Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
d2071d66440b2951338d2627d3531c1a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d2071d66440b2951338d2627d3531c1a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
d2071d66440b2951338d2627d3531c1a_JaffaCakes118
Size
1.5MB
MD5
d2071d66440b2951338d2627d3531c1a
SHA1
94bef5d58cc4465bb7c27da9240a45a2647db298
SHA256
04d40b1cba0723dd355e00e0741bcd9e88a28e06d459ce35e01e6c64d2335c6d
SHA512
df5b008b538227f0ff738f9c74d5071dcdfc06255a48a5c3707b0ae1bbd8c2e60005e5409af72b25c44ef72fd3f4fba0a6dfe5377bdbbf7ce1009586ff334b2c
SSDEEP
24576:IO2TAJOxEcAvCe9z1lzRTTDYtdAv6uWowWFyYcPNblvhenDQgrPcd4T/CLCbVw:ETkOmcAaEz19R3K2wWEPHvhevPcd4rGh
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetWindowLongW
CoInitialize
SysStringLen
�T�#E���0}�+!����B�������B�-םT�s ����]�<?n� \���t�T�)st��tt���i�fO��F�n�xlw��F��.>����A�*�)�cNH��`�/�s��2m,��l�� q"u'�e���b�\ �Lݾ��l�K���lr���aL�,#�c��������$��c���ʣ������Vc�#ٓ�ul��F(�$���b����ٱ����'a��M �k�XT���BV�n��7X����^��wT^ ���x�D� ڹZ�諫�Q��D|��u�A~y��P��ůW�9��Ͽ5��ϣ:��Bu��V����.[YwMmHF��@~�Ț3�C�̿����XSt�M�t�����~?��NZ������E=�ٻDYF�G��(��|���������.wM�(-n&˻$g��#;��{�S���A�\�f�6�~k{�fmP� �sa.W��.2�v���ޛCt:^@���fd�;� �Y��f-�<5�g�0Nj�P��S�ϻ����Tq����z3�-��,�B�Փ��7���椫}��寻���y��F�5��� �U3v&Occ�Ǫ�;j�`Ʃ(X$�w����:�����ɔ���%���ģ�l�i�3p����7����^�Kp�}�������T����C�C����~�����u�����\��%0~��Ln�>�i�����6���dV*BO�֏�s�U3��"uRft����s�}��꜉l9�dďd�R�.��i<!a0�f�t6�y��Ez7�����'>>�'�w��Ѡ��l�u�NP���Q���z�d�%v:�vS�t-V����n�?��d��',�����A7 �O����Ch���T�� >)8t���"2w�7���K��߱�R�5߈ �+L�85�u?R�ݑ�zˆ�<b{*�M$�0�A����0����y�}C���c�=.&ޔ|yTw�:C�R552����r�^���qI�9��'x��:BKG6��o�1:���5�e�xWDB���#|G��&�8.��������!�Q!QL���l�!�K�T��7��͌�V����F�S�W0;7Ѱ��t�=�bTv�� W� v��w�!���'ƒ�0����Z9oE1#��'�E��i�S�;H\�K��s��L��TB��L��x2�!CO�i�A�8�� t�n��#����}�P�B������wN�b��������M(�����V��)��G�����lF���=�X�`�;����٪s���Ÿx �Eb�C��^��KN<.�u:�'����=Ͱ�-$:��}v�{)�_ݶ QF���?�&>#t�+.���T�3(q�;7���wj��Y����S�����W]O{<�f��@�x�^F���z�ѡ���,�?ּ߰9�0� :9���dA�S��]�x�����R���N�Y��Z[>��b��1��;^��>��2����k�PM����-D�/�9/l�yC��ט��i]c��F<:7y ��F�� <�w9b�`�u�x�4xsJ����D~א�k��N� T��+�Xcُ����Q��#���=d.��7^ ˌ�p��>��>vf5��P)�K?���J����c��VN�iƂ��Z�'�Ƈ�y�ݪ�'�/v�pQ����a$I�~�cx��g��^�i晊k�0�n�����RD��D��4��(��ZM2Rt�����9��v~5���]��'u�rN�J��d���˳Yp� N33��+�Fs���(�V%V?XjV:}�����*�$���.3CyZfmyF��m��˵��5hJ0a� p��v��c�H�\��r�?�xZ���㳊'�������7���1��w�z_F��7�M�Q^��^� t�wL�?�K�g�b8��� ��v���߹H:�@�\�������x������:r�{T�%^���s8��9�����U�r�=���]�֩�6�f�4��������z1߮�C�+�Umt'��~ף�,�F5w�Hj�V5_pEE[���Z���c��0�_��&O�~�'-�^̭A���US�19pg���H��A��'MM �$�>ة��/;fٮ�����U~��[2���-�I c�i��q���3����&�rx@%Z�o!�:4l+�F ��~ U�K��@��;Oj&i��X*��TϏ9�־��rTu���_bS��y���[8��hhí�]�ވ�&�.�o�|�{��7�A���A����ߴ��/Xm ��d����O�F,̜��>�XnS���������ub�%���[J�=r�ڼ�>_C��B}Fېݗ�lo��Nt�-�t���<.Ms�̟�`p�<��}�B�r{?gy{$��Yp����4.�>�����akWz #Ap�i���IQ��ZI��O�f�����&���^O>��z9K��۟DmuO�~ȭ���`�BR{� >C����U��2`����*�����#�k���i|���Z!���"��L%�ܽ�ԜZp���5��M���������#A1�11�"���}��-{��>���<Ӓ�o�+���L�IM2��N�+��Ӊ�1M�?��J�`���=��#���v������VA��������� 3&�@�pIs��5��H��b�22>�v�O�QNa�V=qN�S�c�7�����go�3,��{ް�wK34�6`W2� �L�k5��llSd��M�ȍ����3 ��)�1j߿S�����W���h&d�F��+�W�����e����E?��[� �"�<W�d_��V{:(��ETNU��EɎ��E������N��ؖ?0��o�ggYL4���k>�������'�Ͱ,~^�si�<��k�2�(|9P��� �TEM�J����F]�ŕˍw�;ʀ�BV�_��k=�`�/���"�T*��O��ֹ(A=�Q爕�"�YWr;"��������;����I�F՚���EF}���O�zc&� � �C�S�瞧�I���h��|��M�� qe;s���㘊 'r����(F?� ��� `Pnj�.�����ܥV�L�f�oƖ��~LA�����~
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ