Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
a6cdbd168c0f11a580047f30775e8dc1_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a6cdbd168c0f11a580047f30775e8dc1_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
a6cdbd168c0f11a580047f30775e8dc1_JaffaCakes118
Size
1.5MB
MD5
a6cdbd168c0f11a580047f30775e8dc1
SHA1
22c23a92a29e7471e3e962aa3a10d768fba5de71
SHA256
11f3c7ab6a7be8d7afa58cc95844f3fb4ec14bbacecdc7ba45ce9898dffefdd9
SHA512
186597b9d0f34baa85382d0df897fee4e23ba7a4cd480ebb9080323d3b5571645519b80f8b59749f2fabfe42aa6c85d218272be3fb8725b919d15be4a04eeebf
SSDEEP
24576:nMscDpJ189b0KySym2aazt6oAH0D83XKdPJN9UWGWOaGBARNdc+WYOsBtvKYguL2:nMscFJ181TySbazgodc+b9UWSa0izWYw
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetStringTypeW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetWindowTextW
CoUninitialize
SysStringLen
@J��4ݝكD�. �S��C A��O[��=��b�C.�=6U�/}��6�M *�Ћoe$O#��n��|��^qݟD�l%�B(f���bM�V�T���|T�/�L� ��+�3������L�y�F�i�=�&d9��4�^ �!������z8&n���d�%B��nũ���>Ld�ܼ<əa1A\�Qd%�C��� A`R�^aI��e�du�!|ש���f�(ʈ��P����z�f��3`��F�N�=�/�&R� )��{3��tf����D�{.1ꭎY�a�tˢ��ۥJ�ҥc�~�(v�$*ƫR�$������\���2d³�T2o �wJ&��P�=����]Ahj�}I`�1q��K�L���U�����'ě}�Kg��g�q���o}c��^����M���F��wHc��+g7m����_.�>�F�q�M��D����X_����n'���۽u��D;�l��k��f5:Aa�h5B���H�Æz��;)������#���S@O.��o��Q�ԑT"����0z}�-���?a �]q �Ub�>Jg"e�t�x�$�0����E�4x6����;�D�o��U�s� <�N,p�Ƨ�c!,���NJ����+>`�|g�;�њA͂ϴ)��=ݘ�c����eʙqi�=����I�j�A��_��a����9d�[t����� U���89Y&w#��lF�vϝv� ��xC�̒�/�<����P��N3�8��~�pn^%�]{ ��?�um��Ȼ5Qv�E���Ό�q���{Q�Đ,�Á�|?�%�����z��L�~��ǹ�C�`��w�r�&)8�Ͼoa��0��J����u��~k��|Ea��[�V�a�Z�o��f�n/�`����#쌋E�4J�ѩ��eI0B\�ߒ^Qm4�~Q+��5Nj��!P���vE���|��zl� �0�[t�vH�n��}]P'��].4�K�8ؖ�`,��gx��H��1��r?���y��Ńt ��C9ɀ6y�:ޔh?��Tۼ ���*o��� p�}�Vo�P�W����AKw��� �q�f��:RjVC����{nA}�wilP����h�?�(�e�JB��@���o>�F�� Ѧ��R�E�UpMr.~�'��zzW��m0~[t���7O}����,�m}�+.�&�@}�`�;yx�WC��k�E�;#j�X�,I�[�9@�U�@��\u�A��6�C�I��j�؊"�c�V ��3�Y�<_��9�HS�:���_���K�T9O��H��GԬ�PF Z/U�,"�����ߜ���ӳ����D�8 a��[���r�|�t��Z��r)���h��L~�F��>��O��j�"����H�]Bl �?35��q��t-���.F,�'J���=���o��Er��=t�N�'���[$ o��*��>���~;9fz����{�U;�- ��\$q�`��~�?9�s����NW��M�`�֘bܳ螇����Y�|S�E ��˕C ��áX��Em� �ʽ�54W�7��d��B�-/p���Y�%�A������G�7��e��j����7�Gr� ����MF=Tl��Q_Ӌ_領��o<�#�jP����^k%��']�x9oyp�q_E0��>���Ne�@�G>S���A� ��9 L�g� �Sݭ�PD���Y����d"�� p`���Xn���1`�&2�6-���@����wa��W��1ϢF�{� t������{d�T��njd��0C����.4~7W�X�S�j4�f��$��xs��4�u�Q����g����O��0L�Y���"/t�5Lt*�U+/G<�� �h'�_w��7EB[m0+H4�b{���o�m�\ b���Z)�z�����v�ц�����o���g��^5'�����"�u�5����rztqo~��\�����DF�^����8�Q~8��2����Y�H��yy,�Zf��˄1�G�k}e��A�ѯ�#�r�wl�v�x�L2wFP3��>��������)FW*[��lg&������>>c�.f�k^�)W8���Z ��WBS��\�� ��x��3�@�~Ĭ���K�'d��&"��%��H����P�1~��*vh�~ϭ�ҿv�P�V��ˉ�K.t���"�/vs��A_�kՃ�ʢz2Ά�U�Oy��S�#[9���ֶ��'�qݢ�*�n:�ٚ�)�m����MQW[���@�f���Ft3�{qz;ÛT��\��PQ��n�nzY�Вy,�JT~.��M��� �z������Ol%څ���ϴʿ�%�:��8R8��!��Z��ۛG杅 �Ny�������]�)�4�О O�Y�6hw��O���1�6�݀�Q���"����<y���~���^���9�ƴ�IC��|E�sV�ˊ>os��{!�"��z�r =�M�M�*�#���c��Ju`q�,LD3@YVI�Q��u:Vd;��T��|"�_��?GnO�L�ۊ�&կ�o*�<W�vď� ��϶�j�aw)I�'���Ŕ�O���M��B]ߏ�Z�r4m仢�0oI���S������]��Gŵ`'��4��rEJ~���Y�+��uq��*��w����+L��<=R�����Z����MyoG�!����b��}I�'#�!�~�� �`l^&�V��ʍ{k�}a^(Y&�S�Xh9 �lf�vw�҉�� �5|ί��� ��C���AX�'����a�Ǻ� ����>:l�y0#(���|�#���g ��B������0ʆ\�l��#���KWLs�����mPIX�k q�P��L�G��0�L���i�q~��+�W:n��b�Ю2��(���b�شK�Z?k}y��{hD�? �ƺ�#o۽����6ȟ���w�4��ɳI����y}�!}��w,(����+Dj:��!ré������|pm��-����[�0�"�����V�y����\��ׂ��:*�-R��$ءq���՛q���ka�2�T�{�ˎ���R��6
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ