Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
d159e3c38d8df2aab07c4391baba1511_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d159e3c38d8df2aab07c4391baba1511_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
d159e3c38d8df2aab07c4391baba1511_JaffaCakes118
Size
189KB
MD5
d159e3c38d8df2aab07c4391baba1511
SHA1
af9839531fff43cf8fd5c6a3f6109676abcbfe43
SHA256
871d12f71f35ba3a355bba287e2e457c0a4a1cbd489d8cb3b2c8b9bfb3c536b2
SHA512
614079c43da736193f5c6162cd5b653e2490ed9fbf99f69ccca59589eff2071c62b2b0b706dd791a528108f6256c0531088ba7ea6cbc2feb823ecdaab6965056
SSDEEP
3072:tLEY0yrot/RyBy4tbxDth3/bu5/FanekrcIT1SkhzHjCatxg1jNp/:tU6oWByYDbE/BEj1S8Dg15p/
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_controlfp
GetStartupInfoA
LoadLibraryA
VirtualProtect
GetModuleFileNameA
CharUpperA
MessageBoxA
OpenServiceA
SHGetSpecialFolderPathA
���)�*? �z���s���7N���w�ֿ���<7�*LS�HE�ܯi$Ō/��f� �k��i��e ����Q�2�m�H����[���iObw�8�h�K�-��U����+կY���us|�_I}��Wρ��/�9%Z�.�L��K�q�� ����T��V���i� =�-vJ�h6#Vc�nV�H��"w��;��8����}�;�����/�CŚ%������"�Ƞ̥�C�p��|Yvv�(�Y ��{� B���ŝ��ɦ��a#��"Ӵ��]HJ���D��~��\�؍Z���:f���09����t������UN��(��Dd���`��:]��f���}aV�AE6�[BY?G��y���\�.i �Љ�;|aH�ŦVd0�:�g'�?��]+��� ���>FE��P����Q7�]%9K,C�fB�:@���Ӄm�Vl-��^'�F�k�F(_���KI��25�Pa�@\��x�����z쩕4� )dp���"z¶R-/.����I�������]�[�::rK��ev=怳��".N\��JQ̔�9>�qS�E"<z�#�Y�����)�~������ΙKz��!��5Ck���J>x����J�S�㐗Fi�W�{���45�a�?毷�����I��pp$�xO��f���D�$��Uq�p ��\�^�p�v!6J�<�z}74R�6��+����!q����xBߴ�Qjt�z���&�M���#����s�4�%�fީJ��5�_��Ei���=��EV��hH5��2�U��c���e\������i��kh��c��2�~��*B�3g����xJ��ys&�4\��L/l�� �� ��{�` �r����G��;,����:@E�u#?&8�j0tz�����=(�B�ڥ����/FQ����XOz�sO��� �O�ăO��6��u �L���ÉE�Msk�iN�^��#�Fq+����'���5;�' e'�c�}�d�_nNI�ɾ *��\S�4q5�:�+1��N��K�y��gv�_��GN+����ˤn%� S��h����ʼn����`�'�G�|���xm[�v����˽�1����LG� Ox >���G� wn����ȨP�~XGv�i�H=�r7b�v��s�5�^(:ǭyin.[`�L�`���z�p��r6��\dKF��u< B���k�æ���ڷ���'���<kG���_ *K�D��3���L)DَY��"�pF4�g�;�����BC���vQh�%�ěsؒ�i��n@]��`Y�>�E��.�|R�#��������MA>��^lW� ��}0�S'�kC�k��9�q�ڡC-_��a�۷���h,��c�4�a�'Ԋ��~��u��.*���h�� 4/�/WK⽷tCx�6z��@�ϡ�� ���}ql�);�f�>�%�eVh��=�# �����V�~��ҕ�yd�+������<����G@������,��Z 6�Ͻ�E���k40�]Qkc+߸�����:pW�t�n���?�.p�K����602�1z08>���w?�b�S��u62WG�D<��jx��6��Ew��V��A��XssV��}6�eB�w��� ^�=<� zbՃ���.;��o���c�E��X$�����}��s�����3�zq#L\�zD�c,'G�M��xƑqL0�`Sp?�v�b��`7��X�����p=�oP�/��ˁ�u� �^�&5����NT������QeA�;óu�фq�͐K��s2��emX y�� ".ݳH$��%s�����D��nJ��[��_���X�W�Q���4�P.ۺ��4Ĵ� "q��n�,���V�ݳ���xdpAKB���$�k�d�e�Q,!d�{z'��,Ӷ]s�"K�癔/)�}��g�E���8�MY�Oa���%KQd ����Ӌ�"n���DO. "A��8Qp��#_!k��>��'�z���~nn"O ��)��ĠBY �PwקLkؗ�����wF�MW<m[Z*�s|�YH�OW�uB�<�0׳o�k�+��N��<~��ʹs��{����Y�P�t��B<���RI/H� oO��(����M��$���d��a�7�On6b�Rg-�*:E�e������e9F4��t�v3�_$˧=@���ї@t�N�2�g� d��W�t�P�h��B�բ2K��8�'��]��Z��ɲMl��+7���fh���c�&\��{K�4n���"�R���,3�*��~@����3��t��T�Y����]i���4�:�Z{h;��i�.��1�8�]��~~�{=*+� V�Il������Y��z+���x���C� �ރ�:��^8,�[O99IB��Cb{���qLo�F�&����6P�|�Tg� ��u�5kL��bo��:��K�^A#�^��G��A�13Ĥ]�j�1��v���Z8�nMy%Ɖ���X�ܲ!� ���?-pm`���B�U�/cL:4�ӕ�Z;Ƽ!Jz`ml�?tf��V�Z���lC��t�jOC�I|δt�GcC$��a*�p���O��3����+��iڝ�ϡ��l�D�<�/�������քzN.�gUj�Q���\k���y(&��S�a&��o9�a���y�!ϭ��|wL����;ҥ�������ɑ�.%������mUc�JJ����<�:��<�.����D�o�Z������]\_�m+���+-ؕ��� +��;�I����'���[���,!�Y��~�L[��i�t8������(����G���7s��cF��:�V`�݀�,3�[*�718XS�6�|�m�z�.�p���V������ ���s�V-�R��R� �n���Xݝ{Ѧ]j:��<.t���ÝtH��k�1(Z�}_�\�W!Hu '�� �ƭ��omŤ^͆�hw�6�Y`�E��?�n�Q�����e���9f�| ��<��X�Zݕ�H�����������e���o��v�Ůt�$}м��J��C08ז�id�;9���[0P�d�1x�kGs�JVK�&�o��Lht��9 ���v����,���%XV
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ