Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
2ea30517938dda8a084aa00e5ee921f6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2ea30517938dda8a084aa00e5ee921f6_JaffaCakes118.exe
Resource
win10v2004-20240704-en
Target
2ea30517938dda8a084aa00e5ee921f6_JaffaCakes118
Size
982KB
MD5
2ea30517938dda8a084aa00e5ee921f6
SHA1
ffba49737bf426edbc3f7cf4215565189ceaffab
SHA256
7c32885c258a6d5be37ebe83643f00165da3ebf963471503909781540204752e
SHA512
80c539f10e308f656cb9d3bb8bfc42d381089cad796427532e006edf55b877a0a296824205b1e899f476817d639530560829d2f80953a05c431bc369c025e82a
SSDEEP
12288:HK8VkIQO+IOYyORogHCIXha3rN824hUyyecPyJfsi9f9xXQk2cVziQZw4qetKVnU:q8V5QO+oNCIRmyeyZRgNcSUKVChSGhSO
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetACP
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
ShellExecuteExA
SystemFunction036
5�����"��� +c�������9C�6����X�"�w������g矧���&��i`H����J����rB�㩺�t��ڟ�&�ַ$"�r�O�Ն#������5�㳿*���A�ǽ�7�}��fI�5����}�T���k�ӎ��XQ����4�?�E��:�3����Fs��CCjae�^C��ՠs�s_+�)��\4a`��Gc��G�K�:�,��G��=���qٌ�F��gU-����������Qy� �Il�2�`yO�X�D�������3!R*�͉��[�*d��!EK.l�Npz� p�]a'�#1�$T��������i.��5�U�Y��f ���Ĉ���[�U�y O����n_��0c. �.����9��o-��~BK�0�e�H�,�B�p���X���eL�0�ۊ�B�icI,C�nf�ՠ�֔@�Z���8?M�H��=�>܌��Dc�}��^�,F�fڀ1H�O��Yp�M������aE�����R;��Gl�(:Ca�� ���{����fׂB����z�N���s��J�e��b�>A�zY!����j=iJR'Pw�P|������~ϱ��bP�o����(���6?D��Q˳İ���i��?�#��U#Ӎ����r퍓�~��#>��FRc��7V�6a�zˮ%�8�h�O��!h ���*���#����ĚQ���|���ܕ���r�H�������_��:~�a��c�q|�-��[RtR�p �'&��/����������e#6N7-�EU�#��:�I�~�m!�籘�z�->�ے�g�=7D��E-�T>�A1pi������8?�J���3g���/��GU�f�O�ME��^�w�C��Y�*�UοQ(�5}6!�D�HM" �Z���8(�C3|�ӱ��9k�mXS�œ����Q� d�1��i��*�/���1��Q��u��qp�������t��Y�Q�z-ۮyN'��pH�lxh��e��< Ԑ7�+�"b'r�.B�Aj�~����2d��XlV��I�C��P�n� E�����=K�eK|��^��<��>�;$53�Jn���Gg臓T���|)��~��Ն�)r+��8���k��c�i/��*0 }(d}�@�dI:%����������!��M��1�&��!ݚY�زlD�6�aKF�B�c4� ��~"�%���c�ًo� fĬ1���[�ԟW�5O��7�h��VHe��O�C��*Ƅ*��RBt�Z�������˲�@>�R�vG����+�cWWx�O�l�Pk.a�k��{���P��P(��n�s�z��ϳh��~��p�Ts�$��9h�O<���.ҷǁ�����}�[�@�.�A�~�!�総�J�z1�̟���0�0�,�L%��pϳ��uO92\��٭� ��8?ZTx��?�5�o������en��̨�[�?m;�$�GȖ��.�1v�Rx�zn�D0bb4m0k�6��c ��kn��C%���%i�,��L4��RÑ�Re6���1�����|�}��=3Y�~�%��~u� W`O�wX��> *��|m'D��?�6X/&�l�C�Z���>:�v�$��<�V9EL g%�H8CO��C@�Έ5�"3sB��u�����x\V�8�2h�N��ri��s,c�MdI1t�.я�GM9g1��4P��#@�W��oi�m�x���ѻ�a3���[���Ub�OD!�鈐~�/�6����6�դՑ=��įʅbV�x%s�ˁV����1�oꙫ������v�S��Ne�R��@^�%����]�������X�N�.,�X�g��K��٢$��n�@/-�(��(W�9x���# �"���q��b(Q�<���P���L�Z2&*c�wծƣ �_*���-�����A|�� }A�ni�S������F�Ԋ��)_z�Hi`Ť��z ȍU���+��Ia���H����1��+ ��Gv��<ܡՅM�dn�.6�D÷����@%jy�s���獎���zUA!֮*����ܭd�#n���#� W�;ܔ(��{"��8��/̌��]U���D�I����1�i�n։�r*b�3�T�{� e��ߟ��1�8n���z,�@�� N�i�&W�ǯ�����tcw���U2ZI{�c�`N߹���<ȘRƍq�@�J�ڶ�K��&\����c؉�܈Tx�O�[��M�+� ��A*<cc3��p��]��(UkA�_��<8%���FT�(��-�R��X.�1ڠ�椸�����tíYʚ�C4����U��>1�K�G�BZ�8����� bLKhM�Ȗ�_a79RC������W�|��}�\'1�)&�! z���o� v��`&㳣<�����gί�>��̃R.&��.ݍ�y��u�<�E��U��˛-��U���E��ϋ�Nߤ��a�����?A�X�2��K������T����{'�Z0��d�A���& �����%j~B�¯�ڊ���C>�&EՕ���q^=���zZn�ܙ�VY�i]��F���)��_.�~B���N���2�ue� !��N�����dg��+�~���2J7Vڛg�OK�Y���Z��+p��9b+@��ذ�ΟB���s��}���R̞�_a�^��tby �,祒T�0�Yq����`r����� �1��nu��2G��bıU*g�3��q�e�_��))��1 ;�,�CӨ�+2.+6�Oט'b:OE����Ʉx+n���˦��9B��$M����v��l5M$���ۥ,��L@$�-\s�PB7&9R`���#�!�2���� V�&j��?�� 4����`��9/��f��\0�������JU1�y�1�����Xg����~�� �m�̧����\S�J�N� f�E��Մ���<ҧk��g�S����f+�w���zd�J9+ޚ< r#�l^��$M�R��L���d� r�2k^V�^���u�0LUz͙��`����p�S�U8ᗺ����X��V�{n������Mj �ܻB^��rXS� �|��T��YM77�W�~f�r8��m��O��eX#V��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ