Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
c164d81cf9e2733ab6323587c47c6a41_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c164d81cf9e2733ab6323587c47c6a41_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
c164d81cf9e2733ab6323587c47c6a41_JaffaCakes118
Size
278KB
MD5
c164d81cf9e2733ab6323587c47c6a41
SHA1
2bda929a8eaf272fe127b250c18f982e6004c960
SHA256
aedb65cb0e7ea10713f4fe60e43f08856474c0f5969383fc7a341ec3efa40eb1
SHA512
26d865f363846f1bb2182aba09e041f9c4c308b9153074ca513f3eb000feba3e7ea8a21aa631e4a334a86fbe69d0712d46c006fed026a4e07a0f160d981ed676
SSDEEP
6144:bYk7RGxF3BEuTP0PvdA8r1eMABpxEJPlLsiJEwpCAOkSm4krO8T:bYeE0uT8Hq6eMABvuPl5/CRkDT
ExtKeyUsageCodeSigning
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetWindowsDirectoryW
GetWindowsDirectoryA
lstrlenA
lstrcpyA
CreateFileA
VirtualAlloc
RegOpenKeyExA
ExtractAssociatedIconW
ExtractIconExW
ExtractIconEx
SHFormatDrive
SHGetIconOverlayIndexW
ShellExecuteEx
WOWShellExecute
SHBrowseForFolder
SHGetSpecialFolderLocation
SHGetIconOverlayIndexA
SHInvokePrinterCommandA
SHCreateDirectoryExW
SHPathPrepareForWriteA
SHGetFileInfoW
SHGetDiskFreeSpaceA
DuplicateIcon
Shell_NotifyIcon
Shell_NotifyIconA
SHBrowseForFolderW
ExtractIconExA
SHGetPathFromIDList
SHFileOperationW
DoEnvironmentSubstA
SHLoadInProc
DoEnvironmentSubstW
ExtractAssociatedIconExW
SHQueryRecycleBinW
DragQueryFile
CommandLineToArgvW
SHCreateProcessAsUserW
SHGetPathFromIDListA
SHGetDataFromIDListW
DragFinish
ShellExecuteW
SHCreateDirectoryExA
SHGetDiskFreeSpaceExA
SHGetFileInfo
ShellExecuteExW
SHAddToRecentDocs
SHGetMalloc
SHQueryRecycleBinA
SHGetInstanceExplorer
SHInvokePrinterCommandW
DragQueryPoint
SHGetFolderLocation
DragQueryFileA
SHFileOperationA
SHBrowseForFolderA
SHGetDiskFreeSpaceExW
SHPathPrepareForWriteW
SHGetSpecialFolderPathA
SHGetFileInfoA
ShellExecuteA
ExtractIconW
FindExecutableA
ExtractAssociatedIconA
StrRChrIA
StrStrIW
StrChrIA
StrStrW
StrStrA
StrCmpNIA
StrRStrIW
StrRChrIW
StrChrIW
StrRChrW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ