Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
6812c1a501084d94cff07aecb2cf55ee_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6812c1a501084d94cff07aecb2cf55ee_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
6812c1a501084d94cff07aecb2cf55ee_JaffaCakes118
Size
326KB
MD5
6812c1a501084d94cff07aecb2cf55ee
SHA1
ce14559d91ba539de5407f7b5c4e6791d0507510
SHA256
bc8c2f89f9a4a4b9c95dba2e57dd5bfe73aa29e60ef2c18fd4171ced6e41ccd6
SHA512
ba42d70b829306b35aadba7a07d0ae4d3a3ac61dce21628844f6c876b70932d1605d14625024c4a930cac427f0164435b54db0411ad8bbe1327b471e259eb3b0
SSDEEP
6144:fteC8QyK3UE4V6INxCQyCgJfqokS4cpslD7f48imH6+WGWxpPEVmCAp18:cMyeUE4V6KCnxQokS4YsF4eH6+WGzMCZ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
SysFreeString
AdjustTokenPrivileges
CharToOemA
GetVersionExA
GetStdHandle
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
��/XeiΨC5xRļU����6*��H��d_�a��#�Y�����W}���ǣ\(���ٳ�c�1����v�E�þ[e�Â�9�B�.ð-f��m _�A�Y4<�o��~����Z]sQ�:.�ޥ���^ ��G!CU�eb}㦖�͢R>�+�G�4�q�|�2@����_@�q>Znԟ�6��eӰj��bXa��c����̸��U�����i ���S� �yX����A(?%V�G,�g�ܭ�ϔCq"�� �Ī�#����+���Č������U��{?D�����0Mt�O�39�� ȇ�D��I�A���_vu��-�T��P�~gN�^�G{�/���! �6P�Pv3)?���������Oj��Ol%�ء���Qڊ�ԗ[���Ox|�[s��]�O�ll�Q"�ܛg+x�� �(�ÎҎ�=�x 'Jw����M7 ��b]I4gC��,�2]�}��4]�=?%v.Z���] �C����ȼ��۫<�Χ�)�����ڽ~� ��Vߜ����ޚ��X��r3�*�~\���D�����Hʦ#���P��>�i�8�]�Lϐ3�*N���Ĉ0�J�K�-y�G��[�![�/����� �p���#�O�q���m9L�w���7��ڳ�U5�~�gٜ�tR�� 2��r���p2���X~���2CXMa��K�ij�M����!dI��ׄ۷ɡ ���!�2֯id�C"a���������K�]$X�U�U�6d��S��b��U��Q��079�Z���[?wޖ��I�oK)m<�Dz[����i({��F�K����t�����v���ઇ'tp{/5\�GNO���W��u�C��r��nʱ0h\�������w���l����V�=��¿Y8B�0��mq��X"]"�yXH\�Me� ~_5�J�9���?�L�%:̀BID�'%:�\;}�����îe��Ҙ�˯�8xm�k��oJr p-`!D� �Fp��7V�z�e(�f<�{*��c1.��du#����%�v�L�*��S}<㾸�Q�K ���l����K���!��J�� b������[��)�n��g?2oYX+)��,��*�)f�ڌ��zQc-��9�CC1�Kԕ؉��g�"j���~N��+�P�?�;~W�����i�[N�3n�4�ād�y}�` ��sM�A��D�}Vr���@����?�E�C�G�,u�[/~��M����Tw�9���}�g@q�"�4�$���<r|� Wc>��`Q��X����ϸ�s�^[���j����j~�����́�$����(�ݟ�'/`q���`=��� @x@����� �cש�k�v�Է�9H������v+&�5�]`���2'{_���Q�(������C��0 �OM빽>5�g$�Ȳ�a��B����Dd��?�v���?�h��i�qK��l�$v��5�r܀*��7��Q��[p�M�"Sy��v�f����Ƚ�ߖ���2tWY�a�#(�3�! ��1�^���� ��o81��n�j���]�k-s�^8t�p>&(�K<�#�����eA,���=q�U^hd��ԉ��CaY~���rs���~p�+�Vȹ����`�� n�w�w��c{�3��k���=�.��L]�Ӳi�?���� ��7����sQj3V=��7 �1 Њ%���(�HgA�Y��ߤi m���q�^�k��������'nK��֥Q��6�%�Rֆ0��nI�ӝt��xz��RI-P�vyJ�/�կ6����@\�N�:��`���p��R�h�#��ޓ~Ey4���y{���I��`�N���-Io���J�IAj>1l�4D�����|ĥވ��~�At�0M�^J�{y���G6��$�Kݎr�Uٔ�w3c�iV���c�`E��IS�A�r[V57=��6��'�(y�{���7�b��,Ϊ mCX�Cl����۹���dc8��O���;%�>�����1ȊȰl�k8��_��������VJX[U�}�ەN� aB5-F:�Ηk��(3����L*��#}��`|���}��yO����j��Α�3¾)�/*x/�4�)�B��)��2r8V%\�i. ��p���9�i�;W���i�i4�9!*�u���<����:�YP>���$R�ėp���$��2�&-�^�ʌlƎh}�6]c�x&[\@���U�#��/��}�H@2$��J`m��) Bg#k�xE��,�-/Ь���c����9�c���C�����a{���.t��?'��;P��Q�G���g-y�f�!��BVCG,_��xc$gХ�d�!�^$�XI����h> �M�Y�L* Yt?���[�LG��N?�� �(�^]if'-�J�B�i�\�k4&��+�o�'���<�1�!7kh�~�/��hS���<TTSq[�U:Ę�U��K�j��-#��H���������ۺ��-�F3G^��LD�0ɠIdD�-��.T���I��nY�qNߚ0�:�*��dg����cJ��)9�صF��֎��.�(j��Rc���3��������NCx):&�Y��� �/e7ր��&(Z�L��=ɯuG��O���8&O�Ƈ��UH��%E���Ӫg��^���d���C��5EI|}�dE�y/�ѷЈO��� ��]��Uc���(Z��O�1���]������o<��Q3L��_��p���ܔb�=���H�>��Zt�Y8���~Ii�_�?�z�-�Iȱ@▯�o4T�;�Z��C\qv�l��=�8����L�����|ۍ��f|���p��� ���84�[w�;���m�*.$���W.�0/�1.ms��Wb���h! �1rՀ�&�(ݦ2|�J��<�>ѻ�z�wyX�*����+}��PM6Ν�5"f�:m_�4���p7av'a�_�X*-��Y}�+�� �D��sA[ƴ� l�j��y$����CRb�#*�3��M�"�� d�!��=���C����0��Q��$�x �L��EF�A0��b 7�řö��?���$2�K��p�u��)�} ������%�P��Ro+�F��lt���J�����
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ