Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
40c6112f27042ef2bd4c62e26a4b9a0b_JaffaCakes118.exe
Resource
win7-20240708-en
Target
40c6112f27042ef2bd4c62e26a4b9a0b_JaffaCakes118
Size
1.1MB
MD5
40c6112f27042ef2bd4c62e26a4b9a0b
SHA1
82f0d86a2314fb5f12ae3bd86500e79488d5e816
SHA256
badbfb22fd73f26092e95c1bae9ac9cbf86ce65526f255885d74b34b9770f2d1
SHA512
30670f0a8c1a3e932ffd47d4466ac137b5e5b40dd0e327b86fa4b7912bae031b9dde38197c922f2319498384b54e934cb835f78b3a724702ccff9050e8c119db
SSDEEP
24576:rXELkiANDGYCtoKzEhg7c71kHr43NqdWoaygPJGxGAeZD5mRe7lLvJQTeL:7CkiAUzBchkLrWbygJGIrmRulTOTO
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\Dev\Tin5\InstallDir\vc80-win32a\Loader.pdb
HeapAlloc
HeapFree
OutputDebugStringA
CloseHandle
GetExitCodeProcess
GetLastError
lstrlenA
lstrcpynA
UnmapViewOfFile
WideCharToMultiByte
MultiByteToWideChar
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
GetCommandLineA
ExitProcess
Sleep
DeleteFileA
SetFileAttributesA
GetFileAttributesA
lstrcatA
GetTempPathA
GetModuleFileNameA
GetSystemInfo
GetProcAddress
GetModuleHandleA
GetVersionExA
GetCurrentProcessId
GetProcessHeap
ReadFile
WriteFile
SetFileTime
SetFilePointer
ShellExecuteExA
MessageBoxA
wvsprintfA
PeekMessageA
DispatchMessageA
TranslateMessage
MsgWaitForMultipleObjects
wsprintfA
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ