Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
8b0d9d4606f21523ae71a00fb0e004f3_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
8b0d9d4606f21523ae71a00fb0e004f3_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Target
8b0d9d4606f21523ae71a00fb0e004f3_JaffaCakes118
Size
1.5MB
MD5
8b0d9d4606f21523ae71a00fb0e004f3
SHA1
80650ce8e77ef8d165ff80f1078c7da8d5e6ebed
SHA256
05c2947bbe241458d4e6d59275b68e618c4447b1cd34f694f2ccf65eef4cb84d
SHA512
1429c64cf3a9e73f64a77a808a9afb1cbb296ff5793d9ef33c75898844273b89368352b5c1f9f549938503f5036ca62445dddaedca591add4ce40f99f5931d5f
SSDEEP
49152:a0oFe2uiWgZfXKlrBZhQ8ZfhFWPv+y0tK:avXWg0Vv5FWn+K
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetStringTypeA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetTimer
CoInitialize
SysStringLen
oe�ȝ���9�fy0CI��Y$���m�)��WR5����ӗ�����Q#���ع)��X�y6Ӱ�á��<=����#�E�GC�~�3\w>~h����죑H [f�d��-�a��fU������gr�V����ek4& �,�]�4��g��j�M� iNr?�` [q���Jp =����79��s$�!����㌛r6���b_�G 9U�O��df�4!6�L�N�<��6o=��LH�K� h^F���O&��t?1���8$TV���,�9����8�OAT_\�p��/�4n�+1����Z�g������C�[*SAT�>���aV�ػpj�)ZI�]Hxݛ�!K��%u�gI>w��+���M06�T;צZO��|�^��1a���<�!85B�et\�Pm�R�}&���v�O����n�+�"���N�_�����%�$5l��"��;D �f��y�i�[=���}N<�胙�:��@������T>�y 2,���Ռ ��՜��IJ�Ǯ�G�VP��e&S�s�g|ӊ�F�6^�&�\ԜO|cU4�jm��Y���iܴ�!���/�U�~՝��(">!������dP���"Z�ٞ�.Y�w�����P�Kܶ��n��Yh���m0�a"q�`�vr�P$Xk�<.��3F^6V �B̡��t�t��.�Q�օp�I�QN-�����6CV79��p ��@���ʡ�F��0������#p�y\\Gu0�C��N����� �����y;8�#eYc�_�2o:�3њI�PLW%���v�V��*]���'(W_q�>qGz+]ʼn#2�v��%�@FJ���f,f�d}a e�?�V5��7���'ԃ#��#�Ξ����[���x�;�64�2;�b��X���\��n]��ſ�4���Q$H�� i�[3l[b��o�������³B/M~�̈́guE?È�ns��`��_�~�S�;�%a��*��mI��J��{��/O�^Y#��8�؊M��"�[XvdX��S��ߘ��^��� ���<��U���|a��JWd��̸�B{��Y���Df�X�B�7�<S�� s����;�ۋ��W5��i��wN*��>3%����a��.:@��u�Ŭ����+����@�<����3�)m5/������n�9�*V_��GH�j���s��L�j��\�5ӟ)#)鋐Q��3A�ɫ��`9�HC?�*�A[J��^�~��n{�Y��+{�*��&]�M�_�JKҝ�*^�yQ;`o����%�Z�"�������,��C��4_�8kU�u�,wJ`^D�G��Okc�oR�@��D��0����ªH��l�N��І����9)]��zB�q<�G^���N5�R3zW �j�m]��ȡP4]ό軾���RU�k�W@��5|��bB�����+�y��E���[����ԓ��`��_.d�g L��=u���� ��G��ۉi��ظ+b��R���]+R�� �;ze�rR������>�r�<�f Y����P"G����U�O5~G����,���B"y=t� E�9J&a+�5�l�&�"����T�T���4�����M��H+-dB��Iw��8���q�5�!8h'R��6:'�b��ɱ ��l!����R�H0�����v��˼�����BL�Q!�����Q�^����ͦփ�h]m*6�GC=�&�8.�����Hx�K&��sk��FG���|ܛ���=���+U4R���I�pZ�ΐE�MD�?��ߙ 0�'����`54���9s�ţ��������t��a���\"*'��>GN!��T/�9�� X�09�#�T�$� rS &��}�_���$UI��2�:b��!�)����%�4��i"��d8���g��i�U��_�=$|�[�Ƕ= ���u"��� �7��tOn��͖��qꥰR�}-��?ހ.P��cw�p�z�tt|�Li���))_4lY���~4���) �}� �ɫK����=>��������,^,����(��T�=J0��-�[X�u�!Ń�tq�- ����ΚG� ���l#�w��N�(�b�n'�'~ 6��ʂ�a�i�� �쉤8��^[�V���>���1�z-���4<���Fe@V齍��y��oV)R���'��AL�Z�7�����:z�4�j���I��l���O�N����htJD�J%�,Ku�V��&a~Mh��_)�<u?<��D��j�*Y��Rن��B�}g��� �ϥ��=�8�؉4�fՋ��.ʵ�#cc=Љ� � ���W<�g�7ϐ{�x����������~N���$�z����Jw����������b���C.W��Ǖ7ϔ�I%|������nO��R������)j|���������!K,�F���C���q�Y2�2�`Չ�Ԍ���n/�gޫ���s //T��� L[_SYk�(�Ps�Lr�� �Z���L��+�P�ϩ����r\C\ӎ̅��� ��Bµ;çB�?tCcr;��R������*���&���R��������˾#������&^�c,�>�x�ʝ�ݡ:=�Ma����G�4J��I���7c�,{B��, �����R!����>���VY��5���Q$&?��>���lr��F ��'Sm|�ZH �xcj�<��$�h�L��J�Q�h� �|������^��T��C���x��O��Ly�9AZ���LW��E��] �.\bD퇓` Ӝ>#MEͩ��7x�4�_������JoC��R�.�l{V]�<U���M"E�ȭ[��2"ˈ�9��S���<a� ����=2��F�)��7��BHC����ԸLQW3?�"�>'��ҹ�2u�Z�D�ެ�?���Ü�_���M��d��"��4�T�K:DӘ�����Ƃ���|����58���NdI5Bk����"�l�Eu� y�s��ж~�#���m��<pC-D���q9��V�?�\�H�0���-(����N�����KZK>����z��h���l]#�2��ȕ��D�F�c�%�/6=IUR�}���2e���K�D6�Jnv�4�=`^�����s`@hv
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ