Extended Key Usages
ExtKeyUsageTimeStamping
Behavioral task
behavioral1
Sample
927b306074fd7627714385e8dfea4a18_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
927b306074fd7627714385e8dfea4a18_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
927b306074fd7627714385e8dfea4a18_JaffaCakes118
Size
6.8MB
MD5
927b306074fd7627714385e8dfea4a18
SHA1
23af8c09422dbd19d3c4ee41dd9366803532da92
SHA256
8dde5af4425dfa284a1cd3fb6415fa419a428c647561757292fb1b1a988e7e9e
SHA512
80574d03838b7c8013a108138c165f81499ed1ca975f2bfcd37dc1ebac2953241cd40dd956cf99cb3d4a03c4d98d3385ff1ce62b4c2f6f3760213cd34aec614a
SSDEEP
196608:Eed2XeBBW84st5j9cWbq3I3o+xi9ICMR8d:E62OHW84+j9oQX4yCMSd
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageTimeStamping
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetVersionExA
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
ReleaseDC
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
CreateCompatibleBitmap
RegGetValueA
SHGetFolderPathA
PathFindExtensionW
GdipSaveImageToFile
WSACleanup
WTSSendMessageW
&(�__��:���rgMT6�8^>����p>įs��Wp��ME}6�VK��!���TeR����ɇ��(���yRlj�@��p���W 8�[(��;�e�.�����ﶩώdq�$�.{f+E�b���hpW�������nt�����t�C�Woܸ��� /�P�|��ʂ���nc�(�JO>.OԋMjk��е��X������ߣs����0h"E@�Ȕ6)Tmf�}�g��#�@�2�+�u�!�W�j�D�wFQ������w�kPM�����Y�'�{[?[��i2���}��\bϟ��ge��f��p��HRq-!6����p�x�z��=��?��ӣ��ãe��N���ƻ� }&�Cas j�����WØK�-��B�p���&���f���d?��͜m�6������]P���^�S�/�<�!�~�����2�k��i�����ˤB<3P(�KH�Q��_���t-�WkyZ��(=�?K�1;n0��8�n�w��Y�D���JGF|�^;��S�PT��z�ڣ(z����yr�����i�~4B͂='d�i�e|^��O��Oc�w�v{Y=��!�L*�� ��ܽ"K�cw�v.�E]C�ـM��.ph!�F/Z��'�/;@��|ρ*q#^Ay��S�h#�i����k >� �J� &.�NF��,��R*��[��O�l(䑏1A�*t���U@�l\ܽ�tu��k#!B7#C�R�i'×W�+7��)��MM�k�j��q���Hί_�*�X�.�kI�� MH��v������/�L�J�����c^X��,:ZS�Y娱4b�P'��0����J�����} �� K6�;u�AI� e b� ճ0�����������f��q۷T�d"'���}ń����٢G.b��Q�iH N�XO��Տ�d�Yl�4�4�=��,ɹF�P�'�Ah~�{�A�y���Q}|����F'�c�i<m�||'*˂���}'�|�r�~k�<��eMg�����ݾg�p��Ʀ��ԃBE��8�1d�w��Ҹ����"^C� �SڏN{����{I<��2t��5����`$*X�����b�4�Q�o��+��R�)@jw�%��q��^֭���v>��v%�\'��S�t��oc=�S�C�$r� ���/#�@eWy�^�g@e�?��C�-����&����ڤ�}�w������Qd(��E܃nJ�~��a��R��,'��r`|�M�zX�ƈ�{k��X����+�g�cЩ���Q5}s�^�ɼ���h@�n�oL*����vIl��2�߰X6j�Q���� ~�;���c�2�yn��K���a����yȻ��lW8I}bÂ8'���_������� p(�@��� tk���ڙL �ǝ��3�u��R���y�~�Y�54J`Z������퐌���`dbͅ,i�R�Q�#1��<��7���t����E8쩔���g���4ʠ���%h0����P!e�X�z�� p&�c��g��'������9+���kd�yfE2e���wP����+�4��0��^��c������V���_(���˗���GBSeAJ"�έ݆�L�P�C@㲩�*4Y��6]ap��|J�C���`q����3{���%5�3n�.K�}%u�;�5L̘=1w��v�z���ˣ��|� �m=���+���\Ȁ$]_��Nb����df��;1hf~V�E�l����mW�E�����f�r���$���,�=�5�M���� �t0�8.i��y�}KTFi��M�;w�;C��uw�Gt�xj�O^r����=N~�����������ݭ������'�-�\y9���E4��ڴ����#ϩl6�G���l�!`S��$G�s�3t�aP:(��J�L�Rd����,�(- �'�-1`d��5II�Ժ��U�W�N������U���!̋�_2+�2��]�?,@tĂ���j��9�)Dx�9�w}�#0���$�̛_5�������ci'˒l�|� w�I9b1��ᰱ�D�#��jDwXO��5'���:��S���B�8��a!V�n�R����䧕k �:��ţ�b��Po��겋�=�,\�>�Q.�x3�+�>{�������w�0x29uE'%O��L�P��|fbڜS�*�![˕�* ��n�'p��k\�����,4v�Q���HUE��W��NXY�t��v���C�2'��I��C#�qp�"3q1V�q'���"�R촸�o���WӸ���ϊ�������������}[��m��|�I�B�|-�+.���0+`�J��E�E�,�9פ��Hlۭ�*?�40,���\�@eʉ Ȟ|ﻱ��Ժ���xh&]��#�h\�@��~F����}MƧ�S����5H�I�-aI5���u��Q6���u�������+�1X��ӣ�0tj_�1y �Lw��B���@�LA���UXi�o�#�R��&�qT��ahqXq���lA�ܾ),îN����q���*���F���a�)���\�%g"9�a� T|(�|������_"Gě�.�>�� *X�]�i���!��o�����bܘ�3�dJ��Z���h���'m�Y�z����Q��Id_�3!���(?�N4��PH Y"��g�E��\r�>dHk#9;������2�����x v �=x��?��{�(r�Z�|� .=�IXQ�^��ƅ5�Wdh�dj�A52��h�m�����3���p.�^����zW}5?�'�:�8��������lOɃ�1%��$⨄��g/����#������>�s�Nʡ�k� m�w�^��zM���+�;�ʋ� j�Gײ-ӱ��K��+*�7 u�U��c�8㤰�?|����2�B�;gY�Y�Q���IJ�B���7�� FZ���,�Z�$�`�Ś�_�KT1�AJ���*º9�� =)p@��! �d�)I��N��<XL�k����������-�+rp0Y$�O$Oq\��z9��a]"���!L�W%�)�"A3��84}�{=gl������R"T�od,ꓝ�� "!�ূr?���~����A�>b'x�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ