Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
0884a65ee2e5c17b3b400ef8fa79b47c_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0884a65ee2e5c17b3b400ef8fa79b47c_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
0884a65ee2e5c17b3b400ef8fa79b47c_JaffaCakes118
Size
70KB
MD5
0884a65ee2e5c17b3b400ef8fa79b47c
SHA1
a8b0610d3f8fea7eb8cc03c6ed55d9f9e9c165fe
SHA256
7dc16866e12bfd41c725b9ab098a0e4c2878e8ab6b89cb3756b6706d33b4e328
SHA512
98bc6c3741bd4bbf8c355d15112d37f05e846d2ff9aab048cf6f0e48b4cf681285722e64d7dbd79b8587ff990be7120dfd950ac3959c9fc606c3c7237a72b855
SSDEEP
1536:ty+UKQRhI8lIt8rciMUaDHItqYMmtTModKFI3o1MuoOPXm7MpmZv2XKJ:RUKYhXM8rpM5oUYZNkI7OPW7O+vTJ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetCurrentThreadId
MultiByteToWideChar
GetLastError
ExitProcess
WriteFile
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
MoveFileA
GetStdHandle
GetFileSize
GetSystemTime
GetFileType
CreateFileA
CloseHandle
GetCommandLineA
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
HeapFree
HeapReAlloc
HeapAlloc
GetProcessHeap
WriteFile
LoadLibraryExA
LoadLibraryA
GetProcAddress
GetModuleHandleA
FreeLibrary
CreateFileA
CloseHandle
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
CharNextA
MessageBoxA
SysFreeString
SysReAllocStringLen
�=m��U���B���B��ūM�z?<ufT�+�_6L�W{cGC�ЫM�����6�R�tcE�~��_3P�Vg"��h9�^#�k���U�����_�J��&5�Ja�n�7�<�7.�Hs˙�+NKD���Ƹު�MJ��V�x%P���K�Ռ'VH�R�?�,�H���I�=�3Zi>>�r�e6zI^���ܼ���Ԏ1���;�,xyӳ"�^4J��b��h�`u�����HE0Z��s��S;���3�+��'�1^S�=L�amg r��b�����"<�Q�ٵ�:6C���WJ��=l��*��DI��Ji�EH;�Z*��6����N���)�cz)g㐋��N��f��$8s)�41|E����h��&B4�b1��]�o��״�:��%7���`:"��%~S�*�6M���{���� ����n�>��T��v*$����wM��co�����dM����0��@�닢o��+ѿ�2o1�!H�:L����ҋ�¿>n���<������:��$�2<�ݜ]6Y�:Iv4�1)���`� ��[Gj�SgRpXȑ��hZ ��X"�8r�!2�5g&��p�=�5X���ҟ�_���&ef�)�^�������o��I�h�#����sBAC]�)����G��^�(ϭ��ɫ{�a�)�/Z��T�����<䞩et�J$e�q�io�N�S�T����V���I����<�d1��,��%*��٤,_?%�N-���Bк�m4z^Y�V<�hU��>ݾ3���� ���];� {����@��f��_a��� ��o�ߣʞ0���h� �u��dI���Xdό�+���W�0�%��F�2.���2튰����xx��T�[dQ #��53�sʧ4��,:]���D��%��.�� ��E�3E��^�w��ۄ������Y�%�4�| ѯ �B�8P����T���YЉe���-+���|�E�~�i��yx���2����4�Ȝ�&�𥋆���$�����H-��pV��<O��!� 㾩]��5e���J� �����L�o(�y���)|-Ԑ�����Ī��P/T��F��3���9�~�CW�l�F��q(]�<�H�L����G�س�\t�,�k�u!|��ܢ��I��!�J�?�١<`Cn���|�{�e���������q�|�m�جmWiO����68!�Z�&z�f�yƒWXx��铙/�\R�V��z]�ךAwK*���6�����P/n!��$��;с� �I�KD���ɝK�pR<� �2|r�����#���=@�(4� ��UQ�7�Z ��5�{���G[$C?���2g%����F?T�k~|��)]\t�����h��K{��?5��)�/���18���a����,&^�>o�������zudrR�؋�}D�h<� 6�J���;%|�@���Q�I]Ƚ����;)2{�I,o��qVw��a�'J�>��ru6�9��A���T=%�?p'(#}2Ϡ *��f�36����栘�����*�&@H�l+����� �D��?�% ���P�"X�蛓���6��u�l���ql(��A!�9�̏�-# �T�?9�2�廕<�r��$��L�g�-��aJ�$q��)\��Na��֛f�Y!X��km�̡qMa�Ij�;F�|K� a�s|�U�*3�sd��!��:�0UL*|��"�^I�=�`��~c�!gSmI�e��O�2���c�\�O����w.�,��7&�3�+�zp$�C��&�T��$���y��L��(���u� ]^�j7=��M|����v�; X�X��pÎk�o���IsÙ���+&t�+<���W 6W�q�ph�2& <%{�?���97 '�r�� y���25���'�R���¦�7{�) �?]�Bg��V�B���^��I$����T����xr��L�{��FAׂ��U�b����,A.I�ޚ٘~��l5Eů䐌B5)(� �����TQ)v�2_v�Y���5(N�zێ��>8:������;���[[��r@�\l���eGB���i����"��ϳa2%��Mvhvv��j�G�?�un]?4*�0�1d�t��Ws�K���R]W�KE�]���b �@�a�������A8�r}�g�F���O'%hq�~=�h��4l��=L�#�*-��/�R+r�+)��� �:�!kli��c�,I�N r�)uQ�&�����;�[�le�^�&��amM��F��)�U�K�f���ت�W�54W��ڝ��Km�t�v5�`Jw����~�'K}N�F�R��� E�O"�M�) ݿa�Yփ�p�T�f�e���gj;�ɰ��f��v�B5���g}�ˎ��(oե?5��)�P��Ue�&�M���/��'�����̻�B�*������s'5�]�L"j�����gf@�!�Y?�@�a�O�p�`�"GS���7;=b� �!�ϧ��J�Li{�a��_�#-�$F�Q�?�aR�sL��0͝�S1m5w��CCSva����\�!�̶��J�)mU�m�q�2J22��\�ݢ�Q����-�f��=>�hܫ"c� t��Ux�*��OOzYdHH��ZQ2ʽI(�b���i"(���~����<�YY�ͩ"ܚ���L����T~9(jf��-���g����M.��R}A�w�;�u��9hl�5| B�I�tM2���Pf���\�O{v��n1�;��p�Y��FǪ6?`����' 54�p5���q�S�ć��J�X~b�6�V�L,)�~������ �C2<4�s���m��(�=��U�������ͣ������Z�ʑ��4�~6�� �MO��W+�U�m�5 �n+h�5\�X�����P������a��o����\ʫ� e� po֑��5��nb[����9NJ� 5X*cA:;�(u������ًڗ�^T��Ԑ�Θ�ePn�i��m �u�=6Ug�]�FU� �8# q���-�� �'%� F�%gZ�-���Ǚ��I�V'c8���j����6 ߬gT��������r㭜G@���,�S�+�k魈)H��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ