Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
5ad7754815f0667ba7339e4e0c2f7e8d_JaffaCakes118.exe
Resource
win7-20240705-en
Target
5ad7754815f0667ba7339e4e0c2f7e8d_JaffaCakes118
Size
358KB
MD5
5ad7754815f0667ba7339e4e0c2f7e8d
SHA1
f199af8705f8c520f383298cd86ce54f313fffd4
SHA256
76796e4c79d53f24be93dd51ef8b74b06f360373b955d876b53b1c1723fef470
SHA512
5d82ed53b412b93eee785b2befb38cc043b928466e057ea95f54c85dc85a2dc7d0a80f819792e9c1d8c6c11de3ca2f7f3f384a9fcbf1b999ab8cbbee14dbba41
SSDEEP
6144:beiIW+lrZPwuCPlvZzmbFGPWAOshZ1utqmIRbmB9roJx7puBmfn6FXDGbK:qiIW+lN4uC1QcPWAxuqmIbeon7payMXj
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess
lstrlenA
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
CharNextA
wvsprintfA
MessageBoxA
SysFreeString
RegSetValueExA
LsaFreeMemory
CredEnumerateA
CryptDestroyHash
OleInitialize
CoTaskMemFree
StringFromCLSID
PStoreCreateInstance
RasGetEntryDialParamsA
SHGetSpecialFolderPathA
CryptUnprotectData
?����$���?�V,X���S�9������>Y)����A�!�2��XX��O�!<q��>_o���ֽ�W�����Ǻ�l$�ЋD�|�X�ho�c&�^�m����]JRy��E���u�L}�F�v�V�1b�{�FI�W$�ⳏz���g����r�řȼ�����G��5Q-0*C��I�]�����ss��C�wX�"���:evPz����|��/�D���%v�!�Z{g�����{��o��, ەd5^=d�0 U��~�����[�1;g�]�)X|���3�n�10����>a: ����y���?~6��5 Q���,�&M5$Xi��d�s*M����I�2�����^��[2_��nC�)�[����� ��`�8\���=R�V��sA��c�2�wE/G�0�E��K9���L��/���ENK}M�X�S��5_Φ���+m�:���>��f%���Ҳ��|�ҜC��������bl�J��e,������C�kj$����y�~�ɴїR���9/�E�Z����>� �{4�*+2��d>R34(ST���Ao7�K�����`OnkD���Q>��bb8��q�a���rEQ"J�A�)�ř������X����')a/�\c����t7�>��5Ԧ��T?�6A�]>�E������8�Zj/�Q���ʷ�W��NI$ӗ��Q��+�s`�2x�;ư��!D����"�]"��@>\_:�^״����n��|έv%�"�}մN&�JB|��97���S؆ޅ��i�l`h��lK*Գ�א����_L u��g�׃�p%�ǶQ^}ϗU����� O�-mO�b�̭f���.4�p�&�^h�IL��^b�YI�2DdY�d� #"xr�Aj�r�d�q�ɜD��7q����ߌq���$�2.2���������$�s�zЪI�hl�c�Ӧ�ļ`��T�/�i�m��Eyu}!u�x] 2p�?D�N3���~t3��`I�xj��Ls�.ͻ�m6,�M��V(9\�g~wR��iO C��F�ԟ����N晲ZU���ʻ�b7 rq��`!|mk \n| ���������6oQ���uDׯ [t~�Z�Uh�l�h߾��4Z ���Ǩ(X���<�ޢ-i����,]�÷9k7�fr�gy��D�:�-�D�!�Gr6Lh�le��(U���O`k� ]��?����:�_��� ;��Ǹ�0,��c0+��Ž��>��ҟƲuM0|�̅�w�����H�x�ب� p�w���ʍ'�6D�P���s���$h 7�ӷ3Z�L���%!����+�D�HWf���u��*�� �W�A�j����=��j��~|zw\� �����$�����Q8�* �b��0���p��tv��:��E��qF�o��0X[p��9����hU��/=7�U�"S�C'�h���m��ʤ��,wTD���d9��td_���y�fV1#�D��Y%��:��9�,��j�Λe�j���h@��A��y��g��omi:_��~c</�6R1�ͥ~j�}�������'�����8�.C�(i)��� /�U\�t���JP/��x<�Y�D�3-����ij ��V��31���>A+I*�@� �������0� v�B�J'<�0�N{���/)��/���������څ"�*/�\C����������'�Yɂ���`0�t�эN����sd���S�lw�ObX��L��4��1��f����K�!���hg����U��#���0�I:�� �N}J���!�K1�p7�n�j|�n��b�\������.����R�n ��S�>�m�l6�w��Q���2�ȸ�D�=R4��^�[P�+��kP��]_\�ۑ����xR�����A0����*��y��)���m�ɖ����Dn�~�b;�"?�Cf^���xl_(��BE�lyp�'�B�$?�۲���o���6�CL��(k�ԑ�L��;��L/� g�Q��))�|�䍨ܕ����%��@[:��"���� J��븖���%�����_�Z�Ӗ�H<O<�� �-�� �$'�v�EZ�`�����-6���`B� ��$R_q`�������7���1 T���Ƿ�_��D��b�#�NF��;�Ɋ��Vغm�D�3B�0,�A3JV��N�P�1�'r��j�O�㎲��i � ��������̦@���hDB�W�:����2�5��X����ݧaY7�g����/���YoA��}F�Ԋ��!�Xj ��S�V2�ҹ�����J��8O����N��3u#$Z�9�,�$�d�?x�@�``,Vr��;��t��˯�P�#_P���f�j�u�3ȅ4$_R�ȍ�lJF���ַ�xlkf���YA�z�Y�~� Z|:��W�p���{p�j����D\�t�����k2����A�����c�9Ի|��7}�%K�.�����Ԋ�R��s�s�����;���WS��_�]�ѬX`c�(�sO2��L5��i���\���[9��{3^ڰ��V�������MF�.��(�[eR�x�&�6�́6;�yG�j����,�DmNu�އ��5�9B�s3���L��yb���A��d�C0=@��Ok���$�ck�.���,.�t�|�u����K�����)>��"��3$�$aL��`�Z�����&��m'�����C��x�m&9�������S�]�1~����^�e��!��U\�h�����<x̸�t����Q�a� ����9 �G+���6 ���� Q�:1O����������H�-��t��' w8���(d�a�qb�ׄ����l[�@y�K���Y��4��*����B�L0Zc ��̮h5U2,��rH}UfF)@�ڍAOF%�.�b8�k�ߧ�ݷ���������c}ÔZ&�'o/��U4k�� ������F8�6�D֙�}����/3lG�������b~J����a�e�fp��Sr#&�33h��B�T�}�y�p��鷀`�������6%�+�Dlּ6-JXj.�V*���I�f�ڲ�5‴��/Ol_�eAs��D\IZ���
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ