Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
ceeaec84dea2e50df4cbabfc050e4f79_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ceeaec84dea2e50df4cbabfc050e4f79_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
ceeaec84dea2e50df4cbabfc050e4f79_JaffaCakes118
Size
1.5MB
MD5
ceeaec84dea2e50df4cbabfc050e4f79
SHA1
ca8912cbd82444363452df86ff1535da7587835f
SHA256
239458238bd21aef9c8fd4490abd4ea4d9699c7aa3d96a7bbbe5d51ec0026caf
SHA512
36dee69c233188fc535f943ad6292956847595bf7ef330e1ec7c70d998872bb8f330a4e81a87f51bcba25f8da0dd897fc7fbb92b6bac9dfff14cea1e63f72729
SSDEEP
24576:aZK5/mUXrVk9J53mTZAsb9bRmvrwSRd1s6QDLhaJ5Ackr+yIbdqDmuidDV9gBMYL:aG/lk9X2TysJbRkdR7wfG5ALi5JuidDK
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ResumeThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
MessageBoxW
OleInitialize
SysStringLen
�<B�h����K�����;i��k�G��m���"*ײ���\�]c`W�I���� �Ei��H0 �B�4���l��4ty*� �Gj�S� ���L�l�/łNy3��W��%����ƿ��j�ݽ���0Q�j�����A�9��;B魚�娫G���P��$����/#_ fk�uE�i��+����3��*g^����A�'�f,ɔ��|�M^���i�� UU��^Hc�;��@�Jfu��V)�8c0�Q9��I0/]c]Y�4�МE���}OO����$�l��?�,�iOiW��A�ZoV�(���K_⊩��$�Q�e��JJ2�F������R�/����zr= ��֡iC���@���Ci|����E��ҖH��#�`l���+�[������8V^�4@Lw�ݓHl�SkĆ7�Q�m���݉�M�Fns�v�&����Q�����ɓVi���fm�e�4]H�f��̹��m���YC�~9i��6���P�Y<i����+_U�M^}[����^�5�*��4�F��/l��{��8j�,t?,�Z�&�� ���[��h����a1��A���L�h�|������,�&���a�����'��* �S&�هlc��'2�f�g&ePE��q�$�=�+��|q��瀩|�f �J�oNO���コ��$]0+u��as:���Q��*&�e�u��y8.\O�Ĕ%����?I"�*C��'�F��������:N�Y��O�A_ ��G���r@D�>�N�z�� �]='ƫF�Z����QXב���'۠d��I����3k7���O���F�����$��BQ 6�Ѭw0�����#)��i�;B�G�����X��aW�Z4pX�ĤF�JF�sԆ�+,.µ�+�:�`�����zu�ݢ��kg��PS-�#ys����O��"fw U_Ð����U�itZ���j8��Ot��I� <y)�1hY��̷�y�ڰ�5_�W �����)�����̤u�$����KpMKС�=m2|<��V&��s���U��6�+ڒ�$<���/��\��_�%[���^����c���� ��S��`� Ք�hXD�6���!��(e �zR�z`o�w�B�4a��h@<a*R"�����9��ƨt4����k�W_��EU2����'#��C�SǦ��{�i@9��p��<Y�o ����ȴlj���ɞ�;ܰ����~�Q�a�������+�l(��"�i���L����E[�T���ޟ�l*������j!bɇ�����E�B�^"5^e��D�#�w-�H�+���P�Z�Q���+��#�Wް$�V�q�W��IKrے�Mn6k5?7Q�{�G$���$Ɇ*$v �yf�m��]���-k�N��d$퀛�p�XQ����7Wy�-��[��B�����!���z����wA��>7O��^�)e�&:.�ڰ�$�G������'>X��{�@�!�_��)�R���,Mߘ��N&'?'7b�U����~��}��l�����^�� E��ˑY�F�q���#j9}&\ʘ��VL�}꼟���E�q*ȅL��g��(�:��E�0�V^�����>��U�F~�0��� �2 �8��C����νzc!����m �l�a��{�c}�#��<�Rʃ�F� �Ӆ&�,{.(�rC�A���}G��X��'���?��� ��3zE�^(V|YWR1oG����^gl�����O���{�$�`��zk��>����(���UK���Ӯ��&D��,���g��� [u��$)����wh�a�>�OL�ϊ����[TH��q=<f����Et尮�<������!-K[S��{p���7#�r�]~dC��36kì;H���z��A+~�A}^����N�pb7�D#������V7�W�գZځ�(�B����y�_�١&Lo?>e֪�^m� o�O��pڼ�_�8a�9�w��X�����Y����\��I�kI�LF��p����Z�2�T���<����M�/S����������څ@�P���Ohޙ������ǘI}e����'ni�����CE��P�g�b�覓~��R7��{�y��A���-) �?((�������(��9����l�Pl�xL6�ɠ� �g�t�{���2�ݔU^��i��"%�C�^t�iw� _�H�� ���<؈>q��I�)��DCeF��=� �$��N�����'`##tT�Dl����k�����5c��e&?����1�gl���71�0'D��X"�Y�4������Z��S�Sv�Z��A��q�㤢���X���m~����^����k��T5-S�÷�G͍Y0�a�G I��.�>�Nq{���9����E�W�l��Y/N���6[�����,�}f�1|$�e. Q���t�h�.���`��Tے�]=� b�'�쫉�c�*Xv��)��*A�*&>ҭ��{�d���Ih2�]��F�:JØ@ ?�+��W��iG���a�.�K��fӟ뀑�W�Sh����3��z��Z��:R��T�M�s��'8L����J����C�vT?��� �lH&�>�.�ѕ��۴_N]��a�}T�����mQY��j�PGՎ�#�D��n�&��K�I�i�X�&��w��lp��wp��/f0��yh�N6�e�N�F��F�@T���l�|�)��AZ;͉_��) �v����<P^^���*��/�)~ZI/0�{=��Ja-��VS�3����0Y�A`��$}r�W�B�z��4^�Z;�`�w����D����M��G���3H���&���Lf e��?��p�E��� h�����w]'��q�p����W��f�^��8A\�<���ǰ�^ ��9/=�/�c���=Lȳ,{`��`�DKg��� 'P�YJ��,���oT�b>��h�r���I_LɎ( [ܒ����s ��ҕ}�c7���@�(Jv��L�ⷩ����3��4�I���������)��=���-�� �����L�>����¢��~U�K.������}�C��^�?
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ