Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
d72bf81959d8dc93a0a7177a4d99a22b_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d72bf81959d8dc93a0a7177a4d99a22b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
d72bf81959d8dc93a0a7177a4d99a22b_JaffaCakes118
Size
9.5MB
MD5
d72bf81959d8dc93a0a7177a4d99a22b
SHA1
8f665d31a7c5006d390ed61b8aa0df3fc86fc18c
SHA256
500f90ba8d4c837f24db88d0bf18a01bbb3cc10eafddcb58a281f285c7710dcb
SHA512
7d8757fd7e44bdb186c24e8dac3418bfe16dc3599b07115f454d5ea505684b29561a91571ebf4f17ed79ce12de75d474b1b4e10dc34aa5eec856975a3205ca2d
SSDEEP
196608:ncuUZoGQEf7xYSYluXleGfT4lpovOXvA+iGQQtWt6srr6NBV9nX9:ncLnQEflXYlu1eZlpKOo+iGQR6YaV9nN
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CryptReleaseContext
accept
CertFreeCertificateContext
ord46
FlushFileBuffers
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
CharNextW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
CoTaskMemAlloc
VarUI4FromStr
PathFindFileNameW
HttpSendRequestW
WTSSendMessageW
H?G�#�L���<0��F��)u ��ب�" \D��4��1��Dž��C��yϽѫ����X�u���q�&��CV-�Y�9�,�㥭[Ĥ�\��j�I[�_p�p'��1��)�Y�<O�X}uF!�&B���aēa��x�=a���('��E�V�|�\u2��)�A���G�/��������6&O��ɝ0�&j[g�������z9�z�H��A���p�0O7eTN�^0���at�23 }{w�8i��U�!� KC4�p���FE�GyC璜����~��|fI��M��fQ���o��/�F�Mi�K�m��I3�|Pw���������_��: LP�e쵬�?�(&�ì�u���H�.zF2� �A�z��Ky��'��l�ѓM�����.�K�h�h�y�!�`C��(E&V�34�aʑ��ql0�� ZX��X�kdW<n�v����1��H����ʙ��d��m�o��ګ���T�.���~����|MI�Λ�;[%hT[�,�7��W��1�u$� �d��ˈ��?m����Gb����_��>��e��R�P�V"˖_[�Q�3�Q�>b��I.Ziӗ�Pep��i�tY��7�?���ڛ�l���Ӆj�2��$��D}2O籾���v�DZ��1��É�om~����E�OSTl�A-+��� S=��)��h@�.� ���U��4I)�1�d���OO)���ۅU���M����m�̙��<���%?P�k'e�����E:O�g)X��*덀��$R�قb��-���K]�� ת�]�|���m�O�9�fZ����A�kK:���+�l��G��93w����;D�Z��� �#C�V���x'�"�(��2}�t9�謅P�����<���㋅��4)�♟����G�E��Ӈ�7r����wp��݇��ٳ:$�n��g1Ve��p�@�@��|#udJ�Y��9ڀ��\���+����Z��G�Iϖ:fŃ�7�T^����G�T2#2��eqpں�Y�`5B���C*{9�����]��I���X��c�^t}��qA���/�Mls$!�%�Ӯ����K���#^�]��4�T0ƾ3�T��H0i��gI�!<Fd%jNw��� �}D���'��'jIdK��X9Aѩ�/��A_�������/�e헡CWD�t����þA{k�{-�����;5��z��BK���>é��*'w�icG)��Λ%�|[J�|�g�D �+�����K����:���h������T~�τ������΅�|"����R���Ե�n�pYC�c�N�=l۱�p���� �n���!���,g��'��q-��7D�i}|��S/�Y�\��o����ߥ�0A^ä�v$��y�9��[ R�*T[�����W���$�>� �'6C]LL�DvW�.�Ԇz���?B������8��4��[э����x���A�m�ӭ�uO�P$Х�`�F�;�sf�(ѫ��SO�>\��L��t���K�| �2]ɟ�s���49�6:*)���v�����C� D�zO`�'�2Gk.���b�����Z��0SM�� ��\|��;A�*��:s\�ۡ� '�ƭ�IV��C� ҇��J���5qPCq+oL�JJXcUtߋ��$�Ct]����D��C�nc么u��ۜ�W(�˔&�0M/xoj�X7i�����rx���o�s8����t�_ִ��J�@���ycgKcZLrقp꼫�(2��(��ׄctcq6ٝ`<�4?HNox?����%L���@T�W�LC8g*`s�����Q��/�@����0'�U�>ͻ䇕ʒ����@����B�z��=�����V� Okz����I������fu���蹇sVoI}SQ����Y��)ʻ�$(RX������hZ]c��?f|X�� ;T���H&�ͱ�u4���Hʵ�q�a'��c�����������$g�luY���Jh��c�a�� ����� /G��j����чU_� �9��-�i|�����w�k����P'�f!1z��/��D�����B�f��.����̌,�ԃ_�����_oҏ�u��a7���11���9@s����u�F�V����5���[���1K���'sѽJX�y��Λj�N�cWڪ���-�s�>���L�O#��H�f�i��G�/}�}�����n6չ����|�O�7� E�kڧ��C�1Q�]ɂ�\g�;Z�i���w�I��hC���i�L�!D3�\aQ�RѺ���d�.L��40-�A�N?�eztZs%��[x���t����bz@o����Z'�#�j�g�Ze'>B�n�K>�/h��y�1�TX? o�R�D�Z�<|�5 q�p9����8�~�P܋�\��(�9#�K+�2�Ѓ����d��R;$`�ȳ��-�>�SG�y&��:�:lOW�V�a�ڰ1i��O����p낆�ed���X����F!�:t}����(�=E��99T}u=���m]�ӓ�$��R ÙT����Ǻ ߠ#|����Q����,+'n"�g��斵�E9�_Z���H��'V-z��d�#Ȓ���9ģ@B���v������p�{nz�<��r� 6��#��p3-)�6����z��~~��2�������K���VͺkZ�t G�j�w����X9L�x���K���{��w��خ ��{��0���� XLJ[���TOGqU�8\bx���a!�J,(���C���kV�D�6tuP��C7�nU��V��:>>����6�߈��y�Y��?�i�r����a^��� ��31K���O�햬zap���8�ׇ��. �?��1Iތ`҈I����u�W�wCu$vb�ԝLJf�$���+%����9Y�p t�+�I�4y| �UU��%�L��T���B�XM"^8���-� ��U�d"�c��$�����h!k�����_S �wKpo��'�[���q�y��۠xCW�r0ٿ�\�h��sL��,dOLi����|�&¦�Bo�~��} א��gi��\�+W7
AlphaBlend
PostExp
SetCustomProxyExp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ