Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
b2e46078f71e92a9aef0b4e28d50aae6_JaffaCakes118.exe
Resource
win7-20240704-en
Target
b2e46078f71e92a9aef0b4e28d50aae6_JaffaCakes118
Size
523KB
MD5
b2e46078f71e92a9aef0b4e28d50aae6
SHA1
104feab39bce163657d6331ac886571dc4c22224
SHA256
b83745e030c1b488977cc2fc9b8c42ba66b41095e339692cc894f9c0d87b1164
SHA512
85ecfedaf2551bc6982358d9401f4cf8e3d3b2b942390712a93526fe16267dd66525d59db59e6affd01e7a6954e1c26df3f301e65100dee54716354a8f433826
SSDEEP
6144:czmiytt7XPRQFPb4ULIcuYLjISrgfVo+9HlE/74/JEJowbtLoJxsO6hEejag:chyLbGsmXuWLgfiOHlEj+aDhOxrejn
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
HeapReAlloc
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
DestroyWindow
MessageBoxA
RegEnumKeyExW
SHGetFileInfoW
CoCreateGuid
HTMLayoutGetParentElement
GetAdaptersInfo
HttpSendRequestW
ImageList_Draw
�ږb<���e�1���(~0��U��BV-Y~<�f��R��nX�V=oU���)뉚�z}�"�<�+U��Rj�;�hm��%\�L�x�ҬH �ǖ�V����j 9���0�o�'���> Y�rMQ7z����#����;<_f:%JS�k>�P-����X^��t�5D���t�r������h�K�(�J�+3�d�V$��N�ᇐ�9���qz��[c9m7�zo�T�����Ѝ������{����y�B���5����`�(U�E��qz����[b���� �)��] ����<�o�S�k�}^8/C�;=]%��//C>����`�y9 ��h�ڍ�QM�Xd�x].�/Ѕ����T����w�H�.֭� ?t��m�6�`��ׇ������ͭ�����@���A�ƍM�z>-�҄��.��ͷ�Jgh�A�+$e�?����� Of�&ă���/N\���ʔ�C�!u���B�|�wYD�\�TD�E$� ���[��C��z��C��&�<�R%��ԣ�zx�D�R�n ���%/G�XW�͋mԎ�Ƅ���i ���$����8}}�V����ĞK0J}[���L�FГ��2��J<�ȴb�ͯ���Ro��(����� �0���{ş�x�ʪ��������Q�8�N������0�5o [������QS=�":��L���Pa5�J�֪�F���4�&��I�qa�4L0}rE9=��]Ć���A�7�V�fmC=��u{�ǜ�5Ճ������+��C����gE�VB0�jf�N��Z$pi�lp��a�Pf2}K��2��t��enT��a�&������J��V�ȝ��6e-FzP�S\[��]�CR����8�B(3b�$��m��\��R!����Q�Y�*� �-�K6'y�B��'�0Qy�OI�J��_����R�7�Dk�;� ��Z��Xf8wrQ�B>#ޒ� ��]�ٙ��������d����F�^�����ƪ�Pϰ�/F�2����M�IHI���1 ��c-/Uʔ���� ������f/=�)x�!�o�/��6eY��3��]Ƨ7ԆO�'�٫#�L�G���h��f��2������|c�>�Ͻu����$n��-��I;��;.����g���~9�l�N � n����O��W�|�A�U�@����d���<����뫏�s��];��Y�E���! m����&�Qz�<:hɓn�]�V"j�\f�[ax�ᴻ�=3lv��*�m�f�n����K2���R�����c����\�j�-��1�O�<T�c� �z:�����1�?F&w��a�c7�[#�N��ۖ�.Z���-��prC��r �h�kC���%��ds�D\�\"�ՌN߬3�q�Q�5��%po ��jӎ���?��)�����}2���ᖧL��i* ���W���(��b;]�M�ӵ���A�����8��r]���D���}��yazx�c��9l��螴���D����b\Uh����H�2|2�O������\j��QS��G�qû�Γid��DpB�`$�z�mVUǬ���r���@��e�R�n���,���S?�������'.��T�B T���:��n�}���Z} ����lW2G\� �輔R�0p$A\�]o������/���T���2�(B$>�������W�t>�5d�,�ŗ���x^Ivˠ���5�3�|:��Җ٢Խ7�YJ�5e��A��z[؎P���8��;�%�}&Z���0�7�,2o`ޠ��*�*��d�|���=�:�E��;$H���oD�fv����&ٳ�L b��d�[����\�V��^n�߁5�P��FH �?<�Q �\J���U�V�����Y@�Y(� :� 6��>>���0�P;�a�06G5�%4���#��xOz|�e�� �O`����/4O�.���6C ���o���C�ݗ]�X<ug۬�G�1�U�_SrܕQ��vr��4z��Džl�ތ�ӆΏ���S���ⴀ%EU������2���HF:S��v���M<��@�ȣ�^���Bw7��k� 'e�d��|g�� ��]J�����< � t��=��{�b�R��s�:"�&�^�m.a�����Ȉ��V<������G%�W��;�UN���~mdɺ<�W +zw|�:I2����t��Ny��)_D�p�o��/h�u��;�@�$a�=$�4s�1��<F�g��co�j1?M*=��եQVk����������?cx�E��+:��������FM��既$o?�{�1}�N'�$t���!�f,USz5���Y�z���\�m��8�"��ǘ�fR�eDι�mɻ��>`m�'��/�C�blj���e�6�u !�fL'B2��[Y�B�Ke�Q��������P#��O��GO��s�z_�T��P9��L���C�� �d[�&ev�@oIU��a=9�Z-!gs啔'�Z�N �&B�5�6}��͇�A9��&Cް�+!�X|�{]K������F[6�K�o �1� )ZZ`�������g�읕���Dy='��Z�"�*��&��1�"�+o��~S�ޤ�$�a��'0���<�J�{��`gd(�34��e���IW�ˌ=�$}����6�9\u��-6�I�Y���B� Χ�Hg���s0�Y�{�ƾ����b���*Bã�X6(\�z���ɸ8ۮ ���7nR&���b�}��X0����N?&�߽@G��"����ό�*��g�o�"�-�����W��f��:��:UL�~�$eڝ\���N�����w��)��A���RYIU>����E����'e�>�����7���T�)�4�9�X[�~RL�Ι����\�P1��p�˞�eD�[n75 ��Q��� �S��J�(���)ma���\�c#��r���,B쿙��((FY �s�h�D�������z��ǭ�'QDbs�x�u���瘙h���K~�������C�y�����y¢�=����Hj��\��E�M�ڶ��<�o�a�o�c��lZʽ�<�t����R(}�v��H
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE