Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
69d267ad7cf9cf91f07ed49b7afde82c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
69d267ad7cf9cf91f07ed49b7afde82c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
69d267ad7cf9cf91f07ed49b7afde82c_JaffaCakes118
Size
1.1MB
MD5
69d267ad7cf9cf91f07ed49b7afde82c
SHA1
2e0f4c4d6d64d04afc7b707ce83cd251a242006e
SHA256
d40f55ac3391d814dd7b17f384063dcbe4695ca9e618ccb5d60040dd5d75031f
SHA512
3d81e133a91e72cdad0452bcf0f905f1503c50d04255daa6a34565165e9cc4293dcd37258895fb3865cd653ad80f4bb770dfc41969f8af64feb5e3ea67019c5a
SSDEEP
24576:u594XR/5Pnp5ItYM/ABtAbghHXjRZqtSIU06jNnuK+raA+gVTPlc5/N8Z7:A4t9IWtZ3WtSHRuK+rbVGj8Z7
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
d:\build\rsc\rsc_builder_applet\depot\3am\products\rescue\Rescue630_PostLaunch\RA\Service\Rescue\rescue_win32.bin\LMIRescue.pdb
GetCurrentProcess
GetWindowsDirectoryA
Sleep
lstrcatA
CreateDirectoryA
SetCurrentDirectoryA
FindFirstFileA
GetLastError
GetProcAddress
RemoveDirectoryA
FindClose
FindNextFileA
GetModuleHandleA
WriteFile
SizeofResource
GetFileAttributesA
CreateProcessA
SetLastError
CopyFileA
LockResource
lstrcpynA
CloseHandle
CreateFileA
FindResourceA
SetFilePointer
FreeResource
LoadResource
FormatMessageA
HeapAlloc
HeapFree
GetProcessHeap
GetStdHandle
ExitProcess
GetStartupInfoA
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
lstrlenA
lstrcmpA
lstrcpyA
DeleteFileA
GetModuleFileNameA
GetTempPathA
RtlUnwind
MessageBoxA
wsprintfA
wvsprintfA
RegEnumValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ