Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
727e0b216ff7543de4bda4f4119a94ec_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
727e0b216ff7543de4bda4f4119a94ec_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
727e0b216ff7543de4bda4f4119a94ec_JaffaCakes118
Size
6.4MB
MD5
727e0b216ff7543de4bda4f4119a94ec
SHA1
6f15a54689fbb7a32d1ce71704023a5f787f235b
SHA256
e3b74636215ac38e7e3e1e40a207cd1eea779b8a5175ef112e64041486b55b1a
SHA512
769b06be97792e84d4ae0fb022b394388ad5d079fc0269f4045dfd2d9b36cfb897f5096b5dc6b27721db4775a6c1a6d5528a54f7dc74d9f0a9c1a73530b1a238
SSDEEP
98304:CBup7t44ySmwujF8GW1jDg3j+/KZZRN4qfjN/oi3SaGjq3Bl9BRLAaB+lfdl4aCr:LH44qpEvgnRN4GbiZ+3BPjEsIlFCjH
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
RaiseException
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
OleInitialize
SafeArrayCreate
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
�G*��u9��=-q�D���S�5��u�sn���20��,��i>��Ɛ4�����88�$`��U�s3��x��m��� B�;�El��&��0{'���!�c�C����w�Y] 0���26r ���~U�-���q'HqtU �=�E�o�������{�]�QY.>L/t��)���8��2k�u�nE�x���o�6#�����:Y����Ȇ��[.?��:�L��1��e�~hL?����������i�id�[��Ly�t#˦���sf�$1�Y�/��7�W[�Z�]���^5��[KAa*�9&m��Z��HT��;`Į)gp]7�#e!�� �)��>\������� ���bo���.Ig<{m�湚�����ŊLa75=��(�+٩�g宩����O��B4�kY��0~�_c�^�"�aZIߞ���Ȃ/�!l�G��<������l6���w��OF��K�,���?�b�ϪY-���:fS���+F���bm,ͦ�G��9���X���ݖAwL=�/_�'4���I�ؾIG�sT]: !�c��k�N�������o���W���m(v#�+�����Z����I#f��鿾f�d�]��^� 8^'V��?�M:��A.�]#����,죎y�ut% ��]KU�O��.�-=�Qy:�{����J�����ƽ��c�ڗ��c��O��$��rcL�����3�a�-���I������:3����+~ �n�%b�z2d�'�b�]j5��6T�lZW�1,�N�30�wCMͅ���cN?MYU��Շh�NN�Tx�?�oT�����(���C��F ��+ݘ����d#Qͷ� �����u�y����p=gx���f�D��S| å���(5Q�N��B���vÇ+I �Q��k�%���4V����-W�c7L�8Ե��c�����9Ti#>6MAf��Lj�5 ��X�������TH$�lDр�>+7LҾw�h�S9��i����Ĭ>��Tgӹ�ڰf��3�2W��[�APN2���`���Ex�� 2�ݐ��,�t)�����IY%���f�d�08+lm�ӥ����D&�yS�tX��uW-[����0"/(G!)!ǨE�[��{خ���lw�3��сx�r�_�n�8sfز &6����?|�> ��r���?�-��~r��{��$s!ޅoK�S]lH D'��랃�3�!ŏQ�S�YZy4 x,�!���J@�3�Ȟ��Hg���z�Y���%�#yr�aa��H��Q��j�l'��?#l�5̦���/�7�/]ZK�4i`�W�ȝ^��z?�g���X�g����+��.(OE�'���|*դ�1|9����N��8��c1i�Y���6F��/*��b���j�n��b����m��2 �:M�q~�"G������:�x*��U��[9�߃o�)���m��t9�NJ�Lo�Jd;နgs�jEM;��������?�n�1U7���^ ��.�J�����A|�%y2��U�(�~�7Ͼ�����i�S����ɽu�7�]*1lM�cZ�������ϠDG#Ư��H?�K�FD�G�vR� �v*�b��Q���y�)�Op��W���T�O&g}c� Y�v�x�����0_/��;ҳsF��o��&���ꤾ�h����ǵ�?�x�{'M4š�U��D�o�$��Õc��%��[`!�8ȃ������ �#�?�u�+�q���= �[����� %S� /��0g%�=�GL��GM��P���}Ik�Ȧ^��i��ܶ���'BP�aI��J��<��Qh���U�:)Sk2p�N*�y^G��O.�B��.8���rFR�1d@"�8�X������P��{��o�~�3��.���B���(���/����6�82r�kvQ��A��e�� ���d�9�1���7:�נ�qƊNvvҡ䪉��+?��*�D��p��2c;1�͓M��ZZ��[S��U���9�2G�v���%�ײf���'�K �c������4|X���75�2���kGp3z��A��Y��{p8����>K�(=]+��r=��7��?�~��g�/�PR�LR=#�XN�qk,��~�?�N���Ȳ&N0Pf����4��AL~�x�A{�~�.qdl#u�q13���T����%o�Qu�"��ݑ��Ls~���eׯF��ᑐ0jxҷ��vL�8���R�;r�c=j����Nj�7n�x����Ue�Z}� �if����d�7��P��c��H�}7��4}UX��D���Ձ��� n�J/���:]z2<� �Ft .RZGXޕA��?�����D��}�c[�>�yNS��s ����ZӸa��z爏��a3~�M���f���U��S!?t�:���������E��w�{.8f�'��b��H+�$���� d(�F����!b�śڙכ�D��W@��y4�%��h�-�v�3S��i�f�圍I6�|�Jr#L��e�.���������w糥 ��>��#�@絪f�(Ӡ�r���!����\�����?K��c���k���!�'팟w���D�o�)����w�hi�D��us�������t�e@��p��ЏlV��Wx%�h$'I��Xl9�d�RFRj?���i���H� �n�v���Ύ%�0���nHK�������P_>�m��b��B��!.�y� ��Hn����uͬ��/���@�7i�R������2^��r�bU�4��,q��jc�&a��P0sl��[6E��4�����FI<P���`Uul�'�!rgN:;�$r����.�xM���CR���:�~�L�Mg3��K1��Ow ��8�oEʛ`-6��� l��Οa��0��]�Ze��.����"5�Z�*��~��wk ��:�ĚA����2�������=:������T�4|�����_�çծzQ��mdT枣�͆��bV<m��(]i��X-w0�9��R�܍C2OM>�"�V]o�L|�|N�\n�H�Yz~��3;�Q�:���_�'Ts.��v�d_O�����rN6:@h3�%:�mu�4�!t��R���Q��~���8WM�]Yyo���C��g�0�P�_�4��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ