Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
dd4f45465268ab0a77c30f24aef4a539_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd4f45465268ab0a77c30f24aef4a539_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
dd4f45465268ab0a77c30f24aef4a539_JaffaCakes118
Size
1.4MB
MD5
dd4f45465268ab0a77c30f24aef4a539
SHA1
059a04898c688f4ec88c7282f71bd69a02edf92e
SHA256
216189a9ae8555ca87b9a820f1ed048a609bd7c263f490be706f92d6abc08cb8
SHA512
caaa8258859b9c14e0478393ed998c548049f0b0da249f6ad60ccc566d2e90699e0f430c016765b87984e0fc8406cae087321f2fd48e8396ef1801ca339f1267
SSDEEP
24576:GhU4PfTsFJ+P8+oZNtOl3F9/Xa4ZGpC5tSkSPlSlneYHVhHhKDiKAt0Vh5KS66xo:GhU+fQiPBoHgle4CCnSfSBB1hgfM0Vh0
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetUserDefaultLCID
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetClientRect
OleUninitialize
SysStringLen
!��E��؎��rz�B�%ݭdH��0�9�.P��A��������swE���.3]��@o�;�?�������۔Z�9�yT�H=��tN[PeP���3'4���5[�]-�g3`����h�q��V5TPSሷ�� ��.΅�"�$����� m1���8���^U"8a�O�5:vũI�^�,_4�ך����o��#�'ƀ��"�N�%���ⱄ���~��ަ�F�1Q`���7tXI�)Q�Xvi��*A� #BCפ��IZ?�CX{�s�G=R�|t��Y��g��F�Y�>��F�N��pC���wNn����0c2��#y��q�uy;����2�:+���Z�aӛ�Qx����)�[F��x{��p�I������ԗ�Ƀ��̿�l�Ω%��9!��XC�(wA_P�7Q,�=1��v�[,b� �-v�$t�:�����J��6߽�;��b�4P~s;_�A�a�{�+Y�2��kf{k�zƴ��k���xL2h��%��RM��.�~��}���W5��� *ـ���a�K��_�B}͚ >"AY�.l�v"�g����<z��ȳK'�ӕ�uW݁��s�X����*Z�����c,�����fa����e3M^����On�5�sޫ�\T�w>d���=�LU,��Kt+�~��J��X>F��a�0ݴ4J��㔧>��{Q� ��Ρ ���+[�C�3�Yj�m��/3���o�QL{M�����f��IU�fz�S�M�o�XE�/XDi��L�Azh�A�*�Fi����7��K�"�lLk�L7��k�a12�Ձ��ᙻ�o;WҔ��G�Y Q�]`�%~���e�Kv��x���h ����� dtvzM�`�G��<�pʤ�1�ul'���� CG�6� ~V� ���M��T�4l�!��B"\��.1����hAeݤd�Bkұa�D9��`č]ӏ�tx�]��?�mz�����w|����y����՛c]��%���d�WVp�6�2%H�r,���I��X�����r�*��ϋ�'�)G����luk�5պ>�m9�XK�����y�K�s�xB�PБr>އ�Q��+F1v@ ����K��h/�� �!db���5����}.S�@��������ק��5��83 �"��*�qu�����# ��N��*�/���$|���U�H��z��b�Ų�$��{3�U��B�H�cxm����!�h�x�* ����ztP�q�,�>Vu+r0M�T�|����^��&*!���y�`� ���%�;�µ]��Z���+g:B�� �́�C��O`��S�/�"�˱���T�� !�Jb�s��3`Ԭ�P���d��Hk�!T��3҈�N���g�e�]��� ���7.>�E���) WNto���]]ڑRr�Ƹ���Y��>��1D�����xg>����j �r�};��n�@n��h=���O�#�g��r��Mx�����l�0�=%���.Wet�YSFJ���Tyõ���뀱s4$�"�M�q�4�y�x U��qm�FE.0Ⱦ���>��0؎�4����q�{�%�#M�����8���|�,z*I�Zb�2��l����t��~��)>�>n%�#�(�%v|��y3NJ�+�Q��Q�,��%��5��Y`vNv��[K ��ΰe������܄�kE���ѕ��3���r:���;�zn�nQL>5�<t���l���S��6\u�߽�r���7`lĂ�w|�iv���*��U8�����Ue��S�u��«h�J�j�W� �ΖI�8��fY�i���!N�w�V]1n�I��0��5���yH�$�+�]:��ݭ�n~�g�����������{:��r�b��A�d�X{���ը����w��">z��=b�[��@�?Y��fС�Ў�H��p���3����^#6��V8-��mgpf��0Ɖ�A��e�1M�~�,V�Ǩ_N�Z鴇)�~N�&��Ԅ�~d�K��֒�:-�4��0��d:;�T���T�s�F�7�%J��H��%�X���o���'��!����V��t_� ���W}�g�Pl��Q�Fw��,bWj��&¾��T�S�߾��Z�CU^T��Wfɻ��h�l�\��b�!����*�ee?oJ�;���K85���s�&����:+����ѡ��q�~L {����Wa�q[�\]�� ��֤��Շ����J����3)��=�1�̔Ȯh/���$h{�> �HMw��ݟlgS�=����5��@X��l�u�g�=���d ��V[�ƅ�û��l�$�G��R,�4�x����C��һyꛨ-��ַH����IK�Ӣ��ӷ;��$���E��۪��;:��@0�V|����C��K(��)�r^������*�B�_�-� �����C�)�an�䈁`������ki�'�����}Uo̕��r��ѹ�خ���ܬ��`�1�B�ڒ�@�&�S�Oӑ�҂��w��W���6�S|���]�ǡ�bF�e'� g�j�}�܋�"�$+E��\�y�3�Ô���Y��# ��F���$��Y�b@��%�}!�fbTצ�U�ݓ�e�&�{�:b8�^�A� `}�n)Т�B�l�Կ0�š�[��Q9�Vee��"K���2l��Ӝ�����eҝ����|�ZF��ǃ�d�K�0��C�J��bB[;'4�}��3䇒�����i�N������Dlrtt����]sx�2g�\xF����J�8/c`�a�p��v�"+��blkK����,h^�K��Z�-�2KK#.�q�7����Zj/tb���/c�������%�(�tج&Q6�t~h7���K��rW��&��uG�Ɖ�i�#��l��K��E{�;�-.),@d3���;��̸1|-ʰ������Ʒ���v�F0���y]/!�`��4��E�T��!*�H���.t�}��|��!�,�f�P��T�0�|��Zr��w�U}��M���#\VT}o,�M�*�b������u��J�B'sY��{�d��3Ë�9?b������6H��*�� ���1�%�٩T4d�W
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ