Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
debe9e23b85996d822f4c3ce81758e1f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
debe9e23b85996d822f4c3ce81758e1f_JaffaCakes118.exe
Resource
win10v2004-20240910-en
Target
debe9e23b85996d822f4c3ce81758e1f_JaffaCakes118
Size
1.4MB
MD5
debe9e23b85996d822f4c3ce81758e1f
SHA1
5dceb37043e8681e139f990c02fbeeb45e828670
SHA256
14975c278d358cc811cd090d5436cb3fed3f1d7d0a3664dd7617881e414d2c3a
SHA512
a4230a57b0733fbf2526bec56011b67bc348d054961c753d3304e3aee14e7cde5f7d20328d774818477e4b1b2e8a99ecb432b3277274916f9713bd6829abc6e0
SSDEEP
24576:RWuA4LpU+ozdksp9pOF2rJIqPW6crtN1usv8hjj5jaqExeEhZ0CDNg5jyVYFw/1D:mQp1oxko22zPncN18VZx0ZtD8ul9D
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
RaiseException
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
RegisterClassExW
CoCreateInstance
SysStringLen
��з�������L�b����C��F}4�W3>\��/Ͷ[���Q�H����J�����+����a��s�;��[�X��5�PR��Do�΅���{d�i&U��K�}:c>2�`H���R'����t`b�:uE-uժvc��pEQ�oА�3��V�q�i5e���Ԗ�I��R�j7X��U������ː0��W̗��Lc���Z��j�d�������'j߳#�* EŇ�g�Ze��Fr��_�W��Q�ny�چ��02Hw�D�/v����1u%���j�W��I��N�L��6��yee��+G������o���`8 ��:��Ou J{}�-��F]���Rߕ��zϵ$N4g��b0�b���_%M�Cg��\�Yc�_P��i�Ťlo���=?��~k�qxY�4�����il�Z�;�<?ܝM�PL��3��|��� G�|6��W�u��װ"|���*v������G�P;�O�pF�\�4����L�{�F��g@~j%2fc�� �:hQr�tP�ȡ ����0:�����-.���ŗ�C Ի�O��x������{Kv~���A�� ������u����g���,6�N,����fì� @t���[XCzg��ă�{ ����"lmba���n-�-T�N�2�} �#���m�t�[1a��� ������q<L�+�Z����8�71��`7_P;���R��fo:j�����p�7�p�C��Ȭ���C:]q����XX����A^�?�;ي~�6������&�n`���T� QGϹ\�)-�����{t���&>�� q�y$7C,��x����ȱrO�`�#���P�7�xo1f��l$��<�:CE4�u��1{P� 萇v_�E4U�՜W��ؚ �ݏ0hod?��s��lF�� 7+®>�d��Gg\���q����H��"c��`*X�S�s?#džb��l ����3LO|�(��w;����s�z���ץ��('��G;�4/ �b����\�����+�`H4(B��Y�1+%���<آ���͡����=ʘ:��/㼗�}��G�[�>U�&\���C����ڡJ���h����-���S�H�P>�vI-(��U���Y�!?Y�*��`���Տ˯:���6N&g�~�A���O�wG�����Z^҄�1������!�g:��>��Q�X�����L$bɊ���Ѐk[�h1��X#�܀�-I�p���,)Xl��TV�L3@�ѯPɶ��`x^B��X �����ʃ%���qt=�MZ�V~H�p1�ʮ����2�0��~fS��սX�Up��槫�2�I�[�6�66wg!+[y2����F ��j��d)m�r�����~���U�(K�G�Ф��U</�Y��7�r�L'����{ʄ��[VhO��[�Qͩf��&�{ ���CIw����{�� �/'ːa3�8��t�q��)�U��;0��6!B=ͭDe*6�AXy�q���V8� ��z�CY�GN���wFQ=�3���C�"ld`��4$e���-�fPd-��'��!��"�;}�/i<��*l��%��u��2�Xik�L�A�]��a�3�/eˍl�iH���D9 Z�Y�'����.��)�~ �2�X�@���g��Y�I�6�g���o�����p�P���}�(A����H�E���+�ژVWÜ�����=�,8wl�A,��/�&�,����o�HS���7�U���ڇ,�H��'{,�'za0�~5z�_N���t�.�o��ܠ}b&���Y�h�b�DS��1���TD�Є�W5����sS��|��t0��* Dkpz����R6���\���|Q�|>�������;���l��({0�7�E���K'V u�b���� �`���������j��c�_d&���Pn⪻��30Z�?�[��X���Vs�U�%���^g�^�zS�n)���B��E��я�dT��0_�A�5yj%$* KS1f��$� ��/�[�K(/�Hd`�J�a�Kt��YJ�����_R(=�oW�s� 9L XBi�����I��ϜM5t�������m�!$L�VR��#�Lw��mbAA��&"�{LBt�k|Y@m���;iN9m!.���or'��(` �ݚ�>���XBY��ㆇg~=����{��B�l�N]�}�!Y�6�G ��G@��]6��+��)1�XG����o�o_�Z�֓�����Zd=]�W�2�mjL�`���sq�x��L�?�d��8ݾ��T����~�,&���o��[`�Q��~ܜ;�\�������0˵-�ݜ�QSq��7�P������~Tg����c�� G�og���${�V>AC�Z�$&6<���Ξ��YY!�9]!�ʧ���\~�3P��4-�iq��������Ě6u|�Z>8��*��k)�� "�4zZQ� �^�@谱��ˀo�i�)経">O^����ҳ_�~��M����V|~��3:o���:�1K����� F�w)!3m���I���Ÿ7���"���(�-`}9��O����9Q�?�HBҤ�,q1����mvA�~�4C�ɩ#'�cj�/��z�g��ro�����ehn��A� ���%�u�x��\c\�o���$��"�g~�&��?��J�,���>�,AT��M�od+5I��X��5�+HTz9&�c�\�j����.�܆��G�Y��q;Q�A�V7]@����.�'c�Iil��8���a�����]�i��OaO+�3�U�0z���s�@@����_�ެH�Ŕ��^���⒘� �}��Np���5>�#|�|W��8��/G����m�Q���������%�J$1�wG�M�5���7i1k|&���lKY\��� ����e�<���@ʼn�0x�A,v����DTl�jo�,����je,�����}�X�M?����C��_�3��=�����k�xh1��v��7�9�6�N�� �lj���;��¾��Pj]�����|��é�8�C�h�9 12��/�>�[h������+�?��L����W5ߙ��3�NOu$|��N>��)~N'��ӌ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ