Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
9ea27645eacadfadcd8ae849bc521ac8_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9ea27645eacadfadcd8ae849bc521ac8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
9ea27645eacadfadcd8ae849bc521ac8_JaffaCakes118
Size
1.5MB
MD5
9ea27645eacadfadcd8ae849bc521ac8
SHA1
408fb3fcfc67700eb05dfaf545d76b598159745f
SHA256
0685b60ae392a70d80e0cbd1e92c137d7ac94a44c197022aaaead2d0a9f6f98f
SHA512
6964c6deb3a273208005e44e3fbec6852890575e3cee6ab492a123f94b207ce83da9a809ea12cbb609f21811d890d67797ae31db85d0e0b4adbeadf47e92a827
SSDEEP
24576:Q7hF9C+h8Ts5oVmHDTLWK6WwBtvSMZsM9nLMReeYKma//hF3RbLoXYVGqWzfpd/I:Q739Vh8I4mXaKRAZsguxYn0hRbL4q47k
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LocalAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
DefWindowProcW
CoCreateInstance
SysStringLen
��G�7��@W �Ҁ ���]��vڟ��m.�� ��u���g����p���Ip���<ؓR�����b�! �%٭J�I�k`:g8C�"[~z�p��.���_���i;(ܻ���i�c�G������4�D�z�X�����(�Qi7=>at'��X��J=�\u\�U�[`�W:�Ϙ�U ��\yDzBe�\��'"h\��B�+� �o�I<���g�_r���ОP�XRh��;S-�npc���cG��W��ՔA[��$X[�j��G�W��+��h%e jf�x?��=���[���RM;#!���)����u�0��v��F~�K�~�+�B�����[���$��:"u:�U3�H:�8Q���'��r�q�Et�W-���]n2P��h�)�Rw�[�=^Ү�_�Q���6�m ��v�C�1���� ����[ 9�#���pAɬ�D2�4H��WF���WP�1���4$Sx������=��1SF��xO��"���*Z�pܝp�m�~^�[�rjDL?�}��F�����,�I�G��Ih3 �c����ף�?�����i�%�6��8 2�,�&5yF�:�����{U�,�]�_�FV���ؓ�����B �������`�ړ��A��/'֍���Ŭk�k�# �0������c'�!��D���`�&rv�S�Zh��7�yV�~SJ�7%��`a|���->�)ȇf�ct%J1 �4o>,vp�Z�ֲ�q��X�V�Vt�AY�w��_�� �B�^ 6Y(�����x�|��6�����>y �E�5Ӿ�yZ���t�/D�~L�d�e���4����)�DH]y�ݾ���l�:6��W��bL�� ��*�^K9�t{QÁ���R��Q*Ҿ�����*f���!��h�����)���ଓ����H�Yk��<F䗶�³��$���h�`�6%����u,[�7�H��o�<FT��3�A (��^��~K־�aXL��J&��xָ�P���_F�~��P�m#eˬe������Q1�B�����E�9e����I�#�F�-:�C����Z�aO M}O���t�����U[gH��� �5n�~:E�?@��aU��Нȷ`��z���W�{"~��8�����~�]�Tw%��c�!E"Z$QO L��*%�l:w|7����b�5#_싛R����9gƘ�����"l�>>���)�$6>n;OR�~�類�nB#������&b~��J�N��0Z����K��G^8U%5MS{�WV^�-��'��O�fg��(�`�KرNu��X,�ꃲ���Z����T�9��F�3�x�T�o�>�mLjR��&2hȑ�p��OXG��/B^~'V�o������0 ���w*�7������M��� �8VUG�����/d���� �x�S7)�'�����r��)��,��`-�7\'�܊�tP��aFh����MU?�ί��v#1|�֤a�c��r��t�D��_A4ܥ�g��o�.�����'1��4�d� �n��MF��)E�a��[�`��sv��rn�cA�J 'j�Za�����$�(+A.�AƱ�L�u�����B���I?����d����ʬ�z�+^:���"?́�U6~#6;��[ 3]^f;Sڣ�&����4�� �"C-��}&��rL~}Q�g������2�:�Neo���S06}$AR߭������i̱x~��h�Ra�lk?�:���Q��~�������Ғ�Y�వ�I�;��Ж�b�.K�qꃇa�5�̥�s ���F����)�M���F�=[R��A����'rz�J��*�ޞ;���� ������"�Ӡ`�l�������! �g(�C@���Oe�&�j�OrM ����#+䠷w[�Y�O�CY-�zJ�Ҡ��(:�O��N�e(N���a��Q���!��X���)Y�����_����cXWl^����~d�oG�����+Ə@w�L_j��-5�c� ��ʆ1K��:�5�o����v�4GMklp�H�Qo`�rw��-�r��&k���0�6�G߿�=n'��?̭8��j����;�ݥh j9]Aq�!�}��D| n2jSq\�-�=}֝���A�ѐ��ꎳ��%F�״8�/d��a" �%��W��/���x��Q7R+��b[78}��� p��̃U�ԇ�g�#���!�+}�̧j*+�z�!ɵ�Vޡ��~��Oh�BMp&���;�.O�=�����A�:Ok����Z8c�N���0��df���蛄M!� z7U�j�mQ4g�$P�kK�K����9tw��QS�d�ě�k�,��(a����̕$�D�b4������.�:x�PC�p|���E\�:HЇ\NL�؍x^�^����Ҫsbͦ��>�6s�6�����9^��#�-'�c��R�h� ��'�\�:�X�N���a����xNn\~E�*\���-�=�6�<����P��(O>�L�� ���R�w�y8�� �k�(����Ț��\��� WX�l;K-���j.Y����Y���tw��GT�����La�MyUg�v� 58J�����*������3�JK�F�c�u��������0d~�dYqOf�b�r3KPO�K~�<&",s)�UI ɬm5yh���8�Q����9j ��,Ϡ h���q��w3N�/�P���cY�0n#�]�@Ը����L1E='�:&w_�i�!*�v��4q7������]�1�18�'� ���[$��ٖ��g��%٭�+p�!?��T�����8�(AN��fyܐ�,_z��`���~?c�*y��w,�vs����:��������4`}�98K�_�rC��A6��t��T��������F?��).��[�����`]�J�g7Ɍ���d��/W�k���&eV����\���3�~#�h1��k�E�����dPNn����t������G�HK��,5��-��8�\����t-9e��BL�x���4��5՛|�w��i����$�lD.;�!+�S�x��l�Rh\MlŢ4xO-�yK]�}��*@�� ���
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ