Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
4556fbe3af92e564cdf0e14e1b203db7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4556fbe3af92e564cdf0e14e1b203db7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
4556fbe3af92e564cdf0e14e1b203db7_JaffaCakes118
Size
415KB
MD5
4556fbe3af92e564cdf0e14e1b203db7
SHA1
2d9f43c957f62b48e4ca5d6b363b0deb4805aa5e
SHA256
ac7f52afd6927be9aa6c2dd94e3e8a094a73edee07a03b79995e2d010d1a5d8a
SHA512
aae2d5c9f7fb54b191be07693896ee4f074206bd3868ccc3af4d3c1b438c581baa6f68da6fb0b3c169dfba9566408e67954c0adb0375ee49c35f60988772f870
SSDEEP
6144:CBXNhzbqBiN0i50v/7P5F/A6cwDmB2Bboawp9B9:CJGiNl5IjRF/AZwqBIbo9
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
FreeEnvironmentStringsA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
DefWindowProcW
MessageBoxA
RegDeleteValueW
ShellExecuteW
CoCreateInstance
SysAllocString
HTMLayoutVisitElements
GetAdaptersInfo
InternetCloseHandle
����YP�@��8�}�}�V�o=�<{�B2j��A���v��Fy���4�4�q�ʆ��F��~#E��)�T~ҥ���N��.�B1 �u�>=��菵��+�SfZCF%y���_0�=(ʏ�B�(ǥ�';ҭ����$��KI��A ɭ���ɷ���N��{Of3e��L?~t���(i)Y�ڴ��Q�;�!x��^_r;�v�>ئ����H�/(�p�ݞXT=�G��}Ñ�N�<�zjkG�W�ӎ'#������ý�)T�����!�W������pڰ�]mF�{K�[72p�Z��Vy[r1��I��Ɓ���u��T�/�-��q&��^@�uU�J�qK���ݙ���T��2!M���2�����H*%0M=�{f�����da���#�3(��I��k�a`�v��E�jd^��c-[�2����xw}FӲ������4�Ƭ�*�?��|<&D�o�^&��:/7�J��y%�y��J?H/��P�iu�J"@&�^�Q��^ٔ�H?܈���} r;ت���l��Wr�ܭ��ip�)]\|^�k?�m��Sӛ���醑�i�b����{�q#����4�N�^Q�@tO�r@�#1�%"ş�FgՖ*E��7U䘱)Xϥ����l�,��$���Rc�I;]t�%�,[��8�0�B� ��gd����<�)�[�E��&�N�:�m'B��6K�u��k"��� �;�8�,�g��59d��������7#M��ЊQ�����G��ܒ���gf�d�ң��~�ܤ���A�I�2��٪{�|���x�\/���0�s���h��K̖�S��<��%B,��@0P�����Ca���4�6���-1( m�cW�[�RҼ!��6��\���WVG� ou���$ň��))���F��h��iڈ�m)� <�0�S�^��z���Fȴ�-���ن���L�Hh�����+��ϝ}/�c�ԇN�Ws`Zb�A��P��aL����Sާ��gw�=�Z�,�Ƽ� \H{����A h�&}�����%% >�qU�L*П��Y�H��#7�$%�)́��%���_L�� �ӿk����*�I��H7PhEB�~�a��a��G�qC��[a2�KU�|Ntk��� ��c�y"��ƴ]�cŐ�@۾5��m��T;�o���lu��M�� ���T��<_��Q�!��S��b��r�5���%���3�ēi�玃��g�����٪�+�R۫�{���ڻ��<6�i}�%��$ky�U$���r$�u�.��۹���6^d��y�{5Z�ͪ��M`X�����Sb+4Y�[�OD'����d���WF�닏s"7����袁��s�A�ѰCf��>��L���,� ��.0D���� 1���G���Lƙ͝=/2�Nk�Bn���X�guՋ?���Zm�1,����B5b}(� {ݖ��VIJ�M���q?}����4��HA�>E�ܡ�(?]�w�v7���P'J���D��6[RQJ�W���Ei��O�eh���*TI�p����x�$��TN����u���c��l��s��C����1��Jv��]l�t} OJ_G�)S��~�d� Qk<���{���Ljl��T�.{��z�L�_7�&�l ��tp���r�n��������#kڏG����� o?B�>�c��?���j9g#ٹ����NY<��ڇ�G��g��DC_V�_fu�sR���K�����Mh���] ~?%�_?��M�Eo;�QD�W�j��K��u_����Q�/HZh�0A�o�������/��KRG(B.�0�x&9�d�.v�H�WK��� *J�� V��<Q�-��w���)�T8X�_��6�G|,���(�;����>��*� �M��,�>�J@�|0�� �8i0����M5(���6��~!�T!�7��c��鹖�O�kc����ֻ"��H^d�|�B�h����s�h�D��R.�S��cg:�~�Oj�� F��X�Xt����Чw�F2�b��U�F����'�GOY���D n�%OU!��O�y���\�r�x{�g.��<��9��1D똑K�Œe�Y �3�{^MX�1�$ρ<���-�T���#xďtG�ddL�4���C"��^��^B�p��y��V��!�N�����%��ϫ�h�!&p',^Z�LHǏ�e9C�D�!�i(��R�!�s�����9*��3��P�痢ACĹ�@(��S|�E-��0����Sܯ�Z�x�Z j��GQh�HS��� +u�㚆F,�>��2���}/*�;[O�p0�]�M6� ?�nz�p���B�E%(~�&,�Qt��!����8�fP���PT�gą��(�������~�?loJ�T��ɷQS/LBPQ���f�RuŝĬk���K�ϭdei� v����qw���, g����蝯�*A����������P��g[5u����om�L����E�P5����A8p>]k�c��XN�Vc�p&Y_����NG����k�T��f�g���sOm61�o_�G`Pt�4��:���H���R^쒛��\�v5���I�+1���Mĕx$�tҪ����+U 焝��i�\��b\��������̢�7�����T���e�y��Ԉ��М�J�u6�F�E�r��x'�A�B��q�wD�_���^~@�iG�og��Dσ͟2�0ADϭ_�VޗI+e4�W� ���W��3R��$C��6��uM��u�؞WԐ�N���x~�~�)�'-�qY�����p?D��M��v��8O>#�$��L�7���Ȥ�j��y�kH����"F�g_~wq��_~+|��@۵��)�̫�2�s}ڭ�3��o�w��Z& ��A�� ,����� ��T6[��{�����qO�����HCNjb;����:σ�}�M/tA��~u�1�º�w��{ח���@�u����}M�h|8 dn>�7gqk�b�E^d{j�}s�DTbRb����0p#�D��6��ҭi���'�����7����k��Wu ��>���}�%?�Kì�]��G�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE