Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
1612a8e3bc6c9c1cb77bbed70eaee818_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1612a8e3bc6c9c1cb77bbed70eaee818_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
1612a8e3bc6c9c1cb77bbed70eaee818_JaffaCakes118
Size
411KB
MD5
1612a8e3bc6c9c1cb77bbed70eaee818
SHA1
4f214cecef92ff0d751d0c36da140ad480889ec2
SHA256
10c2ea001f875754f24a03ec1b9053dc6e9ec4af18ec8ae9d9d353075a17de99
SHA512
750df4ef4d3e4c8e9da38041bf7b06c3bb42c54fd442fcd3f94df9bda25cd9529141e48633a8a6a7ee5efd92ab536bdf5a8d68ad1ec545ec28006e5b31ecc0c1
SSDEEP
6144:dBTOLbHdEGdv50vkY3E1+SqKMUz7kf/ct8l89rbwa+B5iEyd:dcxEGl5IkWE5Mu7kf/cw89rb1kAnd
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
HeapAlloc
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
UpdateWindow
MessageBoxA
RegCreateKeyExW
ShellExecuteW
CoInitialize
SysAllocString
HTMLayoutGetElementHwnd
GetAdaptersInfo
InternetCloseHandle
���I��.s���雃�g����c~��c��m!��0|nr+c�渔�ut�iH��m�4]t>�)r�$?�tvo�H�Zx7i�M����`�Le�.���,�S�Xv������=J�������ڳ�I�1��ĩ�lI�3o'�-��7�p�R�n}T�9��m y壊� �����t��u�����į�ue +K~�7����� Z,�;oԠ��V��H�&ߑ~3�M= �S�r��Mt*�M��]������/�$�z�NS�f l�O�����d[w�`@���k� ��"!�}3ͤ��$��#-���Q�IJ'�����![핃�\�����5��!i ���T[sqƃ���L(V4p�8��V@�i���t�4Eȁ�~�����VM�E��b�͌�4�5�i����=��G�VC�/һ���w�N="��f�T���I쟠��a��6��"�~.�fg�z�CU��I��e ,d����D��� �ntW�N`�N۵qɔ������O���PJs����� �wSKz�%&�W98Q�7�[�,�!\�%��X��F���k mQO��{Ȫ��6 1�z�@�i3S�>-�8�J��W���I8�yN���9�bK�Ik��+��XN5� ��&���/ �}���>+o��~Q���XP��fYG�"�4����=E�,z��A�)�8܂��:��w�yW�r�U��Ǔ$jf�P��]R#��y�s��5���?�/��^F��0�U�^�S$��T���d�* 4������!��K/@8Xӻ�p���S�A�3��_��)]t��QaԾ���gQ�c?;:س�h��$ ?���[���n1YA��B���B�T��o�٬m��iKJ�z2�(b�e�x�C=��9)3d�H�p�m�����Q9���m,��?� ;,�"g����:v:xy{�U��K��p�E?�iȢ��k��T~��A+MR�w�����B7W�ͺ"yA)�:��z��ʳ���č:�� i7������o���N�y�CU;�����\+���j}'vj� ��$��wC�%��(����3>G�"Z�C(�� >����5�R�����ݯ��~,���Ke뾾���쒇W�z����TI�����F1��[+�s��Rh�@˰�y��9����rEUc`6�`Ҕo������=�k�6b,e2\y2a�λOf �<�a[���L\��J��P;Aqؽ��;^��8�y�����*��l���r�(>����~�|!������%f�R���%=M���}�z{�3bU/rxBCA�qDh��W��(K.��@w�M��-Ս�U(����4=����B��B�N�����}�E#Rh�J��'���������cD�6+ �tJ�Hg���m��XKneP�ʍa��ǐqsb�jw�ϭ���{O� n|��ʔ�T���-e��q 6��{��>�$dJ����0���$�V��%�$E ����<'և!�$��t�.��)���w�#� 5���x(�$���)�����n�?�����~�Y��;��}{���^b��SF��"�Ѡ��Q��Rb����D[�q�ZA�E|�J.:_�N���p��Y���RZ�Ɣ ��\_��Z�" <��]��bܴq4F�7�N� ���08��a��n�~P����x���^}����'X��Z��|��J w0B���P��s>� ���ﮑoG�}��t�����A5Q$�b����j�O0� *�ȭe���j��O�PkEAq��_�L��q\˸�}S)Z)���-�M�s�I�����.�ϡc�% (���mߜ��&���T��է*r����`h`}�|~���y8�i��w��tS0��?]<�h2A�5���MB ӴM�R�!�y��\���+��u7��ܘ��_�JE���zaU�{��VBDP@ش��tx)Q8O����ŶU�&a#�)?�=���5G'sm�����]��P��J�� �F���K�;&�8l�u��� zO�Ac�1C�;��D��� "�1����-pAo�����J���K�O�z�j�=Fi�:�����K�Z��~}&��Ѝf�i�їz^p�?���=5�J)�0�����6����d��;�����҇���UA���a�q�p��堔������[�ዙ��?������2�Z%MR��65��ⳔCZȑ|��k�����`� 'םs�w}��O�XK�����^n�*�g$�G~�el�HE�.� pU�)�� V"�6������%���,0-�����D{V�V#f�aD`a��R�� � H M����EU����I�S������cLpL~������������T��fQ�K~Yk顯�ܾY���QU��Ρm.h����87��t�k��f��h�����Z�� tPiڰc���!<r9FU��͓�2�T��_3�~�kMW��7�3 (�<���Ŏ����Kb��gR�� xe�u�D���ԗ�!=����^'m�*yw�[գ��#�aB'�K�����a� ֈ���k�x�����ÆI��%�<d�F���I�S��s��\�Q���`*5xڵt��<%�a�⇏��b�E<'�!K18�Aq��>�M��ـ��-��J*��\5���I��仢`W�e��`>SVۥ"�NkU"�I�ב,�J?]^x�������[�[��@�����lϾa�R(d��6���������Z� ��p�7� �?֦@U�� ���Vt'�AŨ���~��Gm������������QY���ߘ����ԑ����Ml���`�h����0����m�����B���.d�Kgf5��^��F��f����a�7n{Q4�*�9�PF(��`��$8�X�n�gt������ں����h?mԇ5m�!�l�����>����5�Z�e9��$Ҋhأ�%������� G���Yɮ?8�m �?l̸˔�-�DyBLL�4����fCP�Ϭ�w��E�����lw1� .��i9;��z_iD?���2<�K����*ۮ�2���9w.��J)M�����iߍ����� ����|�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE