Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
1b22e635be532ef053ecaa79d4c749e0_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1b22e635be532ef053ecaa79d4c749e0_JaffaCakes118.exe
Resource
win10v2004-20240226-en
Target
1b22e635be532ef053ecaa79d4c749e0_JaffaCakes118
Size
740KB
MD5
1b22e635be532ef053ecaa79d4c749e0
SHA1
343819eaad58793a6d661922416ee41b71ada2f5
SHA256
cd22924fcec6a6ab36e1f12fe8e53ca98131d9ff4c27d7e98369ec019438cb75
SHA512
8cb51c0699620784bd18772760b690f70f8ff8078a9e22e1e0d8314d37cb9d4edf4152aa0ed173f476ce4a7ded1d5fc7495a6790404ed44ecb88765e1c897c64
SSDEEP
12288:+H1vhBnW1XcfMsQWq67efy5BvV5vbLsWesVbmfYaJ3:61vhBW1Xc0/GegFbLp9VnaJ3
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
@@Delanykey@Finalize
@@Delanykey@Initialize
@@Editkey@Finalize
@@Editkey@Initialize
@@Fj@Finalize
@@Fj@Initialize
@@Rega@Finalize
@@Rega@Initialize
@@Regclip@Finalize
@@Regclip@Initialize
@@Regf@Finalize
@@Regf@Initialize
@@Rplat@Finalize
@@Rplat@Initialize
@@Sg@Finalize
@@Sg@Initialize
@@Sopt@Finalize
@@Sopt@Initialize
@Classes@TComponent@UpdateRegistry$qqr4boolx17System@AnsiStringxt2
@Classes@TComponent@UpdateRegistry$qqr4boolx17System@AnsiStringxt2
@Classes@TComponent@UpdateRegistry$qqr4boolx17System@AnsiStringxt2
@Classes@TComponent@UpdateRegistry$qqr4boolx17System@AnsiStringxt2
@Classes@TComponent@UpdateRegistry$qqr4boolx17System@AnsiStringxt2
@Classes@TComponent@UpdateRegistry$qqr4boolx17System@AnsiStringxt2
@Classes@TComponent@UpdateRegistry$qqr4boolx17System@AnsiStringxt2
@Classes@TPersistent@$bctr$qqrv
@Classes@TPersistent@$bctr$qqrv
@Classes@TPersistent@$bctr$qqrv
@Classes@TStringList@$bctr$qqrv
@Classes@TStringList@$bctr$qqrv
@Classes@TStringList@$bctr$qqrv
@Classes@TStrings@$bctr$qqrv
@Classes@TStrings@$bctr$qqrv
@Classes@TStrings@$bctr$qqrv
@Forms@TForm@$bctr$qqrp18Classes@TComponent
@Forms@TForm@$bctr$qqrp18Classes@TComponent
@Forms@TForm@$bctr$qqrp18Classes@TComponent
@Forms@TForm@$bctr$qqrp18Classes@TComponent
@Forms@TForm@$bctr$qqrp18Classes@TComponent
@Forms@TForm@$bctr$qqrp18Classes@TComponent
@Forms@TForm@$bctr$qqrp18Classes@TComponent
@Forms@TForm@$bdtr$qqrv
@Forms@TForm@$bdtr$qqrv
@Forms@TForm@$bdtr$qqrv
@Forms@TForm@$bdtr$qqrv
@Forms@TForm@$bdtr$qqrv
@Forms@TForm@$bdtr$qqrv
@Forms@TForm@$bdtr$qqrv
@Inifiles@TCustomIniFile@$bdtr$qqrv
@Inifiles@TIniFile@$bctr$qqrx17System@AnsiString
@Inifiles@TIniFile@$bdtr$qqrv
@System@%DelphiInterface$t14Forms@IOleForm%@$bdtr$qqrv
@System@%DelphiInterface$t14Forms@IOleForm%@$bdtr$qqrv
@System@%DelphiInterface$t14Forms@IOleForm%@$bdtr$qqrv
@System@%DelphiInterface$t14Forms@IOleForm%@$bdtr$qqrv
@System@%DelphiInterface$t14Forms@IOleForm%@$bdtr$qqrv
@System@%DelphiInterface$t14Forms@IOleForm%@$bdtr$qqrv
@System@%DelphiInterface$t14Forms@IOleForm%@$bdtr$qqrv
@System@%DelphiInterface$t23Classes@IStringsAdapter%@$bdtr$qqrv
@System@%DelphiInterface$t23Classes@IStringsAdapter%@$bdtr$qqrv
@System@%DelphiInterface$t23Classes@IStringsAdapter%@$bdtr$qqrv
@System@%DelphiInterface$t8IUnknown%@$bdtr$qqrv
@System@%DelphiInterface$t8IUnknown%@$bdtr$qqrv
@System@%DelphiInterface$t8IUnknown%@$bdtr$qqrv
@System@%DelphiInterface$t8IUnknown%@$bdtr$qqrv
@System@%DelphiInterface$t8IUnknown%@$bdtr$qqrv
@System@%DelphiInterface$t8IUnknown%@$bdtr$qqrv
@System@%DelphiInterface$t8IUnknown%@$bdtr$qqrv
@System@AnsiString@$bctr$qqrv
@System@AnsiString@$bctr$qqrv
@System@AnsiString@$bctr$qqrv
@System@AnsiString@$bctr$qqrv
@System@AnsiString@$bctr$qqrv
@System@AnsiString@$bctr$qqrv
@System@AnsiString@$bctr$qqrv
@System@AnsiString@c_str$xqqrv
@System@AnsiString@c_str$xqqrv
@System@AnsiString@c_str$xqqrv
@System@AnsiString@c_str$xqqrv
@System@AnsiString@c_str$xqqrv
@System@AnsiString@c_str$xqqrv
@System@TObject@ClassName$qqrv
@System@TVarRec@$basg$qqri
@System@TVarRec@$bctr$qqrv
@Sysutils@Exception@$bdtr$qqrv
__GetExceptDLLinfo
___CPPdebugHook
_frmAdviser
_frmClip
_frmKey
_frmRegFind
_frmRegPlat
_frmRegRunJump
_frmSOpt
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE