Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
92ce07717c5e09cca0c52848f81e9454_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
92ce07717c5e09cca0c52848f81e9454_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Target
92ce07717c5e09cca0c52848f81e9454_JaffaCakes118
Size
612KB
MD5
92ce07717c5e09cca0c52848f81e9454
SHA1
b1d686fea66f05c8276b2403297da9c701e9bf14
SHA256
247f2ddf1b37e467de63c6c2e8798036ea962aafec37e55002c420ef4ad78a38
SHA512
c85f8e28261d48eff24f21f814bd2c6a5989ebef2c9b6f5143714b735362d1974520801f7fb7af156f42411a748af682f9a8ceedc5ce0b5423ba324d69c77b37
SSDEEP
12288:4HdpTTAX7Gmqsjcdw+weqyCKJMd6oDWA8Ms4Qyaoo5CMd:ErEqJdwGlzu6oCYs4Var5z
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
OemToCharBuffA
ReleaseDC
CheckRadioButton
EndDialog
GetMenuInfo
SetMenu
IsZoomed
SetWindowWord
GetClipboardFormatNameA
WindowFromDC
SendNotifyMessageA
GetFocus
DestroyCursor
EnumDesktopWindows
PostMessageW
SendMessageCallbackW
ChildWindowFromPointEx
ScreenToClient
GetTopWindow
GetDesktopWindow
GetGUIThreadInfo
SendDlgItemMessageA
GetRawInputDeviceInfoA
WinHelpW
RegisterClipboardFormatW
GetClipboardOwner
GetClipboardFormatNameW
ActivateKeyboardLayout
SetWindowRgn
ToAscii
DefWindowProcW
PostThreadMessageW
GetScrollPos
LoadMenuIndirectA
GetThreadDesktop
GetMenuItemID
UpdateWindow
SetMenuContextHelpId
LoadCursorFromFileW
SetClassWord
GetShellWindow
SwitchDesktop
CharLowerA
OpenDesktopA
DlgDirListW
PtInRect
CreateDialogParamW
GetCapture
SetParent
SendMessageCallbackA
InsertMenuA
GetMenuBarInfo
GetSystemMenu
SetWindowsHookA
SendNotifyMessageW
ShowScrollBar
RemovePropW
LoadCursorFromFileA
TrackPopupMenu
GetLastActivePopup
GetCaretBlinkTime
AllowForegroundActivation
GetTabbedTextExtentA
CheckDlgButton
GetClassInfoExW
EndTask
GetNextDlgGroupItem
DragDetect
RealChildWindowFromPoint
GetComboBoxInfo
GetParent
GetMessageExtraInfo
TileWindows
GetInputDesktop
TranslateMessage
WaitForInputIdle
LockWorkStation
DialogBoxParamA
GetUserObjectSecurity
GetWindowModuleFileNameW
SetActiveWindow
SendMessageTimeoutA
IntersectRect
GetClientRect
MessageBoxExA
CharPrevW
PeekMessageA
MapVirtualKeyA
InvalidateRect
wvsprintfW
CreateMDIWindowA
PrivateExtractIconsW
SetWindowTextW
GetMenu
UnregisterClassA
DestroyIcon
CharToOemBuffA
InflateRect
GetKeyboardLayoutNameW
RegisterWindowMessageA
EnumPropsExA
EnumPropsExW
OpenWindowStationW
GrayStringW
MapVirtualKeyW
AttachThreadInput
SetCaretPos
SetWindowWord
GetWindowTextW
GetConsoleCursorMode
GlobalGetAtomNameA
SetCurrentDirectoryW
ClearCommError
lstrcmp
GlobalFlags
GetCommandLineA
FreeLibraryAndExitThread
CreateWaitableTimerW
HeapFree
ReadConsoleInputW
GlobalFindAtomA
GetConsoleCP
SetCalendarInfoA
EndUpdateResourceW
GetThreadPriorityBoost
GetCalendarInfoW
ScrollConsoleScreenBufferW
GetLocaleInfoA
IsProcessInJob
GetConsoleInputWaitHandle
FindClose
SetEnvironmentVariableA
SetErrorMode
GetVolumeNameForVolumeMountPointA
FreeLibrary
IsValidLanguageGroup
ReplaceFileA
CreateEventW
CreateTimerQueueTimer
EnumUILanguagesA
GetFileSizeEx
WritePrivateProfileStructA
MapUserPhysicalPages
GlobalFree
GetNamedPipeHandleStateW
SetHandleInformation
GetNumberOfConsoleMouseButtons
DeleteVolumeMountPointA
Heap32ListFirst
ReadConsoleOutputAttribute
GetPrivateProfileSectionW
OpenFile
GetLargestConsoleWindowSize
lstrlen
SetMailslotInfo
GetProcessVersion
InvalidateConsoleDIBits
VerifyVersionInfoA
PulseEvent
CopyFileA
HeapDestroy
GetLogicalDriveStringsA
LocalFree
CreateDirectoryExA
GetPriorityClass
MapViewOfFileEx
SetLocaleInfoW
GetLastError
ConvertDefaultLocale
GetProcessHeap
SetTimerQueueTimer
GetCurrentDirectoryW
ReadConsoleInputExW
WriteProfileSectionA
VirtualQuery
LoadLibraryA
LocalAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CoDisableCallCancellation
OleDestroyMenuDescriptor
OleCreateLinkFromDataEx
HWND_UserFree
GetSaveFileNameA
GetOpenFileNameA
dwOKSubclass
VarI4FromUI2
RegDeleteKeyW
CreateHatchBrush
WTSSetSessionInformationW
WTSLogoffSession
WTSEnumerateSessionsW
WTSQuerySessionInformationA
sendto
WSACloseEvent
WSCDeinstallProvider
PropertySheet
4MJE�r���I4^C���o�5a���%/B@.}ѳ� ���sS� Xdrq��ʮ�S�Ö��L�_�}�������H��1��/��k���m|��ړ�6��mZ)�c0��66�f�p3��#,9���$k�+#M�jx�⾦ZT��EN��m�l;]�QR�s8�o��~Ѭ�^3���H�̢��*��I�}��}kSq<�����L=՟,z]�&�9;ɾ�v+W�s�����&��vu���j�"������$ve��1�ņ��LF��E��`��| �OX��R�)�M���1�4���J�>o�f��3�^4{�� �qcH��nN\�ǃ@��`���vHy�ҌR.VV���8sΓ���ʰ"H��$�1B�O�p�)�k�����jqPgAR Ǔ���d� )d*��Z�jқ��6(!=#4�K��]$s�ll8�p��BU�]"��<�o9�]FB��\]18S� ��Dj`���ϓ1�R��b���8�&d�Up|H�gW+$��d��u��zʈ6����=.)����tx�:ְ[ѪA~�/pp�j[��V ��S��q��x��T,�1�/��I�NkSOy�vh����`��$�w�L�/`bvvo���"<$Wpc�%�78W0cf�-ig_-̓�3�9��z����h=�]������ݥ �{W)ʌ8�>�z' w/ԍW,S��hO��F�z-5H]Q?�¨�̕-��'�m.�v@���G�J����Sz�ѹ���a� nM<wV*|�^䏞h]s�u����~���"���jX��l-$\��]c� ��ne�� ����E��8��l��?[4oH[���b!VLJ:k� 0���e̓�ԕY@���lehnWV4���t�T��jƏbz�G�l��ן������tĦ����oT�dvɃ&�Գ��<��A*�����I���k��c��6�6�� ��F�&����5�4��z�BH@�&��o,6(�SeD����G���Yn�Ĺ���s�6IdW�j3z������ ރatX|���Z�E�N��ajj�.Yf��n:o$~~-�M���m`���DP����W�?0�Զ�Ӗ�B>�����E�b�|�����t�DtB���/����9�қ��=�<o� r�9���U�6���l��/�2������[�hN�H�����(����� 9���ao+��PE��5���7�������.�����Y^�h^�s��/ڴ+��vw,üdq _��C����y7��B��+5���6�����h�H�ڰ�k�"��]1��i�d�����;]ʶ Q��jx�_�L�~�`�~�"�� %ƾ?@}Y�4ѻ�Kv(��y���Yxb7"���fl(��/ �����U ����|X"�Ϛ�A�!s�ORJ�s1Fz5jCFՅ�LyW�94u~��DY��pz,*��C�'��s,�Դ�(vL���j ���R?F��G�Π=A���X��G��M�.�?�z�|9�jtY�j�ҟd�Ԕ�+�K�n�\��x��ø�!R�٥�|�Rn�%�R�r'_VOj3NR�$�Z���@��6�u�����if���)U�{N����T���dܳ� ��30��CI���^���Dp�B���<��>��w�.h.�y��Z|��C'A��ﮪ�$����'�"�'��J)�����*�G*���#��ԙ��NI�� ��n�m�OO¬1�f������(�������Ai�%`(b(e�Btg�CH���V<2���$�$��M�����Qi�EY�+�_�Ն㵁RBE���J�%̰6� ��ڙ���W%�Pw��T�|��1�s s�ݼ��Flǔ�l��f�����Sf$� \"}Jlp�t[�87��.����L���=:х1tS�E�|�â��\v �//$ǡ�����똎�� q���Ic��{��l�u�,�i�-gP��-\� G�v�_"����w�c��6þ�]�)�n��/��0��C8��;��(q����HG���Di X����6r��Q/�#�!��[]��&2/e#�ґۥ,eg�����ju�i�9r��.ן�~���D�SKl��!ab��fuG�� ��h,6A�P��QJO���Gi�4�,�f2둷bD����n��hj��*�3A�����ù�Ý�f~lq���S�%��������"7�C�D,����u��s��j'���v�=���DOZ�U���� i��Pp���gէ�v����l��S�Q�q���W���w�D��q'�m���t|� �S��������.nR]0�8Rn���g�E�pN0��C�2a�f���c4EZ�K��c��S��^X�٩�S�9�я��s:k�R��\�Rv�6�)�$9˾j�)��O��w�X����� Z� ��Mm���thJt�W��OV��k����'��ڿ�$�f|����O|�d�6�T�g�uNH�L��\���ϒ9Qn����D������� �i�h;w��I�'���Dp��tİ~�^` 쑸���4���C!���|�-,z�G���Z�"b�~��u��i�n �w�7K�}`P]ѽGUm�����n�iT�Rm�9M�'�=u���~���J�#gW�gYQ�X�${�+k 8Vd�L�!�Je���>[�����T�7�7w�낣mTI�;� {}T��sܕy��OL�у6;(�u�t�_[�ճs-��0CK8"(0X�i�-�Q&0��.��o��1�w����벥� wla�#��ׇ5ū3RM���t��R&W�����f��rg�=�H)u~�1���N�gw� �M�S�_m�{�"jD4��єb�!�1� >�Z��S�7��H��*��k2��S�=W�n�fgՔK�ng�ט�p͵�4�T��ECo^9����R�ҫݢۢj<z\��c�Pl"���TF�xl�?o�poa,\5��v����3Ag�����&1�iAMd�3ؒ�Ku� ÌYGl��"�Ka^��ip��8M��8���UȄ�]�d�XH�Q�]Y���>��/? A�+�2�"1�F��M ]۳)���`R�{G�^�0���
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ