Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
25e7b251ea3dcde2bc6a8c9c48bb65a2_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
25e7b251ea3dcde2bc6a8c9c48bb65a2_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
25e7b251ea3dcde2bc6a8c9c48bb65a2_JaffaCakes118
Size
912KB
MD5
25e7b251ea3dcde2bc6a8c9c48bb65a2
SHA1
43eeb8b43cf5ada300cf0867e60059dc27900aeb
SHA256
121afc4d690702df295f02aa0d6425b4959d3dc14b6b0637e8b4f89a4901f6a5
SHA512
fbc28b7b300ff989ecb82aa7d1dd0407e544e4934ef1d667c3d95ec8f701d2e2dd001eafb4b90f098dd8c8fab0fb301681de7b049cc2714190765a40366a7fc9
SSDEEP
24576:HeoRLEq4m3HiWnuDE2GRmILjhsJwMMwZNEk0:HnRf4SCUuDE2GcIL14MuN6
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InternetCloseHandle
InternetGetConnectedState
InternetReadFile
InternetOpenUrlW
HttpQueryInfoW
InternetOpenW
ord17
MoveFileExW
GetTickCount
WideCharToMultiByte
Sleep
GetVersionExW
GetExitCodeProcess
GetModuleFileNameW
FindResourceW
LoadResource
GlobalLock
WaitForSingleObject
WriteFile
SizeofResource
CreateFileW
GlobalUnlock
GetCurrentDirectoryW
LockResource
SetCurrentDirectoryW
CreateDirectoryW
TerminateThread
WritePrivateProfileStringW
CreateThread
GetTempPathW
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
DeleteFileW
FreeResource
LoadLibraryW
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
lstrlenA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
RtlUnwind
HeapReAlloc
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapCreate
DeleteCriticalSection
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
ExitProcess
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateMutexW
CloseHandle
VirtualQuery
GlobalFree
GetLastError
lstrlenW
MultiByteToWideChar
GlobalAlloc
OpenProcess
HeapFree
GetCurrentProcess
HeapAlloc
GetVolumeInformationW
GetProcessHeap
GetComputerNameW
GetModuleHandleA
InitializeCriticalSectionAndSpinCount
TerminateProcess
RaiseException
LoadLibraryA
InterlockedExchange
FreeLibrary
GetProcAddress
LocalAlloc
FindWindowW
MessageBoxW
GetWindowThreadProcessId
ReleaseDC
SetForegroundWindow
PostMessageW
EnumWindows
UpdateWindow
SetWindowTextW
DestroyWindow
AnimateWindow
UpdateLayeredWindow
GetWindowRect
GetMessageW
PostQuitMessage
SetCapture
SetFocus
GetDC
TranslateMessage
LoadIconW
SystemParametersInfoW
GetClassNameW
DefWindowProcW
SetWindowPos
GetCursorPos
SetLayeredWindowAttributes
ReleaseCapture
DispatchMessageW
LockWindowUpdate
GetWindowTextW
ShowWindow
CheckRadioButton
TrackMouseEvent
InvalidateRect
DrawFrameControl
EndPaint
SetCursor
GetWindowDC
GetParent
LoadCursorW
GetClientRect
BeginPaint
RegisterClassExW
GetWindowLongW
GetDlgItem
SetWindowLongW
CreateWindowExW
SendMessageW
EnableWindow
GetDlgCtrlID
GetShellWindow
DeleteDC
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
SetTextColor
SetBkMode
GetStockObject
CreateSolidBrush
SetBkColor
RegOpenKeyW
LookupAccountSidW
RegQueryValueExW
RegCreateKeyW
GetTokenInformation
GetUserNameW
OpenProcessToken
RegCloseKey
ShellExecuteExW
SHGetFolderPathW
ord680
ShellExecuteW
OleInitialize
OleUninitialize
CreateStreamOnHGlobal
StrStrIW
StrCmpW
StrCatW
StrCpyW
StrNCatW
UrlEscapeW
StrCmpIW
StrCpyNW
wnsprintfW
PathFileExistsW
WinVerifyTrust
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ