Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
0ed98f6eb5993def617902686da626ac_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0ed98f6eb5993def617902686da626ac_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
0ed98f6eb5993def617902686da626ac_JaffaCakes118
Size
221KB
MD5
0ed98f6eb5993def617902686da626ac
SHA1
7f6606a087aede9c80a0a63dd25a889cd0629248
SHA256
51162c0645da96d98f7013ae1b0426f0d034b35d9340365613dfb6fd81cf3ce9
SHA512
2f03b3496cf1ce5be81d3b8ce2d76c5a8426af75a95f3a5507d8478fea060af72e2cedabd17833c12bf824859d877ab840e712c5766737c5410011dd081cda82
SSDEEP
3072:8uWlA4RC/ZHn4xH6qpSJIQ+DE57k69gRhkU2NVImvtko/5:clXqoSJIQuE5k69W2dx
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
IsValidURL
URLDownloadToFileA
ord17
WinVerifyTrust
InternetOpenA
InternetConnectA
InternetErrorDlg
InternetCloseHandle
InternetReadFile
InternetTimeToSystemTime
HttpQueryInfoA
HttpSendRequestA
HttpAddRequestHeadersA
InternetTimeFromSystemTime
HttpOpenRequestA
InternetCrackUrlA
GetDeviceCaps
DeleteObject
DeleteDC
GetStockObject
GetObjectA
CreateSolidBrush
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
BitBlt
VerQueryValueA
GetFileVersionInfoA
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
GetStartupInfoA
GetModuleHandleA
CreateProcessA
Sleep
GetLastError
InterlockedIncrement
GetVersionExA
GetThreadLocale
GetExitCodeProcess
GlobalLock
GlobalUnlock
lstrlenW
GlobalAlloc
FindResourceA
LoadResource
LockResource
GlobalHandle
GlobalFree
FreeResource
GetCurrentThreadId
HeapDestroy
GetCurrentProcess
FlushInstructionCache
InterlockedDecrement
CreateEventA
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
CreateThread
SetEvent
lstrlenA
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
lstrcpyA
lstrcatA
GetTempPathA
WriteFile
SetEndOfFile
SetFilePointer
CompareFileTime
SystemTimeToFileTime
GetCommandLineA
GetDiskFreeSpaceExA
FileTimeToSystemTime
GetFileTime
GetFileSize
CreateFileA
lstrcmpA
GetShortPathNameA
lstrcpynA
FindClose
FindFirstFileA
GetDiskFreeSpaceA
GetEnvironmentVariableA
lstrcmpiA
GetUserDefaultLangID
GetSystemDirectoryA
DeleteFileA
GetWindowsDirectoryA
FreeLibrary
GetProcAddress
LoadLibraryA
CreateDirectoryA
MultiByteToWideChar
GetWindowRect
GetSysColor
GetClientRect
IsChild
GetFocus
ReleaseDC
GetDC
SystemParametersInfoA
SetFocus
DialogBoxParamA
FillRect
BeginPaint
IsWindow
RedrawWindow
GetClassNameA
GetDesktopWindow
CreateAcceleratorTableA
ReleaseCapture
SetCapture
InvalidateRect
InvalidateRgn
DestroyWindow
CreateWindowExA
SetWindowPos
GetParent
MapWindowPoints
GetWindowLongA
GetWindowTextLengthA
GetWindowTextA
GetWindow
DefWindowProcA
RegisterWindowMessageA
GetClassInfoExA
LoadCursorA
RegisterClassExA
DialogBoxIndirectParamA
GetActiveWindow
CharNextA
SetWindowLongA
MessageBoxA
wsprintfA
ShowWindow
LoadStringA
PostMessageA
PeekMessageA
MsgWaitForMultipleObjects
TranslateMessage
DispatchMessageA
EnableWindow
KillTimer
EndDialog
GetDlgItem
SendMessageA
CallWindowProcA
EndPaint
SetTimer
SetWindowTextA
ord253
CoInitialize
CoCreateInstance
CoTaskMemAlloc
StringFromCLSID
CoUninitialize
OleLockRunning
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
SysAllocStringLen
VariantClear
LoadRegTypeLi
SysFreeString
SysStringLen
SysAllocString
iswspace
?terminate@@YAXXZ
_exit
_stricmp
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_XcptFilter
strrchr
exit
_acmdln
__getmainargs
fopen
fread
malloc
isspace
fclose
strstr
strncmp
_ftol
_except_handler3
time
difftime
sprintf
??3@YAXPAX@Z
__CxxFrameHandler
_strdup
_EH_prolog
_purecall
strncpy
free
_splitpath
_local_unwind2
_mbsnbcpy
__p___argc
__p___argv
??2@YAPAXI@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ