Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
bfadaf27068f87b9dd7e27febb1c31fd_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
bfadaf27068f87b9dd7e27febb1c31fd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
bfadaf27068f87b9dd7e27febb1c31fd_JaffaCakes118
Size
1.5MB
MD5
bfadaf27068f87b9dd7e27febb1c31fd
SHA1
1fe9aea1959fb63fead2493ab4830e91877dd187
SHA256
cfcaa75ade52042e2edf84f897f047236159be38d658a94d4fc981529f44192e
SHA512
1c297622716d9af98bf5b2add18ee3895204cf2406602baeef3913d7ae4eff474fe44b8dc6359fcfd4b8b562fa0f18e7edacd3da9b132b4eaaf9861022456b3c
SSDEEP
49152:vsIMS4i0o3pKmg5sPE1gfKpKeC+8rdt2uEP2zR0Q:jp93smg8Eif0Kq8ht3oeP
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LocalAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CharUpperBuffW
CoCreateInstance
VariantClear
�.p��T���z;眱�:�O�m#��Lı�q��p.�b,��P!*� ?U�W�з�H���F �Åk����[��"����6�E~�� ��^�j���&����a�����]OIC ~�U������#�XD�<jat�M~:+<��1�f���K���H�����u���h��#$�)�����Zhk�شe���_x�O�}���r�����&�։K�s!S!��ǎ<�ځB��T�%��s�4���5Sa���D��;#��~�iܲ�쮱�:�\�ѻm�g��1� ��l��e.�e_`aA��:(P#�V*�a1��m��+]ITސ|-)�\���ԥ�C�b`��C�1��0�Br��~�N@a�E�tp���y@a|I֍6̄H5��Z�HN��v@�tt�_7��5������G�f]�"<����{n���� ˧|���4�7���\���e?�D�;�< ��ov�<����0�B����X�k,�S�Cy�_K�^���9��=V���pq�-�����t�L���2��G{� H�kx��9�\��b���v��=Do���Zo��������|�T���� ��?�U��B Z#%q`4�|�̸Q�uHQg y_?���s��h�B!��L�O��{�����]�*�x>笀��bU�i�-=������L��8��!E0R4�ȿ4���i.�U;�L������{�|��9�a������j |�b"y���у�}`�`!�S���x�Ҩ��g��镺 �P������YU��'�.�=|��5yȞ(�)\������J��sGwo|=ͤz�8}�^B]�ɮ�Z���(G-��ղ#�t�'Z��W����v�w��n�]N�Y$����~\x�5H�d m����\����.���]�Y`��*�� ����C}��J�qdEI&�W��4��Cï$��NU�}.C���$��<pl�C ��I Wb���:,��\�U3�O��<{;�x��q�' �O�O-�{P�t=��C� �^��w���2���]I���'�&H6dB�����J��>�F ��M � �m��iOY�f���x�7�٤Վ&m��8��Ȃ|��2�Hm����p��QY�~nAj$����J�)�6�/��٣t���Msb��B��w��|���aܾ}�f͠���m��'$9�����JXJr�n\��cl�#�k��(�X�>1I7���Mi�D͒���j\_�" 9ݝ������~��(x@������_Š��#���.(Wf��-���C�(��Wsb�m�\�3x)�˪ʺ���_���Ny�����oAPW�>���� t}6{�1���d8��W#���D�Yóv�����T��������7���[Q1\���/�E}۲{�wR��D8ғ�0<��gO��c���IX�-�i��s�����'�: ��Z98թj<i�����D4�"��q@��j�깤݂E��/.\��I��R���"���3ӗ���7��BZ�h(��V��Ȱ���d}2�K�`O�{���D�]� Y_����P_������=��N�5F���Z��[��qcm&\�yl��j�0�F��RT�k-����ľ'�!�Ӷ���Lm!ʘl��7גkH� ��9����QGy�VfUi��Yc�M��m�x��� �ή��P^���7=����RP6O�؇���ɧj�����}�h�R�}a�x����\�>��Fխj S�i\����I�EF:��[w^Ԡ�+@Q~��X �˗��E[Z��q}�i?����x�8!���S&i���|^b`R֪���|#����m�rq,(���5��컂�C���L�%�d D�� ���|���_�7�Qm�Z�߅��'u�T�$>���X�.\�;�\� ��1�B]���6�_)~��$c���+��,�d��|�=V�F,�x�]m��2j!D��&�-{�ĩ90�陠D��c��%K4�u��ÓC��E���� 8�� aڏBJ+���z�1�G5�8ؕ��b1���U#�-{��99\b�E�RJJ]������ca��W���p���gvQ�����L{�=�=Z��q[l�ߓ���i?�b鿺.�GΩǙ7�:�biC��.���C�H�cs�"�������%~X�� }���D��F����q�I�LI��qUir]�T�K�1Y�v�;�X�R��}l~���}�S����H�d���hѹ@G,T*9�Vc}��Q�S���g�����z�b�cp�e���d?��Iw��aWu�HR`ŴY��>Zr���DLI���Ydx"~���%o+:P2��忏̿�U��o;���"G-�h}����@D=g������տ��'�)i×��8��>�ҙ� ����?)���O9�B 9#}��4c�l����O��F*�7�v2�i٨��KA��!(�^��\�#�����ꏖ�x. 1�C���&a�b!j/u*����4� (`��O��b��ۭc���b�]m �e{�eۚ���x�J�q m�!� Yg��Yzw���6!�;m��~��Cٍ�����i*,<>+�Q�"�f&k�5wr+�P�ۓ;��ME�yJ}0�kyI��3���r�Aό^���ޖ1ʭ�i��&�Ў=:d{3�)]�?x�Ψ�DR@������������}�=�����6NַM�L���_�H����[�>\�:jZ����%�f]�$��~K�^~��ힱ��.�8�Mݲ��F���,�� �m{�YѼ� �G)�4��gm�*EZ��?�]���^g�X�R�wQ���� :.�?o�����q�.�|4O�" ure�N��V7�tf��2������2.�^������>�'M t{d�����b?����e��r%��Evk���#� U��[K3T�Tca��.Tp���~��}j�R���2�v��H�P ��d�����T����ߍ}�>ilM�X ,�#1d�}_����:/�:M��ff�T@�m%�v��o(Q�ԾC��Y�,NH[d�ޢ:껊��`띍�;Y>M�'���i��{"!��>N�ci�����+�^b��KZ�b�����<�.
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ