Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
d493664a55da0fa46698bb49b862286a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d493664a55da0fa46698bb49b862286a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
d493664a55da0fa46698bb49b862286a_JaffaCakes118
Size
1.5MB
MD5
d493664a55da0fa46698bb49b862286a
SHA1
db65c2454c67a2d5067849924c484ee9b802679e
SHA256
246ca057069ce5d05a68f00670b50a428a3df316c06572821a06e8cd195b68ac
SHA512
79381e90a3ba1cbe69f6389fd76c7b659f17922c47954592de73aad33d8de5ca2bef3e2be14c582fc6362f97d5d59c03f5f4faafb144bdfdabb08caff7012952
SSDEEP
24576:VoA+YKz8JpEJWXTz0x4h+AEWdjOFsWGelOFXo8LaVy8yHujnGWK4NCkJMmrkfHzn:+Av7rXXoAEWdKFsDelijaDyH4K4NCEkD
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetOEMCP
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
PostQuitMessage
OleInitialize
SysStringLen
�Ƿ1O�AU�Ќ� ����{�{�=c%r�Q�Q��%i]�[��g����%��'o�b�]�9rJN%H�}E�!f�W����P3z��L��:L�ХOd����1v�J`��"o�G�e@��'�P�Λ��0hj6����d]U_��(��вo1����Gr>���r}����(��C��aO��Z�C���^������˫�B>z�����Oו�S��R����mK�4�n�a�NjGL �Q`��N{���&kɲv��QD�$|����oE���W�q ρ���-5��|)���ܥ23�a�sp��%|�BTk|L�|r����ʧ�%�f����R�sX��G�FS��=�'}:��|���ӭ�L�S�Է���,?@q`�+�VF�.ɨ�R���:r ���p�|�pV����,u�<����[6��+�f a�ه{V�dy��2��c<����6ϩ���Q���-;?X��p�r������kQ�kLd�貜_��e� P&?Z�@������g��%Q~�J� \ס��⅟�V��gf�XsB3FME����=��V g�I�Fd(9}1PL���WVݔ'���4��?�(��M"�?�Z�e����v+��\��4��HL�lji Y��h���J�xZ�7h���SεlCNq�Jؼ4<D��y�K/r]ےBGj�%F��!; ����wQ��_��x����9Y���Ђ��MC�Kۣ�pߘg��$p���,{�r���Y�z{֫� YZ�X�x������E�a��G#:�QJ:�t��1ۇ�K���(�z��Nuh�{��ݿ�7������Z@�:���y������� �c����1��_"�����J��>�v˘F�B�=����MU۬Q� e���ˮ<>)���[<����Ϙ9ٶ� �� �1� S(�z���P�� �sA�����g��A������&7�p憉�|W��r �XO����2���V�i�eU^�0��`!k!���辔��A#b�PA���A�u��<��q�:HL�BE��v��]�Sr0<{a����4ʃV�����C�N��SO�YX!�&��\�1���ˡU����]���0?D�i T��!��j� ���?�;{G��[����%�Y��D�k���e��H�0�v���u�r���G�ʇ#��#N��>�4H�m3m���tNou�F�FM�W;D���B�)� �Uה6�,�c�r-u�OS��<mv|G\Z$���Y`Ci1~Ħ;�Mb��]��J.�'5�@���1��<K��*D,���P�Fg]OB��0���٢��pMy�\SMb�-��.�,�0Z���*?z�a�Tj1ކ��h��&+.��߅f���}~��)wz�́^�Q���\�2R^�dC��ӄ�!gJ&jo�:ٱ���=�Y�C7r�c��D��ƍ�S_3;Y�Xy17�\;9�Py -N����>o�o1(�4/������#�Dn=���s���A_p����D�tz�2�ޫ�U-�Z��I=2J/��"i�<����E�����5��5��~�6?��Iz�e���X@e��J�{���B���-'��B��E/[�������E���X�n�-�ri�K��Ǚ�R�ly�/IT�N�-��hX���8�,��Qִ�[/��l3���o��7́���oE �P�a��S��N��>V��1��]@L�aYv'.-���ͩ��;S�{�qѿ��,�E`�'�!�.~��e�oZ�ʵŖ��캺���"*�pcq�e��LV5̈́��ɀ��Z�*f躓��|b��8o�>�/ց�.�GZ�U}225v�Ѽ�&e�I�����Ħ1,y~�1zF���N����V��0q��c� S��4�ɢ����Jh����=r���5H�1[�d����@C��z%�T��)Y!�&����N�����&6�\Q�W�+mm�_bp"��jȞo��u�����I�1=>�E)/�QwJq(;r�[�����e�+�@�����D����h$ϓ��, ��(Ba��+�{��,i.л���3���b��[�h�ҽ�/�m���J�UGs�iq�KB;�.��"uL�d��/��4mapz�_�J�fm�{���L��l �c2�}�j����k�b�����{߱��);c�SXA��n>�'�;�S����b�����~5��ot<��ӧ�H��h�>: lŏ͖%\nu}בd=n���G��2cz��-Q��7X��]7k[�B�S����s���g�N��y}���h^wh�g*�/1���<kR�'b�*4wyM�n:�{:�N!�D[SQ?�ɮ�@X��@�<ź�X~�3W8*҄d_vY��3�~��C$V�0yuM�!�3��e���է��: �%]�`��@Е�@�t�oW��= ����;���[?K��`Y�� i胤��Ѐ RvH2���k^��n�G4�bSyK �e%7��� [�W<�����B�0��؋!�yK�c�>�m%�*��Jh�x��?��h�ѵ�z���n���g�$�֚�l�`d�[���3A���O��aP�`Y�D�� RTX����)�ZX����T�c�wz�b��b���Q����"���UI��� ��mND�C�5��co���Zb>gyX�`�% ��\<oL����| �g���2O���CҨ�"���я������q�v�?��a�'*l������}�2P����f8�_w���{g���U�賢@�ْ��m|oy4��i!e{?B�X%����-yP8���B�>xBu���h����{�E �x��#Z>�C'�'C:����uZ:�闏�UG���@�>I h�kz�m��D�;��2I���y���J)�O��U.����r���u_��B�(=H��_Ӿ7.Bxm�1lj��4��u�� ,�3&o�H�P�`1� n)#r�����"�z��:������*�k����uwN{ENۉ)�]������i)a�n��-����7�b�N����E,���s��_�9�mm��2�ZKx��[ԈzUI�]h�&�!`�6�Y>D\�QY�+��ǧ�C%D �R����w���¿m��mڪ�[�r�Q%���GZ��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ