Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
8b17211c579760f9d4f1ae20a3f85c36_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8b17211c579760f9d4f1ae20a3f85c36_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
8b17211c579760f9d4f1ae20a3f85c36_JaffaCakes118
Size
1.5MB
MD5
8b17211c579760f9d4f1ae20a3f85c36
SHA1
8c611355ba153750b778738d1ce549138fe442b3
SHA256
1240401b49c542f9cb8642cb339756c6293d5a03a7fb96122f104fa302a8d6be
SHA512
239f4e7be91344d7a656e6876a42160688da5af98faf00d503337c3a322a6a20593c9916a73d879dc0ec84b16fd9862a399e1a8a45ff4511a4c32939b8435fd9
SSDEEP
24576:iagX8x5zqtT3V5Bn7cGjm9cNzTuoFn4S9EUn9odnGMDza0yh1dw6pjhblEtTnzUe:iacgpqtTpbj/fL4ZUn9GGMDz9yjdZozH
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetSystemTime
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
PostQuitMessage
CoInitialize
VariantClear
nA+��kiD���Y��֑2���&*�g��ى�ї��R��D�bg�l������d'o��O���}UOϚ&�۴��/���}���L/#�a���^�a��3�t|Ť����Ηq��x=镝ՌB�N8¹�z�<���ѥ�W���">%������UMLB3��.e��/�67�EI����`v�����ߦpB���Xg����h'��(�O�����tþ�I�Z6Gu+H�(���+c�t�v�L ��*y�Evq4�Q`:y* 9�y!}3���Hn0:C��jΦ�ӕ��Hag���1�옼��I��r�2�� qu�wM�n�C.Ih�Ʀ��ږ����A�5��P0��p�P�J��/O�:�W�dX�|z������m?�u�d�L8 }�ZE��"F/��V� <�b��ql5�8������k�R����k�g�N:�g")�[�p�C�T������t��K��ޘ(bRO��JuȏG�`y���C��TI�"Ǥ�%���te�O��&h��~"Y��p���Tw pK>���Bzi�� �ظ����(�=;d�e+��ƌڈ�.`] ��+Dk�������$�N�xJ��dG����*d�7^��o��Q����fe�÷#SP��� ����ρ:"a�2s�ܻ}4T5�[P4���a{0��ZA2��R룪�;�/�sy�z`�\kz��~4�c����z�pGޝ7I����`�eO�0�����v�~�2���T�V�0m%�po��F0Oіb�"]*1��g�����U��c�t���鄊8���@�]Z� u�7�a$N>ЙT1V�B�C;Y ՙ��r� c��q[R� ��Ǫ� ���v]*�*���-��+�}1�����Ds%deفP�+�f�4Q:��)��5hv�F"gA�{�l<+��Rh��8Z���+����+�4Y ����ߒ��'��)/��.o�Ŭ�& ����F��{j6�����#��������3�Z�M��`������J�Х�t�K�T1���Dp`*�} 'y�\?�σ�&�8G_�݂vd����N$��"���q��D���b��TR �(��ݑ"��C�&���C�"�Lsdwp;=�fH�R�cZ����5����|A����Dhgaޅ.��i<J�^!�ő�P[5Kz�Y,W��Ψx�x�D��9�t(�LVIɤz�K����F��_ί�./�C����=��#�R�����=|�(�� ��<�!�;�q��)./&��!��YDhf��#�^�AnIjfگ����%$_B R���U�!ՠ�0x&l��A��X|������0i��b�3�;�Å���ƸA����n���U�z��m�ޗ0��j7$�7Q;�6��Y�@�M��U�� }d�� .2mu�/������J7�rd#����u$��y��$�_CA �Ғ�Ԏ[y�FH �_s�@�A� L�'�q��w�C���)ʃ���|0�����2V�T���8l^)�]N�@vX�������+Fl7�ֳ���a��Nz1qY�A�����VK��+E�{�-�L&\7(l��G4��;�M K���|��ds1��A3�+��=d��0X�~�,r�P�I@�J�9)\1�M�~�><S���~5���E�� �����q��������|�������}�J6��e�z�i����˫ ��]�=id�vO�/TW�I0|@\ߘ��E���<�2�ԅ�b+�h�;[d���K�#���,�$-�I��3�7O9�n�>��Vrk���Ӊ���wh��X�6Q�6I���"�pu�Z��H��-!����$��Vٹ� �� x�m�j��6��6=O*��Ը����:N��1�|f�o=�:'���n6]<���&Ɍ�?��I)� ����%)��+T�e��z���@�r�p�Fҥ}onY��6&.�h6��� �����-9G/<6U���F ::�M����*�a���:ծ5{Ȩ6V�ln������NY�� ��v�)���H��)V�5��;��_��o8��{fd��0P*6��F��4�ۊ�����Bc�B���q%���e��I�e�����Ч�6��E�w�f��!�Ы��(�jN�1�N�|I��,!Dfp���a%���`'w���_y���ŐX� ���p��mYa��й[ty�T�T:���ރ��\��vA����L�uW�.�N�ޠ��?�IH4<4��Y��<��Jx�T�y����W�cCA�T��9"Aci����a���O��l.³j�12>�IW1�k���X)�� �5T9;��_�<����g ]a�l��=F(�+�c��q<�!r=ȱ���� `�.�tUwX�������c��R����+M���Ih�a5O� �������;f����>m-b�{m����@B\JW2���9%*�R���c<]���q���' ��'�`B:��~<��i���n���J9�� Į�=�-��8�<}w���ʴ>�|��h��S���g���*G�������l҉�J&Ɂ>c\�.0'�@笄7F �69�C���ݑ+�C�����ڿP/6+D�����p?�g�����bN%��d��Q�ÿpv}Ў�N�D���L���� x����;nT>a���]�.���p5o�"�����n2������;C��*�K�]�Qf�'GEp�K���|.a�"@������CI"��|��F�fCwIN����ㅸ<���z ��:z�j�o��6���j�t���&�&�r����V徇�D�}�n�+��L��Vz�B���E����%U�k�Y���Κ�hh,0?o����+��^���1�sDT=qG���\_�𘀮F�?��l������e�ׂ�/�bb�Y���X*�$�>���x;�`���5��1�wX�r{�2�"�C��H���Et��&On8 IWg��@T���X��-_R�P�~N%N�lѫT�?���4�ߦ�{՞� ^ 6P$�P��pQG=��ոy���L�Ѓps��b�$z~j��2�tO�R���")y�ՍG�k�<a�&����~+`?N����5
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ