Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
957318e0c49898105df868d8e48b2496_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
957318e0c49898105df868d8e48b2496_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
957318e0c49898105df868d8e48b2496_JaffaCakes118
Size
127KB
MD5
957318e0c49898105df868d8e48b2496
SHA1
801153bb5d9d6692af6a33b4a0f351fd538c96c2
SHA256
d8de8b69abf5107a8a732f2cdd059eb012426c3a6eb0ef86bdd4e755d0d731dd
SHA512
d7975741ac4ca826e96dbf484adf74c59bfca6896531791db45dc543d3102629ef472245efacf14dfd6f678e474420302ee33e44b34825ae623c768c1e714dab
SSDEEP
3072:yuWyQn9iX3GngHZtykmX7kOriX0BW2tdFhoZDPWBK4Dq:yHyQ9inGgHZpOPr8f2tdF6ZDuBFq
resource | yara_rule |
---|---|
sample | family_gh0strat |
ExtKeyUsageCodeSigning
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
HeapFree
GetProcAddress
GetModuleHandleA
HeapAlloc
GetProcessHeap
GetLastError
lstrcatA
ExitProcess
FreeLibrary
LoadLibraryA
CreateFileA
LoadResource
SizeofResource
FindResourceA
SetFileAttributesA
FreeResource
SetFilePointer
LocalFileTimeToFileTime
GetTickCount
GetTempPathA
ReadFile
GetModuleFileNameA
lstrcpyA
lstrcmpiA
lstrcmpA
Sleep
MultiByteToWideChar
SetUnhandledExceptionFilter
GetLocalTime
ReleaseMutex
CreateMutexA
GetCommandLineA
GetCurrentThreadId
RaiseException
GetStartupInfoA
InterlockedExchange
LocalAlloc
ShellExecuteA
strchr
??3@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler
_CxxThrowException
sprintf
strstr
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
realloc
_except_handler3
malloc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ