Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
cf30d6fea0abef7f9e3b8a0b38c9afc0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cf30d6fea0abef7f9e3b8a0b38c9afc0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
cf30d6fea0abef7f9e3b8a0b38c9afc0_JaffaCakes118
Size
84KB
MD5
cf30d6fea0abef7f9e3b8a0b38c9afc0
SHA1
9fa4ae1e868fef598cc3e819b1aeccba8973f993
SHA256
7fec1a608d7c2c9b1411753fd7423025c327991437571df26ea04b680f182d68
SHA512
af860e6b1a484353540909c7d9131cec721da15ccf181b215d22f50d80f962ca91ffdb11c9dc72514876d0cb762379428f11b4c2470a58c6775b5549f04eb4e5
SSDEEP
1536:NKPygYW52RhlPhbLSDwYYu+bSanNo8IxNQd8aIicnzij1xeAB94cLzL:oxYtlhbcwyQnFiNQd8hicG/eAfx
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetCurrentThreadId
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
CharNextA
MessageBoxA
SysFreeString
ZwQuerySystemInformation
J�0���#j��?�n��#���#QD�C�dM�� 9J�e�[|7�$H��R}�C� ���j�sɩ�- {� �1�!����_������+��*���̯ǖ���s�U�}�;�?=�͘��:y���ڎv���\@R5��hjs<��1Y�����?_�C�:���;���!H��ȋ4ȇ fJ��5#m��W�rQ����9=�˻{�` �R� �?c%��p�l�� ���<k�eŀ-tË�IA�����{��JŌ���_�S�Tf�w5����k�q��1c9 ��"�JW�S��%=�J��H�R���3�9��&��IW�[��\�0rԣ&�ݥ��4�i�$g+�����v1���mh9�����=�P���ɴ~�ˀ�A���^:*��<��I]T�-Q���./=�ޢ�^9���DYAFf|�5�uyr��i�������h������i�6�N��L�?ߙ��Q�����q�Q�C�R��/�k�0��ѐ�. `*�o\�wD�֤(CSv5<�����8�Q��|����L�����wJW���g�>cS�[l-}*����b��T�d[ڱ��>aF���b#�^��?���r�h"fU�a@_��c�̙=�dr�{o��ɵ:꣓_M]���&���0Le�������fIƤ�"�a����L?�G���~I�~k���K��sց6PI �S"5���A�w��f Sς$'��g�������� ��l��| ��=��+���E���2{����?�j�}�Bse� .ύ�� B��?ƅ�#2G�:�?t�D� Ǖ�R�qmaE�$���� �[���+�A����'�!������'v����'DS�W�Z�\�t����`:p��7���j_OA���V��� ���K�.K �.D�������HnW�D�K�h �h%�����)ʓظx����d��9\䩠���� &]=��vs��hg�87�5V��2}k�n�Z}��'���ԭuáh_gd�`��Snq�mէ:��=�~D� �`5���s�Q�Ϭ�����ux�?i���3�~]O.�$�0^T.�'�1Z�sy(|V+*��s����6�ݹV��K-�fz(jlC�"74K��<������ �R���B��{�+Yj�����E��F�_$�F? K�{��ÿ@j�D,���/���FD=MaO�`�vB#oMJS42U�F�v���!c�#��u9O�y�*:i��r(/1�s�(`�;�)_�^��B��y9�٣:���æ�9�P�5�^us����� ţ�J3��H2t��SR���V�+���&���W�C|��5ػ�_/���:&��8� �3Q}�sj�j�K�Ά[O㓣��&��1c�cAs ��k����~oR��{`=Zc�w�v �]]���P�`��������g3F����\�p��G͎��E�����=J6^5Ck��6^y=��H�%�*���:Ē3:"����}���e�A<�Z O���� ��.����D����Qcp5�h}�f�mX-��y ��ZŲp��}r�V���e�@@7>��.�sP>,���� �N�����5Y\m�{f}A��;c��q�Ƿh���}:�瀢NUK��Y�&zr[=���Yc��K�C�1f������I��P��p���('�h�vw����,���:�Iei�M{��X�<!<��z�O���?K�!�ٖ��r$��@[��ge���w�����K2����=��ѓ7���(��,F>�ŘKҰ;�p��z9[G'�$�k��;��,nȶ���IZ�G%]{lm�kZ:����5�l?����G9���zdD�Ah���Ҙ�M'�ߟ�GPK��:��U��ӽh���\��LS?@�]V��v�iW��Ũ=oñ�i # cՓ<Ѹ�ٌ*D��5�Ap�"�j�����0,i��Nȼ�?-��,R{�j�%���!t�RU��P �^���+uu�4K�J��Z��n9�<�-9���v�| !��ږJ �c�^�E ey�:�Ƶ�Z��eO.���'��R�Z�V����e��BJ��iZ���Bz�`G�,�TAd�[[�;��b�aF�pu�ɯ��g�o��HL�(>!i���yT�#��T�?KtAj���]���̾��L�؏�C<�������=��b4X��=���@"���@>0'���eT�|a�}(1�O�jӪy��(&i6ސ��"L������ݠP��M6V���P�"�D�!����+~Iot�>�Y��4# W��@�����3�E��9=�n��QK�^�(�����{Ą8ԄgUۦ�z��¦�u��!(O��#<0G�F�*˜��pr��k���a�4ҽr���D�[���]�����Ba��,��O�l���M�|�n�g�͂�)n������J{���t9��0p�>f�?G?����t����se�1� ���j*���0�Xi�R:�p,�֎s(�X-�h��.����D�'}n�[��ήׅ�L���a�%��~)�#nk���]O������6�H��X/��(�9��6�g�����>�� $�Z�,��Ef�J�ue�c��@�>�����m�}����][���uG�A�����Q ��H����!YS����0Y3�X�/��S�YT��Wd�N5���x��Yxs,F�.�և~9���Z�u$��q�XB/xjs��A��$+Hb }���@���_�D��x�HGh]�����c��s䌟5@��Թh�����e�_YU�cmů���է�ˆ�SGZ@�#���uzC����AC���Rt�����v����@jj)Zq� �i�1U�:yۺ���1�&�g�����XJ�`#/���>����B݅�7�c �]��6��4��$�I�:|'Z_�V#��B?����ް�����2J����ʬ��r.�%���p�"��3c"��k�b�v��ꯛL���M��G(�*�5I5�Y�覠0��M߿�4f���U�{�:�S�B$�W sjD�Jm�������Nu6�����ct�<<���+��3�c`�Cx�� o�o�����OO��染� ��W��3�˃h��S
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ