Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
65af90847979f41741daa9d83ba76758_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
65af90847979f41741daa9d83ba76758_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
65af90847979f41741daa9d83ba76758_JaffaCakes118
Size
14.8MB
MD5
65af90847979f41741daa9d83ba76758
SHA1
f700b7411ba4bf94ccc3b4b44657c19ed061029b
SHA256
211edf55e817dadbd5dbb609cec167943349f223a862e61aa267328b91d34d20
SHA512
17a49c0564c5a84bef2eeea320e4a75ef1a5824d57cd05093a766f76100090f000bf19dd77ff9644fac79731c8d16d7c4c3d817795d035509f4e2df0ed6149b3
SSDEEP
3072:SRpwpq8KBv2dP0lF3IGmPDlSTCkVs1+++++++++++++++++++++++++++++++++c:SIpqbOdPgF3ULQDsB
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
FindResourceA
Process32Next
TerminateProcess
OpenProcess
Process32First
GetProcAddress
LoadLibraryA
CreateProcessA
MoveFileA
DeleteFileA
WideCharToMultiByte
CreateMutexA
GetCurrentProcess
FindClose
FindNextFileA
FindFirstFileA
lstrcpyA
CopyFileA
GetModuleFileNameA
CreateToolhelp32Snapshot
GetModuleHandleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
MultiByteToWideChar
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapAlloc
HeapFree
GetOEMCP
GetACP
GetCPInfo
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
RtlUnwind
SizeofResource
LoadResource
Sleep
GetFileSize
ReadFile
VirtualFree
VirtualAlloc
CreateThread
WaitForSingleObject
GetExitCodeThread
TerminateThread
GlobalAlloc
GlobalFree
lstrlenA
GetWindowsDirectoryA
CreateFileA
SetFilePointer
WriteFile
GetLocalTime
FlushFileBuffers
CloseHandle
GetLastError
EndDialog
DialogBoxParamA
FillRect
SetWindowPos
SetWindowLongA
GetForegroundWindow
SetFocus
DestroyCaret
CreateCaret
SetCaretPos
ShowCaret
DrawTextA
GetDC
ReleaseDC
GetAsyncKeyState
CreateDialogParamA
MessageBoxA
GetSystemMetrics
IsRectEmpty
ShowWindow
UpdateWindow
GetMessageA
MoveWindow
GetWindowRect
wsprintfA
IsWindow
GetWindowLongA
SendMessageA
keybd_event
mouse_event
SetCursorPos
GetCursorPos
SetForegroundWindow
GetKeyState
DestroyWindow
InvalidateRect
EnumChildWindows
FindWindowExA
GetWindowTextA
DispatchMessageA
TranslateMessage
BeginPaint
EndPaint
PostQuitMessage
CreateSolidBrush
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteDC
BitBlt
AdjustTokenPrivileges
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
LookupPrivilegeValueA
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
DnsQuery_A
DnsRecordListFree
setsockopt
ioctlsocket
select
inet_addr
WSAStartup
WSACleanup
gethostbyname
socket
htons
inet_ntoa
connect
closesocket
send
recv
gethostname
GetModuleFileNameExA
EnumProcesses
EnumProcessModules
PathFileExistsA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ