Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
34746a3389035e1ed70627befdc6f0d3_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
34746a3389035e1ed70627befdc6f0d3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
34746a3389035e1ed70627befdc6f0d3_JaffaCakes118
Size
383KB
MD5
34746a3389035e1ed70627befdc6f0d3
SHA1
053cc3e03dcdc7d1ac0735aceabe14f7d5b277cb
SHA256
2d0ded6fa2c2fae2d8afb2713d67e307d242b62450c9daf8335c5978ca88a79f
SHA512
d52e16a394157cc68d2a17e163130e7303fcae4c9f5ca5d48fd04d701e345329fc5b3530dbd8087cd162e6fbe9810f48f7aa98e0749fc33bcded65c39a0cd862
SSDEEP
6144:UtHike/fSohRbA1U+JKrEZlwH87a3c7UjrNBMQDmPHAEG8YNshl:UF3e/fz4U0WsSc7a3cgjJ66mPgEkG
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
OpenMutexW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CreateWindowExW
MessageBoxA
RegQueryValueExW
ShellExecuteW
CoUninitialize
SysFreeString
HTMLayoutScrollToView
GetAdaptersInfo
>���n�Sԣ��~�j]��OM�|�J%�S! ��� ;H��u�g`)yj����q+�ب>��*-�|�<(��4]tg��|���wO��&��i��,H ��|cH8����E.Դԕ@�;8�M�{�e�hF>g�d�2ݭ�k�i�� �0A���tJ6�r|>6�B����Nb6֡�7���S��?Z@¾C�ng4���L����L�;y��%:�Gp�������"U�ǰ��9�i���:8v��i���^�/���J��0��5�� ��{��*�2��������� ��c���Y��5d���9�QHd�+5�z��W���kBVtq=o#�D�?@+�)��匽UY����Jhf��������|&������ Aa� �������Z��:�:+���»'�Qw�Vx8�X�a�ū�b�Z=��`�}�{٩�$��e�il��_J#�5/���l�൪1��1�!�vKZ��P?�II��������u�s�5�2�������{ƩH@��HGyD�<����2^�+i�8Y'��|���ܤ��'����i�����M��{X�*K�y�q�x��,��cs��y#2��?�/�����@f��f�5�V�@�b��ۑ�Q���Cք|X��~}��\_���i���\d�� �g8à,⌸����$/m��*�0 ����%�R��}�uk�%����_U|z�_��۲����d�:B��A,�2z���-���7��}H��,�k��ü�1�Z�� �>��>�U��%��Ĉ��7����ҡ�����:DzR>�G6j�YQ���}�ܯ����r&�5�,�Q�w+�$&�� �f2��3��U���dK�*\d[���l�� �3�q)w�(���,:ӟ"Y���]�C�?���9\"�s]����D�,��>�M���"��%��Y�~�Xd��yj�l o�X���Fǰ��B����l�',L_����0�&���P��CaM�l���%����@�V�a�a�`���ʝ,M�u�j�f���A�{����ߴA��u��jud����uL�Ul�)rE㻎���wW��A��Q��,L�|o˙OQމ�����������R��N� �\� rp��a~�6�^D�ѽ�tȵ0$�Y���ez��fs����S� 1C ��Q���.��u�-viNa���-�>�=�ो�a�v�]}��k�4���ee8��7dL�����P�5�U����zf���iؘcXK�rZ�8�^}�- �&:�tU�-�[�t��5_�c�V<�Dse�b�������`Ed��.�BG��!�: �����+�X�ӂ�S2>W[J��4�Z��5��NPae���M�cdj��ܲ(vM�B�%�=�_u�=NN��Ǫ6�_q���}�n���� iG�b���a|՚pM��Ҭ����oX��Zi�?\�B�Ud�s?� Xr ���de'�7�U��V��m��^���W��Y��,ou��C�;�M����m���jk���tW]g=�^��W�����[�&S8q�����yvV�t�/ƺ�Non�����&a�Ķ J���3/syn�ؗ����H��Yh[WT����ה��;���ˬր�*�\?���PP�ģ*�l���x��U� ��Jl)>NS��u&m��OT�B5�"(���ԟx��ʍ~���A���g������:]*��!�x��_%�t^`��S�7O��Z��XC��or>{q���M�E�B��R��0������?c~���!3����<��h� [&5��vr�i��ue��N\e��y��j�@�V`��7�V�#^�YR�=3�kQ\��<��&>����xo��-3�i��b�ݡ/��RF����,�}@pv�j����:�������3�=᧟j�ɟx����TE_=#(n����,������r��DԞV_���;[��[|u1��p��Ȳ� W�1#��BH�>4p�ܲ�)� ܴV{����j��IdKQC�BA+���(lМ�W>��������?��6�#,v�]Z���v;����ߙ��;��ڠϢ�̡X��%���MH�����kg���~,�w'-%^��'�5MM�]���w�H�����-ٹ���;fBހ��}4�����-�������§��"Ak���h��ܿ�w�$��Yf�t+�z!�����+oĵ���\�;V�`~�����������%� �w��lyq��mp�u��m�Y�/�n��!���~��%dK��$�㞣�x X��m�,�Z��� "ҝ���0��a���L}���R�?��3_�����A$;�ȀS���=���/�<�����g��U.�Z��-�i(2Y���[�'Ɵ��1�Z(�ݪLT�C�5a�\�M ��(f��0^�ቈ�4a���C�s����ƌ(DzW��LY@�_����>�� �P퇮͛�L� '1y��Y�:ߣGW0z��j1M�#n1,��S�'��މ}Y����Z���lf'P��t����5��t�ڿ�ڴ�M��i�� %�q����ܬM��`���+��k/���y4�%���������'YMɏ;��"�eOb�=�?�ݼc.�04Qi�u���m'+��z�IM@�DGOU�ňLe�;�71��U��d���Z�pY�"���z����Oa�&�c"˼��N�BM�DG�8�L4�maO��l��>�jN�:�g��k kJ�Q-S�w��#�SU�1 wr��uvb�� ��}:���M;�����Ā���E�Z�t��|�J��݈���� �R _��Џ�����o �}/�G�!�|�0e��>G܂2��2m�X9�+l���B�Z�����C�ϳ�Ji���Ŀ��qq|����q4�C�~)���m�j��� :�)�Ik�3���Ӥ(ˤ�Q����3ѷ�G�ħV�����S�օ͘XO�FC�zs7"N�M��*��K��-E�b�<��f:B�5cC���������p6.����7�E����+ä��*7Z���Π����L/�����Xf�؈�5W���A&kK��ݭu|0e��j�~<:�ZA�D����ce�{:K����l琲�L_�z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE