Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
6787d6ab1c7a7f55013f5b89e164c8e3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6787d6ab1c7a7f55013f5b89e164c8e3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
6787d6ab1c7a7f55013f5b89e164c8e3_JaffaCakes118
Size
541KB
MD5
6787d6ab1c7a7f55013f5b89e164c8e3
SHA1
be43de1c19623545e82395c2233558b5c5b3ad15
SHA256
49993b24358da661dcf566ef47a836b32183efd01900e4eb167ed20a356e20f0
SHA512
bda7935cf39080777c9b02637c730d9ca6846ccd0cf97ed9660e3bc538af07ba3e7ad5badb4cdfa4c06ef51732518f0998a5a2d751bb28c4be8ff3e9a776e84b
SSDEEP
12288:gtf37Vme4ZcxHQSRoGxSaGSjclc+IHIQnfWhD9jEEQ8Ol:gtf3hme4ZcxHtonSjclc+IHIQnf2jEVz
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetProfilesDirectoryA
lstrcpyA
HeapAlloc
HeapFree
GetProcessHeap
Sleep
WriteFile
CreateProcessA
GetModuleHandleA
SetFilePointer
ReadFile
CreateDirectoryA
GetVolumeInformationA
LocalFree
SleepEx
MultiByteToWideChar
GetCurrentDirectoryA
lstrcmpA
GetCurrentProcess
OpenProcess
GlobalAlloc
GlobalFree
LoadLibraryExA
FindNextFileA
GetFullPathNameA
DosDateTimeToFileTime
SetFileTime
GetFileTime
LocalFileTimeToFileTime
WaitForSingleObject
TerminateProcess
SetLastError
GetModuleFileNameA
GetVersionExA
GetSystemTimeAsFileTime
ExitProcess
GetCurrentProcessId
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
OpenMutexA
FindClose
FindFirstFileA
lstrcatA
GetFileAttributesA
lstrlenA
CreateFileA
OpenFileMappingA
CloseHandle
CreateToolhelp32Snapshot
CreateFileMappingA
Process32Next
LoadLibraryA
GetProcAddress
GetLastError
WideCharToMultiByte
ExpandEnvironmentStringsA
Process32First
InterlockedDecrement
FreeLibrary
lstrcpynA
MapViewOfFile
VirtualQuery
lstrcmpiA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
HeapSize
InitializeCriticalSectionAndSpinCount
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
VirtualAlloc
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
RaiseException
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
IsWindow
GetWindowThreadProcessId
GetClassNameA
EnumWindows
GetShellWindow
IsWindowVisible
GetUserObjectSecurity
AdjustTokenPrivileges
IsValidSid
GetSecurityDescriptorOwner
LookupPrivilegeValueA
LookupAccountSidA
GetTokenInformation
OpenProcessToken
ConvertSidToStringSidA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyA
RegEnumKeyA
RegCloseKey
RegOpenKeyA
GetUserNameA
RegOpenKeyExA
RegQueryValueExA
OpenSCManagerA
QueryServiceStatus
CloseServiceHandle
OpenServiceA
ShellExecuteA
SHGetFolderPathA
ord680
CoUninitialize
CoInitialize
CoCreateInstance
VariantClear
AssocQueryStringA
StrChrA
wnsprintfA
PathFileExistsA
StrDupA
StrStrIA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ