Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
b66be3af592ceea82c1b7bf21a2ea5d2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b66be3af592ceea82c1b7bf21a2ea5d2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
b66be3af592ceea82c1b7bf21a2ea5d2_JaffaCakes118
Size
1.1MB
MD5
b66be3af592ceea82c1b7bf21a2ea5d2
SHA1
45a74862f6a6f69ee85155acf947c182c9274007
SHA256
9b695c6a0fa2554017369a1f50c6040478e8ca661d3c16afb1d2e2fa36487cd2
SHA512
beb5c591c70cbd4735c382a1acfd4ac9403c0a97137e3ed9e6a967c3b397d53cf1d460781327df3f372a9ae867345913c3c44e78dfed502905d2cfc751f53e8d
SSDEEP
24576:T5T4XR/5Pnp5ItYM/ABtAbghHXjRZqtSIU06jNnuK+raA+gVTPlc5/N80B:p4t9IWtZ3WtSHRuK+rbVGj80B
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
d:\build\rsc\rsc_builder_applet\depot\3am\products\rescue\Rescue630_PostLaunch\RA\Service\Rescue\rescue_win32.bin\LMIRescue.pdb
GetCurrentProcess
GetWindowsDirectoryA
Sleep
lstrcatA
CreateDirectoryA
SetCurrentDirectoryA
FindFirstFileA
GetLastError
GetProcAddress
RemoveDirectoryA
FindClose
FindNextFileA
GetModuleHandleA
WriteFile
SizeofResource
GetFileAttributesA
CreateProcessA
SetLastError
CopyFileA
LockResource
lstrcpynA
CloseHandle
CreateFileA
FindResourceA
SetFilePointer
FreeResource
LoadResource
FormatMessageA
HeapAlloc
HeapFree
GetProcessHeap
GetStdHandle
ExitProcess
GetStartupInfoA
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
lstrlenA
lstrcmpA
lstrcpyA
DeleteFileA
GetModuleFileNameA
GetTempPathA
RtlUnwind
MessageBoxA
wsprintfA
wvsprintfA
RegEnumValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ