Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
8d20017f576fbd58cce25637d29826ca_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
8d20017f576fbd58cce25637d29826ca_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8d20017f576fbd58cce25637d29826ca_JaffaCakes118
Size
1.3MB
MD5
8d20017f576fbd58cce25637d29826ca
SHA1
cb56904366c53281e3c03f2a5dc4445dd5e82b98
SHA256
009645c628e719fad2e280ef60bbd8e49bf057196ac09b3f70065f1ad2df9b78
SHA512
643dc6ba2f7e77168aac3e763c9d2b3ee6af46d450fea3ff22f0b02c295e0a4e054d6089135a060833f8f0eb5987128aa31ee7534b0988c40dfcbfd48e697d4c
SSDEEP
24576:bujnRvAWsvOoKE5rjKQVd3akZWKnlqn4Ft7tFRJUcZbwym0E3G1bsu7DQavBvPKX:b4nRvhMKEpjKUdzhnlUcXlbRmqAaBvPm
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetVersionExA
GetVersion
Sleep
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetWindowDC
CreatePalette
GetSecurityDescriptorDacl
SHFileOperationA
CoInitialize
select
PathFileExistsA
DnsQuery_A
LsaGetLogonSessionData
GetModuleFileNameExA
WTSFreeMemory
CreateEnvironmentBlock
GetFileVersionInfoSizeA
Install
LoadPerfCounterTextStringsW
PerfectWorld
ProxyDll
ServiceMain
UnloadPerfCounterTextStringsW
ncProxyXll
�X!L��1�� ^���p����6WG]!}���q���-�".-\��z��b[�+ߪ���ַg�t�G��A�Q�?i��M,��ە�����U����l� ʏ�� Q��.q�EM :u�����K)7����K����B�٦F���?���� �����M�ې��?$���f4�_?���Ϯmk�������;�]B�������$Z�BO�"l��Y�K�� ������ވ�{�t*��H0-6=�í��]~0��o�X�G��_� �қ�X֝ �~��0��?�Vh^�JD݈US�|�/��,iH���/�D��sȔ�2M�ѸD�~�Q��ӘD���_�%ss*��������d�eX��JY�_�ZG�+E��b�\ي��yr6��:GY�*@g0zmMQ#����8��9 �"����d �qt7�a��O�� µ�Kډe}���fq�0fD Cwf�ָ�{1���?��͇E�M|��% o��b�0?��L�ࡱ�#/�Hێ��އ���9a�´b�{;�^��]�L���p���zuI�a�eTe��d��COHǫ�=�Ӻ����jU�����B<�y����ɮV3;Ss��n�R�.�^g�,��*����d>��Bq�_ǧ�����$3��~Z#�(-����(ܶ���Z��`��>,r��+����q���\��|��O�7�)Wj-��ܬ�(X��\0>j��+íZ� GX[W�!4�t.go.3�zD}J�^a�r��� /�|�����`�2Z�D����雽4�� o�CwS��4R���r+[l ����h-JNR4X_��)'��١y(��d?��0����"%��M1�u����ŀ�lО�B�>�����.T��Y\�:�s��*{�)z�g�D>��-���]SN�5����B�xa���kz�A�y�K��ϳ��g7��JE �i����r�n���(�: �ƷW=�1�XFb�#%� K4�Ovz�F�}&�����w�m���Qz���,(,��+;�*�w�N� �y10�Tl��\�V����6/���U�6����]L|�{�*��ʢ�!uhT��1�T���Z���u8��C��I��`�/��hP�v�P�>ѳ�����i/6���v zs��H���C+q<���W�)�S��#��1���E ������^�����oO�a8(��&�%,����#�䒸��]z�k��0d;��<*U��sb�W���������f����g��B�N*��5��-N'��i�Ǘon�6���ч�u�}sH��h�|P��J �>i?|mM���g��1G��q�dT����h�F�|CW�I��.��>y�������"��S8���}��F��uj�gX.��'���}�\�纽)cW��W5s��IUg+�X �M�H�����w��Ut���?��Hwgو��>�8Ǩ{y��/_'J^Zw������_�7qHP��6�~E��S#��bފ�P�����\�q�'�l�O�kM��E�� c��Ͻx/!���F$����l���J�p&���;e4i�X����z(�����%}�����8%=ϖ � _`��"?Mf������B�"�P.j����E��:xÊ�-}ō6BqKh�jũ+��cė�p�S�H��?Ҽ�>!��2�����満�*�1�=u�Q� D�Ӣ��R7�,�{Ȍr�$�@����nr�Zt��ߋ#'�C�8ͥ|�����C��(�"?�s�PJ� �����BUdKTmƴ��2��~�1��� u6���v)K���e v�8��uL@��ٙ����˚N4����3�s�vM��E�5��:iQ�%��o�$:J��0f~!+o�/�[��K��mg��$���4s#�m�g5�n�pV��������>6ys��lХ ]�Ye$�/O�uvC7:,�"�����y|������������&3��q�����*�=�c�86f����yB#���ٸ��'�N��t�63l��u,dgwY֓j��(D�����&�fQ�E^��m�����m�Ip��X��o��4ޥ1������@ML��-�����g�N�^�Ȕ<�#����++�+�٪�A� P$��7ɷ�n7.����Qh�;�S/V�� ��BR"*ܾ���� u_����5�I�c�6|��'�5��>� �^|s�n �bl����b�;E|1��ع�9�hc6�t��@�Y5��`&H��M@��u���7;��s}���J}gX�k �o�,�V�ܳ�L�|��H�p�R-n�${u|E#�=���+y�G�'����#͏�Eҫ'�@�����M{���= u���?��P�$�3f�U�`R���*��n;���G��鞲082� tp�I�:0�y��x�63o��s���3:�sz+���&2u���������GBLRI�x��yRz�a���Q�X�I��h���r���2b?�s�2J0o�<��~v�<�� Y ��v��O�u�+Dw�B Ψ�()m;�=6�G�٣�5pd+��s?T��xh�骐��'- �.�Mu�Q�$4td]�fH�i{�*h�&�y�ɔ�us��ӽ�HEk�T�әL�d�ΪyW/M{�'���Nԙ�����z�N6����� �d�%��+����?ǐ3���xb`�k�!����mA_��s�$E�����-G����cO��;�D���H3(I:�!�xD��$�w��)ܲ�pg^� dZ��Y��m�N,+x��� z s�-�)�F��gF(���H�ZF�q�e�u�r6�Yf ���]`����V��f�(�^襥_q˥�j��M�Tҋ|�D2�W=M�0we���W���j� C��2��I[�����|��ΈjU����|EH�<l��owp=���E&��H-����r�*����o~㣬��X&5y�d�Z�����'T7o��6�p��@�=������OG=���-ӑG��`/(C At{ʲ����K:.��d��6_�!�[�n�p�\��փh��p6��lg������6z�.�������-��F��5����$��{���ƎE�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ