Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
4afa7469f0299ed33c3d509e22b4970f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4afa7469f0299ed33c3d509e22b4970f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
4afa7469f0299ed33c3d509e22b4970f_JaffaCakes118
Size
519KB
MD5
4afa7469f0299ed33c3d509e22b4970f
SHA1
5fcf036824767cc7ddd83a2fe71f67ea0a67c840
SHA256
00bfbcf4d51b1615e7455309a6f9c05af1c5fa6784705e440d0906daf110ff35
SHA512
29fdd8abf0d6e285950faeacf61e629c8ef2c5d9bba8ed5f14c6bc448ba42adebdf6760ca62bd8dedc516ba06a08da67d5cfc40f54ffc2e8b565d1a0126dc58f
SSDEEP
12288:vEqcl7G0NffnQv4AXtRUky3xN1SxKNwjQQ:vXof/qTXtRBy3xvgRQQ
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetEnvironmentStringsW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetWindowTextW
MessageBoxA
RegSetValueExW
SHBrowseForFolderW
CoCreateGuid
HTMLayoutGetRootElement
GetAdaptersInfo
HttpQueryInfoW
ImageList_GetIconSize
�c����I.4��$M<o�ʃ�ϩUznT䮯�"2?�>=0{�������6�W �+�tQ%������k��w�4]a���5"���Q��r���¢��w^��}������y��DgC�?\/ᬋI?E��j��-dE,��yU�Iy��}2�f ��5gx#�F2C��#y��چ�X���uCI~Mk��LH�x�u*���c��Ui�[�p4IX苵���{�2�c�YS�M��6���V���N�2�֥�P嚭:,2�ȦG�&!�]���??��=�\��Xs�C+^'�8��{�������f�&wuʕ� 2� �^����pQ����u���ևQ�A_�A`�O��:H������ ����Kʹ~CoԬ����W-@�e����& ����@ l+��\c�9a7�K��m� ���IjŹ�t�Ƀ�ΔX��j�����!��Cb<�/��.�� JJ �{_���)�4M0�IN�4b��|*��-�]wYo6?B~�h6o2l�=������B+�U� �7_�7���u$Io����gS���z�C�Ь�c��4���M����>3B>��k2�� Y�H���m/���:A(Ȝ9��PR�#��N�&�#��!��C��ƈ���v�Oݿy.����B��@�%��Hм�߸ۙ�� J5���hfzJ�v���"ӻt~*���8���@�K���lI��'� g�|�T��v0�y&�{��0J~��.x��]^�Ṗ8�tiPC<Ʊv mO�!��Y��!�܌e�é�vd@Z�uF� CVem6:zQ��j���"�H-."_�?(��Nz����ӎ�V6��n������m�ٟ��g��W�G�V��j������El�x����TE�`�Y����}�F��g�e�4$�d-���AQ`�]~�8�>�����>ѭ��:?�C{�S {�]���n"e�59�s���#k�u�&�|�A�4R�N��S7�H���> d��/�3��6S����)@gdM(�{eP��9%���>�R�̳b����7��KA����A~`jR�?���Y֏�m�a��0U�痖�ԓ��̘c�[-���%�e�_W@��(��$ f�>�����-�����3��|xQ8 ��i��o��P"�ß1{�/!���³����c����,�+:QI!)2�`Pj���t7<��� �](�0�1���h�2�GW�3c���ci 8FpU�ha$h{�=�������ɢh�D�p��h���RR�J��U>\ʧE�(5�6����n���@$��-D�uG�"�:�"!��֒�`�\���e�\��<��ǣX���[Q�RU�f=�ϥ�K%���A�8�FY-�c:b���Q}�-Q82qV�D��y������d���EvoMj_8�YPa��d���(SDu�� �2��GV���P#���ʏ|UH�^/_��/�)a=rԢ�t?z���q`�ـML:�j���HA64l��¨ ����;�m��NC%f�U�,�uH��) .�yo=�'�8�;T(e;�\��m�D_��X5�ˊv!��Vp���֔�]�}L�9r�Ke}���,�6G�?-��q-Pw�>x))N�u�=nX!�T\�:��|�1 ?���S�iԟ�Z���@��A/h���ܽ|�$�� ���D9���ތ�F>�� ���GxҰQav���s�&)��x�,u� �B�.�K��>�0�bQ�`���Y~���Ĥ<;��X�zMI�d�D�r~R��K��D����{T|@dZN݆ߝaY'E<�]����`T|��^����m�_��t������>������T#*�����`�I�5�>W&�r�:6+�of� �d �u�ya���Q�'����~6��}l�?b9��$�?a��.h��@�0=��D�*`��^�g���u����[ Q�"B;��`Q;:��3�Kp��t��2k8tc��`�T[$��^����� �u-���������3��Mb�۲M�" D�*��H�A'0��#����iZn��w���3�� d����nRa����v����s�υV���.�����l��2�"�H�&U�PۀSq�✿a�$� C��h��="��/?W�Y�;T��'xD��|��@�)ce��(���#��C�P� ��*0g!x��\!�'��y���@��RWT��F��A��P�/�Q%BE7PDLN���%�"�h_~�#�HP��#&��[�!mt�+CU�&)2�D��� ��������,!5�8W�b��~?����R�&�H2����K�]��"��D��+>̷MM#+e�]�/�}�י�u�^�oA2~������n��8��b֭CKa��$�o�������V��ƴ�i��P��uJ���Z�(��]��\˝�\n�q�8a���n1]�è���Q�t�K���ᚆh�����O2�KcC�S�h�$o��F+i��鬻sV��J��n���!�@:e�]���$����i�L[C�����Z᧩�}-���^;p�����j�<%� (�ۤ�<E����Z���F�����2��r���U�+2��l�e�_�*��2�x��n��VT�P'����2Y�5sj�?����Ba,���o�/��Tu_�Xb+�敉�%�U�`�^^o�`�qUjM�w�h2z7��IȘMH�<�~ɯk��^}�W�����UekK�;%^�z�J�-9�)����ԩ�r��"YD��G��5v�N���f5� 5:���k:Rf�����B�������JJ�*���ޜ�Pި� /�NU������b����t �: �'��R����lPĸ~���ړW��dz⭛Q�[w<�>¿�����L]�ɐ1Ij�~$q� ��KK�wMT�<{��<(�u2��~ך������6Q Y�����1l��g�^G*=���M�E�@ƚ��A�� ����L����K#Q�+l�%ٶV�t��{�'���%��0�1:��} ��T �\�O��J$+DAF ��ȧ�d?_�a���\�Y �����I mzz���Kz��Rݱf*K���0%
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE