Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
3ee0aa495ef99f8b63bca02cef7c38a3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3ee0aa495ef99f8b63bca02cef7c38a3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
3ee0aa495ef99f8b63bca02cef7c38a3_JaffaCakes118
Size
387KB
MD5
3ee0aa495ef99f8b63bca02cef7c38a3
SHA1
0d8b0e3e1f2fd941e3f86bf41808762113372e97
SHA256
afbf3741caa03bd7c8cbdbf81a1c059a10cf55057b2e28953e7cc1489f180938
SHA512
95d4e98288a7260acb157bd6d2d4dc05149d810d15eb483c0986103d8c612c806e21581e6a15911379c3a709dbdd928dbf8edfd840b38d59ffc375ff63886241
SSDEEP
6144:hF5keCg43WJbV7pJ1524dHhYRcDHD/lV7qRfVeGkYFRxch:bmeCgjtHRBY+Dj/lJqZ0qIh
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateMutexW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SendMessageW
MessageBoxA
RegOpenKeyExW
ShellExecuteW
CoUninitialize
VariantInit
HTMLayoutVisitElements
GetAdaptersInfo
��k�����Uv�D���ͬ��/��VTU� �Qd�1p1&R�s�֠�{�P�j��9�x������������!ȋ�\������kj���Mj[8!�z�8����q�1EV�B����\��d�����&���l9r�,B0 A��f�?��V�gC�Ј���@����� s|��g�",���Oݕ*4����J�.ؓw#�裊fY�l�e�0�i���Tv4��$��g�nR��|��/��M!\{z�Z�9�z�����{���`��i��t��l���ҎiG�F:�C��� �zR�W�0.��"�КYޒS�Dj&"�͐w6�/��Lxu��+��������B$La:f�?9ݔc0J˥q�ӫc�8*�o7���Z�����v�G��"8H���ٰ/VoБU�4�!�wa�5Iǀ�S}F��>e?�A�qYnU����,�BY\���X�%�mJK��`n��j���]6��=�<_zնĊ "�u�>#b�(J7������x�,��|&����n�J -p�;�����֮�r�C��ĉ S�x1�t���2r�X<���ߞ59W�d�6d��Ȅ��� @�BT���嚑�h-X��a���ܭ��$��yOv��qC�KQ��Ҁ!���]HTJĠ�;�M���Y����Vf ��}�/�~J�y)3�R�yX�+~B��i~�n���NQ��~O�X�S�m�_�aڼ>WfW�2�^U��e�o�R�����l@F·�ð�5���6*Z�w@�Q\�"�}����-��_�α�8��LwFM~��8����?aP�S�B�k����('��X'�xV��=��1d?վS�;E&`� ������c��͙\'���Xs}ʡ�$��#�6�I�L��T��8Dk������� ��9��O+a$��9�q 8����1*�e4:=��3�e�?��ޤ<���y <�2z�w�m����%�(�wt+�b0uG�s35r]K����0j#�RRl�M�](�mUN�+��|����>J�I��X�N����=<�+�E(�������VLU��B.��}iC�)����+(%W�l������t���-,�#E���:]-�V{v�7�e��a&PN2 |XB�l�8*��$��u<��a��0阫������$0^�tM��Q�^����9R{���-~�Ђ|qfRc�tb��x����.f@ܯ8�h�5:Iv�5n�G)L���٠����(sV>i�H-hw���4a�XW � ��=�����Ϟݔ$�`咂��[Qc�Gy���`�o�e�����͙�t}?m�CF�D���54d�Z���1^�A��զ<��;���� ���ʎ�d]RE��-�5t�HS z�}r�y��/7�Q�����/�#uX6�L�Z(���ʔWx�΄iK��@)B ��d���d���tN4A^�s4�NBj���?�<bx���5�*I���bt�B�0�a}B�L!g�kia�Gt�tRRe]c���n숸���?�'O���h��,@I���K���k���rDK��7�F2��Τ��tk! 0���6���d3J0����O0/aF v9ߨܸ�)�G9���i���f�4W�����7��=%����2��� �;�Z.'@JI���8��U�+P=����)I`�Ox0O��J��h@]3�dq���{� H��:�&P�`_|;˄���W8�� �x����� >B����4%o���t31��$�z9S ��#�%Od���`�M�9h��y�+���ߥ)S]�T�7f1|��j ���P����w�zZ�s����Ix�������)��Q]"���"^7��])0���j���Z�HA�I�s�� ������e��b�r��/3�S��A�;[�|��{�w�¡V$�ɐ,3ޖ[�؛.x��*���FHä�m}��\a�|��٦�go�o���x���k�GD�G���7ؗt����KL�:���έ������XR�Rԥ��`/�D�?��}Uְ�?yL\ː[3�|0z��4,�S[H�L��j�p�M���5@O_�0� �+���õ�L�EK�t�HUK�����K����)٤|ţ�`���w���z�����ץE��`��8��E�f,Y�v����[�H��Ĉ���3����{:덮`�=����$�k�t���t��"�ةcF?ƚ�����{��0ox�`�b�g�<��`2�Xa�p����q_����e{n@:������Mȹ��p�WP���TM����N�J�z�z�2�ڱ�kQ�1N'Z�2�?yu�̺�R���-Զ"g������"ßqR�X�O��鴋t�A�y��J!��#�T�j�����b/������aû Ǫ�~��*7��Z;�z�bB9�w��p�\�HK��p�O�|��ۍR�X�-"����۲OJ��3\��'��Աvw��AUb$�u_*<γ���tnS\ �Xtͥ�}��J�k7Ö�ǂ7�]g����;��m���rݦ�D/�Ӛ�MĺO��@ouxѵv�~w9� �(i3���M��WpxD=�K3E�@�l>��y����RGx%���@����D������4�On��=�������e��^��z���'E���2�8�8���������=���%��z�'��� 5��<wu����3u�]bLss@�w��{����V�C%jUZ�X����7y�:��?�_���bO9��O,U��5�zI[)��͑y]��I�L�5y������� ����)Z�=rҗkE�f�*�h:�LΎ�a7=E�śS�f�'Uej8�?P��r���}Ş��UjSu�B��LP�Ũ�B�J��+ռ��ސ��>��E�b���E~�{A�U���ϡ L�����֑�� O��M�y�4m���*���q��TH�U�%k����� <�&[�:}� (��)�6���l��D���5���A��I�����TU�w�k ���j<�~L��Z[�B*�"���fd��2���Q�9j��Ex�Dw�ڒ���}�N�m^t����L��g�Ow2J�I|p,���
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE