Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
ae05325821b1e6631373d4fa0e0fb1ef_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ae05325821b1e6631373d4fa0e0fb1ef_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
ae05325821b1e6631373d4fa0e0fb1ef_JaffaCakes118
Size
624KB
MD5
ae05325821b1e6631373d4fa0e0fb1ef
SHA1
296d4cdfa8ee8e4b5c2a602d989140b6e7f7da77
SHA256
1046e05d25b801cc0cd5f84f6d05dfa020f3ba663e12b76e1281fa648cc2139e
SHA512
ee702a0d8b537fec76ded2c0f37ed53fa9964c6d7e01e0c1b73623976ef8a1204485261cf7c7f9bfb920e76580008f756d0184ff03710e0921a8795ea5208b4e
SSDEEP
12288:SHcsHylzW/vt7Qu6j7giPPJCXhAyuybrOVL7p2LMc3c:ebyetgZH6hAyZbiVL23c
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
UrlCombineW
StrCSpnW
PathFileExistsA
UrlUnescapeW
PathIsSystemFolderA
PathRenameExtensionA
PathIsURLA
PathCreateFromUrlW
SHRegWriteUSValueA
DllGetVersion
PathSearchAndQualifyW
SHRegGetUSValueA
PathIsDirectoryW
UrlEscapeA
PathIsDirectoryA
PrintDlgExA
GetOpenFileNameW
ChooseColorA
ReplaceTextW
ChooseFontA
CommDlgExtendedError
PrintDlgA
PageSetupDlgW
ReplaceTextA
PrintDlgW
VarR8FromI8
VarI8FromDec
VarMod
VarCyFromDisp
VarI4FromStr
VarI1FromR8
VarI1FromDec
VarBstrCmp
VarCat
VarI2FromUI4
VarR4FromI4
VarDecNeg
VarDateFromCy
SafeArrayCopy
VarI8FromStr
VarUI2FromDate
GetRecordInfoFromTypeInfo
VarDateFromUI4
VarI2FromUI8
GetVarConversionLocaleSetting
DeviceCapabilities
PlayGdiScriptOnPrinterIC
PrinterMessageBoxW
GetJobA
DeletePrinterKeyW
DeleteFormW
DeviceCapabilitiesA
GetDefaultPrinterW
FindClosePrinterChangeNotification
StartPagePrinter
AdvancedDocumentPropertiesW
DEVICECAPABILITIES
Arc
AddFontMemResourceEx
OffsetViewportOrgEx
GetCharWidth32W
VerLanguageNameA
VerFindFileA
GetFileVersionInfoW
WTSLogoffSession
WTSEnumerateServersA
WTSVirtualChannelQuery
WTSShutdownSystem
WTSEnumerateSessionsW
WTSWaitSystemEvent
WTSSetSessionInformationA
WTSRegisterSessionNotification
WTSOpenServerW
WTSFreeMemory
WTSTerminateProcess
WSAStringToAddressA
WSAAsyncGetHostByName
WSAEventSelect
WSAJoinLeaf
getprotobynumber
WSANtohs
ImageList_Remove
CreateToolbarEx
InitCommonControls
DestroyPropertySheetPage
FlatSB_GetScrollInfo
PropertySheetA
ImageList_GetImageRect
ImageList_SetIconSize
CreatePropertySheetPageW
ImageList_SetOverlayImage
ImageList_SetImageCount
ImageList_Destroy
GetLastError
GetLastError
GetVersion
SetCalendarInfoW
LoadLibraryExA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
�w�]�Z�k ���O�O���)%�- ��r��d�oR�=6~��1Iq�O�dѴ���X����%�(Ĭ�-[ K�/b�ך���sA �"�����q*�\��9��[�����T|t.�f��^��Gyme�1%=͓���Q�l.T� )�CS��ډXtDX���]�e�)��A������c�I ��E\=���C �O����>b`s�Y%�|˫��(q��+D��g\�,�M:��*1���&@���ڽ�k���Vqߖ6 s����r���J�o��\���s�Pƭ�윇�Y�]�8:��\����lO��)����C+�Lg�����\����!��<���4�����u�p(odtÃ�Qd}��x�R����ӹ,�C-l��b2�*���'"�{x٪&0ḿw���yϘ��j��e}?B��_"��y���?R��f1���)n,�`��#,�4��8��~����i�5��U��0��$ |���2��#�3]��j�jǖ8``�_�ҨV�]t0c���Wu`f��[�������[�S9��'s����ޟ�B���"�P�5u��ն)Ұ�*Bz�,�R!�,�m]f`�B�W�NR-EL�:*���ٌq�-T��d-��`Gn�&n�6u2�i�Py8+���d��"/ч&��4(R�x�t:��!g�O?������9���L�7���-P�#/G�*,�C�F������%�$Mק���s���DlL�]�����z�'�j{��p �w#�QO �l��ws��m��r`{F��p;���%���QK�B�\ߞcކ����r��x� -�Å�X�+��(�*Rq�7�t+��Q � I#��K�N�i!���C��:Lq@@ !3aٙN�{�6<TM����z$r�&��a} ��8�,��8"��-�Y��$3 5�뎬���<#�dbZ�A��}��i���8ݙ$K�� `2d>��� �~]��@v�hɪ�����qs����=�~���G(A��Y�=k�۪�m �"ψ�I"['��D -�l.� ��Q�&`%�J�����>�#��,�����,���<�H��L��"��_�GSX7?�d�[5�Q����J��Z�3��A����!�1�w��t�L��c��| �?��Rޜc������%Y��^��T�N��ov��L�}��_�Dp},M�Jh��a�3��^�g������d{��U���N�}�E:6�`�`n�����U�<�g��|���4S� �8(�ۯں��iT@��:��,��Rl&��$��C�d3.��+�U&����\DH��� n.��c���h����a��s�]˒5��'Jh�6u�>F�0ߌ"n���}���9�k��jK#��Q�g,�gZ�d:r��N�sl�k�j��A���;��������/�S�3��(�`����As�E�e*[�|��u��6��L�������&6�M_�LuH�v� }ݔ��R���Tp!��Q���i��L�߁��o�|,j%�'E��4Bx�\��o��6��P���TN������ڶ_ ��&��0n�Y� N�H�{��1������u������~�F$Q�z.�t������� 1�l�%�r�#y��5$�@��T�K���.x���4��v��=��2��=���)��|�:�S"�%����pl�5�t>aBC���@���c�y(�۠]~ъ,0�����q�%�o���7�I(\�x��Q 5�+�,n�J\�@!�&��?�OE���~9"��*JZ�8h��C�B#=�iҟ�{`\�(m`�k71�`�`w.�< �3 ��E[}o�[F�7{����}�a�FRgI��Xh�ݓ���d7X��e��)~cR�� .�^O�M5�S����/�N"S+8��ֽ&����#K�'I�[ �p� �7���$�AQ���y׀h�^4t�]�{������K��md�?|�>��E ���L�÷Ix��r�}��[Jf���|;)�G�\ ��)<d�m�h��֏6R�F�!S?�\��C.�U�nA;F��6��4��T[�Z�^�L��n(��z�z4��`�k7��,X�� �����pn��DJ9�ʄζ8��V�R�����K,c4��b(ڶ����:����0?�$��ݍ�䖺�(T;�_��%�L��פ)9���e�گ7�$���#��sZ���P�-M,�%�������� ���#�_�1�Z�@�_�����od$r�.S?r�L;N�r1J!�$�����7�P�������J���D"��W�"W���N��ɲF�~,���ޔ�V{������T�.�L�|�$�m��A�mJ{��v��d ������h� �T$�s����Uy�(�L�?0����r�#�ڝ�}���'ePJՖ��K��@L%��c/N����iYhu�/� ����OB4�"qR����{*���� �����!��5%��CQ����PK�u�٘�Dl�����a�b\,�����מ��{_m![p��CRG���������f�}z�ޕy�~2�ﶋϷHz?g���Z��6#�du�}1<ΛlL5�Fހ��[~l���&�|��a8)G�����nؔ!� ���X|+����q)l�F���8����A?�n]��T�}qS/�̺j�9�:�<�Li!eQ@K�X�u��AWU��N�9T� [���U��#�N��E�d��HڽOݤBitXUv�֚�7ܜ�)��%�p��犊J�O/�%p��d����s��M���q�t�T���֏p��+�͑OZT�먤��>�I<��9!~.�������[RwS䏤���F��iO*�o���::^+�l�8d�7����eZze��n��-�Cs����4w�=�'��`��3�Z<?�˪�`��g�cR��>J���H�HB��jj��k�÷�s�� \����2�7/���+��5F��$YOh@j�)t@�5Qo�c���U[�d FJl�f �X����C�����%�'~�g"Li>�Rt��*h��\�l������z��S_,T'z��,������6�Lt׳'mW��^.��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ