Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
1c0cb43e3a3ceb646bdc766454b6f0cb_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1c0cb43e3a3ceb646bdc766454b6f0cb_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
1c0cb43e3a3ceb646bdc766454b6f0cb_JaffaCakes118
Size
4.5MB
MD5
1c0cb43e3a3ceb646bdc766454b6f0cb
SHA1
95ac978dab603e681db1ae3c44037de47450c728
SHA256
fe60d9be6a8f49b5c75789d982a09df91e97e0f608e6169f143d1649ef15079f
SHA512
cdb06365a98c7ed4e476164ffc78ff9c728cf9b83f7263d70b7801282a301bc54fb0cd1ae7c92c622b1d9771f3fabed222972aff4637d6deb584acf2dfe51c0b
SSDEEP
98304:zoDc/LrQTCWCGXlrhi3JElFizF1wDgzP56sDjBh/GOSrGt:c4/LylIJ0FiigzwsJpGOSc
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetModuleHandleA
WriteFile
GetTempPathA
GetModuleFileNameA
GetStringTypeA
LCMapStringW
CreateFileA
SetFilePointer
CloseHandle
DeleteFileA
ReadFile
LCMapStringA
MultiByteToWideChar
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
GetStringTypeW
MessageBoxA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
ShellExecuteA
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ