Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
2380a4553eb56f961bac77847cf19095_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
2380a4553eb56f961bac77847cf19095_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Target
2380a4553eb56f961bac77847cf19095_JaffaCakes118
Size
344KB
MD5
2380a4553eb56f961bac77847cf19095
SHA1
d7025d7d1a62c8aa428f5b5b23e943bcaabc907e
SHA256
0bd94b5bb300862c5f1fa47741a8f52060c20a50693335db8b2307b44685b5dd
SHA512
377097f6f3efaa66bcdef3a3383c9a4af607318203586fe04da8f5a4af12c341e4abbc9fa80b8c192ee00f685245080bebffa19e5dd5977ec9318d2ab6b300ac
SSDEEP
6144:MFLpa1dhT6hPB+IVHSL0BsfHgbRfD4ShT4QKb5FN:+ta1kB+nqs/chTXaFN
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
E:\bt\47189\target\retail\i386\BBSvc.pdb
StartServiceCtrlDispatcherW
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetServiceStatus
RegisterServiceCtrlHandlerW
OpenSCManagerW
CloseServiceHandle
DeleteService
QueryServiceStatus
ChangeServiceConfigW
ControlService
ChangeServiceConfig2W
CreateServiceW
OpenServiceW
RegisterEventSourceW
DeregisterEventSource
ReportEventW
RegCloseKey
RegSetValueExW
RegCreateKeyW
RegOpenKeyW
CryptReleaseContext
CryptDestroyHash
CryptCreateHash
CryptAcquireContextW
CryptGetHashParam
CryptHashData
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegEnumKeyW
ImpersonateSelf
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenThreadToken
GetTickCount
InterlockedIncrement
GetVersionExW
GetSystemTime
ReadFile
Sleep
CreateProcessW
DeleteFileW
GetModuleHandleA
GetProcessHeap
InitializeCriticalSection
WaitForMultipleObjects
ResetEvent
CloseHandle
WaitForSingleObject
SetEvent
HeapSetInformation
LeaveCriticalSection
CreateEventW
GetLastError
FormatMessageW
LocalFree
RaiseException
InterlockedExchange
DeleteCriticalSection
CreateFileW
InitializeCriticalSectionAndSpinCount
TerminateThread
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
FileTimeToLocalFileTime
GetCommandLineW
lstrlenW
GetModuleFileNameW
EnterCriticalSection
GetStartupInfoW
RtlUnwind
ExitThread
GetCurrentThreadId
CreateThread
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetModuleHandleW
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
VirtualFree
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapSize
HeapAlloc
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
GetWindowsDirectoryW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
OpenEventW
OpenProcess
LocalAlloc
lstrcmpA
SetEndOfFile
CharLowerBuffW
MessageBoxW
CoCreateInstance
CoRevokeClassObject
CoInitializeSecurity
CoInitializeEx
CoUninitialize
CoRegisterClassObject
CoTaskMemFree
SysFreeString
SysAllocString
VariantClear
VariantInit
ShellExecuteW
SHGetFolderPathW
StrRChrW
PathFileExistsW
StrStrW
SHDeleteValueW
StrCmpIW
ord190
ord141
InternetOpenW
InternetCreateUrlW
HttpQueryInfoW
InternetReadFile
InternetCloseHandle
InternetOpenUrlW
InternetSetOptionW
InternetCrackUrlW
IcmpCreateFile
IcmpSendEcho
IcmpCloseHandle
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
freeaddrinfo
getaddrinfo
WSACleanup
WSAStartup
inet_ntoa
CertVerifyCertificateChainPolicy
CryptQueryObject
CryptMsgGetAndVerifySigner
CryptDecodeObject
CryptMsgGetParam
CertFreeCertificateChain
CryptHashPublicKeyInfo
CertGetCertificateChain
CertCloseStore
CryptMsgClose
CertFreeCertificateContext
IsNetworkAlive
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ