Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
642ef37f7493e5695f20d8cf2574f705_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
642ef37f7493e5695f20d8cf2574f705_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
642ef37f7493e5695f20d8cf2574f705_JaffaCakes118
Size
290KB
MD5
642ef37f7493e5695f20d8cf2574f705
SHA1
08fbd79b90d76126b535b36e7fefb4716c95c310
SHA256
ddc9637f1f74a8c1224e3ca2dd854e18154d3c74693fdaab9872a9bef3e60cdb
SHA512
505e8eb33230efcbfa3856d2429b9d589d9de3394ff7b42da03b9a110a6c5e13712ccd753de05ec2aac5c3bef0a983b6b8e9ba5a2d804824a75c202f33ae94ba
SSDEEP
6144:KfsVV09Du+Rc9DMQtc9LMojzmx1i68Nb/67pkkDvarYdYLx3IhpD:Os2C9DGh1wi6A/ephDvRY13QpD
ExtKeyUsageCodeSigning
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetWindowsDirectoryW
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
VirtualAlloc
RegOpenKeyExA
SHGetPathFromIDList
ShellAboutA
SHFormatDrive
SHFileOperationW
SHPathPrepareForWriteW
SHGetFolderPathW
SHAppBarMessage
SHGetFileInfoW
SHGetFolderPathA
WOWShellExecute
SHGetSpecialFolderLocation
ShellAboutW
SHLoadNonloadedIconOverlayIdentifiers
ShellExecuteExA
ExtractIconW
SHCreateDirectoryExA
SHGetSettings
ExtractIconExA
SHInvokePrinterCommandA
FindExecutableW
SHChangeNotify
SHBrowseForFolderW
ExtractIconA
DragQueryFileW
ShellExecuteEx
Shell_NotifyIcon
SHEmptyRecycleBinW
DragAcceptFiles
SHBindToParent
ExtractAssociatedIconExW
DragFinish
DragQueryFile
ExtractAssociatedIconExA
SHFileOperation
CommandLineToArgvW
ShellExecuteExW
SHFreeNameMappings
SHPathPrepareForWriteA
SHQueryRecycleBinA
SHLoadInProc
SHGetDataFromIDListA
SHGetDataFromIDListW
SHGetDiskFreeSpaceA
SHGetMalloc
SHEmptyRecycleBinA
SHIsFileAvailableOffline
SHBrowseForFolder
ShellHookProc
ExtractIconEx
ExtractAssociatedIconA
StrCmpNW
StrRStrIW
StrChrIW
StrChrW
StrStrW
StrRChrIA
StrChrIA
StrStrIW
StrStrIA
StrRStrIA
StrRChrA
StrCmpNIA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ