Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
d9d2c0b7e0a57368ba12cb8647dd6085_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d9d2c0b7e0a57368ba12cb8647dd6085_JaffaCakes118.exe
Resource
win10v2004-20240910-en
Target
d9d2c0b7e0a57368ba12cb8647dd6085_JaffaCakes118
Size
543KB
MD5
d9d2c0b7e0a57368ba12cb8647dd6085
SHA1
d5fa1f46d5b5b1aafe260d66666b96d2c82f429f
SHA256
b10621fc52963f3018a5e9b084c37a837c3120f57ba33db6e246575cb1c0cfb2
SHA512
5a4b1e6ad677b1aab74681541de414ade3d3026f7b0c70b6fffab267176b63acf337fe8ae994140e8aa530712a73708ab00990e9a22651e11cad71d020ac60cc
SSDEEP
12288:KGrqNTd7xWlpdSFJcU+5Kys5ApySWrcRHI2N+GEdFSw3/7XREK/Du+s:KGqTdYcFmUmVs5Av8cRHI0EdRP7XzSR
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DeleteCriticalSection
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
GetKeyboardType
MessageBoxA
RegQueryValueExA
SysFreeString
UnrealizeObject
ImageList_SetIconSize
ShellExecuteA
InternetReadFile
gethostname
WSACleanup
waveInUnprepareHeader
DrawDibDraw
����|P�h��6(=C��/r=���}Ϣ<��/<�3���g�x�0{ �ς�(Es�H�D�f�w9�I�\h�iĹF� ń��ۺ�v��7��00�ăUU��~Dq�P�2Cdy�C�̎��z؍$o}�9�(��/B��|n��Igc��!{�`��J��|��)]�=� �8��}�����jG�����f�ǧGe���u�5ܙ��=Ȕ%s:D)�$Nv/�UZv�'��(�V�#�-��ƞ*x�jӶ������[x���!:������M��6#>��Ͷ1۔(ʏ�pj"�>�Td^'�7\�L.IC��л�U_���Nl'p9�ƞ5���$H���,�ėo�$�9����K�+j3��I�ъ�H��D�,�˙ I����=�nyV�Ƀ� x�6�5�:�F�1'�����/)�R�`���q~�(����$�"�ΑW���:��^=!�N귫%��I��=��l�r#�����U������5��j�6n�k/4�U; S�¾�� ߗ���fg)���nj�Ϲ�'�w8%�O<M}����߅�>�Sh�w�,�"����a ���5��cZ�OP 3��r DV���ƕ2�kx�2J{) jf�6�|�l�&�ݢ\se��Pvb�f=�< @���!,�]�O�%?41+�C�M �2J䧷V)>���f�_�����jF�u ��6%#pt@I�S�Ֆ����[email protected]\���$�Z���j�*�ڰ�_�rxتS��Y%&;��Q|�aL/p�����m��hO����xN�Q'<��פ�ť���l]4c`V��y�@�z���� ���Ї�*'�ؑ��~�-p���>Z�5����%4uᤢ��-PN�r��<�M�����y��M�3Y����� 2�_��s�� ү4��� }�Q��=xf��9���[�I�d�f���L�����9�� ��:Q�ݻM��������d��*��8��e����/%~aTa� �ڟ�eX�c��a\d�.��k�����gN��t����UD����/��I�w~��.�0w� E2/`>gbY����㵉=�> ��ʤ����Ŗ� ���'��x���� Tĩw1<{��<>һ�QUE0�z�0x_ P��f-aI'�V���#��B�jMcS���h>�{����H��c��+��W��&=I=�C�7LJ������dGL��H[��~�r/�fVx���e�d=�g�/�Z������J���c��rVW t4-W�^��l�2�oxj=-�1��1߾�d%X�fo�4�⛙��� a`�q��y���n�T�Y2�I:��ݠ �,��^`������I,��Z�k�c��IK����Y��e)^,����b��M�/�(�z�911�1�W[0��'9����A2����߲�p�}��Xx���v�n����o���e��(�E}��ha��~��ROK��R�v�� )��緆��Um32O#!8�<� /BwV�~�$�<_����?|U�%7��r%��l�ʳ �C0)�� d�`�z�*��lT��A����^��$wp=����s���<Gνʏm�7�nY�8Z7��v�5��Y��9RmD�3�)k��>���5i�>d�+�T�'v��2,<���1X�\s>�*y�uB�+��F����$����NE���l����n�����BV�A���W����2PM=-2=���� ?n,�Ԍ��� ߈��0��M����G�"�2 (�s�@����H������Â��G���-��Ac�M����.����{*bQ�f/�5v�]it�k��Oiq�[桠��]Ȑ9zC������ڻ��n������ӷ����")��9���չk㽴P���u6�뽑���륊�'��"�6�!0`$�y(-�M�?V���k�l�Ep��>4��^�h6bO�|��w�@)�.5��jy���Xͱo��/��H�o��*�,�R��e����I��G�K���?�D�:C/�Ra[w@~h�����U�ʫ<Po<!0�1d����Ѿ뾮]�P�U$��\���fS�tx��Q�\ȄC ̏�!�!��]�'�>���f�{f��M��$7 R<s#.�IU�#*���w~�����GN��6�oqh�Q���(�Չs0��j܀(�.�cA�&�.����T@+=��x�k^��>��koL���?_G�HĎ�|ʻ���k����t�T�eY6� ����Kk�K��w�� �`�����pveDu鈞%)A�>\[�u��b|W��[#�a��٥T���x��X"A+&����,����탾"ȕ���`�`� ���>A�U������'o��Gcƹ���ٖ̙Ȃ~�a�8B�M �����T��d��5bc�5�,��M�$ ��l���=zUD1�l�6�n���)������?��V]K���,��gP:dp����Y��k�����§���c�y�l���'�ԩ:��Πn��K��ָ3e8�L� ��%������o�x�\�?�,W�0��>���OCNl��� Ύ�B�yk�9��f��74��>��x��]�']ϛ��� i���=�_"w^`툇< ���3%"��O�֞��;,��y�P��g`U.x�����.����z?�Ѕ'b����5��\��D����:����0��U� 9��[B���JKN-��1Fv~�+�6��UB5Ԩ�� �(�R�ϲ�0`���Iz�GR=��pP�)��%�4�����E#���,&/�.-gdD�&�J����ś���e ��9���*��yר=%iG��~�{E�\�Sz��"��W��VN�?b����0K8�����w������&����N�bs���FZ���i��/�e��H������O ��� �nH��[C"<j<�Lv��o4�������$)0�)�|��y ��ަ0Ъ��fw�ES��:H_�����t`����ۯT&1 ���Aee����g�톇�\J�WF,���y�*<��"F9�9EV,�[^���q��FڲO�+߲Թv�]P�����N��nQ�"�R�6R\t��xh��$i���I��9�q�A3��������
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ