Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Behavioral task
behavioral1
Sample
2e23afb0a0cc6f1365f6df09bfe0448c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2e23afb0a0cc6f1365f6df09bfe0448c_JaffaCakes118.exe
Resource
win10v2004-20240708-en
Target
2e23afb0a0cc6f1365f6df09bfe0448c_JaffaCakes118
Size
3.5MB
MD5
2e23afb0a0cc6f1365f6df09bfe0448c
SHA1
c8cbac5153361d63d226d3070f449f715320fa3f
SHA256
2eb7f10d0792d77f7e29abc190e4325b83a192f1e0a9b2c39c577f19aea14b7d
SHA512
6165e5c6af964c45601e4808f0a00e973d3309051f94a22973cb69dbfd54f213c85a8f874789169997adac21a89c78b353271210c8d4ba90be5c44d3d78a88aa
SSDEEP
49152:fERkh5UhTw2NH2fu5pkoOGGtaFG1hdGh1RytwCYVdCqYHccTfUCrLiB7AXi:ZUhTh2fu5pLOlgSYDwZTE7Si
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
SysFreeString
RegDeleteValueW
OpenClipboard
QueryPerformanceCounter
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
AlphaBlend
CreateRectRgnIndirect
GetFileVersionInfoW
DoDragDrop
ImageList_Create
UnDecorateSymbolName
ImmGetContext
SHGetSpecialFolderPathW
GetSaveFileNameW
DocumentPropertiesW
timeEndPeriod
PathCombineW
LresultFromObject
Dv/�$dA��pGC��R,4 '��q���@f��Bh�ec�"�Q���k)����fk��bvmr]���X����t�w���YsP��jO��Ny$&�ח�/��w��'��K�C��Q����g���tY>�Z߆�z1�H��Q�������.�Z�"�_��X��Ŭ�<�T�.Kk�d;��{Ν���=����g�b�D���Ih<P^,p��z~���~�4|��|�,��ܿw!ˆ��J�V��i�i���@h�t���ql2�O�GA{h��R�\@�\�䫙/\�R�m��1�(}���)������]T��f�Ҍ9^�\� G�%ՍJd��� ��x(�_����D�����h����iҧ�j��n�1g��6�8��l�Ͷ1��]H�A4G�%4�g��TO�VR� �;�Z�Rx�?Kq2��_��Һ�q��uԃ�]~𡆭.Wq�8ե���p;帛��ߑ��a+���>;�RQ�b����/���q����f�3XA=�]u�1t �kկSm�(�+G���߸47`Un!"w5%U�/@�E.s��x����%��j�u� ��G�m�H+i5��jBnx�:Sr�{ZJ��&��rc-�$��T�� +CtG����i����tŞ���Ι�eM 1kxģ?Z�d��x}!�=o �橫��\�x}��,� ^˟>�U��~$��+'T��I�%��]�0�k�mT`��^#�u�����z�uo�CLR���MQ+L[��kPU_e�W�{��~$~���U 2m`!�����lf5��>/�e�]h��;�b��7���Ӵ��풯�SQ����cz�����o�~#����V�u�\����˾�J�9���'�l]�W���b��4������|)�����k�3�-*��!~5�<]�����p���f��r"�f�ߢ1�HQ ��/@�����Xx�ڏ�F��GBz�S��O+ݛ���/�R`'�0]��ʁ�@-0� S��a|7�敄)D�j���UE��squG��*�ᳫa�u��l��x��C����H�����g����xP��� �sp�v+\�CO9�@�q�l��I?���e�M�Uӗ����*:{s��-�էu7>]���r�~S!*��j�0��-pQ�������+F�wj_����6/!��a�'&8����L>aat��V`H�$��X;�l����Á��ܪ��v�� =u�쾏��s\<xwy^6���Ы$x˼�6���wK�9.�ʹ��~F����FO�+�n�}�D�X<�b�$�#9m\X�Fc�/a;/R���>��T������À+�u��Uw��vझ +~O�l�'i��-s��K�@��ܣ�W�ʙ��'��Սe�A��I%�.Tm�Ŝ��T7�G N�.qI����9��4����XiQ'X}��v��;*i�[6�UgW͊�=�p���d��4�%����L[���B���`��mL,��U^`'c`�{��ƉZ�$�`�GS��������EeL����k�3�Q������O�fi�a��]$�P�}���p���ՅT�獕0�,�P���z�L�3�d�h��+(�I�>�(����ii��P��]�o�T��¢���R��e2gQK��Ν1�������;��D[t��?!�� "���v�*\������(`]o於��t���V�4����aM��.zj���B.4���t�q���q�v�Ql�-�4�#�"J8��,p�c+mֵy�އs��� ����.��ܪG�G�:�.�{Vr��G=y�{�Pݜ�)4� N\�=�ۣ�::��14�r��DаD��b5�}�M����W��io/oP������(}y��=N�D�P8S�\�!&%���l���ڪ�3������K�{��1�n |�-]��S"����ֹiI�g^��¡�G��z"��J�(�@�Vx�p�&[#��Z����D~q<*<ߜ���z��x転������?|�M��5�)�?���F6�ʍ8��q�=@����n6�f��.�������X�j�ԅ��"Z�D���G�ڋ�y����oP�݇Hp�pK�IS����dG�{���b��3Wl�V��W��i��K�0�]X/d� ��J����Zkj���|�^Z�q���y�9�n�f�ۢw�{�����3 ���Ɯ�q��S� �^ɽ ��T�XBrs>�%��3u�r�N|�lQk,N%��E�;�9P>�3\��'g�!3J�<Y)ܽ[�+1܌�TS�0]��c�<@�5Ш���<�f�usk����2, v���U�������]'��:��T���6�%%��m��OYWe�tW!� ������A������S}��y���P�4�l��E|KO�Q�0��ުU\�F�1'li��RBI�ػ���Y�>i��1��o{6 �Q:+��Kj,#��-�'17�ٖ�Y���H��x'�em����Մa0�3�pd�l1Ʒ��\���%��%��fGZ��l�ѷ���0mR�6z��cc�\~�bp��� ��]��"dF�퍗���F'�fp+�mL��2��FOf�� f�f�Gf'������ta�FdP2Ƣ��6�Q����>>�b�y��b����� �=l>Z�����P=���]z�^�����_���mf�Z�l�}�u1� l�~*�Q����.�S0�5~��Q=��}�v���"�༪�:�(��zs�!ۅ�i�~SKGd��#Dz ������mu�c��������U��Lj�)���/�41��m֜U�?���� ��v��Jг���M�;<H�J�XBG=w��=�zȊ��ۀ!�6��e���#�l�� :�Z�;�����&��������1��]s.����1��+�D��U<�t�C�ΜNB���e7s�8�1���t��.�|����8�aٮ�.el���a���в�M��E����[���&�����N�a��ψBlP�����qXѕ�t��If�ؒ���Y1�*'{n�cAp|��M���@�*�r�#A�u9=gp��U9�0]6.c�(� hdן+�h�,��[��6�e�4�K
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE