Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
26083b3d94cb4abe0b1aa443494c0466_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
26083b3d94cb4abe0b1aa443494c0466_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
26083b3d94cb4abe0b1aa443494c0466_JaffaCakes118
Size
567KB
MD5
26083b3d94cb4abe0b1aa443494c0466
SHA1
6c8071ef4a3c0e4ba47082ad03d0b70ec6d25027
SHA256
44f9192b213f5588c725d2c3e30ba5ef6bd43b66c617f4ede48e2f0ac0327460
SHA512
78b416afc026d11e0b1c050203e5f0ecdf8bcc1192692c5db7dc6b3a679ceefa1cf8666d5bc0aa1838ce48ffcefa13daa385af80aa3a966c4e6b0925c66fbd37
SSDEEP
12288:3xVMBKzMmtSi/T05nRyDzW3Q6sZeUrk1Ijv9iY6RnOahhYV7RiH:3b6sMOw5nRyW3AJ1hWnh2niH
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Elevated_MpMiniSigStub.pdb
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetTickCount
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineW
UnhandledExceptionFilter
ExitProcess
HeapSetInformation
EnumResourceNamesW
FindResourceW
FreeLibrary
LoadResource
CreateProcessW
HeapAlloc
GetSystemWindowsDirectoryW
HeapFree
CreateDirectoryW
WaitForSingleObject
GetProcessHeap
WriteFile
GetSystemDirectoryW
LoadLibraryW
SizeofResource
GetExitCodeProcess
CreateFileW
GetLastError
GetCurrentDirectoryW
GetProcAddress
LockResource
SetCurrentDirectoryW
RemoveDirectoryW
CloseHandle
DeleteFileW
SetFileAttributesW
RegCloseKey
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
memset
DbgPrint
memcpy
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ