Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
d5397a2d65be0e5b841a83ab125e5261_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d5397a2d65be0e5b841a83ab125e5261_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
d5397a2d65be0e5b841a83ab125e5261_JaffaCakes118
Size
7.4MB
MD5
d5397a2d65be0e5b841a83ab125e5261
SHA1
bf9eac1b1401272f518c4dc7118313be182da38b
SHA256
b80e6f779989ec7ed2965efb11e047ebe6eb3757b94051843dc2fcac139246e2
SHA512
082df8fc2c52fdfa8981891c905e23810003d46f284007f7765e46cd9c5752b322c85be34cfb65f78c56e7ad047e5b54cd8c88ab6275c516f679394511478436
SSDEEP
98304:smovMy0QL2BbvQI0h9RDMmSRaz94L9HcFR4lE6R2QO0ATU:lpymb4IOvMmA6R452jY
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
RaiseException
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
OleInitialize
SafeArrayCreate
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
�>"t ��I�0Hѩ�-H�ѵ���}��c;i�99����r ��J}<@,>��qC��чAF�N���p[.i���K�Y���dv�WhX#�j v��&^z�l[�J��]�o.��E�j�e疜jV������������ʂ"�l���r����<۲4Qdzf��d�����V�6t�Y~���`^�. ���Ũb#��+���0�H���Ȥ���,���Z��n��j��Y�#ą[C��'���oS�p O�E����^%�&�@C�ȁ��*a��>z�R�7���oi����ٮ�s�Q0AX9��M�s9v���?4���s=���}@�����. vH�&����(oE��e�����Չ��0e�'��D`�p4�g�R�5��;�/���*��J伣oj��U�<�*V�L�T�hz9ώ��)�?tb�,H��`t�7(��p�(b�������>�R��c�)B4��;�Db�k����%�#���&M���r���uR<����}d�q�yIq���:����6���mjB��|����*_���_�@:pf��Z]-�dں�_5�^`�v��J[m�m�˞~��h�MS�Bɐ_�٪���s�OE�����)���w=�N�t�j҆p�1�Bj�nM@��'m�ؓq)���hN��z �x�TBm�{<0y����0<�ҠU��6�W�I�EOU� wB��[������ܰZ%��"!�����]U���JJ0�~k�����,����'�*�L�v�4�.�p����4(��(?/�#��+N)- �1�}��yA W|���b�c��P������z��$�#¦#�$�Q��e��,��J�]i-1q�2",P恧�~l'+d{�N���z��Ɏ~����ƒf�}!� ��v�E|��t�n�̍�'HW)�:��� �,o6��d`�f���.�n���V@0�֪�>H��M�E.�R��T&_:!��ju�zK���j2�����%��a�u�40sM8�=d����m-����`��j���[ ���~��{�8�ۏ5��������N�T\��ו�z����E~�1�H�U�]�nRt��h������>s���'xj���ы�5�Q���!�Q8?�G�{�RZr>Gf��7 T�)�fNj��t�{��YqJ�wؖ:���Ϳyc�(����*&2����3$BH-��cc��f�`�N�";7^_k'�Gaշ헷�Ⱦ�!,�;�*+�� �/̜���L��=�L�"�����Xk���B��1��iM��R59�'WC�n�q<����M�/����̖�`0Z 4Α���-E�Ԓ�X�%!���&y4�5���3v�W��B���IjvYp42�N� ��kV1TC�Ө��tla���˾ �̫#T1l�q �7֡�9�9���� ��[~�co�j�H������ Y�f���F�~X����������Y_��0翋jy�i�e3��pn#�f�ڪȤ�O����ɗ�ի�f�p7qe}�@͝��~�*���4h��Ρ��R��^��廅���k��FJ�L�Yn`'m��5�����m���.�qjPǺ�,4�B����P�TS�W��.�� g�W7�h!'n��M���ע�8��0y�b�Æ��^Uh�c5��/q��ݥ����֊�:9��Ʈ��j�t���*N��a��&�����{�CL�ͫp}3v���8lDE�� �P����R��s��B���.���B�6>�o�(Ӄ��C��}�qpaޤ;�ۑ�:��2� g% ��z�q(s<��y#�v�L���7�E���g�q���dO�Sy�fx�l��F�L��P��?��VJwJL�LJ�f�y��]������D���|+qN��{�����N�vx�"XM''ޤ���lz��˥�+�[Pw��F��1����������Y����m�H�P��(�N��A�J���%Qh،���ݸ����S_��>�g-�Yy�k���Ľ��4Z�j�]�"ք DE��|���ľs�BOȗ��Z.�nY��s�g��b:RO[�y)`g�sRU�>f�f=�:g�ff� �I���E���+�A[؝|[���"��yx����CQ�=����8�/��&)�V�b���\��.n���mˑ`��R�|cq�X���!ol�vV.n����Nj ���aJA�V�潮lkJ_Ώ�A$��ӏ�떐��֩)=�z>\ <l�Bt���� U���"���o�2���m��f����;�p�S=\��-8�5��)��37������.�aZ���H�(�������A�7�1k�E�e��|�߸f�Z6T��Ծ�|YT{��O��e�u�@�m�<��;�(���)Z�<Z�fe뼛��s� ��]ʳd��ϗ������E �j�l�ǺG5���m_s�P�t� ���g�Su�ʑF?�?�sO�G�_��K^����$G4� F�$"�!���?M���(�@Qc��4*Ø�gc�50��}_|F�Re�{�}����0���#B�|QrB.É�纡��V�el)9�s6j�����b��T� �=�YDM*��H?�¿_��ˣ�B�Stκ/���v~y@F������H�g4�ߑ|;���(Vn|�/�w@�q{����\WmqAv�w���_|���sg=�EE�����q�ѷ,������������q�G;�Yɴ����.%<�i���^�����="�1k�p��G�\K�ø77H�I'ILJ�Gm-��������æ�>Q^Eܛ��xT%�K�ZkwkwXAb���{E ��]�M��� ���(%0�ҿ��z�I<#����DP�`Ǽ���c��ʋ+���6�W,jh���.4t��e� ����7a:\��7e� � �"�7�`�kX�6���U-L�2;��$,�<]�S���uۯ��C�g��aՀ7/��dʹ�2`Cx�Y�S��@��~��5'��F����X�ݬ��)2ʇ�HB��g��0�)��^6?WH���H�i����)w\b�:�x��zAL��E#�t;�i���Či�#��A,S�S�s�?q|4��_8�:�l�L�s��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ