Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
a3289aa0d90294bfdd177b44c9b1a107_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a3289aa0d90294bfdd177b44c9b1a107_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
a3289aa0d90294bfdd177b44c9b1a107_JaffaCakes118
Size
1.5MB
MD5
a3289aa0d90294bfdd177b44c9b1a107
SHA1
f5fc1da01781ee5efe50d0dfaee3be49e989650c
SHA256
128adf1c50125e0031cc3382180c9ad57f4c47505a0b2af182a0837a3984c83a
SHA512
c02949addecf578a4629a3152590bfb29f18bb23538f5a75f1371f0cc602f005264fadd131fb9dc7d3db486252c64e565ea90a3ed4f07ad708620d34fa6df978
SSDEEP
24576:jKNp3y+Wm/gCzlQDamxvTrkN/4RrFuvMc7DvUY8H1QfsY0MUiDhbevPVd:jwpjWm/gil/04/377UYcWGQhiHj
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
UnhandledExceptionFilter
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetTimer
OleInitialize
SysStringLen
l��&��������O��b[6� �:ҩ�XZj�;����s���a�4�a]_�-�)b� ������_<}g��U�̷�'��*�o&P�ϙ��@�m��0@k8-Go��齵��=���,Ktj����eaiT���}E&f0�� �{�7P�M,��D��M�-��4� 胎��_ߎ���R�d�bZr}Np��s��>�P;������8��5^�� �+^�dz�Ď,,����̪���pY��x4]�S)A�B�U����Éxk�l��k�"�l�<�*��<8�pӸ_4F\q�E)��D�><��4V�ܷV�6?����F�$J`�s�2%1�BУ���P��6b�IkKtU��$%H�_R@�d���;v�y�=U(��~yS��u @~-V�*,nE�{��h#)��'V�|'� �`|��d��o�|�=�G���X)A4ɟhA��'͒]�,p�)jz�tZ�V5�|�� �-��퇙��$6���q��v�%�7&�k��% ��5�;|��t��kM����P 1�����=�㙉����4�����-�w-������� ��6K�76ښ�K?uN[�BOP`�^�Aa�pK�p� �z��X��`�h��]�L�o���]^q�)���q���Z��E�BK���3�"���~^�2�O�)�s����:�C*^syc�,�o���/wM4'� Fhz ��0t�[D�#B���8�EWd#ݠ@E���3h�����������G33�?���Y }e� щ>X�-`e�G���v��`;�H:WGS`gY\� �G4 �m��C������~�':��p���}><��HV�L�9��#Tm��A��E��~�k��o�˼����W��^�H�l�p�7Z(;���nJ]�$ �S�� �3�2��N]�SG��,������!{�����)�q%�������}]:��h6 t+��>����Gb��sK��l�_��3 N�,D5/�m��9 1����T�nܳ12%��z�B�yA4�����a��o�ՑGA�6�`�r^{|�� ��T���M^�Hn�ޞ�l��c����r�� ���Oh��㇣䵟x�$� $ �J��uB�P6@V�D����Fc�"�!���^�F:��N+#�d+������J[��F���+�����܉�ݧ�j��肊�,����Ɇo^�ě}��Tc���8�/���Ц�N��4�� <��]��b�+�g�M$9��꤃��m���dF�����]�Q�f+�;N[ �0a��{��2�MJ���I>����}t��?�! \���� �2�(�(+Ȭ�p_�:���� xj��ƃ��9n��3M��,��(%�<Y���-�9ǘ�N@O���%�ҋ>s+ImW�o�I�)�@�����#�L��=�� ��������~͢߂ʚ��y��4^4��D� ��0�.��퇍˦�������b������ ����V���4�;Օ-B:fb ���-���l�\�W�:AT���G[_��|;d��5�&X{�*b6�ﺬ5���#��H��t�.���h�(A�pZ.(��,p�4����������$�yI��q7�$i��,�-o�y�c�:3�;W�8KӶ���F�ظ3���Z:�w�L?�Cf�O��cwc��~:(�p쓌�.e&���Jq�$Ph-2�fd>����x&�%"z�8+#�O3ӣA�������B;K�j�أJ���=��,���OZ������%1^c����`��W���'۳a?lj�V�����āEUXF�зu4�/�/�l��s0���2uW��ˏ����Z�r˺q\e�HR���G�����2Z� �r�mi�e\�̬Vr�]��2��צ 6��.���*:�\���������q�Qf��g�!h��j߱��UÝ#U�+"�t�}�K��<�[������� { ���ۆ�<e���Ze��ZM(�{�ctߣxU�Yf�����)[��^IqlUg������kF���Vx�8lڍv!e�B<�P�mk��n�ܙ�.��3�����]@>v�����V-FD`�k"�� 樬�_6�����6�ż�u��m"!-��{���+_>���nى�L:o����8N+K���C���L]�w�)8c)��u�ɨ)Z�갷��a7V�1�6�y_��2%�!��hqq���#�ރ9gG9�hQ�{��"8� _��_N{����V_DX&�4�B���4������)� ���`A��::3#�\ސ�ٰ�Lz�A��8xq/��1<<�^���L?�z��L�^�|m�D�����MC�9q< K/-ZO~��"��Ϛ*u�m�rA�$.��P0*�A��E�ȸϽ��Ac�P L�T!U����]�v=�G��[��7p�=⪪bJ������g$���A؊:j���y�sm���_۷M�1�ɬ�⃪8x6���7�^�lq�s�A��*�%r�3ZZ�%��Ւ���E����Q<lЛ��N����;-��^�Bj����]�혏 [�J�tU",����0R��b��!��c˼���Z�}ZW�T� H��m��k�"|f�1/0����@3�Iac35!wҾ�E�����8Rr���J�̢ �0�<oS�Xg��Ex4t�/PH�zփ*}g#y����L+ff~��rf/���7|3 ��}��G���;'��\����A��ܤlF9t*��C�ۄ�Ұ�U`�*�u��:T��H���4@9L�nW`�!�wJ��:�v��O���Bqs�U������J� sH l!Ŭ�<��*�5H�$v����QS��$��H�tZmٙ!hr�B�*4�W��/������%ɀ�r��3d9B�r�)���;���.�L�4l-�z�?v�떎f�+Oi���po���\[�AߔI�[���=lPȻT�F' ��`\J4v�J�����!��Q�����oϱ|���&< 4�LO&Q��Zg��O�<jMG4S����d.�x���_N�35lm���jq�U���*�������ҙ9"gh�Dat.�Z����&����Tח�i���:�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ