Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
b761914bb504ac4d640b9df8fecfbe87_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b761914bb504ac4d640b9df8fecfbe87_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
b761914bb504ac4d640b9df8fecfbe87_JaffaCakes118
Size
83KB
MD5
b761914bb504ac4d640b9df8fecfbe87
SHA1
519bc16132827f4e301b8c8334629beb269a585c
SHA256
fc2596daa5e1b2a072c3e2ddb552834ba8a0121328de95f140150dd197d0f6ac
SHA512
2305d85ed38b9258a6fde2ac0e3901c141caf16396ddf724f7b88b73a39fe2983e3e584b1ec59d26f20294e9786c65b4fe397a8f3460828cf52d482e4dcc7bf9
SSDEEP
1536:dRZ7na39I9YURj4BnSIY6EyP6xZDvGy/1sSWeNXSvIRXKJ:dRU39I6s9vR8iyyysNXIIkJ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetCurrentThreadId
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
CharNextA
MessageBoxA
SysFreeString
ZwQuerySystemInformation
~��.V��Fx���x`]���(2�q�#+�2�d���Y����_q�z���(�����F� ���� �����ͫ11��Z�7o�dc��H����CH �K���S�%�����=�o�/�[F�9��y���J��ѹ��/��ia4���$�yi~����3y�5!5e�� #G`_��"w�m�.m\��k��r�S��1ė��z�`�n�SSW���U2Ź�z��՜s�������6��x��� �����,��jv��4��h����Ϸ����U��=m+d�^FR���u<���7�,�g�Yp� �I�2��h�4�� ��ح�=^��e�Iҟ���r|�����<8t7����ҖL���.�x��p�Ǥ�~���n�>�n��*4��#t!��ށ�Y���G��h7�ܺ�V̤���V'��K�l���/v��ͪ k�܁yB��.5:�q�%xv�l��� S9�b(E�4�^ج�Z0k� h������X��D��N~ٰ�Y~Ư��ú!Y+�]��S 8>�9��$�T��JF��� ?w�= Iq�iz-�e����=�{�Q>�5�?�� ��7�z���O2����H]\���� "_Mms�3d��]6K���G��F�OQ(z��?����9+���nE��W���w^��2�kf��/t�X���WS��ͱ����GS�7�ݝǃ�U��L��['gT&��g@{�*o��Uf��d����o��*�ɱg�"�a�=��o�����&ӿ]�Bz����7��kqF3�/��,��㔠S��#��{��mk��X�dg��xt�Ά�QGofK4�Ma��Փąh���Y������|��2�2]`>}���k�y���s �x����߶m h/dr�s7���5W�,��[ж`2�[`���1�0�8���lj�[v|�)f����m-�Ϣ� o�\E��fA�� ������EV��W�٥�1� E5��EJ��$�, �BH��.��S�� �Ys�e�|�7���g���5� 9��>� �E��5k���1 lM���b،*�4����D�r��ö2L��l9{ ��7�2�M59����/�)�'ɍ�{Un�?����.�>����x�r~���a�S����x��lR�pT;��eG�N4;�9�ꦢ�qL"����~������^�e�:Ĥڋ_��8d�/qXS��:�^bNki���s���?Y*��7M$8�W�.�:�{�qr���0W��C*~�.w/�d� �}�0�Hϭ�,������H�2ש�C�� �p����,;�� �!��QM̺9� ���V���Kcb�N�aKE�C)�a��'���6:�a�[$K�MϿ�E�{( m��_��[A��k�qx�K`l���+��[����q�L���W1�:�<z�w�Qa$R�z�5.=��&�{�����y�������������� vqJ/gI~�����V�a�k��$7�ц%�����[�w��Y��+`z���"�\�@���˴�����5�IGc���Īd�Ev�]7м��9.��$��oj�40�^�����2lu^^��T�gA�6h T5��0W���'PN���m�]�� �&�zauX&=�*xe�+tw��+`�j��{��:����ྺ����t�i t2DC��^��!ӥ�)z8�n����{/$R(��ss֖������"��]ު���g�{��X�$P�h���"�(~����/SoCZ����] .��0) 5-��-8�"��F5͙�/��I�?y$�i�7P��'���+��{�H7%Gs�E�S��p�'��0�Q9�\D�6��p�as�������1)Z{3h�i`Q��4{ YG�~/���m�5�^.��� ���Q�VB��.������([�2.��1�����[t�cǵ�%��PBj�^���=�^S?.8 LMVu<�d��g�E��X��� ���Ooœ L� $]&q���>����72� 7��Ɗ{���2�bQ��CA����h��h��n�r��� �d8d�y7�S��$�tT��G��^Jj�p��3���¸4�,�����G��_��=G�4� �<͡-��C�d#���T�aM��z��V����_�� �I�gU>����3<������Pu��2Ț����a��3E��)�!,�`��M٘ ���&U<RtV 3P��Ja������1MZ�]�I�˖�)j瓋6_�zc����۸+��^���;$��-bU�r��m�'�#e��-6� �8��o�ʸ��N�~K�������J��\?'B?$f���L��hF����`Q]�M�?H��I4�#&+egi����iT�0����*��qG�R�c�p�����L9)r����&���v���e2��i�Uzڠ��z��� ^�|��^gڃ���1�q����kM��b�}|�)�E��3+"\F$�Ϲ���P0.~·�Xh�*�Z��k��)�9��2U8�>������(�2E��]4�fʨ�h��Β'���|��yV#����2@)�J�O h8Xp�%pᖋ5NP��������OM�Y���6�1q��<b��o���Y<"�\��}q#D��OE�hc������M��%Y�����r��g�o6�Ҡ��'�0���g�=�xk����3����͞���evXG�'�����&�3'�r���%e����3�� �����i�lm��_�c�R�Ha+9��;gU������ݪ�ƌ}�\��~Ptwe���W��b=w^�G�p�z�S�A���0�H�'�/�Z�O�2_;�h8����Ҕ3�z�i�j�n�<C�K�P���$��� r���Wl��B&(W�,������_*.4m�{��m����b�z&o{0��h+��ְ��՝�L|��b9����w��[Q���l�g�W�_Z�4|g��mt�d�FԛAM%��^�:?�rڦ� ���kz%���?�5<�%�E���l/l|�B)*�.�n�&g� �ә_��.`|f��"��]i!}ĽЬ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ