Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
9968954206bc432bfbc3d1c2cc998955_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9968954206bc432bfbc3d1c2cc998955_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
9968954206bc432bfbc3d1c2cc998955_JaffaCakes118
Size
1.4MB
MD5
9968954206bc432bfbc3d1c2cc998955
SHA1
be8fbc20c1957bd6675ebdc1ba2f75810fced59d
SHA256
117f63a631eeb96601838458007d1a927362aac6f4fd7917e1247cecbdeaab54
SHA512
2d069f7df32e7a17d047f44c24becf8fcbf4b8ceccb18b4b85cdb4f3a4dff23bf21d56a918ddcc9d6e5c28e930c1a48af9e4c1c4c906bc80905a7260bcbbeb35
SSDEEP
24576:FrqmVJMZwjeBqYhPObjNd+6/2C4Ol3wxBs8xaONyk9iQhft1E2XyyVu:F50ZbBEN86/j8x28wy99JDWyA
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetSystemDefaultLCID
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetWindowTextW
CLSIDFromProgID
VariantClear
��(aєg��BoM� �q;��9U+X�yʨggeX�n�P&k$���>�*.�՞(��h/��.J"q ̍l�J>�.F�#�~����4'p�gz����;grg@�U��T�EEâ!Es�M�Ϡ�~�`����Lǖ;vk=�S�O��ë��p��մZW�����$��>�k:�� %ͯ���V[��#M98���� �0��0��Y��֛�E��������Z%���,������)����o���r�%Ez�K��jKv�(Laq�.��I�\H��ci�g?�p�؊]�8��7^�u/Z%�f��c���8>M��%'R��^)m���D�]��RK��D�3��y�8��{ہ�҆�n(ߴkwf7 �ǔ:ܡ#���5/u�����LX��'Ȧ ��y^ ��e���Y �z�1�a֯<���4_�(N�e �����$�RN��Yy�;Ii�0�z~{�b�%��|�z�w�÷8�n~���`r�-�����`�~kΚ N�&���_C�1ݲ�L�������A����u���$��Иqܶݥ�)d�:�$��;����&���0����@#U:��d��&��tLs�x#a�e*��u�z-m�t�n:������N�I�<�rC?X ~�N1��^c�*��[)�5���D�n��nZ�˒ZC�4��As�v�g��z�r��R��`�jǑ���݈�������MF��� F,�N���� �zb�2�B��=dM��ž��2���'1I-l�� �d&�gO��dc���.��ǤB脨;(�Ē�)�/E�B%^��*r�F�yIV`��}X��k�!�q~\��,�?W�i����_F ݷJ�nى� ����Eé��@,�*/��%#�v�`�5lew�g�x�<��c@�>���-�a6N��N��~��&-�|M5vnX���13�S����=B�r���8���K�k�N���n OE��\�o�e�0�aq��c:P^7�=�E����:��[7p���� ��a{$~�4��������/W���=�;�u�H��w�,T�*�d�2[�8��2i q����Lx������ ��!T���P;%�l��&@$Մ/�W?F�S���Mi/T"e�V �(>zn7�i�.�lb��9(>�(���� A�����q#����Y�<&z���P?xā@��0i�4��m6&:�ٕ�k������w*Q��N��R���o�x��+��0)lIVq��o�hQ�p� ѮC$�`1y�Hf$��d�cQ�g�f_K��Vsh/�U_7�y�Zt#�u�)p��������D1i4ì0�M�M����� q��,�У�c��d��Hk�lO*q�ʭ��BK�h�n]���1ޅ��z��R��o���D ���V4r�g4K��:y�8�]�h;��=d^�J�8�U���e��TcԬ�_�(�q�#�����\8%c�\�9�//� n���}��B<�Z*��6ǔ{K���QI%sAUyrO��b[�7eZ����J0�� �`;tI~uxL���) ];��%����o�<F�m�HU+8��ʨ\��G�j����x�2�p��R ���|����6G<^�[_�W<ͮߜa��6���"��t�O��[h�O!ޞ7F�~:���Z��]{���ɢ��:���;�l7o/h*9�jF�M%M�'����?�`�O���a�b���[d�h\"i��(�z�+� �����_2�x�Fa�8p� 53�1F�#it ���3���T�Q%�ZLZ��� ��m����@q�D� �a�(�ޚ;����7u��T/'*%�u>9˰�����@�&�����gpZ�{����^�i�X5���s�_!�S#z�B /�=����(�ʂ�2艃)�]���s�T(~b,Q���2��WvԖ��D]6fZI��#pK�#��cX�+�e4��G�Sq)���R��\�a儈/�mL�H{������3@ ���}Q�ӻ/��8���8� d��S��$��AZ��=[��A:N��M��R�=��i�~��j�h_���n�k�Tp (��?������o���۸������>�Z��k��>�/U3�t��a�@^W��fZ���|����C�r�P\��.����Z�Z�����Km9�y� �YD�0ۢ��@ �&ئ�O�� fܞ�����B��V����K�&(a`R1S���G�mu{��/CȜG.���.툤��KN�)� �M�����K�_���[e+�Mc��ͬ����+6A|45�\�'S"0L>���n{����\Y�2%k">(���������������>$�<���~�|���������|�SB �����h����/'�x�_}�������*�����|�G��,½W �Ř_�tnF��1˩KZa���X%l� �~!�����rR3�MA{��Y��J4�(���1����Z���)�;d2#]Ն�(<*�(R+������M'�K4����H/:'k,A�{L��ԯYk҆���j^�=�.�q�� H �ђ�R�ŷ�]>����5 ���&��*������6�����{*Q� 0V�R����F/�.RRJ��ҭ�Vs��b�PHxi�6�@�Scͺn�پw�k�c�*�d �Bt��g��#�{��m�]V�I�'�V���z��)�/��-)%�'��!���*��>�7~��(�������H$��-�Ca�v<��u������?���8 {B��&6yVb��n(Ԃ�x �@���3�Z�v�-���C�/�}��3Xc]��^��4��v�??X��_�����8us�M�y�Q:�YJ��VU�Tp�/�b�*"��1ф ��&���o!K�#:�`�Dh����W|ˊȥ�V��=T�7^�2U8�D��Կ/��O���.4���W�n.R�@�8�^�_���.L�"��s����Gyt�Ի���{϶Dc���L��W����U������k2�� nCD��%���W8u����=�~���t\������]�^>����a��u�L�������������I��?�����o��1
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ