Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
ddfdb183539ad81c5cb3959df09e259e_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddfdb183539ad81c5cb3959df09e259e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
ddfdb183539ad81c5cb3959df09e259e_JaffaCakes118
Size
1.5MB
MD5
ddfdb183539ad81c5cb3959df09e259e
SHA1
8d229501ee027585029f4b2ef4054136a42ff8cb
SHA256
147a01a33486cae661078b77013f1979b77b799b6eda422f74fc475919ad0e92
SHA512
ba8954baae4df99bffdf34cafda5b0ccf70492cee8343e3b39f3484639d4a3e7d023681045247b0c9c29790120201fa5bfb2c44aa0b527aa722861ce6c1318db
SSDEEP
24576:kZwvQ+Ob1wKY9a3u+6R+CMSdpH5Y9duPjXQ2fwKXzKyG85C6A087JzEZlC/GoA+l:sv+Ob1YAA22b6KDKJ3zEYG+xyKX
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
FlushFileBuffers
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CreateWindowExW
CoInitialize
VariantClear
iu��9ח24_fTp.=��-/�f��/Taae�f^�Wۍ��������G�� -/<�JRq �;u��� y�T���z�)�ʌ��&�,C!x۱*��d #�䝡sɺ�T��?Կ踥 5��3ʻR�q���}e�\P�)&O ǧ(v��j.��~�~�I0��ug��M�r�?f K�kN�9E> ����V^� ��M~���&$M�@����I�� ��ޜQY����0�2ek'���z\Y���'c�=��Dis�����\�*�Z���������m�1�']jf�g�=�1}���'x)��7�D�î����ivN����F/p+ ��dL�}�i����O �ִ�:���m���HA.,X�F�eM�GC�5�^�������C���B��=������\����>k�i{>i�l W�\o���\��+�ڶ� ��[4 |�R��s���% dԶek<�3L|Y�4T�bt{]~�2��&��\�t�:��uj���q��t^RV=X�����5MIT B��oF�����^�$��6#- �u�z]��g�t³�`��qS�AsV;���Aa�Q2�L�^Sh0��\Y�VR3����0(��a�]�X=|ȹS�ݤpZ~�t):�Ž�q��@��c= x�ϴ���4�=tv�����_U�/����Y��E=���X�҅yM�v3Lh�(\B6��þvة�����a��ǐ��q����s�SY�v>���R1�Ծ] m��6��.1� �P��S[��{��V����D�=����{z����h���a�>��\�fD��)��;߱d����+�:�MP�q�<߆�R���\�\��z�����p>y%?�6Ǝ�1������<���i��j ��@��*�?�*�"��b*紡�WվGQ�)�������A�(v&X��]��>�]��3�,�#!����G~j!F�at��`�w�m.+�;50�}Y��s0�+���y��͕�_t˼�Y����֯����������Y�#��+J>��پ�hj�����f@���A����(���A#����Pp6�[��%�d}mXMe��UM!��$��q�|e�\q��l���)olm��C���@~<O ����OZKֳ�K�GҰV)9����5G Z���Y|]�Fh-p��Jd�����/M\a7�伬��܇��F�ӌo����g��Լ� :�sH���6)!&�r�D'�Cj�4�G�%L����L��^f���i5Ro[g?�@����#x��� �^b� �6X�LPD����"��K�z���x6~C� \���ˎ���o�/�3V�H;)���mr��ѕE;`�a�k�_�/�o��8�E�y�-����Q��|�s�/����`qL{�3>N�Ø�+��yǶ�Z�3%u����8� ş�U��kݪ�4_N\y����b�!e"�$E�I�h��5[�~>�M���[7�ۤ$��ci'K�[ n���ߪ^��> �E�)����ƛ���/=cn��4�.�����y���8L�i�;�Erߍ���=���,�g�l�jNfR���nh ����.���֤�ߨ ��E<�6 ���9`:fX��l/&_Yn��LSE�+��ϛ&����ޓ>��Z��z�z�(d,��;VC������j���D 0� p��nx�N��/j��y�R�&s{aB�u��0=L���}����ǭr��Qy��nJ�d��3��%�~1��H�]�ꯌ=�s��"X@�s ݹ���zrmz��t�Ç�͛����2�ߛEb��yf�Kj���{��hL�*�:,�C�<?�炫�<��� �iE��6Q���[�ռA�SI��ե�0��4C����� �����(�Z �l[����"�+z�iS�.����V;�ⶦzz�T=��2�z��ޤp�g�S�#:(�Ր�;c�ѕ�b|��(d����i��.�'�B�)��Q�VFͲ�+�oUM���k�*�yԐ�{����ژ� ���D�MA� ����w:���6mj��A���� ԳP�i�!J�>*���A�l��gG|�:?'�N��d������ٰM�Y�|���yLvbn�az9n!l�ɋ����4�F4=�ԡ@n�4_�~��k�n���FB�|�,[)Gf�]y���1}.#�rE�))V+��hx�U�|s�x�0 (��"�[��vT\xI������x}L���O�qi;�&��w���hCǍ�c��i�Ͼ�)�-�>W�����a.�'�Qַd�Ҟ��]��d�)��$ƴ�� n�Ӫ���d�q���x[���"�ٝ�w�X��J༁A䧴���Xe�7�x'F�ϝp�X1&ȲQ��<��./�*�}O��'И��4m���X0@�����7�ԘBD_W����J��Ж6���vO���y���3�7q<�ۂ�讑�ت ������?���/䡯C�Z=�<l���� 5Mў�ZLKv��~���=:���V���}��tE}�^��tj�. ������-Ց,�e ej����d!P_��n5w�T�s�H�����mp7q X'����D��������eo7�l_�k�@��p���$lM� �g����p�����v�\%�>��G_�IY��[�����@QI-�#DƳ��p/�������mz�Zk��nn�ȩ���寇~*�[q,��⪋�Xz/���I�AI�t܊'�\}~"���&�e|�d<4��<Sa�Ū�+��&��Q<2��l ۰�)� � =�ރ#X���"�v������"2+)��X�z�$�����D�2�(��&V3�B8�h�/�7+���UR�]F.0ې<"��3���J7 ���ډP�^_t����Niz9��z�B2�m���A�{uf[Yw���jV;CF�'*Ѷ����R-p�2�%�uJ��Y�*�am�'�`�S���>���aW;�e��,��B��{{�*m�6 �<�#o2u�{&��Gb>�X"���l��`��� ��+$f~%%�'H���[�7�yW��-���Z��Js�>}�u����~�VpR�d�I��p�ς��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ