Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
a4c07dbaa8ce969fd0f347d01776d03b_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a4c07dbaa8ce969fd0f347d01776d03b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a4c07dbaa8ce969fd0f347d01776d03b_JaffaCakes118
Size
1.3MB
MD5
a4c07dbaa8ce969fd0f347d01776d03b
SHA1
540a0a20f4a75dac1023e4191fd3188d0ad7ee7f
SHA256
f9778c4e07642f5658285e64297c076877633a4bff9528827d0d3c2108259f72
SHA512
28d0d4672f34577a8b771d7d47569f8c0e385b213ed0c4819d8e497883e6f1015707d84d1be87c163f4f0fdcad31094343a3a30b7586e436b59660ed41ba9a1f
SSDEEP
24576:za3gfw8onjfLM+3LR9XdGDVP2ythSTckiduXGHswLbRX95cP745x/b40m9pp57:za3awXnj4+VacnTckesOVX24vs0m9V
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetVersionExA
GetVersion
GetFileType
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CloseWindowStation
GetSystemPaletteEntries
SetEntriesInAclA
CommandLineToArgvW
CoCreateInstance
accept
PathMatchSpecA
DnsQuery_A
LsaGetLogonSessionData
EnumProcessModules
NetUserEnum
capGetDriverDescriptionA
WTSFreeMemory
DestroyEnvironmentBlock
GetFileVersionInfoSizeA
Install
LoadPerfCounterTextStringsW
PerfectWorld
ProxyDll
ServiceMain
TM�o���1[cd�Q���ᢅB�Fy�(X�m��o�JPwe���B�S��* �A�;��������;�N�����|����t|;'��O!c��R��L��̛5`9�Ε�\���~���q�/����5��C��%����{[�/���A[���>'��Ʋ� R�"K�4�7���a+p?^+�Dѝ��5�~H�D�����~��/����ћ�|�0aF}�ܵ!�7��e ����RIXoYN�W�xVj�7G��D*�����@窜{e�6����ÃyA�qA�v����3,q%��zkǃ2�/r�� ����<p��V"+�� �����Zp$|��\������+�%�/\�|�9�`������x��J������+�J�$:� �H[����u^cy>��hܗVl�ZH�^6��Z ��|^7^U�L��j!�)*Q��m$�z�aX�)m��ws��u擤P���=ϽTVpd��W�^6��������S��z%�!,�~���IZ~�U6�5�(��L��=ZM�7��B}Q�?y\�*�"� �5v ���r�U��<:�'�r���e���,��]��Nqo+(����%Ѥ}�9)Ҥ���F ����c� z�dKH�������ڞ�L>o�X��A͇/K�cL���@���5��P�1������%J���٠ךWD}�X���q�3�n�L�A���ޠ���a1.����d��� 7M�g�?�5OU�%��&Y�{�w�"���5A��Ϥ-T� �9 �wd ���V��x��N����k���N��5uw��sW �Yv<�v;�|�8R¥���A�̡���Ѐ��2�eh��3�7�����) 3DT��Y�l�0��Log"F������XC�#Z' %x�ю�������*���J�7�q�XrA����^9��!l��M��!_рT�S��������#�;�h�Y���f"�*�� �P �K������w��;�!�&�#n�%ė�C,���`W��r���Ҟ֢���1*�jS^��ǭe�O7q?���S �2mA|��8��X���l��DU�DG������jO�;�|D�^M�&�#�]��k�Zt�����d=�@���Dl%�d?�Aߴ�M�d� �!��2Ì���Su�����Y�-⳿�o����@1_Νs2�3�Ka�Jf���� 47s-�����قq��� w��LT�g�&q}_)� ?W�g�܈*����F� `�1\�h�ʺ�-C����%������cG�Yv\�)�H��]q�TE�Q���E�b�7c ▢���Տ��*��\X�玸�����c|�����~/c>1:�Z���T���.��1� q����'u3R�����x��UȔT���#����x��<U�fX�����u�t�%/ȡ��϶�ﵣ�m�Rc#:ꑬN�4~��뺋/�s�/�ܛ��$~fV�,�����_=A(��=��ŲSra���j�P^w�v2ì�Ą��]-����k�����kWn>��t�Qp3�N3��}�=��0 �!Tg��sш��)(4���.��Q��m`�3���f�?7��������u����P�ı��24 � ]ٻ��u� �����ذ]��&ѹK$>��xXjmލ�S��D�Z�C#�V,9�qG�nh��Mz���������[LI$ zN���ӢlSpD/�%��:ܠ��>��K�h%d%��Y �P������2�,�S�+��"4Pv��tЯ)�&��Lں {�O�=��R$��R\_ϱ��M�Z�ZQi9h#�0- Y�e���Y����f�F����wv�ֲ�'IV������f�ܢ?�����W)߉��T��x0��%+'cQ� ���d_��$놡;\���B�M?���K}g�_�EU1z��L��7�rHỹD�߽:���!P� KF�/�9�o�;>x����u�t���6 w����{VT�;��w�뼋����,���o`9��B�V�� 0F�Hg�Se�ɫ�%�����K6˴ſJ��k�(����C�_8�l��t��yD�瘧{Zrp�4n;�cZȰ���2L(2�ۿ��5)������7P��(��3b1�D[qnu��͝ym=b/���j�)w�o�i�-Ye.ٱ���9�y���y�)jŒ*/�R�i��~er�I��qC�^H�SW*���kr��x6��U;�{K�Y}�?����ӄ��(w���#R����E�x.��\%�`�T>v@���|�Qo�zWl���������g�bb&Ji�.!qVn��A~�xJ�ވ�{<�.��=��g�鬥C]@mBɐ} ��8�G����kXG��x V�[H��X4:��a�Sn2�M��]G���Hi�3SВb�3�%��y�-���ˍ��0�)'@�a@�~�&GJDoL7�(�=�] �_�[+�]#[.:�W�yػoyyu}�<|L|��y�y�ց��� �S�ޗ���a�i�vc��M����9�Ќ0plkB,��,�NR�/��ND�����P����h�co����-8d� ��歋#��J-I��</��o�i�/�Tۍ�t�2ف������ڦ���w���\�� ���JB��H]�H�2jk6���j��{���2�Z�[=���h�T���my�,�)F}Q�Wu�с�f�M:���[�?_���M��B�DEe���w@#"�0��_��4k����3��f&���O�of2k�����&�>)�n�Jӗ���������� Y���f�Դ�=�"����˺Xbq���h�����AZ�P@��� �#3v7`aD�1BtS\�Ldf�q�N� ���x���߷:1�({E8~1Q�C�����HH_��W��b6|lO@9�,F�;��)����Eeȩ���� Q6�L�+_�^R��N�~*�"n>5�]�jU�3_��Ύu����*v�����M��_WQW�T&\]�e(�ZR�r��%�I�m6����4�Z ��B�����1ϑ�EU�?�Ou�g�jd�F�J^�do�|f�Uw���(#���pv��?ET�9|μ��, ���R��ς���&���H�`���ﮪ#
UnloadPerfCounterTextStringsW
ncProxyXll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ