Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
80d7e1d40bf9b295b57b7d7bf03000b2_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
80d7e1d40bf9b295b57b7d7bf03000b2_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
80d7e1d40bf9b295b57b7d7bf03000b2_JaffaCakes118
Size
624KB
MD5
80d7e1d40bf9b295b57b7d7bf03000b2
SHA1
184743b13d426f16556a59bb7a1d1b972622de1d
SHA256
164b8a2f47c088fbab1311d36bb83abd6304411deb02c2ce65b9268ed4b32731
SHA512
5121e4fc18f49cb9c1ed52e179f6b6d40c33a69b024d3b33d01a40b0924266e04ccb9a11c14b542b615c075232afb306e3b1101b6071ac24bc2223a7f5fa9476
SSDEEP
12288:6BFXn8yAhurLxWQC7rfe37sdFybrOVJ7p2LMcf1:GXnEurLxWQCClbiVJ2f1
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
UrlCombineW
StrCSpnW
PathFileExistsA
UrlUnescapeW
PathIsSystemFolderA
PathRenameExtensionA
PathIsURLA
PathCreateFromUrlW
SHRegWriteUSValueA
DllGetVersion
PathSearchAndQualifyW
SHRegGetUSValueA
PathIsDirectoryW
UrlEscapeA
PathIsDirectoryA
PrintDlgExA
GetOpenFileNameW
ChooseColorA
ReplaceTextW
ChooseFontA
CommDlgExtendedError
PrintDlgA
PageSetupDlgW
ReplaceTextA
PrintDlgW
VarR8FromI8
VarI8FromDec
VarMod
VarCyFromDisp
VarI4FromStr
VarI1FromR8
VarI1FromDec
VarBstrCmp
VarCat
VarI2FromUI4
VarR4FromI4
VarDecNeg
VarDateFromCy
SafeArrayCopy
VarI8FromStr
VarUI2FromDate
GetRecordInfoFromTypeInfo
VarDateFromUI4
VarI2FromUI8
GetVarConversionLocaleSetting
DeviceCapabilities
PlayGdiScriptOnPrinterIC
PrinterMessageBoxW
GetJobA
DeletePrinterKeyW
DeleteFormW
DeviceCapabilitiesA
GetDefaultPrinterW
FindClosePrinterChangeNotification
StartPagePrinter
AdvancedDocumentPropertiesW
DEVICECAPABILITIES
Arc
AddFontMemResourceEx
OffsetViewportOrgEx
GetCharWidth32W
VerLanguageNameA
VerFindFileA
GetFileVersionInfoW
WTSLogoffSession
WTSEnumerateServersA
WTSVirtualChannelQuery
WTSShutdownSystem
WTSEnumerateSessionsW
WTSWaitSystemEvent
WTSSetSessionInformationA
WTSRegisterSessionNotification
WTSOpenServerW
WTSFreeMemory
WTSTerminateProcess
WSAStringToAddressA
WSAAsyncGetHostByName
WSAEventSelect
WSAJoinLeaf
getprotobynumber
WSANtohs
ImageList_Remove
CreateToolbarEx
InitCommonControls
DestroyPropertySheetPage
FlatSB_GetScrollInfo
PropertySheetA
ImageList_GetImageRect
ImageList_SetIconSize
CreatePropertySheetPageW
ImageList_SetOverlayImage
ImageList_SetImageCount
ImageList_Destroy
GetLastError
GetLastError
GetVersion
SetCalendarInfoW
LoadLibraryExA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
�w�]�Z�k ���O�O���)%�- ��r��d�oR�=6~��1Iq�O�dѴ���X����%�(Ĭ�-[ K�/b�ך���sA �"�����q*�\��9��[�����T|t.�f��^��Gyme�1%=͓���Q�l.T� )�CS��ډXtDX���]�e�)��A������c�I ��E\=���C �O����>b`s�Y%�|˫��(q��+D��g\�,�M:��*1���&@���ڽ�k���Vqߖ6 s����r���J�o��\���s�Pƭ�윇�Y�]�8:��\����lO��)����C+�Lg�����\����!��<���4�����u�p(odtÃ�Qd}��x�R����ӹ,�C-l��b2�*���'"�{x٪&0ḿw���yϘ��j��e}?B��_"��y���?R��f1���)n,�`��#,�4��8��~����i�5��U��0��$ |���2��#�3]��j�jǖ8``�_�ҨV�]t0c���Wu`f��[�������[�S9��'s����ޟ�B���"�P�5u��ն)Ұ�*Bz�,�R!�,�m]f`�B�W�NR-EL�:*���ٌq�-T��d-��`Gn�&n�6u2�i�Py8+���d��"/ч&��4(R�x�t:��!g�O?������9���L�7���-P�#/G�*,�C�F������%�$Mק���s���DlL�]�����z�'�j{��p �w#�QO �l��ws��m��r`{F��p;���%���QK�B�\ߞcކ����r��x� -�Å�X�+��(�*Rq�7�t+��Q � I#��K�N�i!���C��:Lq@@ !3aٙN�{�6<TM����z$r�&��a} ��8�,��8"��-�Y��$3 5�뎬���<#�dbZ�A��}��i���8ݙ$K�� `2d>��� �~]��@v�hɪ�����qs����=�~���G(A��Y�=k�۪�m �"ψ�I"['��D -�l.� ��Q�&`%�J�����>�#��,�����,���<�H��L��"��_�GSX7?�d�[5�Q����J��Z�3��A����!�1�w��t�L��c��| �?��Rޜc������%Y��^��T�N��ov��L�}��_�Dp},M�Jh��a�3��^�g������d{��U���N�}�E:6�`�`n�����U�<�g��|���4S� �8(�ۯں��iT@��:��,��Rl&��$��C�d3.��+�U&����\DH��� n.��c���h����a��s�]˒5��'Jh�6u�>F�0ߌ"n���}���9�k��jK#��Q�g,�gZ�d:r��N�sl�k�j��A���;��������/�S�3��(�`����As�E�e*[�|��u��6��L�������&6�M_�LuH�v� }ݔ��R���Tp!��Q���i��L�߁��o�|,j%�'E��4Bx�\��o��6��P���TN������ڶ_ ��&��0n�Y� N�H�{��1������u������~�F$Q�z.�t������� 1�l�%�r�#y��5$�@��T�K���.x���4��v��=��2��=���)��|�:�S"�%����pl�5�t>aBC���@���c�y(�۠]~ъ,0�����q�%�o���7�I(\�x��Q 5�+�,n�J\�@!�&��?�OE���~9"��*JZ�8h��C�B#=�iҟ�{`\�(m`�k71�`�`w.�< �3 ��E[}o�[F�7{����}�a�FRgI��Xh�ݓ���d7X��e��)~cR�� .�^O�M5�S����/�N"S+8��ֽ&����#K�'I�[ �p� �7���$�AQ���y׀h�^4t�]�{������K��md�?|�>��E ���L�÷Ix��r�}��[Jf���|;)�G�\ ��)<d�m�h��֏6R�F�!S?�\��C.�U�nA;F��6��4��T[�Z�^�L��n(��z�z4��`�k7��,X�� �����pn��DJ9�ʄζ8��V�R�����K,c4��b(ڶ����:����0?�$��ݍ�䖺�(T;�_��%�L��פ)9���e�گ7�$���#��sZ���P�-M,�%�������� ���#�_�1�Z�@�_�����od$r�.S?r�L;N�r1J!�$�����7�P�������J���D"��W�"W���N��ɲF�~,���ޔ�V{������T�.�L�|�$�m��A�mJ{��v��d ������h� �T$�s����Uy�(�L�?0����r�#�ڝ�}���'ePJՖ��K��@L%��c/N����iYhu�/� ����OB4�"qR����{*���� �����!��5%��CQ����PK�u�٘�Dl�����a�b\,�����מ��{_m![p��CRG���������f�}z�ޕy�~2�ﶋϷHz?g���Z��6#�du�}1<ΛlL5�Fހ��[~l���&�|��a8)G�����nؔ!� ���X|+����q)l�F���8����A?�n]��T�}qS/�̺j�9�:�<�Li!eQ@K�X�u��AWU��N�9T� [���U��#�N��E�d��HڽOݤBitXUv�֚�7ܜ�)��%�p��犊J�O/�%p��d����s��M���q�t�T���֏p��+�͑OZT�먤��>�I<��9!~.�������[RwS䏤���F��iO*�o���::^+�l�8d�7����eZze��n��-�Cs����4w�=�'��`��3�Z<?�˪�`��g�cR��>J���H�HB��jj��k�÷�s�� \����2�7/���+��5F��$YOh@j�)t@�5Qo�c���U[�d FJl�f �X����C�����%�'~�g"Li>�Rt��*h��\�l������z��S_,T'z��,������6�Lt׳'mW��^.��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ