Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
972873bbf3b36efa28f92d46e7bc6d6e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
972873bbf3b36efa28f92d46e7bc6d6e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
972873bbf3b36efa28f92d46e7bc6d6e_JaffaCakes118
Size
1.1MB
MD5
972873bbf3b36efa28f92d46e7bc6d6e
SHA1
35cffb93c9853d2376b3b9924b057432d008d5ad
SHA256
56c7d020b400a6f8287612726193cafeec21cb01ffac1e5ff8d242a12c6dfdcb
SHA512
550301889225da03995e6fa964478f0e8bc05050c4a3977f38749a54a2cf80343764761333c61eba18851d67a09bcca239ba5e0ec122e1bafe1b18d2cf0209a6
SSDEEP
24576:05h4XR/5Pnp5ItYM/ABtAbghHXjRZqtSIU06jNnuK+raA+gVTPlc5/N8z8:O4t9IWtZ3WtSHRuK+rbVGj8z8
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
d:\build\rsc\rsc_builder_applet\depot\3am\products\rescue\Rescue630_PostLaunch\RA\Service\Rescue\rescue_win32.bin\LMIRescue.pdb
GetCurrentProcess
GetWindowsDirectoryA
Sleep
lstrcatA
CreateDirectoryA
SetCurrentDirectoryA
FindFirstFileA
GetLastError
GetProcAddress
RemoveDirectoryA
FindClose
FindNextFileA
GetModuleHandleA
WriteFile
SizeofResource
GetFileAttributesA
CreateProcessA
SetLastError
CopyFileA
LockResource
lstrcpynA
CloseHandle
CreateFileA
FindResourceA
SetFilePointer
FreeResource
LoadResource
FormatMessageA
HeapAlloc
HeapFree
GetProcessHeap
GetStdHandle
ExitProcess
GetStartupInfoA
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
lstrlenA
lstrcmpA
lstrcpyA
DeleteFileA
GetModuleFileNameA
GetTempPathA
RtlUnwind
MessageBoxA
wsprintfA
wvsprintfA
RegEnumValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ