Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
9da313f1fa383a3fa750d3411a452cb4_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9da313f1fa383a3fa750d3411a452cb4_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
9da313f1fa383a3fa750d3411a452cb4_JaffaCakes118
Size
1.5MB
MD5
9da313f1fa383a3fa750d3411a452cb4
SHA1
2a1e418990966789ba6fc14742b9600134f6fa76
SHA256
1433b32b55d4343463e790999d902785f5ac9bd379fc707ec79415d758071301
SHA512
a2717b01bc23981438e969ac90a85cd3d88588374f2d8e0d76a6fbdefbe8f6d4b66f8ea9af63c67cadb8f682b5116c2f77d6ebb764abfe89b947beec0107bd59
SSDEEP
24576:ITSsED58Xs0/pS+02+/yQfIhNhxfADrU2BTlvHolxCGMpTXuT4MvNAhknffdSg/i:ITS9Dq80Y+0b/y4IhNhx8JBIbCGMVXeY
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
OpenThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetTimer
OleUninitialize
SysStringLen
��a��k�,ȋw1S�V�U?^���Y�dAv,��k���0��a�a�{�m110�~'�M�v����m*~��Ho�I�jj�H3l��W��j*�*�c<���X��B-�c���$�}��^�NlQ��Jd�H��;�14�7чɱI�%-)���淎f��oT.@ e�̖��V�3W�'�.&�딅V�ץ|9"��#pjY*��P����l{�����Cx�D���K���R����sūz�v���sw�ս����� �3��]H�A7��p%��D��=�ٱ���8�LX�\����-��]M4y)Q)���Zz�WbK���C& tئe�����K��[�`�)�?SՄ��oUOUf3���Pu��9���iQYv����� �$7I�����3��E$>�7�kj7J��N��Az[�ϦAgj**�!܇��4��J���-�ҵO31H���*Z�lD������9��,���F:�5���PU��I���f�"�f)"�`!����;���R����i���S�)�ïs�bB���Ȩ�bA���ApW����m��C���p� �Nł��z��l��h�ewZW��K/Su=(ǜ֓2F=��בה�\`N��>�kK��,:��Xྌ�^m��A-��e�`ӯ�տ�����5xo���j��6�uT�����o��3-�m��t����Fy�$}�L����lyGr�����m�σ� b�=`����y�U0t��y#��������<�����!�e�@�p���7�3x��x�h���p�J���+53�#/+M��UܽM[�K��� y���2�8Щс<�MH�5��C��H$e��E�X��c@�����Z�W��3hO$>�e��F����m�������/�g�@g�~8��?���{��z)=Gg�{��S3E��0߽/5P���*�C���l�x�a3 r���\t�M��U��LU@��]T�2V��YGWї ����zK�̻Q����s������g[v��T=Z몠y���4�g���\�.[��2��|��� =Q'<��>$��8%��m����_�ii6� 렍P�4�yɓw����/��u�X�3>�*�ǂv���-j�;q�:26�!qV�-Z��s�9>��E�~S�^�,�G�д��T`���%mg&5��u�}�x��>�P��\s�o��������{����D�L��E�7IS���t>��<�)�l��;ѷF؋����)2�/��q�П5�'i�a�� f���3`�i��FI&�c��'�Hv"7Ε^-)�RM���p�'#�X��p����x��$Mԡ3( @a>44�����U!H���!M$*HrD!Z�.*�(�����ŢF_�Y��<�a 4��!6r��x���^����O���x���������fn�I�W*�g*��*��[��*?�d�r�QC�]m���ߠ�7Y2ZYhEkq�bm��}�`�.���J�s^],�����ES������M��y�9�n�ͨ��L��$0 N�1�a\k�������`~�,:������_و���6o�r{�P'Dm.�����{M_�7��ȓֳ(��'����a���lb�A:;�(f��s*����U�F,����� ����L���?Xؽ��J��T��=�@~U�L+`��!�����k#�2��`����R���M��~Bq���V��ǴH�N��9nS���ez{�X�*ih�߰�/��]xK���k��S-�"B9�9S.B�V��o��ؾ�m�1r�8ct��0"op�X�����R�/�eo�}L" �ǻ{�i�� B{��W�g�ӳ�GW�������?�,��2�TsP���H��<��^��S�}8���r�W3=aɰ�`��+��HJ����KZ��~��c��˱�K���K��� ��˟��E5JЭ��/��x�9T��?�����d�`9 z�:"�RBm��4�����C !�f�{l��5+�e��58i6?�sO�2��#�=�o�M��b���ô¯^��B[4�jqs�;�n>!bBr�Uݠ��!O��_�l���f���4�j�}}x����t�>E9���4i���V�Ŗ�B�� ��P���m��Ijc��X0������5#���J�Ζ���A�7�%�[ܽ���|���7 �}|����/���bQ�n���؏�t��Y�=G$�K�A��n*�jٵt�7��1�A*ctm���=B�v��78�#�i�����;������X��<�����y5�ߥ���`MO��yD��ZN� �������Vr���<Y�*���]P:ѧ�����dW:����)h͑��?O�x@eU�6@qN�%�����RJ_Ό��SHX@ټ�hϻ��築�W���ݨ�#Vt���a(>���@N��E���C��C�%�!�7�]�������9��U[��3�]\�؞��Yn�� l�n��p�CPe�2u�pLK5)�"pX��1��4#|d٩:�^�-n��?��N!>m��ܴ=q1�xcԨ@�S��p2}����\��K�z߳�WY)�$��I%��Q�D,;t[���ʏe��&�KKǬE(� �(r��������a�Ÿs�X��>H���[]qc���L�a<�,d�խ��Q$(���ŷ��,���r�_%�e�b�����:���GbB߬K�9!���l֤��k q���a�0KQ��M1S�5��Z��1ɘ���'�ᑭ@��d��1��z���#��S��[��%��X�= v�(k�A�C�1 �_���� ��4����&5��y�nW�5�P����afi�YM�]+����c��s> ��P _k%[����I=UȢ�V~�uZ��fԼ�d��ITK���~UZةJ�[˟t����{�C�DC�3��l r�c��\����lm�A��6G2�ԠB�h\̑,b��_��v� ��i�&����g��u�l+���$����>���%~7��S��Y��<��d.G~��s����#��|�gb�aa G_*,�AH���41i؛EtF��.��%p�Y8� k+�vb4x%�y���o'
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ