Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
9f248b4cdaff941623f587d2d6dd86dc_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9f248b4cdaff941623f587d2d6dd86dc_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
9f248b4cdaff941623f587d2d6dd86dc_JaffaCakes118
Size
1.4MB
MD5
9f248b4cdaff941623f587d2d6dd86dc
SHA1
3ae975eedb23f319ec5964d33dfbf52db6c50c74
SHA256
1357e00ade89bbcbcdf72f4493fb8b390d163764565ce72b776bec8ced89efb5
SHA512
b8a8bcfc1a81dc1a012b0c0651ce4ad4307d141220f62f1a6af3302df304a3d05da4e95dc2b003fb074ba361f582f98cb3ad6a9e7ff4ec32e374002d170d47de
SSDEEP
24576:CNBrKgoNHO+X77RwfbRcdjOyeaK52PDE/Djb4aQVFcTOxaPSMySREUhPwysuVG:4kY+XpwfFcdj7DE/DjbTOxnMBnhPwysx
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
EnumResourceNamesW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetTimer
CoUninitialize
SysStringLen
Ď�2�4�Aށsr`uH�;�2� ���ԡ� !<* m��2�=Э}��� k��^�m@䨴�}���ait�*�˩���>��GS���d"��<���M-h�.�]���t��O����>�.�=������d�a1�� ��`��*�憕��� A���3cy�b)�wa��}1�U {;B��"lV�����@�G���u �0� eF������{����Ux������.����d�h�Ŋ��Z��8߅d���)-]�)���y�����YVՁ< :����MW�GA? ����Mjcך�X�uN���}� �ciJ�'�C� �f���N�r���TD$O�\��E�!�_����G��X��|�Q� hZE,���wr��:Y:�}�����������[���0WA�;�0C�q��p��?r�"%Y�_���C�Sg5�\�R�����C�Sd0��А�(_��j8�϶�h��-�R^c1�<o|��*�ߩe,wh �� GAN���ƿP��Dg���\�P,z�U�t��$_�}BR��=��飡���8$B��"/��I�����(���Roey�C9Z�Lqح3U��G�P@s�8��U� �M�ܠ }��&���;;��"j��^������Z�Y��˦]8��)sv�sڨ�+Ȅ�c�P<�Qw6g�qClӁ�{�6h�cW�R��kr���]W��nק���YS�H�B�� KUr�wZ���ӭe�糗�hL�.m�@�Y))��W�83e~�;�#.x,����#�x���.�n����+�F�d 0���ctYr���".�a��c��K�u�50�=���K�HH�;�������ŏ��E�'a8�x�w7.����U��kK��*����H�ih1��iT���i��*�r4s ��}:�`��o�w<v��|��u�%��Ȁ����]���J���J��.P��J�)FP>�c�d���Q���՚�#p��7�\�?r� �� V�q�Ӝ�ĺȿ��K�� N�p�ȹ`|�7��%{�3�F�WMwz����,s��@�J�o��e�br������d�C�뽤�q*�IʀZ=3n��S�wda�쥰�G�!�x�B�a�sUX4Y����r���O]��=��b��њ; P J�rO �W�����j� �� �A�"ͻdYx��Év��ǵ�2�#p�} ��m�A�H�o��@��@pAr��<�� ��Ґ� vXO�7��4Y��ϰ�c_�& 4�u<�p��B��Lg��Q�l�81k7m �ާ 5�1��\L���TQ��+��I�m�q����I�t�f��ȏ���3�m�n��ȃ�����┙"Z��K�Y}��y1��?ژ�kƸ���O ��֭o�PZ$�͚�� ���<��Z�$8�oj�����W|�� ����=�o��/�jRϱ��@�����qa� x��2��}r��g�Y�<wNJOW��ǵE�A��V�eɢ`5e�'� 0��O��ÖC��V�.��,���v�w4�Ĵ"T�z R��u=�a�}��9�ټS�����n7����|���p��9��a/ �}~�]�K ���Ϧ����15M��;/w���ήߧ�z�L?[j*������e�߄H4��x�bI���Yp�p!� "����K���+ IMݜ�mZ�zH3v �u�=��4dQ�<��ySs��/J���o�9rg�q��NZ�l��M��5��ݻڮ #�@j0 ����E��\�LlJ<�<g����V��9:���R������v��O�}q��Iw�ǀ�:�} ���N�dJ>����*�������3��������,cm��-��K,M���/�%tb-8�2+#�2�/G�`۩��������DhgD<�)Pr&>��䉏���j\k9�ѡ��y�����-������x���G�hgm��+���lFz5����7���a�X�~_ ��^ˊ�w;���wF4+���mE��]�N�lT�R��z��^�H NJ� ^�Z�9�'<��LZ���K�ojm����7�jo����C���sF�V������@�<�s�����l~pJ駠��j�����]��{�Ԅf.�w]w��������4Q�E�����B�н�� % v�k��&:(�P��;1 ��)^������-�A��[��G�}���8��fE��N�7S>9g)AY�,R]�-���j~r�91$��A���%�4���h����\��S��U7�N��[�\z�^˼&8�$����[�̫gr������V��a���B��m��wGi��}uAJ���vS��A-�0����9�~��x����1k���_q�lNg�[s��\:�{�j��&�4'��Og��$`��c��k��l�c� [��q��a䇉��[���c��zg�6�]@����㶱2�VCC�9�σʿ��2��S���1���� ��_�Gb&��L9�)v�]��q9�U��F�ҍI=��迉tK$�� D��W�2����'-ḧ́�e{\y�pG������Z]��;�[�8�'���M�H�EOi}U���[�kF 2���E��zA�q}�G�qB=�!-�$�o (ԠV��֖���-Ź=��=hBE-ې����Н�����y�4�u�Z�S��.�(TQ�62�o}?#�z�A�t�r��s���蘅�zi��Mտ�c����]屿�.D�a�Z(�HR��Բ�)��2��|(ج�M����1Ӷ�';g��è��uw`LH� �"�U��`�V_��,r��ȷ�l'B5�JUv��Ú_��^k��l�M7����F�36D� ��L�+nq��HH��T����~�q1 ���w¤ �4�Ƣ����=����:���=J&��$6����q���;y�v]�;_��=0�1@w��^U9�G�{��W�\���h/Th=H�]��zE1w���+����|��68�����$���f0K�i�7��tq�D��-��'J� ���?ַܿY<&gU�5a�nt ��%�l��S���`s�v@-�`�ws@�JqV�����4�d�n�j
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ