Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
65f8feadd09b8b566e49e6a45025f9e4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
65f8feadd09b8b566e49e6a45025f9e4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
65f8feadd09b8b566e49e6a45025f9e4_JaffaCakes118
Size
415KB
MD5
65f8feadd09b8b566e49e6a45025f9e4
SHA1
475669587d64bee0d37c2c24816be6e3fcd21f4e
SHA256
aad45364943a79289cbd7c3da9f53acb2ab17d24795803da3fd194a2782a3c25
SHA512
dc22cc6ba9dce90a46f8bd3c6b7a05be6aa8d9889dfd8915a3f42fb6530e36119a2a380edb06af43a0491c6bbd4ff182cb910661b27b4f868202185e193a5106
SSDEEP
6144:hBJeVbriA4vM5pvTlRgdUmItEcb67oMtjCgSv7gBr9Ri9r7Q:hU6A4k51RR+UmracoMU3vcBr9w7Q
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetSystemTimeAsFileTime
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetWindowRect
MessageBoxA
RegDeleteValueW
ShellExecuteW
CoUninitialize
SysAllocString
HTMLayoutGetAttributeByName
GetAdaptersInfo
InternetCloseHandle
��ƶ��?��j�J��j1�#����Ǟ:ƈ ������c鏎2!�k]��C����&���1{�q�����ژ��z֫�(B5f�`CƫՆpo)�*�p3�\?j��f��w�����}��9(���8(�~.���R1~AZ9l���|C��n�zJ���ϖ,��43�Y��]�M�"��W���F���%��⊨���ZSW������Y��@].�w�{=�LS|���ὥ��Sj�ط�����c��h�!���l�'��e�r����`�/��5.T.ۥpe�w݃"h�Ý$ϩ3���0���������)�r[.����tϋuw��0�k��͒_��\�g#��XY\w3�DZ��(�2L=qp[O5Fy�6L�76����z��t�7�� F��p�!n�A�]#����-��$U��l�F�ځ�&S\M��B�+�h�'�-LWf��b�������ʊ�lL� p�m]���w�.c��ȶ���^�ۿ] 0S�r%�0�7��a9�L��ls���G� ^|q�<R$_:{/��v����7�=��+�-�Ǯ�[��6}�_�+ji�� �imu].H�?� ���<��}4���%e&�1v�#QƵdբ_��h�����T�/ϕE�3��<�Zy��.����/7�3��-k��f�=���j|��Ҧg��"�if�p���w=X����7�G�C ��}pw�8�9�C#�J#O�~FA�[ҡ�_�G}�G1�|���/�>v��H��Ÿ( (q���P���R�=.LJ�m��Y��N,p�KZG�|'j~�%߹.Ќ���AM��I�R1�|��^|�����E�����Bp*A��e"��%�y�s�����I��Gs�ɑqR����� ΰ�����g��JȐg�^͔�#�K�.��a:���O�f|щ�:��4IFa;@���� %�"M|N�b����>�>R>y���I�#��m\:�2�(Z��H�:|�b���0��͇{C���*#ԭ pگ7'Ps��h���o�/lqCU4$��Ga��j?�9Z�2�W�iY�R���R�qu�TXs$�e���`���̳ө��H���L�9vt#Y�-�O��g�C�^7���_V�-;4'�_ʂ����V���'A�k���X���FexZs��-eښ=+},�2!�h'S%w��AnnQ�U�D(����~) ��ןmDgT��! �I)A�|�$g;&?�(�%/��1�l���,A�V��-iڈВ=Ɖ��n ��E2��pA���:/d��Rϡ|GxU �U�������W�Dޅ6E+�M�@l��L�k������8�:�ؼ�5.�/m{��F{5�<"�L�24�����p�� uB�E'����O�"FJ��Mn�!Ք���?��G���@�]���%�ͳ/Mԍy�%�?݅���;a�9n�H���0[�OBD��D*$�FK�Fԩx�ӏx2�������%���i�x��b��Xf��vF��S6l�[�v��LsU*_ ӁT4=_�� 6ؔq�rM{>�Kk_}��~%�v�U�N̲�R0���n�g|X ���H�̋go�)&I@���쎽�p DhT]�����7.I_�V��6HO�m=j����K��OU��) ijQO���s%���Yo���F��UP_�`�2uCfytS�]{ֱ��=j�z�mR2��ƿ���D��]��ŰxKm ��|���+J����@cvӑl�aVjA�å���^!P���R�������`�x� �V�ڔA��UhpL̎z�${/�o�����M$NmM����$ۻ)}�;���+��^w7vy(�� �!'i�%YBR�5 �ޯF!�3Y4���T���4���X�l6!Gj07U"ˑ��@�B�k�T [��C�C���fi;w8��.�$ ��]%�V�|9��t씓�BJ� ��gGf�d� �=��q{FB� ym��},��AN���ޱ��)��٢'��K��1����/��ZK0O��@O�>�32T���#q�oj�u#>�Z��!��0م��M▜����@_�A��.n?#�v̛q�^V�G�n�L�pb��6�x� 9d�8���yLvM.UT96��'J��[�0O�0��lu�����L-�:���r�"{�OP�^H�������j!��+�r�c,����J�8*��e�F��l`��~g��3�Y@z*"�����ՠ�����e��d�ʈ�|�����wP��I2��?��}a*�ǹ:P� ��'_��5Ј�`X��xQ�e�1ruq�>��M9aN5� E �Xx�|q����������{��P�{��u�e9�$)� hd˩��}�7��� ���F��� ��o�$ؖf��x� ��'��!�KgZ�1���<u'��a��g4mx�2�a�p��On��m��$.�"���T�(]��rz� Fn�w�_���T��cJ�g "���_��L���b�p�q�>4eo�9����D*C%�B�B��yx�DM��@��4��s���N�B�Fz�T����~���J��L����<Gh��co�=h����,�S*��!_R{z+@�����TgX��C��5]]�IC����L���9)��s��s{Q�"����Z��������R���&�z/o3Cߵ���3��I;#˔�'p97���Ǝ����������MR�� �:X��z친2Œ|��7b�yf� �G���)%q눉�g�Y���5] ����M$�������>�af�0Vs����=Ƽ�Xh�6��wy�+/��c�č��}��͞��z@�7�Uw����K$Դ���Zح~\xg���x���-�~ J�И�ݫk���A�k��T� ��3 _q��PՌ����(�s��b/�zA9�K�OQH<��&:�[�$Hd��r�����Lp5*CȡM��H��X�Xb��k�*(�@����S�����a@�4��i�Vx&�k& ���]Ei�p�=��_��� :�����渊�ԧ�[�3ŗh=n��g���Gn;i��fPЏ�KCS�� , ���Ȭ`{!Ԅ�9�@9�X�ħQ j,L����P2>ny��،/���]��|������5^�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE