Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
853bce307e436409024ea4a6105c7f01_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
853bce307e436409024ea4a6105c7f01_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Target
853bce307e436409024ea4a6105c7f01_JaffaCakes118
Size
1.4MB
MD5
853bce307e436409024ea4a6105c7f01
SHA1
515cd1c3ca7f6b9c99b443d91a7abd0ed5823b71
SHA256
13f3f340174ae67834f73803bfcb8a64607ef620e51329493c9f37d034cc3102
SHA512
39ea04ad848b387fe9d7b478bb400b426d5cd95a9a88f165d0ab13d653ae5df13097eb43bea515e196edbfdbf1e8dc035d75d96edbb5be057f2a0d40b2de463b
SSDEEP
24576:N5z0NyANk0djCaxJ9g8TFbI3Rsszj79Lns/Q3oQLghx+SQpUR+D88YlKcD/CoeBt:NyNyckEWagIIhsAFLscLghxNQiR+D88T
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetConsoleCP
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetWindowTextW
OleInitialize
VariantClear
ޝܾ���.�O�)=}��)��&D®0Ν� ΰ��H�A���ϼ��(��{8�u95{~"@e{��`H�8�o�9WD�wx#cƊ8H�?h��m�S���B=ʅ17<t�)Cׁ���V6��6�5Y�w��(�`Y������(i���������7����J�M�@�Op��_�BD=v�Ya�n����-�8G�O�Qb�%��_ؼ���/��$����I�+�g������gv&��Z� "���'R�hru��/�U�Ď�s�ClS<Z:Y�/k�aN��>���H/!�NU�5�n˯�q^���<�`�=��<pqQ��c����ӻ������2[�S�����/ɏYY��^"j�64tFJ�d�/(�[���"s��5Mה �Y���37��r�=|�qc��O a�_0Ё4G�x"�H��Ŏ����?��*��%���Sף���Pb��/e��V:��K;v�Yp�M���uI��.�ȸZԹ���� h�C�S=#ܪ�.S"�~��M(j\��r$:R��H_���e�;���^)^�%��H�Q_���f���e٨���K�V�vfA��ʰ��Xu��C���m6vd'�O�����g�HN�����N+��>d���ޞ��@j��-����Gz�s �t"���������/�[�Ѻ�'�բ�@�V���zw�����%t���R"�Y��� ;��_�C���Q�۠���K���q&2����������� �s���sH��S-ֈo���[K@(?�g�P���|�;���c��� �2T߈�%Kz��E�Ϙ����[�(���#�n9��9%(k]x:=�|a���5z� ��O��(���1�L��`����� ')��iB�2t䏭G��W%�e�ۻD����N��k�x/�#����<=�X�)[��d'�~��s8��f�eg���49��t���_�VNb�u�(��1���Z1R��K��I�_��e_Z���V0W�.�o�5�QB�m$ξrv5�~oh�c�zm������$��Mk��J! ��г���}T�_�^X~%x(��� �6�[rs*[�;��k��'c:��m� 3�.����ה��mg�}�E��+����� C��k�\��g��gt���X����!E��ڌ��D�����B�R�5�}~&���" 䶨���i�&v8�� ��'<��hHz[�532���7{���� \�t#.��(����&�DfG�1�A��y�T���r���)������T\B��QM?Y�2��E����:Ⱥc[�Y��M�����C��L-'�Ɛ�/?�������5�;��>*S���.3�p�a��ȵ�� �'G����h����`:#����fe���ȕ��+����K#O������Y�ƫ6)G��i�� >�m�(�<�oوK�����(�"vÊQ��R kr��+��d�[~�q$|���R0�I���P���F�%��M�0��^*��`�hJ�ۂBtCB,�u���~0�"�mm�p�Q��5A0.�~�|]@~���h�{���a�n�c���ː��I��/8�0q'8Za�Q0�|���(�H ��E7��L�[_�:�����@-ϴSFYR"©v��R�:@W�`ܺ9����eՆ�Ş��2���D Tϗ@<S����( R����;� �zu�/9���0"f[]ۤ�ضiH�Z�;����%C+�ќ2D[�W����%�s��aj�|77cՂ7ǵ6�D���ۺ2��x�U����{�������=E�t�B5��Q (��j|!�*"�=�3rE7�Aw9C�)l t.5_�g��#�M2B��>4\�|J�E�Gx�I#� s�<?�b#�C�<� �k���?_�k�Q4�y|�D����O��g�s¸�V��$�TM&\�Z4��S��%�2Fr���jJ]^d�T�W���ѱ����d*$Cp&Oo�Q�o�M^i��@��-O*�������f��j������E#���&�V��K���(�/��w�y[����az�^@q\��]��n�ъz���YwV�V�k)U����������&?Ix��y>x�6�\He��0-N���8q ��J��YS�6i�B��:fn?ҥ���5���絢~���vd>���̢�;/{=�6�HIB��<<X5Ұ�0%o���d�3t�4�~��V�х܊���4��{k��@]lD�{ ���*w7G�eS�˼2��j���c!c�����G���ևn(�h�nR7XJP+:��3e�}*ia�i� ֈ�s��l�.��:&a����.lRϓ�E�/(�18� ^�K��� T�wѩ ��!YO�����T S�]���|s�]����Y��{��2�Nz 5W����(EWB#s�%�>��{��R3����į��{��;j�З�y���\!c�o���|i:�NF�G���@c�8J�:!^&d�����s���!�Q~��Z�����}��v� �� ��)ӶNi������i��i!zIM�=f�qP�P�F���$�M��q�v��%U����cq!��➂�����)8�����c�H=J��������ָIϢ�ą�����p/����9�?Q�1щ�|K��k+y���D���[����G��9��b�:� ^��oO8��B>Pq��\��]�Z�Y�����7�&���ۉ̪"��������ш��@d��i0ij�٢��n�~�B%]D�����y�~�V���}��F���\��U�d���Ɲ�� �� y1P����4���J����+�E��0c)���e�YYf`SA��I(��-J�u�D��Q�-�7�Z{#�k�J�L�u��F���K��D��d�-xpo������X�.i⺮����o�3��4�q��P�;��ت��4�o�q�1U]p���ʠ�+�=X#�.�E��~ �y�M?��]j\x���6�=`�i�T��ɏ}�kӂ�!i������TKȎ�o�,x�my�# @��$�$�a��go� R}n��j��]�{ nߧm�t��)wQ\|��8Q@E8$z���yc�J�J��D���k��>�:::�#
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ