Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Behavioral task
behavioral1
Sample
ba90a33330bbdfcaa938be090a8b2d28_JaffaCakes118.exe
Resource
win7-20240708-en
Target
ba90a33330bbdfcaa938be090a8b2d28_JaffaCakes118
Size
1.6MB
MD5
ba90a33330bbdfcaa938be090a8b2d28
SHA1
d27ca357dbeb02e48699142a7849b44e9284671d
SHA256
96315522fac12c8262dc5d82d8ab51c69fadc26962cdb52850fb3e349d831a32
SHA512
5086fd8e84d1b2367998ffad9ee5a61950d9e45d3c6002789b6d99764643e3edc16b7abab975dfbbe3045b7de3f6cf0f1b96e268ac023d8192b833795ae768ed
SSDEEP
49152:4hy2RjjrLLaFvKjOe1tGUJapgTIq8/MkY1WM:X2Z2FvKjR7sexgM
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
�9�Ep$��]0��[bZ��<��c-���WS���F��O�N���41rA�&��3�?�FŠ�������2�r$`�G5���u���6��E���Q��{B�J4�u��[ZS/��w"R`�)Qk��G#��o�ھ��;�;��&@�ӡ���뛃Nc�Ԯp�=>��җ� �� ��ܐ�N�kі/�Ѕ~��(J�uՠ�g�$�CVr�j �R�7����}k� �������W�2�I�lju|0�L�{6Q��$���s�n�p(}����9e��eh �#a��s�&�^ B;�}q�P �b��h'�ts�B��M�! ����M�� ���/����~�� �OO��M�A ���.���*u&�`�I1� �:z)U�f������d�r�l�� *u9P�DU�w�J����wFD6�hlf����:��Y���8�����9e���[O:�%A�7��f!Z�00p �:o���\˫X[{&r��y �f�2"����b>���� p�z���BQq�� �s'l%�!.lxR>���8����9��Y2�"��d�i� �Z��g�F$s�^@D���`7��ATR���)��h��8㋆����� �>� ��&4��yX>���R�H����..^���3�1k�fJ� ���i��2�K.Y&(ߔICG����u3[���4��[�w�Vt`�o-h�r1��W(��C��|8��=u��-�@�Գ2�^�o��y�\��Q#= �*���(��H��+��*���:�7ψ�J����cc�5~����9$,P�wj�;��{G��,?�*�U���b�p�4��> 8"2n��D��L�4HG{���S�X�:g;�V~u�j��m5�����/N˟���ը|���H"H= ئ>�C���+�ѣy<pZH/Y�z��*�ŁUX� �����ŵ���¢Cp�YX��DVɈC�k��|�Rz���� n�<��L#���τϻ���Q���{Xb@2���9'_��f����],�"(]�?ƕ�9�P/�7���ʜ�j8k�5�p��W�/��!�Lh�%&������C�_�8�E�,�E���"�g�����ȼ��F� ~oWb�K�&�Aח�� �M[;����W� ��)�h��t�9f��-SB;�/�Q��x�i����?}!S���߈,2��rU7��e�LvTg�y %�_l/������`����յ�iP U�Q+�p&.5u�_�$g�/\wF�� S^���D6�������|&[�c�<��\�c���A������W��8Ճ�T-&�7<^�:���V�Y��(E���P�-#7.�ȸt�8�R�һ�m��(��e�X���_��Y�f�$¹ 覕Dr����U���S��1�Țod�Fu��o������ 0����T��]��1�qD_��L#��)q����xi˭�N�t_��O�%��!�?���0seɎ��H5�/�����l��y�};���Z馇�����6hJUX�����,W����If��mk4������f]�4eCKB�J�I� ҙ�����, � ��%�;l}Z�8�=Xj��D$���]��xi���Ur��tr}����G�"r������4�B;���h������DߒȨ�@��k#��JV( �Nl����/p^1�Pp�.m�${FCܼ��=�(���-��s<���J'.�=�|���u�D�Th�Ea���ɣ���˱�4�ъƒ���p('y?�q5�����H��Ly�B�Y4t�/qh��!61=����l�dF���u �[�4 $�o��7��5\�{�]hA�/��tQ�E��2�Űz��:������k�~I&0 6�g�ĺ$x���ݟ�p� �GgpB��}�oV$r�.�Sv ����ߋ$��vv�K��=+���a�,��&���58P&YSc�t�7��}p->u.��P[�e,�����5������^�t�&���`�!i���F����4�ъ�6o� ��@&b��(���j���}+X3�����[�����������V)9��7s����ʒ���R�~� �/������.F2�wby��J0��h�s��w:���|Y��� �����l1�{�1^"s�&ߗ?7x��ҡH�b�~(Q�P�[i����2l[)�j���®a��ڗv�.rⶣu+6+���!��4����-���G"�{p.r���_����dZ��,��\���0�����;T)"D������G,��f���R��깼�p�}<���Cn�F��c�@��?��Ne��/gE�7��5x1�e�NI'�/�I�l���U�����NH�����g$�x�c��l� �A�!�&��*�a�h���pn#� �&�֜�`Tnǀp���u��i[5�"_�9�u/*��b����-�O["����0��h���F�Z���$����P��]B��؈��D\��ғ�AM��ޮ�hov��a���� G��aǾ��#f�f��ʧ;�T����ew�# �N2f ߹xj�j�עS&w�l_�n���;B'+�ڑ��}�=�D��'�Z{"���voJ��M��Т�C0��879����Jߜ��h����5u�C]t����IB��lN��c�܍tUg�Pe��w� �H����`=K>��Ӣ�=�!�PƆ=sD�#v��a�}����ќY���=T%����3B��k�MyZ�<ܙ���@YM��C�<ǫ^�9���[�v���d/��k1)�4���K�Q+�9���Eu�� ��_kR�ܿt_t�lc�:�z���b����~�$ �]%=�����kGWR5���5��d��Ni͕�M�Vԉ���zQ���V����8N[>�V�����I�A���M)A߭\��� �Z��\vE��+��6�45�Z(�h�gfF��������ѫDhKf:ر�KL)��#$�W����7��@��nG���M*a��?���H+����gվa���_��� ��j]3��VZe����0��2��,,
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE