Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
b46859e1f93894b44592e22b76de2d2f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b46859e1f93894b44592e22b76de2d2f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
b46859e1f93894b44592e22b76de2d2f_JaffaCakes118
Size
1.5MB
MD5
b46859e1f93894b44592e22b76de2d2f
SHA1
f93836dc5a48dab9739cb5ff77276a43cbe769ad
SHA256
22d5140d7a3600e12ee6d2d1add86844aaba992f6819e312155772a80dcd4be4
SHA512
40d743e260c6bcf0be72309b4c4a25afafa17b685674b1c52fa70442c000ae9b9b14abec7357965464161059ab408f1b2dbc18c565e3a85cc2ce95d5847c76f8
SSDEEP
24576:gpb5Nu9uJkfoZ1Qvisr2Bk7aXCpIYm1qwUK8aUFE5bFtzs0QxVwsiEpzfDI3w2fu:o58920Xr2BkOSpIYOs1aUW5bFhQHRzZL
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LCMapStringA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CharUpperBuffW
OleInitialize
VariantClear
*���|�Hv��'cem+��Z@�9qz��܂���_̔���z�4'��b�|�C}�����Ȇܠ��[�� ���%F��\����|�י����m�||�r*6+���6�<�ڼV4)g�^��̜�m�l�^���g��.�Z'��2`^sk���h�H�f$�n����16MM3+x맗���r,p��m��&�M���c������Y�KKޔ�=b�r��x���{��� oۭ��0�-,���A�ҡY�w�)%Ӂ��9�7��zz�peT���k�4"x%�N�Á��/��%�Ⱃ��`����8VV�FQ}7��P��&b����<$�!��"��ş�XA ����� ���Ӆ�r[%�^< (�TI�7�T�0-���Ũ�~�����|O~z��13��l�Φ�o#�|��E+uN��ў�s�0d��U�L v�@!�0��to�^�#8�y��F�s��K���n,]�v�S%~cwQb�Εӳ/orJ��@�yE����s���Q�P��ci��S!Q9�n���8�X&��Q'3���4���g���[�c�������3������;����� E�/����{�%A��B�1謱�lglN�} �Δ�l���: V1���/p>:kB����!���A�a� %�4ȥ:SSn�uhNb�x�n�뙏��r!��!���0>��%q1A7�ɪ�!q���f@v�LvW<���0��-2`Ɲxn���9�^�p�F:��k��r�{�X���%��`q��{}&�4�W��~w��}6�������kU4��� �i�i��L����,n���V�� ����X�������OU*j��B��]GssD � \�b՚D���Vr:2f����(ɪ��t���k��\FWx����p��#�n��(�ȺU�� *� "�ځI��B�]��=����jw~]�O�e���vj���Л{��j��m�/���֒���E���jP||~Ӄ�Żz=+v�4I<��4��ig��lߜH� ��G�@�Tv����>C�%7WX��m�B���*���6���ޟ��!퍂��������G�"&T��)_��e��l���. ��[f'��`11�ꃋ�@������)Ł5�v��M�/�ݥ�Թ��R����` � u��m��l���lC��1˖IFt�xpp�� ���+!�N6�i��2�|d�(�����°�Ӣ�9='�gÞk���lf%��E�Eβ��PO<�:wm���$���*ͦ���4�� ��ܾKr�d'���<��^���C�y�eE8�k�ܤ�A�-�6�f��E�a���(6Q,�����&,� ]�;j��}#z��ɴ?#��#YZ����|�G cӫ}�7r�T��,ϻJ����p�=�B�s�Y~f��{zp�c���iC�����ۤI��X���#l��~��9Vn�. �������{�:A�[�IJz�.5�������n?��0QE�����r�k�5�3u��=g�w+����"��+1-?�,���`c����t�#�T,��m�}�R�����3��$cϛ/H�*��~m�tL�A������t���b�c�Ҵ��r��5w;������3tՂa�L�� �7�?�ﻌ�vd���f����3c��ոpD�y��䶘в��.bP0�̾���D/�G d0I���5@��i�7@k*���P����JZ���䆠2�a� ��s�y{��L1G��&����E�n��- ��WKc����I[v�uv�'S��zr~@�d��J���Vxe��$�Y%֜�3�_�~��ʍՓ|O�N�E�k�h���(~\$�w!9�{N@: Ҫ�]��T��U>��'H��� �lu� .���+��|wNT4������@d�K@?�t:�}D1��'�$s��s.�� I=g����$e�$��*!�V8��F�o>�\|z���}����9�&kA���� ��U��<t$�����/1o�E7�[���|��53�Ǵ\%����{���⼅��N���='��wi�o�W��m����;ߪ0{B?�?�|�w�@��2l-�~N���]���a\�1[a;|/����#�N�G�2sE��'��L���#T����;�� �T���Y8��D�.?B��)P���|T��"��|9�Q�?S��[ѱwFO���) l�!ߦܾ���jz��|���p[��ދ*�����cSE���u?qk�H�MW��4�#\BY�wO��i� KN��Y�?��^�p�k���C��2���s>㭀��=5�<�>��F�3]�h���m2]�]�ӫ�����қ�Мi��|+�.��{�����O������?! mQ��� L�T��cÖ��Ag2�z�Ku���W��G�m�8�SQf� V )��9� -5�����y��H c��7T���|<�*��oi?�F�����l&��u�P�h�� �N?�e���Y��u����~�I�\U����9�C�5�pI��y&id.q��w��FÔ�h&x�0\�p4������.��$q���+A:W.�;! _lН�X �{����}�5�_sǑsɭ��O �B��3���kbA��?b@r�9f��B��#G"N��x��<!@""���=9�(�ΛX8ҪED(�<|&wҲ��c��y�B�-�KdƐ����ܒdz���6�^���6m�S��,i��/M�<e0p"���2��ם��Q.����`aR�B�����:y=���J�����H�yǛ�rT$_� h5���b��ŜL����)U��ֽA����m�o�n,�ܤ�JQ�z:�\"�ȭz�3-2�{lj�dN�S�n������Lg�>Ɣ�%�f�-O�6ϼ�QPt�^2e��N��e��l�ko/Mc��I�������x�|l?u�m{��%b�⪛��]������.��hX�� S,��&��r�^fŷ*a{�j��/��6���x`U����3��(��^9ka<�@����Y{�$�T)�J1(&�-�0Y��V�6i'�U��2^J���/ʙkw��੍=�<o�!���GN�ɘ�a�d���� �n��k(���c>* �êIWӇJ���o�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ