Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
dd86c56aa89f54a6cace024b52661747_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd86c56aa89f54a6cace024b52661747_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
dd86c56aa89f54a6cace024b52661747_JaffaCakes118
Size
694KB
MD5
dd86c56aa89f54a6cace024b52661747
SHA1
fdbaa897e93fc66d68fc1dfa29c8bfdb70ae888f
SHA256
168ebc4bdddb06159387fb60eef1b79e18e85cfbf696d6d40aa1cc3315377c10
SHA512
89f35fbcadd83a3cbf1bbff2f39ef372b436821de82889b2034c971d019c20d3337d0b82df6c28658e61b10ba0b28354a628b82fb6d5a9519c2fd65380f6806f
SSDEEP
12288:fF0IoIh/1UJ/WJ/o1UXwLzEJ3JHr/giH708:ToY1o4/oOXN3JHDb08
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PathUndecorateW
SHRegCreateUSKeyA
StrCSpnA
UrlUnescapeW
PathIsFileSpecW
PathGetArgsW
StrRetToStrW
SHSetValueW
StrNCatW
PathRemoveBlanksA
UrlCompareA
PathIsDirectoryW
PathIsContentTypeA
StrToIntW
CoRevokeMallocSpy
CoFileTimeNow
IsEqualGUID
StgOpenPropStg
OleQueryCreateFromData
ChooseColorW
ChooseFontW
ReplaceTextA
PrintDlgExA
WantArrows
LoadAlterBitmap
ChooseFontA
FindTextW
SafeArrayAllocDescriptorEx
VarCyInt
VarR4FromUI4
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDList
SHPathPrepareForWriteA
StrRChrW
StrRChrA
ShellExecuteEx
SHGetPathFromIDListW
PrintersGetCommand_RunDLLA
SHFreeNameMappings
DocumentPropertiesW
QueryRemoteFonts
QueryColorProfile
DeletePortA
WaitForPrinterChange
FlushPrinter
DeviceMode
PerfCollect
EnumJobsA
PerfOpen
GetSpoolFileHandle
AbortPrinter
DeletePrinterIC
SetPortW
WmiQueryAllDataMultipleW
TreeResetNamedSecurityInfoA
SaferiChangeRegistryScope
GetTrusteeFormA
LsaQueryTrustedDomainInfoByName
CryptEnumProvidersW
CredUnmarshalCredentialW
CryptHashData
LsaSetInformationPolicy
StartTraceA
LsaGetSystemAccessAccount
GetServiceKeyNameW
RegEnumValueW
RegisterEventSourceA
WmiQueryAllDataA
GdiStartPageEMF
GetCharWidthI
GdiConvertPalette
STROBJ_bEnumPositionsOnly
GetTextCharsetInfo
CreateMetaFileA
GetTextExtentExPointW
FlattenPath
GetTextExtentPointA
EnumFontFamiliesA
GetFontLanguageInfo
GetEUDCTimeStampExW
ExtEscape
PtVisible
MaskBlt
CopyMetaFileW
GetCharWidthA
UnrealizeObject
GetPixel
CreateDCA
GetClipRgn
EngDeleteSurface
VerFindFileA
VerQueryValueA
VerLanguageNameA
VerLanguageNameW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileW
VerQueryValueW
VerInstallFileA
WTSSendMessageA
WTSLogoffSession
WTSUnRegisterSessionNotification
WTSSetSessionInformationA
WTSRegisterSessionNotification
WTSEnumerateServersW
WTSEnumerateServersA
WTSOpenServerA
WTSEnumerateProcessesA
WTSShutdownSystem
WTSCloseServer
WTSVirtualChannelPurgeInput
WSARecvFrom
WSACloseEvent
shutdown
WSCUnInstallNameSpace
WSCUpdateProvider
WSALookupServiceNextW
WSANSPIoctl
WSAUnhookBlockingHook
WSACancelBlockingCall
WSAGetLastError
getaddrinfo
WSCDeinstallProvider
socket
WSAEnumProtocolsW
getservbyname
WSAEnumNameSpaceProvidersA
gethostname
WSAGetServiceClassInfoW
getsockname
getnameinfo
GetEffectiveClientRect
ImageList_Destroy
LBItemFromPt
FlatSB_ShowScrollBar
ImageList_SetIconSize
ImageList_GetIcon
ImageList_Create
UninitializeFlatSB
ImageList_LoadImage
CreateToolbarEx
PropertySheetW
MenuHelp
ImageList_GetImageRect
ImageList_Read
ImageList_SetFlags
InitializeFlatSB
ImageList_DragEnter
ImageList_Duplicate
CreateToolhelp32Snapshot
AssignProcessToJobObject
GetVersion
LoadLibraryExA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
�����X�Jz�ƚh�`ON�bTl;dw��ߊf���M���6���Ű��"�z>�i=��]�U���ukDwn�}�J0J�o� [��g����&v�{a�'��h%��l�\� I���_��&���~����}�mX:���q���5��� ���Ӛ*HS�� �1ܢB����3A�!�#�\Jr\̼ϒ���Mk�ړ�E���H�|���H6]6�>���St��G�P8d�������`�T�#Pb�?Z����0+�����l���?X�v���}����^��U��X�2;.Uo�V.� !�B��*]y��pY��L��Ki�>�?��F]�L3o<����i9��A#d8��(µ|�\���� +'��v��\1F��#1&��M�M䝴���P��W���-�p��j�]2�����А��A��JJT2�\Wy�V����"�J��Y����:q�Kh���[�t�=��$�9 ^��M�����B�%ͱ�N���3��%McʹVאͮ2"/�y~��H�����)����8�B1���9�i+��}���y���j��m�{����Ba��Xx�����2<I� s<C���/��CC���RB��j���O���}o��$r�^��������焄��B��L�.�v:�D���t�z3�(� ���n�|������d_T��2;�E��FO�pk���̣���I NڷE��w?j�S�Ri�����{���~O< ���2-�n��Y�A�#nu��i9S`�(^y���ꅪ�=aqӍ�I�Uz��^ �`�� ?O����!�R�_�e;�')M�kk&[^���a��r+HM�N�H��+ȼ,�#��l��~�'�F�u�|>�[/�9�9�:yr+��Q}���BѨ��a�O���%�䍑z� ��A��N�xA]�"9bjIL0�l��j'aє��b�~������ǜD�i5�k�D�����P�V�Α�S@�;:j�W�����'��F����\��r�(2���i]�F�Ō����{�[��?wgV���� ӗ"Ȟ]v�Al0��Л��^�� $;��1�h:��S}-R������������ ���}�t�͋�1Ej�̯ ٢��e�;��|�"��n�Ɠ�i��qJ��U�^��K��vX�ܝ���U��Y`!�V���zK�X~�2.�;�x��ǹ� ;2��^Nҁ���!/j�_Y?9L�ygg�זBҠAk[�.�ru-��4�sf����8$������7�D�ߺ��e�u��D���-G�+ݨ� 0r(��7^��®/�c\�Lvz���o����4�^}�F��a�GD0V�'���V(�-6����k��w���!YAn&�T��������bpjҧkP�fU}Mq��]�r'���eS-^Ud�P��C��s�d-Ĩm@o�^>g���H�JI" ��A������~�@m���4���&�o��P�G �$2'��%@A\���l�jC��W>�T�ӊ9u�C!�V�%�@��+�x���yO�z���V&�L�����o=�����s�u�Q.#���p/��D���8\-�jh�.9�WT�@�-=?������'�����o"daZ� �s�.�:lx���x:�Ӏ��m��,��1��EC3����k��?�@VOWӖ��t� ��2i����3�]ϖ��u��Ri��}d����[d�sKu�HhGA.���5̦�g0��{���@!B��rǶ�(����&A9Ė)�1�|�@��Ў���c2��Xp���/�F��nH5�T�����3����*��N����(��N/(��=�F��m�#Ս�OUCqڣ#�"T�d��]�"�I2>�� �����|P�V��4��/��&K�I!�Q"Yɢ{�~w�r�Y�9��l���f5(��9��8#<��Q��` �:�$V�A�I ���~o�}��H�1E?�����r)��nu��ĩ�j ,ZŭsQ���q�55�Ұk>�;Bl��V<����q��Ĥ��BWTp��_#>�ʬ}�I��)^N���ˣ=���\T4m�^�k�Ƿ�QbyN�/"S���3a9��W��#��Ic����yz}�%kD�:�^�[��vI��/��O@�ι �k�ŷE�>��U���g���)���#7��ac�5��\��=U�X?Œ�g��̴]��N�Q�t��ی0��f ��L����}Hh�]Co#��Wa�%�V�t�G��^��94���)��j�(�� s>M�ߺ��'���� ��Sg�=�Q��5l��OX�c\��Y'뉟8�UY+q�w�>�Ԟhm��~3��^�o��n�p����~�N;���^�������*T�.�2{������z����ڻP�E��T���&d|�q�X�N�,M^M�8�dU��a@(��f�����-.�[Ƈ�)��HJy�5��#���~��Y3+�l2����m:�_���ŀOZx9H��A�'��r��|ɞ(n��HKr��8#��_˶Ҕ��x.�,R�E�'Z\�:��쪞e�H{���a�y6��@� ��!��H�f�.�t?�����Hn}}��Z�v��� 5Mv�F�8�_w�sR>��根��� ��%)�-��gvm@'B��0Z`�=��fV����OϬ��<;߆z����I��|M�4�8�T�Hw��>��ج��¸��\d\^c���\�ޢ~]��O7�+�#��Ͻ���%��� b-�9��;�VBEp����z0����]7�9B%�����[���;0�)����ۣ^?���h� ��S���q�$+)��-J`K.{� ����8j96��Zf ��k�����L��Z��k[Ly5�bt(B��R�� .�G��8Oա�-ivE�/� o�t+�d��49KsL0�G�/+B���/���H�G��'�T<�h�����<�7#��q��D϶���RZ�Zyc���[�(���3���XIe�!c�\��z �a���S?�`�xeѷ�t��ֱͼ�Z�屽|��Y�s�:_�����e����N�����^L(_�Y��=l%���P���\?�=��}�^ү�fQ��r�b+Mɱ��kT��^�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ