Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
77130a36d87b8f6ffc9ccbb5515d5f4c_JaffaCakes118.exe
Resource
win7-20240729-en
Target
77130a36d87b8f6ffc9ccbb5515d5f4c_JaffaCakes118
Size
503KB
MD5
77130a36d87b8f6ffc9ccbb5515d5f4c
SHA1
fa04144561898e4382b5df519770be1b85ae80b9
SHA256
6ee8c857f67c663a8b454876b9d7d6c164de487a95a659b455d3c88760e7e1f4
SHA512
f2d3457e19750e4e96918131bf460b1f9635651a52d3cad5801c83c71325450d04be858ad61321c8f4c583052e36ba9d662ac16535885ad0c02867505f3d86e8
SSDEEP
6144:CoialVGrNGmL04Qpmnx1QbQ7t5JgCx8YmpVjC8JtKSL59EmeTxpOj3ublX:x9lUDI4Qo3Q63mpVjRtx5CTxgj3ublX
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateThread
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CopyIcon
MessageBoxA
RegDeleteValueW
SHGetFileInfoW
CoCreateGuid
HTMLayoutWindowAttachEventHandler
GetAdaptersInfo
InternetConnectW
ImageList_GetIconSize
�MӉ�C��z���mbA�O�� -b�ɬ�@AȀ��ͽ�y�?EV�Mռa ���{N$~&k��}'ԛo��2]�P�.lr�����S��p3�2Ǎ_�P6_|�*�y*e�����v�&�9���7ʄ�2���;��F�ߩ�l�C�d��iF9b!���ygBSzA�A�H�9���U=�I�Ey� �����a��A=���3��ꅿ)�ye�-��/�ө���̰0��kU�����s�����}��:K�A�e5�����JA����m~=8���h�֧v.w������' aLzD]-w�:A��,7K?�!g6ؼ�Ch��}��v��h��T4]�j���Drc^eAߖX�)l�_z�#?Bi,��f�D7`�a��8�=�N�t��?���c=O�+��3�G�z�#��)��AP�e�6�� M8W��f�;j����g-�����3���� ��Sϭ����,��V�^����ڹ,<�����U���A�.���܆���J��]�����Z��� ~�W����S������%T�/^������H���dH���D����:�",IJ�줵<������r��,�U5<�x� {_BQ��$A�:�ti_���nde��Xv vm�T�MXy���� ��`���V'�;P��;�}����$�\���B�L����HK?����� Rw*��bo�C/����v�{����̇bx4�@��}�w��ͽ+��N��!��g��m�>�!���D�0(~�`��}-�C�����#�����D�.��˭+T�05�g|�����9Ww^�]6�b^߶xg� ��CcI�ip�.FK�*e�C�CW3�f���'��l)l���\ 0� �X��\d�e���Qx\1܀ [�����t߾1>!G���3�����p��o#a� ���0R�Q�5�HQ�`�\�f��0*����8�J�f{^+V@B� ۜ~&�~� 1�͍���\���р8/�$4�����n���O��DJT�B�O��h�<`,͑R-�`u��Q��� �7�M %_��?��e9q�q^ ��B����]V�����n��3�Z����@�S�.i���6K��~FAK��,?i��s"��4��P��/�,��qx]T~D� '�� ���^�����J�Cl>� ��*k�����T��͵�� �p�#a*��d6��r� �i�1Iq�Bj�! �Ȯ�3�����a�ى�&蔲s'�P������Q�!/ V��z3�n�Ӯ�9�]C�M O��%p����y�P��-DQ"�3��@�|)G%����"�WU�m~����[�|��)��z���~v�ay���|���v$�x��#oP]W+>�$t�^<~�ί��)�3���Am臷�ghb� ,��������tx�r�[�dSD��]�RǼ�<J��y���l�Ο6ib��NG���d>�������Z��"�vsW���� ����}NmtY��8�[čB~�#%����5�lڍ��H�S)tŎ^�+�,iS�qL����RIc��n�T�J����Ʊz��- a�<�;a�����I��Cp����ƹ��N�x�R�7�ٻVk[ٟ&��� n� �v`�7h+�uۦn���/�uR�DV�㸍KEK��#�%E8�ص������a�����`�8��ܥ�����[�_���|��;���ދ��߾)cZ�(H�UK�3\A���s�0���p�)җ#Ū#��l��y�$��\'�;���r�V��a�z�]�ڿ�_�mи����?3Hu����n��6���~"WP��4|�S�Ȋ"����Zf������CW7Ы�V��Ҡƫ�nI�L�Na�-��X��B����g�ٵS3Y���8d�@��/*��'my����.���<�)�2�KDBV5i3�nboyrĵ�H���V+���kQX՟*2.M�ʟ��f' e�rH��E<j��<�i��,9;PHN8�"DH��x����Auչ.>�v\�?DkL�8'$���H�9�ks�ZkV�)=��|q�<��Sk��4� �*x�����V ��B����I��#��X]q&\�l�[fC0�9��V�� ����i�t?�.kr���c8{\�l��=���cPY=L��ǝ4s�o%�iv�zk��J�L*P68��N 0�%Bj�YN�zX�3Ү��>�e��K�m�U���g��bȁ��A3*^r6u1�\����n��@����ɘơG���/���F�:��� ���g���]�+�"E!��SdF�a�4�y8o5�.z�_�Oȼz'�u�skS�(��I�^h�X܄{ĸC7%��%�x�1�"��T0��劦A9��H�?����9��F������L��8w�R{�K:���ʄZ-�P��LH����ӱ#JG0�R���F���9;Ho$��y�K�Q[�D!O�l�5_��m��l> x/�>�+{�s�����E�B��p:�8 k�����w�9�Oxn(IL�c�X���=�:�cd���*��^�r5��:?,P/������e���8��֬��_?���gyI���)�E�ګ�+}�����Z�}�����i(ޤ��dD�"�KZNs��I�h |S^�Ɗ�QI�8�V�(3�m�P���:ZL!����T�OS�0�ĴPE���G�A��P�:���r�<#�P�Z�����NgZ�3i�=.�:5���r�i.���e�ez �oY��:<)���;��>�R����5Ε�SN�Ƞ�����������.н�)��=:��i�;�`X3�z��|V���55Ն��������s<�]M��È���z���Դ^k<�=<�}^�3b��>�K���6�������W����j��`�b1�z_,�!������(ɿ��CGd����@ t|���B^�*v��>�G;�b�j����A��2��Ĕ�̵'<�n �*��݊^}��A�x�� ύ�o��q�LGr<�I~� �����ܱ���T6=��j.' �TLc�@E+ó�X �5͈�lsm�Q�x�~zs�`ЎRgؾ3���Ċ���� �����)�<:ȇ���{�e��K�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE