ص�N-���K"dP�--�ސ�՜�Ba����E���\��R_%����:��4Z2�[ߐs�T ڠN*��ߎqR�0��ꖭ�>ᖵ��� ):_7��}�E���ƴ��K�S���|QOǎ�u���j_u�"H�%]2 zT����̼�+�ν ��I��{&�rU�,i�,��rځ���1�ͯ�j�����魺��7���5>}�M#y%�F6��O\��R��`���c^����]��z ��W)i&tn�<P'm��~�BT�%�����7��rH�B�}���ۈNc�#�ۖ�����D�Uj-rvj~�������(3ZHK�#�3Ky�L�����5�)����m��8;�F���D�XT/�V����YͲF�~�|�F�Z��l�KO; P��lE���� �k�I���!Ѫ(��;� 9��PV��o�qs4�� r�6e���~� �5a�[��K_�"��i��a�R���>!c�A@�7;4�}ɱ`=���c��@5Ɲͳ3=�C'�����>W�w!��D>�^����l�yZ| x�w�*�K�:E�pl���o��S��1LK��0f��wu���Ӓ2���ر��t������i7c��}�z)���&n-³��C�5������R��4�+a�-�7�����mV���bC$�^�[���J\|��y����C%K������t�n�V"��r���"����X�R���� >L[��%��0q���&'���n f����uw�f.*E�n�-ms`����}��"l�P.s~�9drD���:�9ܑo^3Ʌ�"y㔗^�F�UIDu�pׇQI��|�1�J��"R���JLH4ؐW $(��f��n/�Al����"Mnb���e�Ό�OϪ"��,�e���gz K�d�}p�fK��^e��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ