Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
a1be3cbefb845eac49a0cad049876a73_JaffaCakes118.exe
Resource
win7-20231129-en
Target
a1be3cbefb845eac49a0cad049876a73_JaffaCakes118
Size
5.3MB
MD5
a1be3cbefb845eac49a0cad049876a73
SHA1
68f8f9ed528a21ca796fe3fa228b8e0ad1141218
SHA256
4a0d89026fc07bec802a4be7341353f3945685075c3e4023b3403c3d7c51e8cd
SHA512
c5238ff3595869b8fdf4a8194bf4e9f6ea7ae3e96ea802d368d6d44d89512fe04457b5c9da390b66ec4435cfbc40167c1b3f04c710322ea3611cf0b5b33f904e
SSDEEP
98304:3AUjbsU6qkD4dQd2IpZB19TzKT4PU7MwT4PU7MBoGM/YhG+:QG4d2i1M/IG+
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\build\93ede267e0821512\build\build_UTIL\bin\cleaner-util.pdb
LockFileEx
UnlockFile
HeapCompact
GetSystemInfo
DeleteFileA
WaitForSingleObjectEx
LoadLibraryA
CreateFileA
FlushViewOfFile
GetFileAttributesA
GetDiskFreeSpaceA
FormatMessageW
GetTempPathA
HeapValidate
UnlockFileEx
SetEndOfFile
GetFullPathNameA
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
HeapCreate
AreFileApisANSI
InitializeCriticalSection
TryEnterCriticalSection
GetSystemFirmwareTable
QueryDosDeviceW
TerminateProcess
VirtualAlloc
VirtualFree
ReadProcessMemory
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
SetEnvironmentVariableW
GetDriveTypeW
GetLogicalDrives
GetWindowsDirectoryW
GetNativeSystemInfo
IsWow64Process
DeviceIoControl
ResumeThread
FreeResource
VerSetConditionMask
lstrcpynW
VerifyVersionInfoW
FindFirstFileA
FindNextFileA
lstrcmpiA
GetCurrentDirectoryW
LocalFileTimeToFileTime
SetFileTime
GetFileInformationByHandle
GetLocalTime
CreateEventW
ResetEvent
SetEvent
GetCommandLineW
WriteConsoleW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
SetConsoleCtrlHandler
CreatePipe
SetStdHandle
GetTickCount
GetConsoleMode
GetConsoleCP
SystemTimeToFileTime
GetUserDefaultLCID
FormatMessageA
GetTimeFormatW
GetDateFormatW
GetTimeZoneInformation
GetFileType
GetStdHandle
ExitThread
ExitProcess
RtlUnwind
WaitForMultipleObjectsEx
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
SetProcessAffinityMask
VirtualProtect
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
ChangeTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
CreateThread
SignalObjectAndWait
CreateTimerQueue
GetProcessTimes
CreateSemaphoreW
ReleaseSemaphore
GetModuleHandleA
GetModuleFileNameA
CreateFileMappingA
GetFileSizeEx
GetStartupInfoW
UnhandledExceptionFilter
LCMapStringW
CompareStringW
GetCPInfo
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
CreateDirectoryExW
CreateHardLinkW
SetFilePointerEx
GetDiskFreeSpaceExW
FindFirstFileExW
RtlCaptureStackBackTrace
GetModuleHandleExW
QueueUserWorkItem
GetExitCodeThread
SwitchToThread
DuplicateHandle
QueryPerformanceFrequency
GetStringTypeW
LoadLibraryExA
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
IsDebuggerPresent
Sleep
WideCharToMultiByte
EnumSystemLocalesW
GetSystemTime
ReadDirectoryChangesW
LocalAlloc
GetComputerNameW
GetSystemDirectoryW
GetVolumeInformationW
DeleteTimerQueueTimer
CreateTimerQueueTimer
TerminateThread
WTSGetActiveConsoleSessionId
MultiByteToWideChar
OutputDebugStringW
FlushFileBuffers
GetPrivateProfileSectionNamesW
WritePrivateProfileStringW
lstrcmpW
MulDiv
GlobalHandle
SetCurrentDirectoryW
CreateNamedPipeW
DisconnectNamedPipe
ConnectNamedPipe
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
VirtualQuery
GetCurrentThread
lstrcmpiW
LoadLibraryW
LoadLibraryExW
FreeLibrary
GetCurrentThreadId
GetCurrentProcessId
CreateMutexW
IsValidLocale
QueryPerformanceCounter
GetPrivateProfileStringW
MoveFileExW
MoveFileW
CopyFileW
lstrlenW
SetLastError
SetFileAttributesW
RemoveDirectoryW
GetFullPathNameW
GetFileAttributesW
FindNextFileW
FindFirstFileW
FindClose
GetFileTime
SetUnhandledExceptionFilter
GetLocaleInfoW
LocalFree
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
FindResourceW
SizeofResource
LockResource
LoadResource
GetModuleFileNameW
FindResourceExW
GetVersionExW
OpenProcess
GetCurrentProcess
GetTempPathW
GetTempFileNameW
DeleteFileW
GetLongPathNameW
WaitForMultipleObjects
GetProcAddress
GetModuleHandleW
WriteFile
SetFilePointer
ReadFile
GetFileSize
CreateFileW
GetSystemTimeAsFileTime
CreateDirectoryW
lstrcpyW
CreateProcessW
GetExitCodeProcess
WaitForSingleObject
CloseHandle
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileAttributesExW
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
ReadConsoleW
DecodePointer
OpenClipboard
CloseClipboard
GetWindow
ExitWindowsEx
GetTopWindow
GetClassNameW
PostMessageW
UnregisterClassW
GetWindowThreadProcessId
LoadStringW
SendMessageW
GetCursorPos
FindWindowA
CreateDialogIndirectParamW
MonitorFromPoint
GetWindowDC
SetActiveWindow
TrackPopupMenu
GetSubMenu
DestroyMenu
SetTimer
SendDlgItemMessageW
SetClipboardData
EmptyClipboard
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
PostThreadMessageW
PostQuitMessage
DestroyWindow
ShowWindow
BringWindowToTop
CreateDialogParamW
DialogBoxParamW
CharNextW
GetActiveWindow
GetKeyState
GetSystemMetrics
GetForegroundWindow
SetForegroundWindow
GetClientRect
GetWindowLongW
SetWindowLongW
IsWindow
IsWindowVisible
SwitchToThisWindow
GetDesktopWindow
MessageBoxW
RegisterWindowMessageW
DefWindowProcW
CallWindowProcW
RegisterClassExW
GetClassInfoExW
CreateWindowExW
IsChild
MoveWindow
SetWindowPos
DialogBoxIndirectParamW
GetDlgItem
SetFocus
GetFocus
SetCapture
ReleaseCapture
CreateAcceleratorTableW
DestroyAcceleratorTable
GetDC
ReleaseDC
BeginPaint
EndPaint
InvalidateRect
InvalidateRgn
RedrawWindow
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
ClientToScreen
ScreenToClient
GetSysColor
FillRect
GetParent
LoadCursorW
EndDialog
wsprintfW
GetWindowRect
MapWindowPoints
MonitorFromWindow
GetMonitorInfoW
SetWindowContextHelpId
LoadImageW
MapDialogRect
SetParent
RegisterClassW
UpdateWindow
FindWindowW
LoadMenuW
LoadIconW
GetClassLongW
SetCursor
EnableWindow
GetDlgCtrlID
KillTimer
CreateSolidBrush
CreateCompatibleBitmap
BitBlt
DeleteObject
GetObjectW
GetDeviceCaps
CreateDIBSection
SelectObject
CreateCompatibleDC
AddFontResourceW
DeleteDC
GetStockObject
CreateFontIndirectW
DPtoLP
SetBkMode
SetTextColor
GetTextExtentPoint32W
SetBkColor
SetDIBColorTable
ExtTextOutW
CommandLineToArgvW
ShellExecuteExW
SHFileOperationW
SHGetFolderPathW
SHGetMalloc
SHGetDesktopFolder
Shell_NotifyIconW
ShellExecuteW
OleUninitialize
OleLockRunning
StringFromGUID2
OleRun
CoInitializeSecurity
CoSetProxyBlanket
CoInitializeEx
StringFromCLSID
CoCreateGuid
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitialize
CreateStreamOnHGlobal
CoTaskMemAlloc
CoTaskMemRealloc
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleInitialize
VariantChangeType
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
VariantClear
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
SysAllocString
VarUI4FromStr
SysFreeString
VariantInit
DispCallFunc
GetErrorInfo
SetErrorInfo
CreateErrorInfo
SysStringLen
VariantCopy
RegCreateKeyExW
AddAce
RegSetValueExW
RegOpenKeyExW
LookupPrivilegeValueW
GetTokenInformation
DuplicateTokenEx
AdjustTokenPrivileges
OpenProcessToken
RegCloseKey
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
MapGenericMask
GetFileSecurityW
AccessCheck
RegDeleteKeyW
GetLengthSid
GetSidLengthRequired
GetSidSubAuthority
InitializeAcl
InitializeSid
IsValidSid
SetNamedSecurityInfoW
ChangeServiceConfigW
ChangeServiceConfig2W
CloseServiceHandle
ControlService
CreateServiceW
DeleteService
OpenSCManagerW
OpenServiceW
RegDeleteValueW
RegEnumKeyExW
RegQueryInfoKeyW
ConvertSidToStringSidW
RegQueryValueExW
CreateProcessAsUserW
ImpersonateLoggedOnUser
SetTokenInformation
RegisterServiceCtrlHandlerW
SetServiceStatus
StartServiceCtrlDispatcherW
LookupAccountNameW
SystemFunction036
GetAclInformation
GetSecurityDescriptorControl
GetSecurityDescriptorDacl
GetSecurityDescriptorGroup
GetSecurityDescriptorOwner
GetSecurityDescriptorSacl
InitializeSecurityDescriptor
MakeAbsoluteSD
SetSecurityDescriptorDacl
RegEnumValueW
SetSecurityInfo
GetAce
GetNamedSecurityInfoW
EnumServicesStatusExW
QueryServiceConfigW
QueryServiceConfig2W
FreeSid
ConvertStringSidToSidW
RegEnumKeyA
RegOpenKeyExA
RegQueryValueExA
EnumServicesStatusW
QueryServiceStatusEx
StartServiceW
CopySid
EnumDependentServicesW
QueryServiceStatus
EqualSid
LookupAccountSidW
_TrackMouseEvent
InitCommonControlsEx
SetWindowTheme
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipStartPathFigure
GdipGetImagePalette
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipDeleteStringFormat
GdipCreateStringFormat
GdipMeasureString
GdipDrawString
GdipGetFontSize
GdipGetFontStyle
GdipGetFamily
GdipDeleteFont
GdipCreateFont
GdipGetFamilyName
GdipGetGenericFontFamilySansSerif
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipFillPath
GdipFillRectangleI
GdipGraphicsClear
GdipDrawPath
GdipDrawRectangleI
GdipSetSmoothingMode
GdipCreateBitmapFromGraphics
GdipLoadImageFromStream
GdipSetPenColor
GdipDeletePen
GdipCreatePen1
GdipCreateLineBrushFromRectI
GdipSetSolidFillColor
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipAddPathArcI
GdipClosePathFigure
GdipGetImagePaletteSize
GdipDeletePath
GdipCreatePath
GdipDrawImageRectI
GdipCreateFromHDC
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipLoadImageFromFileICM
GdipLoadImageFromStreamICM
GdipLoadImageFromFile
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdiplusShutdown
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
InternetGetCookieW
InternetSetCookieW
CreateEnvironmentBlock
UnloadUserProfile
SymGetOptions
SymCleanup
SymFunctionTableAccess64
SymGetModuleBase64
SymInitialize
SymSetOptions
MakeSureDirectoryPathExists
StackWalk64
ImageNtHeader
UuidToStringW
UuidCreate
RpcStringFreeW
CryptMsgClose
CryptMsgGetParam
CertCloseStore
CryptQueryObject
UnMapAndLoad
MapAndLoad
WinHttpQueryHeaders
WinHttpWriteData
WinHttpSetTimeouts
WinHttpReadData
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpCrackUrl
WinHttpOpenRequest
WinHttpSetOption
WinHttpReceiveResponse
WinHttpSetStatusCallback
WinHttpOpen
WinHttpCloseHandle
WinHttpConnect
socket
send
recv
inet_addr
htons
connect
gethostbyname
inet_ntoa
closesocket
WSAStartup
GetAdaptersInfo
GetDeviceDriverBaseNameW
EnumDeviceDrivers
GetProcessImageFileNameW
WNetGetProviderNameA
PathFileExistsW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ