Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
a19af884f239123a8ff28fc657c26057_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
a19af884f239123a8ff28fc657c26057_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
a19af884f239123a8ff28fc657c26057_JaffaCakes118
Size
26KB
MD5
a19af884f239123a8ff28fc657c26057
SHA1
53df68add7db2baff2ab4fdaaf6647dfaad60231
SHA256
a597940dffd85ab8fc94c19dd4e23d96f170d4f48a72eaa6e7677086e8bc66e0
SHA512
62fdde60650ae59797269f67547e559e319ee834eb1b90e8f43d798a7359aa6ef13eeda861d6c982217779a8edf1ed3745fedb533a727f5c13a7dec162f23b67
SSDEEP
768:Wjk6op6yPmkH5MelrLjCZSDDGnSSFr4O378IT6xbUu:ZuSPG31dHT6h3
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ord46
ord121
ord64
ord170
ord49
ord120
ord17
ord124
ord103
ord117
ord160
ord31
ord159
ord158
ord8
ord73
ord144
MoveFileA
GetLastError
WaitForMultipleObjects
OpenEventA
GetProcessHeap
HeapAlloc
GetModuleFileNameA
_lopen
_llseek
SetEvent
CreateEventA
FormatMessageA
lstrcpyA
ExpandEnvironmentStringsA
GetVersionExA
GetFileAttributesA
CreateDirectoryA
lstrlenA
lstrcatA
GetWindowsDirectoryA
LocalFree
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
DebugBreak
ResetEvent
Sleep
GetCurrentProcessId
_lclose
_lwrite
_lcreat
_lread
WritePrivateProfileStringA
RemoveDirectoryA
FindClose
FindNextFileA
DeleteFileA
FindFirstFileA
HeapFree
FreeLibrary
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetProcAddress
LoadLibraryExA
SetErrorMode
GetPrivateProfileStringA
lstrcmpA
wsprintfA
MessageBoxA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
RegEnumKeyA
RegDeleteKeyA
RegSetValueExA
RegOpenKeyExA
ShellExecuteA
AltStartup
Cleanup
Startup
WiseDotNetSec
WiseGetDotNetVersion
f0
f1
f10
f100
f101
f102
f103
f104
f105
f106
f107
f108
f109
f11
f110
f111
f112
f113
f114
f115
f116
f117
f118
f119
f12
f120
f121
f122
f123
f124
f125
f126
f127
f13
f14
f15
f16
f17
f18
f19
f2
f20
f21
f22
f23
f24
f25
f26
f27
f28
f29
f3
f30
f31
f32
f33
f34
f35
f36
f37
f38
f39
f4
f40
f41
f42
f43
f44
f45
f46
f47
f48
f49
f5
f50
f51
f52
f53
f54
f55
f56
f57
f58
f59
f6
f60
f61
f62
f63
f64
f65
f66
f67
f68
f69
f7
f70
f71
f72
f73
f74
f75
f76
f77
f78
f79
f8
f80
f81
f82
f83
f84
f85
f86
f87
f88
f89
f9
f90
f91
f92
f93
f94
f95
f96
f97
f98
f99
g0
g1
g10
g100
g101
g102
g103
g104
g105
g106
g107
g108
g109
g11
g110
g111
g112
g113
g114
g115
g116
g117
g118
g119
g12
g120
g121
g122
g123
g124
g125
g126
g127
g13
g14
g15
g16
g17
g18
g19
g2
g20
g21
g22
g23
g24
g25
g26
g27
g28
g29
g3
g30
g31
g32
g33
g34
g35
g36
g37
g38
g39
g4
g40
g41
g42
g43
g44
g45
g46
g47
g48
g49
g5
g50
g51
g52
g53
g54
g55
g56
g57
g58
g59
g6
g60
g61
g62
g63
g64
g65
g66
g67
g68
g69
g7
g70
g71
g72
g73
g74
g75
g76
g77
g78
g79
g8
g80
g81
g82
g83
g84
g85
g86
g87
g88
g89
g9
g90
g91
g92
g93
g94
g95
g96
g97
g98
g99
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ