Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
ce42ebba8b7f4adb5c3e471aa6012785_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ce42ebba8b7f4adb5c3e471aa6012785_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
ce42ebba8b7f4adb5c3e471aa6012785_JaffaCakes118
Size
171KB
MD5
ce42ebba8b7f4adb5c3e471aa6012785
SHA1
9dbcafbf072b48944ab5e8fa103c71fdfdc3e5ad
SHA256
358796c6989749b37268c1aead1d8e45a74b68c79ddb9d24bec69b8b782bc411
SHA512
ded088850dafacab96d22dd36370b1ee21b97272034c0ae0bf1d9a2511b2934898d019d0af83338f85ef2e2c7003f57af5835f8d8693232afb51820dd095498a
SSDEEP
3072:yxwlpiQzZcxLv5T1b9kHFx5Tyo8+BfLpNUU74TwuNFZFVTVg4GlvUereOSOlJ7a0:nFZcxvbGHFjOZ+tLpNnuNFwvUUSul5T
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
j:\Browser7_57\to_trunk\obj-tob7-trunk\toolkit\components\maintenanceservice\maintenanceservice.pdb
HeapReAlloc
SetEndOfFile
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
WriteFile
GetDriveTypeW
MoveFileW
GetTempFileNameW
GetFullPathNameW
GetProcAddress
GetCurrentProcess
LoadLibraryExW
FreeLibrary
GetExitCodeProcess
TerminateProcess
MultiByteToWideChar
CopyFileW
LocalAlloc
SetLastError
GetFileAttributesW
DeleteFileW
LocalFree
CreateProcessW
ReadFile
GetFileSize
CreateFileW
MoveFileExW
lstrcmpiW
GetModuleFileNameW
CreateThread
Sleep
CreateEventW
WaitForSingleObject
SetEvent
GetLastError
CloseHandle
CreateDirectoryW
HeapSize
DecodePointer
WriteConsoleW
GetProcessHeap
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetConsoleCP
FlushFileBuffers
SetFilePointerEx
ReadConsoleW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
ResetEvent
WaitForSingleObjectEx
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
RaiseException
RtlUnwind
ExitProcess
GetModuleHandleExW
WideCharToMultiByte
GetFileAttributesExW
GetStdHandle
GetCommandLineA
GetCommandLineW
GetACP
HeapFree
HeapAlloc
CompareStringW
LCMapStringW
GetFileType
GetStringTypeW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetConsoleMode
LoadStringA
wsprintfW
FreeSid
LookupAccountSidW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
CreateWellKnownSid
StartServiceCtrlDispatcherW
SetServiceStatus
QueryServiceStatusEx
OpenSCManagerA
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
RegQueryValueExW
RegQueryInfoKeyW
RegEnumKeyExW
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
BuildExplicitAccessWithNameW
SetEntriesInAclW
SetServiceObjectSecurity
QueryServiceStatus
QueryServiceObjectSecurity
QueryServiceConfigW
OpenServiceW
OpenSCManagerW
DeleteService
CreateServiceW
ControlService
CloseServiceHandle
ChangeServiceConfig2W
ChangeServiceConfigW
RegSetValueExW
RegOpenKeyExW
RegisterServiceCtrlHandlerW
RegCloseKey
CryptMsgGetParam
CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetNameStringA
CertGetNameStringW
CryptQueryObject
CryptMsgClose
WinVerifyTrust
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
PathRemoveFileSpecW
PathQuoteSpacesW
PathAppendW
PathStripToRootW
PathIsUNCServerShareW
PathCanonicalizeW
PathUnquoteSpacesW
CoCreateGuid
UuidToStringW
RpcStringFreeW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ