Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
810fddf99bdfd9481137bed7bb759d2c_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
810fddf99bdfd9481137bed7bb759d2c_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Target
810fddf99bdfd9481137bed7bb759d2c_JaffaCakes118
Size
1.5MB
MD5
810fddf99bdfd9481137bed7bb759d2c
SHA1
ab3c54a716ceb740f494ece6cdcbd3330cb21f7a
SHA256
16eabc710ee98be629e1e12672a692b3ae1661ad9a2f52c68e09aafa9ef7e0a6
SHA512
a5a9f57275727915b59e6392cede67e4510f919d318cca3af58c4cb8d56a5b10836bea2fdf3d10cf337dddd9f8e3ce1dac5e22d9c88b178658bcd41f0fee988d
SSDEEP
24576:FVloLgYloGkr+HJ9Hfh4fiMADq7B8NYY10UGJgCFHlTx33zd7kJvqNUD5I6WJVv:bloL5l/TJ9HfyiDq7BrYx2vDRkJcUD5q
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
FreeEnvironmentStringsA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetWindowTextW
OleInitialize
VariantClear
��#�X0� |s�MZ%8��L:�e7q����J�Q��6�û��.r���"��`І�|�fܤkD��7;�'�&ϫ�|��{b���Uğ����ۘg����FU����� 8��}m�t�4��_w.��K�s ���{�e&4���"�&�I�a�D�ٔsL��OY�&t��6^�r�4���PfR��#�lN�y'/��3?A�s�{z�{�+�An�]i�� ��Μ�t=���3س�/�:��Ʈx�2�"�S��R?�^���w�=Eeu�Uً��!~Z%��gL-�j���9�%����]Y�u�.5Z�"�<��4�ພ��Zq��ւ�������z�Rw(`o��O�jʼn��Toa��#G��x# :����'�����d`:i�/���I�.T=d�zC~��M����y��SE�2OF��η�a�I:�^�-<s�3��Έ7ֶ=��B��b�}���w�+��4�F}���T�͆L����F�>_����X����vf�w���iJ����y�"��Tm�aǐ�`?to�Rۏ��>�F6�T��h���:+�~�B��(��ӌO+,���?�v��F��K%u��������Fϴ�����8DA 1c�H�-�-�\��w�Ƹ�G�y6b���p���@��n��>y}�x�u���,$��?\��lӀ�,�l��|F���z�)*���k ���d�}��K�T�S�y�j�7�����=���mΰr�q���M���$������8�]m��/ڛ�jr|��z,s�kSN���������5#T=N�j���-U�[�F��0��纒KFIm�S���|��(�I�;C�X���:��m�*�9�*P5f�N�E����Ti;/��l'��T��j(W>X�u�������b�wn���{����=����qȠe��D�˃wN�+����x���Dbي|�5��Ԙ��Ï�-����*���f������/����s�i,k`G��ʥ-���+W���64v��5��e�����A����T)#�y�G�1 ޞ80��yj�j�_P��)�1 4l��u� �K����%r��L�*���Á�] ���pW������h��;�.쎎f4K⽈�*S��5n���~�Y*���l>~��*)�i�.on�>��=�i�� ����:��������_e�����_�̥|��%.#5"}��n���aO]JlN�ź���#uK����0�C�lu�R�hH8tc�n�9Խ,l����E�<����ID#���j����w"��+��!Tө!�xCaX�����G�.?&��u&8�(���ty��ͤ��*�9DA��mn�V�Oz;$̋*h���z�;W|��q�R���G��d�!'%].�H��/�b:D.�s4�G�I&@C���gf �R'��g�,�-��%0CÏ]��L�D2���fLCl�o�W^�.k�N�Y*��)8��V4�ȓ�_Z9�1Uk}���K�J�&�)[�6P�u�����#��C�I�Z�2�p��\��j{2�����b��14�M��Y���w���*Ͼc�V�A$�`�������Z����H�&y�%Z�����@� ��V�Do�'aM%�>HL��y�ʆ|�bt�Ңߨ r��"1���'�en�����x�m�Wm/ڳ(�Y�ܙv��.��%��pT�eK qd9�����S���)������������&)_��e�>���Q_�\��j�j*CLZ�Kɒ�_� n���UVt'�-Ox���j}<e�]�2�����lvx�$V'��L�d o�n5'�g<z�>/@�{t1C��x$��j�2欎LF���+W�s�JOĐ\h-��t�B��3�?L��gaq�'��$�QY}CRיo!���9[*C���K�#&�a@5�&��K�0k�����[��̓߁Ի��(���2Y�'}H�-p��x?�y���N�fl_Ao*�w�e���iߺ�&_�k�Q)ʾ�⅏����C1��l��Aleu��`��{��,��6���a ��� �`ŕ+_�a�����kY�?F<�H�; �V�}�!� ��Ъ��������m�o�E�īcW�4���*�$4���Pݭ�nMg����&8\��ކ���ޢ�I��:�%�!�}nr`��<y��OaO|��S���kY�&S��H^�R���'�N O�� ���&J���q*�Vj\}���W����o,��=�ЌZS���hd>-ms�0F]q���[M���o��+�s���R ����q[��� ������+�|��O� �y��������s T�*#��!ET�9Z���)�܈B����E�,70��˽v�e6BY������3 �]:����9�s�ר�d��U�n���K4%U�Qn�-dU�* ���[(mz.#o�YR�L7P_���㨔<�ʺM��V.�[�OY� RE���m V�o�]?[�I��ث��5K_ort����.�2k~ �x�s)���� �t� � ����L�Fƃ!�^Og5�J��M�2+�5<�7����c����1(1�:����k���,�C�\���Oݑ���1�T�A��2c��>�h�����+�B�Z`zف')9��FPjfft}�<R���C@E2'�@8���H���\�_y� �;_)v�1�`�N6�C��lh@����F_8j]Sz� �;bq��_,����m���#� c댂���<0n���9� ��ΟT����\a����։F��cpb���e�(��ϷF��a��$��X}9a*% ��d��x{GַFDI;Ym���n�����5Qrw?~Ww�Ӧ{�.�aBf���=�`|9�w��"J�v[F���"60�wƺhl�rv��Y&��o���� 6�ش�F�^�/zǐ�6$vp����K��! 1���]o��$�������{�&�1���ybҊLN`d*@�Xm v�R��s�d�K%�.|�,��ʗ?��on���:����t �N��+"�N�D9�xm�$ߪ�I�U���_&�<H=~^��d1~���-QR���t�^�\�E1x���/U�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ