Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
88f30153e17802052a6bdc682791edb9_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
88f30153e17802052a6bdc682791edb9_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Target
88f30153e17802052a6bdc682791edb9_JaffaCakes118
Size
1.5MB
MD5
88f30153e17802052a6bdc682791edb9
SHA1
0751a2c6643820f9592af8f7689eb9ea0c03282d
SHA256
21c5f7045a27b0149a510e95c418333475fc5ad73e38d9ee0ebe6f74ec2c30f2
SHA512
e8eeea9479f6f005932d461242d63ab7005c15c0c3be20d9a884ccd972dc3672ba8397bebbeecfee149257d60b0660b65b4e92aa4d682f5e76c5a7a0d5507db4
SSDEEP
24576:d4xr/gi/Z9s2DF/Cd21tC0ssRzHTO5cfxERxbP8SQXfi6N4y5uTNXIyvTqZGNVY:Qoi/zD22bJscrTiaxEReSQXfi6toJvTw
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WriteConsoleW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetDesktopWindow
OleInitialize
VariantClear
�B����C�����$Ë�s{�N��h\�cw�����r�u|� ���\|L���&�vf��-~Om�Iޘc�!ܿ4yG���N���5}ƪ>+�<��"��c�_�(��������]>�/h�t(u�(��\4��c���'XsD���e��1�o+���:�e��7���Z|.+k7�aqv�c�_u3Žקu��*������J2IwPm�-%��[�<DR���Ɋ?{Ԉ��\��[��M�i��=Z3�;`��B��>��If�/�j+��I�6����5 �k�Wl��'Z�PŔ����G�_o=k�M�NQ�� o�D߯@�zB5�I��z���f80*uSqC6�Dxé���������}��v����a�#ݸ:��i9_x �Q��P,�Ү���ˋ����w�Cu����?��ы]�PQ ���X�A�vA���l�k�� ����OA��G�"~kʧNFd�-˩t�s�"�<�g����w5� ����O����9�F�Ϥ��-�}�*���h�k�'7��0�cwzR�&�n��#w��=���:v�����8$gg����g��o�2�|+F�U�i^b���TS[����_r�=��0h��с���T�Vqj��S�:x ��b����:�<������93�8#�9)� 6j�Gջ8� P�y��h��*�?� ��ռ����/�n��m[E��[��X���Sb*��\X� j6�i�M!�V�u���ۛ;��Ak��߰0!��߫2�9;m����Կ0�����F�܋��Q�,�ۇ��k�5֔��u�lqҙ���+�6N�=L:�z����� (�Kb���PH���H!���ل���~�+�4x�t���t��iQ����v~�.����g����(:ׁTdf��#����%�L��^{<������m�!���UcOo�g�*m)��'��=�Z�f�n��X"��Hk�D�� �|���ZJ~�@��m����5O��B��yO)6�[��kl3a�M��>�ۤu��Kt]U-�0���4@� =��m�}�!����tb���z�l3��c��&$�l�#����H���[l����C�?eA��,P���2�{�>���Q�:B�oEW�]R��X���xOcD���g= oa�yg(�s�(�*?f�K���CY��A�3����)�������-#.T�,H��w�������d���Y��8�������_Fȸy3W.�Z�}��������!�j�a[7��{�5�+�R�3jP�������+��%x5����eO���F��?���\z��Q�y[���笘d�}L2�����h�Iܠ_U��a|q/9$�>-�<�y�LS�c�U)5��L0Fr9^����Goئ�=�����S�X��O�8\��ᢁ� ������C���FIt&�ɑYf?�����[��'?���o�?�F��gL�[h�|,��\{��<B�W�����A� ���^n�,����W����#B�')V��m[(��B�y%�%�g����]�l���� M�)+�����]�aC��<��Y�b���H��qD���D=r�t��w��I�6�����RO��g�� �� e�u?aS�N1;��^L@�Z�V J<�WH? p�k%�#���0�&5ϨƎ��2Gf�Y� #�ꃰ��|�DJ,�&����VpH�@���v�x���+�<�!��6�^Z2�lA1�{�`�M=��Nf�� ���W����� ��G���U��$o�e����+��i�q��b��Q�t��P�_���a]����(��r�WL����@���*���� iqLJ�^�z t��f@��c�۶1�k�r"��6�K!�l+8/N���orJ{ʣ*�I��c���l����"��]bj�C7�@��[��Je�����+��9�������q��B��~�U�ݜ\�{n�.���A���&��&�#&��D<6�Ȱ�R�����=[۴�yLX�6��z�z��Wl5Wp����lni��K"jo��$mir��~��y�������E[��ކ�Xٸ{��*�{h��;�j"mc���ھ��J\yop�3����h�[)�YK�PJ*��q++�������{gc�7\-^���~���7J )�AC���o�oZ+nTC�O�TQ�Z��U��qp��z���o?aZ��w��:\>��2��'<35ǝZ�_v��;��]�gb�� �U�,�,�U� ���\� &1���_��P�#���D��{PG�{Ķ9�|����3U^o����MpJ��Io����?�B��~��9/q^��Ϻ��nMi�?{�P�O�Rnv�(}��Ebr)dX�W���쩆s��B��}`�T�r��Q}�#z��V�7;!YmӍX!����+�oM!v�¸�s)�A�b��P�Q�$]7��" "�_8a�sR'_1E��opJQ��@&�x��<�HG]qI�����Z�����"�Q!:�&�oEa���������]P 1$wS���1���w����6/^.\���Y�tw*��F�8�e�a���cg��uĿ����w ����O)�v@�<u��P�?�V�YH��� � sn?��h���f����߶�̑��w�&t���s���@��K6����uH7�FE���-��f=��k����/H�L.�p�ޕ��l�2��C�Z������I\� �J�t9��>I���rR��0���IJ���o��ktQ�I�����"��a���,q˨���M�1�'��xGYIjD�Z=BJy��6����?Lc���*wK8�;"<���ηgb���Q�?� )�k>�(�����&��ٿ��]��I�z~̅!5���H���o�QcI�l�)���Q�7'�^~>C��"�����&\Eڀf~�g�q��~�S�>HՂ�����qo��Z|��.����L/v��\v��#?IB<�ұ��ɝc6�*-n);0���;bNA�Q;P�#�"��[��筦��R�B����|�S���;R��!%���Kw��n�ޛ{���I"�)`�S����U��C�-f�ĥ� Y� ���8�����
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ