Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
84cfc695e609ff7066656d5af3eb6373_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
84cfc695e609ff7066656d5af3eb6373_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Target
84cfc695e609ff7066656d5af3eb6373_JaffaCakes118
Size
1.4MB
MD5
84cfc695e609ff7066656d5af3eb6373
SHA1
fad884e8d62c691e879fee7525678cd2515e0e2a
SHA256
0479748de1a8b746e085b5df3af93f7aeb869426823a7fc9b9f1efa7ae0e7a1b
SHA512
1a51c6618ca9def82bfb1ff34a8d23022013ebe89753c023de2dff43014b8412a2f7ef8ffeac5143149656a9329856dc9bab51307d472af9e31e90101fcc2ccb
SSDEEP
24576:8ROqrBO5uN7f0eApJ2vTWEoGsSW5LfGXdCNpSPAjN/7siO5i0eViDKDVh:23O5Zt32rWEFMNX7ssbj
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetACP
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
TranslateMessage
CoInitialize
SysStringLen
J_D#����_����B~��Q���ú�*�d�B*���S��ls�^�z+keZ�垻�+5%c�ük����L�7^�������&� �7B?��`��zv�ܖwf��i�P�o��%��Ԍ���'[��uZyH���ܣW��w&�#�b�9��Z��'72�)�Y�vហ��rI&����t��{d��afkdӪ|b�7{3k<����f5v�g�����D_��J�9�H/�p��2�谰Őyr�'!�������R����[iةX�˙k��ߕv ��~�QeeuZWB�����.�$3fھ�j2~>('B������g&�`������g���vʬD�Ff:p*9�,־���\p�)P�������^����,�P��N\`���EZfoRGY'� ���1g�K^_#Bki���PɌ�G�C݇\n6�\�N�xli��{�C�~&4Ўj�C���}d"��C�Z�\F�5(��Z���?+�*�hz���g9����F䚇Ge�U�����˙.�;ޞ����)4�@�a�1Y������@ل����w��|j��� ,���O�Of��~im7]�?�d�A�';��~+��/�'���0)��E����mqi[~� ��������>O�*>�Sk2~� N�D�����ߗ$�l[��5�bYJ�A��Az���C����� !?iRtD^�Gj�:a�O����E��c���w[e)u|RV���G:!H�����Q41>�e� N1���{��v�z��#)��e�?�L��Pd8�3��lߎ��{�jk���o��$�B��8�G.��J5r���r�ҭ���J~a���7Ԃ��r���j�a���:��:t��]B��{�X��|�P�`��1�P��v�Ι����עt����!IZӄI�:�nZ� �z |���^���O9��~�H�7���4�ؒl����'�Y]b���`��+�����;��Z(����=��y+9�'�{/W��x�P>~�k�[X;S���8�H�C������LzMu.[�XE�6o�����1l4�����κ8Q��P*�G�����d�n���Ք."����6w��@�i6����{�m���J�D��.�Uy嵊�`9��d3�!����^�,�^���~�g��`Gdgݔ3_����;� mŭ�z�`�g·c�ݞ}��X�س��8��o� �f�����2��oI��ri�|�@̙7����3��s�M <�e .U�?�u`~�hp�����R�#�g�;%j-��FLvR���aN==5���c�uPZ�� eCE9���� �.�¸F�O���EC@��`ˎ^1�NX�E푕u���0��K������`���e�����L�E�w[�ד��j�h�܂ba^�f��3Ú@��K�^l��ɥ�Ȼ�UwB ��-}B�����~ьf�=x�))��|��\D �i��Yf���r� Q��ªT�6�;~Q��m;����ݥ�����e��s,@���%�LDOr�E[���>��B���~F!����r���kqC\Њc � !�6�WUu�zv�J�ک�7P��B�HN_���h�������]<�=�SWNj���ڿ��9(�%���\��آ5Lj�끎��"�&��߾�JŶoP��ɢk-?�z�"�h��^|�,�*�a�C /B��f���h���d��(�ۄ9i�;Y� 0�Rj_�6���h������R��sw��۰D�>����G����N�p*�s��2�B ���r]���n�gt@^���-����+� /�a�N{>�3��0����$1Q�]���.K;��sq|A�h~�S�����(�=G4��#k�A��2�8��H=��r3u�U��-ՐƢov6�����;ߦP Pঔp���,�%���Z�b�ŗ���̵�P`͓ƑA�9 ���e�O�������A� F���9/�ǣ����^��Lӿvqp�맾\a�۩�wᡍ���$��m�T����Ë�w �)�v!�L��t��y ��㈄F�,9 ��K�(�B ah����(|���)s��������5� -���\���m�`����Eh3�O�Ay�����q@iW��W1�\'��B�n�:t�.�͐9�Rv����3����tV I�իo��*���q/I�d�f1R,�K�\���o������8�F�jՈ��']�[]��hW���5��^6��;x�$3,�;����2W�>Z�}�T!�TY�_z�hI�V�`�i���V�q,�;�%�h���|I�?�@V�,`+h U:��05�xwa�l@_۾�����`�}w����m:��%����? ��oSG#������ɢ�<e��HW6Y���K)&W�+�ڋ�y���%�|Hl�ȷ�;�.�;K�]!��x�8@���h�s�SA����H�CS`�k�(E�ƽÕՄja���0X�J��$$Y�u~� ��Yg�7>C5-�Y�ͺ�8��3��R��i��Y,��Wa��J鼀M�V���$��ڱ1�+"��jK)Z�������Н�r�q~s6G���W��UC����{&�"Q�:�8i<e�0/D�nz ����zbf�0�b�i�K���l��ⷄ�ƼA�f`I�@��܌��Td{�4���^�9(|������v�f>��bc�I�o������&ywe�$�M�����8_���� ��-Н@���̐IΝ:`�@)�@�3�]������_'3gWn�vP�����E�o�D������a���7e&(�V�T��ym<�']����>hP%�U�,�@ 1�X�#��]:&,�ɪ����y�m��_w]�S��������+��3�V5��7����}<�G�bfc���`���R]i�#���|��S�S�p+�u��C� ���A�3x�lF�0�[���b�xWNJ�e-��� XK�^�u��%Ԟ9�6��5ٮ7�dR#���?E��a����u��@���߿l��T������]`�?�X@�y�u��+�ʗ&��Q�`Fv��cv�b��v,¶��%R�z�^{�ڿ Ո�⒘e�� �g�ݣ�������B���/�ӕ�����
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ