Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
76c9bce4beb37cc8c00a05f3efafe89a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
76c9bce4beb37cc8c00a05f3efafe89a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
76c9bce4beb37cc8c00a05f3efafe89a_JaffaCakes118
Size
1.6MB
MD5
76c9bce4beb37cc8c00a05f3efafe89a
SHA1
53bfac12403c84993f959e511daec16d87b47161
SHA256
66a1514ea0b833d9108f7ad1ec39a568cedcb46839f956ab330fb72791fd827d
SHA512
b8fa907379ff9ac16014535b2a4d1c33c3675b3079897d790706baef2de7cb5452d6b46633ba669bc0673ae3a924020214b2d56f2e90652df8aba56123871090
SSDEEP
49152:8qwS8vx1Ej6oGUi1Z+BWVQzxb5SE6cypnKNNwN/k:7wd1g6oGn1Z+Iixb5TApKNAs
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
ImageList_Destroy
SetTextAlign
GetVersionExA
DeleteFileA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CoUninitialize
SysFreeString
TranslateAcceleratorW
WSACleanup
R�����w��`i$�?{�R�nU��`B�Eť̓�����O3��e; �^��v�>p�3"�np�� ӷ�h:?ވd���B?}�`B�gY������+��qޡ�?!���-���\�� ��������I�i#Ώ$�+�V�vh1�.a�� gFKJ߁0?�cod&�S�]r����.բ��~�!=��A��u>���O_w��A�M��9�?�mҔ����݃˒dy��(�+H��j��� t��)���e��S6U���O��$��r�/P��ʴm�"���J@�٬a����xsx�|�A4@[��X���4Z/;s{8G�R�S3ҘT�)�hX����P�m)���lXMܿ*��F�y�2~&�����e��Z"�ї��X{5��B����S������FV�I��ĥ &\�a�7m�o�(g[-P��n��ڃ#��7J�5g�����L����1��e�5��%U,�� p���"kAX��@��Bڕ�y�����S�.�p��`��`�2��+֯M�YŬ��o�B�]u���u�fU ̆>'��B����1Mn���ȫ1������5�|�*g�p����f 7�p���/��*mYy���<|-#��a���F�G�=4���u�Z��ส?F�����]����� �� G?�s��$̛��`����1����(Mzt�"7���02w��(���ߴ�=�ɭ�Q7� � ӯ�����&�i��0V�5o��� u�0�ˍ�z妗u&��4w5��G�j=�%��n����\����� ���h��1Y����{�r��G^�ŊA�v�����*&[ޅ�'��|��l��,s�Y�����[,Q�ئ҇�UE�����{�[���R��0* f2{)f��ӳ R;;�q�F��w �Hw��6�=�A���S*/���(��u��9�+=K�C��_�Q+�<��*ďϖV]�(a�����rx(�h/�� 8y]A:#�p��;h��#s�6wV������1��po�{5��ƙ��u�mL�ˬ�#,P�L� $�0ClOp���:�����S����O�¢��?ӥC�*�|�`�h3S���.������#j&=�1/��/S-,ܬ��4N�(��d�Rp�"��f�I�+;H�Ux��JnExw�E6�5L�<��C4�����kGC����[�����_Ov�m��m���Z3�,�I�V�"L e,�8 R�o�?�˟7i��^ì{_������Q� E���W�(��1�Sl@��^n��44�T�=WH't�S�Q��C$K��Y�3�<�v(��,`�oѺ�5sq� �,<�.�46 ��5����^��t���@)sDI1�����6]�/ǴA�|�&� �1�'1uO��>��S�(>~G]*B��^���/x�;���I����Ӑ.�H4l`�}�w@�7n�m��ۂӐ����4;w�������l��.�c�)c< ~��.Ek������ �\L32��d��P`_ꦔ�/_ЍSYji3|+�� v��.\�<�0��5�ಀ��X����de��ȫ�y��G�!�`��9V�F�?7� �:�̴w�X@d��r^�p<�<$��+G�9�זD#H�Nv�������ϝ�������0�c�]��S`B� �X��6#�U�Z�c%V6���O^�J9�n]�Eh�H����4Oh�e�����~���Ÿ9s)f��R� O蜯�i���K[�z F���%f�1�&Ar��ڐ����/6�i���kv�l\�� �rB�����V�2M��������g����?�H̦HX5����rA?qt���#��D5��^�q�'v$G�E���Тȴr���g:�?&��E@I�ɽY���3�8��Q���w����t��u����O�kam'��}�p�i�a��������(υ����/�MW��f�'��Ъ9L�L#4B���AcmP�F�ĹL���nܩ�ڹ�K Ў��Dj�(��XeTj.oe#�E.���Y�����W ���Dv�� ����+�V�\t��Uә��e�.���b�B�!2Y�����i(rUe~�_�UB���|8N�k1�ݩ�H_6�f[�(��W��j�;k�mQ}���ߧ�n���}��{l]� v{���c����^L��:,����1�m��m �V�g�����ӓ�B���ć_Tf|���g���1c��B��#�*���oĆ�X�v�0 Ы�m�:RPgk��� ~�m�&������C�.��S���R j�Y:�z���h��5el�Р�n3�u��6j��U�i�=�����Ջ�<W�͆�{�4�:v�Ȅl�T��g,�{��p�B�G�ȝ=�Z������/���S���- �ڜs�Kfς�of�˽��aٖ�gQ���$��#�`��*.?��AG�k��6u6s�{˿v�tգq��N.-�,�:�G�g�p�h���:�_/4�a�V.���h����1M���� ��;�~���}�����8��!N��[�)_Fo���C�O$�Z�'o���"�� M��8>�k*����Q�;l������bg�:��K��w��H�K���L�rU�F���/�%�;m�g�,<�e>6�������gtL�����R����W(x`���J��Y��?��1`'�h���F�AV�Z��� ����Kd`�)A�k̆�2p������>}I��������͍�4���%P���* ��+;W��D�A07�����3���G���G}��J�6w/&Ş�b�s|Ŝ�tc�)��D��)�g:��P�՚�R����ٸLя���;wt��d&2<���T����ǘ�C�k�kQ�����\���4Fz�O��"Դ ,��١���njm5@J�yj�WaE��3N�t\�\���{]/h���1I��]����]tQRR�9N������y���������W��@�������b��5���Z��|���UZb����?�US3���P>y��k`����h|�>��^,HM����kL�َ���I�MV�k���z��-������?~@�m�|�'C^uy�:$莖#�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ