Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
c214dc7763e98f2744dd5e7a44e80bba_JaffaCakes118.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c214dc7763e98f2744dd5e7a44e80bba_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c214dc7763e98f2744dd5e7a44e80bba_JaffaCakes118
Size
1012KB
MD5
c214dc7763e98f2744dd5e7a44e80bba
SHA1
56e2479d5b2132a5957ca4a19110644f70ec5021
SHA256
7dc48bb29c2c9da5a6f60e304714cb2a9b93c735cc3a92522d9fd25799c9a6fa
SHA512
2200cd56bdef80a3dd683c2dfffe8d7dbb86fe21259edcbb1355f2bdd006098b989968c053c1b874c596016b4fb61e9c5ab6fb615cfce3b252d0533b79a355b9
SSDEEP
12288:0fv1ebYjKk9nP1nMDWSM9hNPrbEMVV4TB72mF5lojBvZAtvGoNvHuyz50VwKxgKb:01qY7NTQM71mEZARGbxgKHbBCkBYNBTi
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetVersionExA
GetStdHandle
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CloseClipboard
CreatePalette
RegisterServiceCtrlHandlerA
CommandLineToArgvW
CoCreateInstance
ioctlsocket
PathMatchSpecA
DnsFlushResolverCache
LsaEnumerateLogonSessions
GetModuleInformation
NetLocalGroupAddMembers
capCreateCaptureWindowA
WTSFreeMemory
DestroyEnvironmentBlock
VerQueryValueA
Install
LoadPerfCounterTextStringsW
PerfectWorld
ProxyDll
Q���$�͍,�B�=bM�� ��6�n�*�3�� �'{/��3J�fo! �B]b��\-�O�S���Q�v����(�����E���I��ơ�~b/)�^<��o+}��W͆K2!'kjǸ��-ClX����vd-��]������l�h#`�8n&5+ ����GiC�~��Se%Рof���b�~�Aލ�R�(����%Xa{�����0��8\|��n��[MP��lß�Ç�a���7�ݫUP��/"��҂g�~�=�~pE sj�� ��̢��D(�Ŭ��c�U�W�ZR1��o�dW����HG�¨�)R�lq�0P��BR���w����w���ݬ����H��JΙ�N�'���9L���w%�HيB�M��i��#��Psvq�r��:9��-�8�gZD�>LH��n�c�w�qs��v�(j�Ԑ_��s�j���T��*&f�� %�CPZ�#���'�ϭ[S�:�6Pm�R����@��lL�U�������5M? ��?���%���@�?wJ$�&���� P'a+��:����+Ʌ�gQ@4�<[�9W�E�']�������oD}X�{K������j�5&=6^�` !����}?��,��郘፶歇��S���T����QQ�T�B��S7�3�b��<Ų����T#��D�k��8�,5'���b�HFp:�c��6IxY�*���4e�y���k�`:��Gd�t��!�g�@J���"� v������R�������]3�)�~|�Ldn[��q���{4�_!�� ���k���'�����B�Y��'H Y�2��y��T�"Os&&0;I���� �5Ef� �`И〖����S��c��ƩNk�B�IJB�`�;���y� d�H����O�O!M���W&C�rR�xR-��fs>x��H ��-�D"�Gߐ:�Y��x��?*�@����U�Rr�Pk�K.Dة�@C�cz<^��`RO���S�ǎ�V2����h�r�MR/"Ί�%$��l ���n�S�eA#ɩ�q(�5L�S�A�3��V ��9��:��t6���c=�A~����'����[!����u��e�U\�]RK^����,]��Gނ��4�I�N�F�Ώ���"�oS���_�^�jɷj�����QVY��B�������X��"۸�bqۿX�E���,M�ި�j����ѳq�S$D�n�\.�%q��r�m�-fQ\H�9�����]�Ch�O�sz���-���F������n27%�%�����v�W�}��|'ɷ��2��mc;|�+����������Q�1 m����D�ZQs� C"����Ķ�ڬ?�i�� �E!��H����yX�]#���Q�.���oƄJf9�o�۠�%ܰ��nO��������������L�)�=�,���{ R}�w!��סV�֠j~2���KLG���x"]��ڕ��9y��0�!��y��Ԋ�M��J������IP:�,i�[������Ք}e�TB�(�HE�#��${ܘ�/�2��W����?�E(U��� g�Ȏ1�0N�$L���e�F��&ij�X<�tGDct���X��}����13�z��,y�,�ɋ��d���8����d��Rf��Xr��jUQ'�P�^�ß�%����C�EL_u|G�����\C��+����,Չ�-&v�ywAM%��JϗPBP{_K���&E�t" �g=�e�ݖ-�n'uT���B\}�z�6�����U;uuC�`!mx�[@�\GDn�u��y�%��������TR�ph)D��s������_���'7���`�cvK�#`x`������1~F&x��.�b�\=��H��p���9��=F�,��aO��vx�o�eiP���蟻t%�#�h�������|�i��XNg�]�˱���\�]��E4~d�qe��b'�f�|��c�5ߟ��P�H�^�Q��(��Ֆ]������g�H�>i�&E�{��q��~;D��A���S��W,�u1t4��� ����W�#D��z�r�ozX��\�AV�u����Y ɳN�j�u�q������" �㔻��.T�=��L��/��suvؾ��$v��͠�ñ*�wz������nZ���������2��fW��C�]mUCJH��� �s�]�a��=�$�dPY��ܯ�tY�-� �J�Xgo�;m ��|]�Q�m���z�d<E{��<K���W�r�(�,��6�ּ�v�e��Q@�Z�Z���,�em�����0�@n�����3��/?����Q ��� Ks���г��/�˨�w�qT��x7/tM5= <����֔��D�%�M��=)Ŧ�A7n�� -����K�¼|~�������F���F)��*!=�"�,у� �#x��`enX� �za�,�&��i�����.�Sw��&�DIz&�ע���8I�:w�u�����v�j=�su[AhD��ART��k֡��T�3�kϽ��r��P1������H\�Ǥ{���Jw=ӽHr�);�;�z��`�������?f�C�rV���3����ŜǔV��F��W��&�B��Ն~�������u||M�Y1]AL��J4���[��]�Y/���:������&%��6���B��rϝ�:��U�1��z ל ��'M�㉒'$�XM�9�R�}-�=[0���Pa�!_�J� �s��P=;��+�X�;Ff��J�<�EZ�Y�0wm���?��I����k���7�)���;1Y|����<�=��,p�s���{���稛��G��(���p�ǡ�C��|Nh�kp��7���0��4�?�����7 ����d�PmW��ۧߒ��U��ei��o�`5�'�d��?K��D�^x����v��,Po���߸Cgt��\�b�+]�����Ro��n�X���=��{�bu�EP�?� @����Xa��������wK(��Co]g���X�6'�^��0���T�}r�Пq�K�2�]�����a�Q��'e�)�B���Lv��
ServiceMain
UnloadPerfCounterTextStringsW
ncProxyXll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ