Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
85b4d4090e06384af68259c4b6197d9b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
85b4d4090e06384af68259c4b6197d9b_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
85b4d4090e06384af68259c4b6197d9b_JaffaCakes118
Size
1.5MB
MD5
85b4d4090e06384af68259c4b6197d9b
SHA1
6c12fcaa9d283ffe81398c12b13adcdf887e6038
SHA256
5411a9f0885a2588bb0e208d4005658589fd0b3dd0b962076379fd5fa781043f
SHA512
c8261d667dde989b3dee2f0b9710ee3b498b1e344bb2acf7a24f85cf111d21da06f641d12c1d5b5bb0b2faaa32b0556860ef8ad466b29b77da13f44411321ec8
SSDEEP
24576:uWViLBw/3SSvbuU/4c71NdzcG+VCf/TOWiMLg26KhL9ouY1DwkpWxywSHLIfVX:uxS3/v6z+1NdYtWDLs1Dwxxywf5
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WriteFile
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
UnregisterClassW
CoCreateInstance
SysStringLen
Pe������������`�b����'�g�v%D�%�S���e;}GCo��ݸ��±d�^�!� �����?]"e?��]^r��r��N��Z�_c��i��sPLo�@� ����={أY�Wv��A���>�2���XF˖ڂ,�E�X�#�t���AHyү+�U�������w�3�+ �1z���ӬS�j'�|RŢ��Y�J��A뺥f#�(pU�Yb�6���6+�μS�[F�ֺ�~�B,2�5a�<Y���n'���Q{�����P�����l0�N���Z��o�ؠ�����_3 Yh�x|�+�P����@�*�bC2�$��\;��0N��ډ��+ۓ���~�M�݂݀���6��VZ��ƿklbr��hN���)y4B�㶑�`�8&~6*���0�UVc� qb���Ƹ�F���*�F� ��籀���B1Uz\��ֺ ��3+(��uP��`�p��I~�Ȇ,�/*];TNB��xj�4 �yGO�1D�z߂���VBa��돤x��%��H*LĄ�'@�X�K��D;k&s���b���-E���E�[ξ *4:�X�cP�5N�٦e��ի�P���J�(��Y�`�YɊ �����g���z?�q�W6m@�+H���m|���'�f�i�tr��uO�������@z��St<f�l��Vĭ p�x;�&���oo#���oƥW~���,M�h��KK{?W��c�4168�O�}�{ ��>�NX:E�&�o�.l�؎��q5�d��U�s�T>V��]|?qx��W&�B:Q?N��^l"�v��k`�C�,�E�́���.̉���ݚ J��}����J�C鵷xڀ��}�A�neL�����+�r����]/i_���R� 1a.����8���H�K��{V��X��GRpIM�wlN �%ᒙ�,��x��D��qB�B�������f*��DZIM����,�r�]�sB��l��k�)��=�ϓ����Mb~N²�<5��J���߾F�V+�k�Rnn���Y�-)-������ȗ�`a��TAA�}��7Wy��[���bn�'�=��(�pW�x��IW���?����$��u��$@��l.����UT3sO��E��K�p�e�ES�� ]����n�+h�24�����+ x�sr��0�ګB`/�R�n��u���`���t��t���sޘ&���d��l@"(J��"�E�����,O��,���/�y�j���k��qx�7l�A����( ��Gp�A�} �Ta�I<�����ks���������C����2���a�:vES�4ڭ�8�����V���T��� �q�%���j̹�*��2��i�V��}4��a�F:�i>����4���jֲcջ;���y'�W�"|�AT�G��Lߊu͖��Hͱ}x3���{��wL��u��*��)���O�U(p*ݤR�1Xx�y.�C��.P�I��H�\���i�J�"��S��(��1Bf}�*\�;mj��G��ʯϽ�����o���CY�Z�|L��z\f����^���;�RBfm�-�LӼ�a� ��*�o�P<��˅���j ��"=�%TK���l�;�A��;"�A�s��ܷ��m�����?���`�������;�k !�<�z���{� ��\��b���y]��EG�% ^�|Ǭ����!:�ź:I�.ϱ=�Z�[��[e�\���$O��K����)�N���~8��l����%�T+8���P�>��װ4|6$N��C��V��Jυ���x�`z�ݵ�l�R��VU<r|��0�j�9,�ꡩ��p�y��-�z�*�j��XW"W������S�C�b���? �o�� ��[�(����4�CZ�Hd���� ��0���N�6Gv�39iހo���/ /C���N"|���b�3?���*�G3���O��芿����i��:y� ��-��O�]� Q"Ѯ?�m?01 ɞ����f�{���@Fx�:��ۢ��;40יX]��`�� @��Th낆��,�}��i}���W��A�F}Ji����N��:�^��>��I�- :)�����U�H�M�d D>l��W�~o��/��)�� �����c���[ ���9 �2 $J7�(���4���(fl��֘h������>éS��QaD���9�4�.������W�F�$���{��dj�d������`) ?��[f {��.I�#�#Y�Zjh�T�벁�N���6��c����=X��[K���H��Ezˏ7:�G��N(��>��K�j��p*�����ձ9C(��*�5,>߆D� :+A)�72_�B���x��r��!�ާgό?�Xq��rm������I�����j*˔�D��15�Ih�4�#b�5l4�.$B"�:�a�V�K *o���V�6�ӓ9S��d�[��k��J�ng���w�s�����|<�n�Yo|e���6�w�3�Ɲ��(���d_0&ڄ����)t��/|��c��(�}q��r��eXbNre���_���M=Z·��9���C��B���dz���E�8�� �XܯRZYY����bAb��Nb��tl���� t�m_3\)�ޣL���#�\��<xnj�����I��1�A���w�*�I�7s�}ѝ���/���������i���g���M2S�Շ�Ͻ�Yg�T_H�3ZƕQ�������P���1�� ��ll��*�����f����S�]@�!�#YÔ�yh�p�����`��O�����ԨSRf�r�Ѥ�B�C�'�3��0]� _�=���i�oh��b���t�j_��5ۚ��bK�(Y��H�t[�g�L��xT�xE*v�x������n6�|A��q���-?���Y#ILh���J-�uuS���p)���o��.8��p~8�nP�o+o�R�1������li��K�����~l��[����d� 9lC�ƓHU�JX���]9�Mu-̬��;���������Alb�&�4�� ||G���V�!��X,�o}���VaIK�cQ�9��π�e�?
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ