Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
2bd790588276809a2ced666fd7b3aad1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2bd790588276809a2ced666fd7b3aad1_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
2bd790588276809a2ced666fd7b3aad1_JaffaCakes118
Size
74KB
MD5
2bd790588276809a2ced666fd7b3aad1
SHA1
806dfc8cbaa4dfd2542945a75cd3af5ee50126cd
SHA256
15537f44b45830796406cec49f1140329e64f814b0755afa41bd7dd9c238d921
SHA512
d3a8f0eefbec930bee9afff72acf48da047c39a8da494af8e1a3f5f52b66f55368cc67858445b823b97fe61258d514b02d3ee1cd5b7df3beda5ab2db792fbed1
SSDEEP
1536:FyBGMw5/cYrtqaMix/sH7r3uMpYfJgETB0Rd/Q51e0+lbMTsDUHZiwfz:FyBFw5R33/sbr3urHTmRiR+R7sZf
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetCurrentThreadId
MultiByteToWideChar
GetLastError
ExitProcess
WriteFile
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
MoveFileA
GetStdHandle
GetFileSize
GetSystemTime
GetFileType
CreateFileA
CloseHandle
GetCommandLineA
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
HeapFree
HeapReAlloc
HeapAlloc
GetProcessHeap
lstrcmpA
WriteFile
LoadLibraryExA
LoadLibraryA
GetProcAddress
GetModuleHandleA
FreeLibrary
CreateFileA
CloseHandle
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
CharNextA
MessageBoxA
SysFreeString
SysReAllocStringLen
p���dFE��1��rv�nx�0�Zz�ۡ�yE��ʫQ���3[0�"�ݟz�9���؏}�z����p����T�y�#���sm�h�*?�Nz��� m����҆0�M���6#�F���9� 3��W ��G"��h��<C�F��E3y�c�]�����d��y�N�}��@�b�[�d^U�џ%*p�ָ"V��CQ��;�z2Ϧ��h��<bDjx����B�7&���ڽ��O�(:�L�����I��H]��݄l+>��h���$%X?�4Z��w����o�2����㪉�J��y@6^>�5�糇�k�g�Q����/:���I�:O�xB^��~"Khy%E ����"u����ş�:m���g�`��36������Y+{W0/#��7/cW�z�j��k�b���4�8�4^S�:�hB�G��ޏN����!���Lt>h�N�1�����ctKl؝�.���*2�B��r������f��óU��i�T�!j���,���ᙅ��f�@ی6������'X�7h@�g��g�����\� O�:���K:���e��m�9š�'��Y6'�:1 $������wh�2�q�agǺH��$X�iX�c��������� ;�L�j������=�[ܺ?�V��%��6{?<�2d�X{_A��49�M��B��%;������텫z��E��1݄8��9)��?ң����(Dj�Io�m/��ʸ?��x���r��&��0����h�@+$4����= ��:X�Pq��)P�l2M�(@e]E���2Z#�|��$.���4�������9����x��B�����W:��D�Ԝ^E��:ӧ`ix��?���Gk����~����!�첇G�I�L+��'̏�gg��O�c���������S��Щ��J��'�hhY�9�;Z��:moF�V���Q���U_������z*����9և`RțԻ$=��w0CQD֛����[�I{EW������W�yg��.�^I�0ĥ���� ��iTx�i�58�S� �ؿo8��2��$�<��l1�u���W'&�g��);���!L�}��Z���ָ��[���+�T�_�Q�A��N��z`CQ�I�%9[������������{��qcWS����.`R�I����z=��m���F�%D�Ȼp���p�0���������%�UXۃZr��x3~��㿭�[Nu��s ����3=� ����}�J+��Fc+E4����js��[Q�?)�pw�jR�z+�Q�UI;|��0:���%�"���},�r+�Ά9&��&��8 �Q��.FH���ҥ�/ȱ�������-x�/?��ߏ��lE<'��匑���]B�����cad�t"]m�c.̌�w�5�0�e~Y5eT�`�8�Vv���_������uLE�*�3�Ƞ�������iBއH%hԌu��6��U ����8LZDlD«~����# �4> ��v��k�>Ė6눻x�p\ �h�?�ʎ�)��3�I��r�ܬVI��u���^M$"Sʳ�;n����u:"Ɛ�Ei4��n0i������<�5,8je�@��B��(��{�����nUv�ڙ�}&��u��ȳ�N:�,����WL�������,9ʞ�L�(���Nu�"c�)Z��h����Dž�ø1tG�l�\Az8���k9��m9O�r�;� G�f��] S�i��d#�K�<���2r+���*{������d\��r�C0\� Z|/�:gihYn�E�.�E��O�V����$��lģ�p�|���*df�W�l��ý�%O��z�@$tP���Jo��Ķ�܍��� �%��{�C�����٧��~�c틇PH���0��c�,ur���j��iY噢���ɡ�e�����N����'�c=�3�]��L��`�l��X��D��^Y���&��$�j{���Ɛ?�V���,�lVm�u{"�&�t!Q.���j��/"/z��(��u���V�]J�Z�����v���iMM,�Wt���,�O��n� �Z�;�:� 8c����GP�m���Y��uz�? -�}2�x庑sT�O�J��Tȹ�ғŘ�h��_̘=����K���'@�g> 5g���>��"&����"Ĥ�܃\��*y8p�Z"����n����]O�D��K_%�JEHL���=��+������9��TP>��\��q���= _b�~�\R흿�ͨЦC����H��,r�'E�!%/M賗H7z3��K��71�"�ً�.��!�X ��k��"c`X ����Gnm=cG�D� UI?W�9Ng�k�Vb��~��`ERƴɵܙ�}� ��( �n..���Qs~j2(z+��9|��ﹷJ_ߣ�����F���9C��*[�$��c\�l��8�V���� �� B�7{� �φy-�MD��k���/!�]�-��h���i��=�&��ᎏ�������:��.i`���S�Ҡ�Y�%��H�Y�S���@���8-ʾ�4���/r��O�M�Դj��V�{�����߃�9�8���]�Q��(C��������n3��y�kJ��T��DA$���B.i�Vp���HJ.��(�ɡ1]����/��jV���4,��fſ��(� `�k�s����@{��i��|(�"�lGƿBa�fى��w?�x����{�*��j���9V�9�g� ̶Ѫ ��%��tNY�<��9:g#��H�4{�E ���륰�$d�1;|�}���%��{�,������\�p2����.��i����"F\i~+?�h�D�euH�0�|;�����%c���92ym���mڶ)��Ҕ�?=�@�p��L�V��@<οC���RmN��LЎ���6�S&��e�KB~�D=o���2 ��d�(+�o�%�S,o�A�(]�fɷꮗ�4"a���1�m(��M���i����)�9[#�'�vr�`PWz�� � �S�I��E�n W1A��~2g��e����~�����-��Z"sI�:�$9NDZ��h�;�7e��� 6C����;8��3gV3ұ� �����)z�7�<H�:�\���Q��p�N
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ