Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
e11f2c4295ae1c8e2edb1c8fc48863c3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e11f2c4295ae1c8e2edb1c8fc48863c3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
e11f2c4295ae1c8e2edb1c8fc48863c3_JaffaCakes118
Size
1.4MB
MD5
e11f2c4295ae1c8e2edb1c8fc48863c3
SHA1
3387bbcddb538e6023cd469db621b1030038e517
SHA256
119a5ae6ce9ec971072de23a7b75020b390568ddabfb7568460884f86028fd8f
SHA512
9885bd57536a3964892e19881ce0c7f1b9874db8089dfa681bece432f3e8c9cfc4e5eec10fb23f6acab7c04d8fcfe23349e03645ee74de7e99f191fdcf1c8dd6
SSDEEP
24576:bk1l8e/6Ixwko/6DNthpyvpI1scv83A1cp81QM/+sRqIA176Pi6rDXeMAJc7K5Bv:bk12y6Ixwv6DNyDQGA1c21QMUV1+Pi6A
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
TlsAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
MessageBoxW
CLSIDFromProgID
SysStringLen
!?�A�W6����zWhS"K6�!���c�E+��g�*<`k����)�n�](�������`����i�Ҷ�ꉢ��TG�S`�-]vy�� ��O�T^���v���{��f��L<) п^�6�G�$��8Α��O�_YX˓�*.0-�^ql�����]�75��Kb��G�Ó��G��~��&�G�M��v&c�)Yw\f�V���:�f��6ƅ�T���2��$���I�L��Sr R�|Ѱ� �� 7T`�u$�mp[6U�qx����ڢ0Мz �b;]�M���|����(~�8bWoU���U�'+g˜�� �k�9u�� B�bB��&�!"t4����N {�c���s V�0|�����)�aA�`~r>}bwؠ!D{*���_#)�� խ^�����Q|��8�0��p�� ��re�I�:��P-f������U������H���:B��O+��J<�y|�'0��1 u�p�A��p�T��A�Ձ~��ځ4�U���Kr��͈[ыh������"���*)�@�8z.�Z�½v+�Ųe1���<͜Gf��������WeW���y�y��H�^�9��cA����Z��=}�u�],��V��o�4�Q��.�ީb�*�����/:7�7�G�$�|ɘ���x�$�����#b!%zH&���{��d4oz�� Om�^�XW"���U��'��Ҭ[��-��2��!�� To�*MF 8d�,�/ x��`�<�1��%�rqC�(�c �~�m[>�^�:�UG`�D��5�꤅�)<|iÒXT�X�}۫�%�@� ^x��(�:������!��eO7���5;6:��-.�ͪxl2�`�� ܾ�@��d���a�: ��W=���'�|�*�ƱC����.��؛�cPi����cī�w�� ��B)�+4&�Q}H�t��9Y{�q1��{����7���="7���2��S����G���>io�����m�')�͚�O�x�͠�V�-L��z�/b]� ���M��mR�o!#:[����Yv�Gi�MQ�o��}�ot?��EClgi�j�l� ���Y�]I�A��� VϥpB�����˃ڙb'z�u�/b~CԪ����k���#�9ȫ����ý�!%8��]-R��O��c��lixٓ�!�R��j��@dc-9m0 ��nt߲�, ���1���k r9���L���Bـ��Ơߡ��b898��j�(�������E��b����}�U �q���A+�9L�gp���mc���-�ղ�)b��#�P���ݩ_��qn��E�W-� �B��x 1(wra%B�a�71����"��=A���l{�����%��F`�Cu�Lȥ��8��gg�;z�A�Ky!f ���`����&lLe���cQ��������]Ħ��8����K���<� �hT.NKs�o4$�A���K�p]q���o��[(@+T� A���}��(�M��,=�r�;b�?~y?3��.��X]�^���A\� �g~��>�H����3�~U��°����ij���]C�`9'(YЦٛ�����A�a�h�6��ެ�v��!��S�XU5��5s�]IΙ�Y���["�|fȗ~R̎�X��j�<`}�F��U�� �+m����ݔ'���ѽ�3��s���>��g����-�X�����Z��{F���Ve1o3��+�q��3 ���+5�\��o�͈'�2o>r t{0C�]9ty���=8�/�*⡠��|u���j�T�41đpv���t�=D��$�&�JRVR�y��[I�� \N�') ���Xy���W�c��h#IۏW�M�O��5�r����8����9��w����]0���ĩB�q���E��-I?�^\F��E�EK�S��1��[Qºg�l@MՀ&�oI����Ps ���߁!O�n�b�ب|*��=/�(��g�����+����U�aaq�\ �<������Z�/I,7����#!����� �Z����p�p�X�j-��Ĵ���?l��������^J����)v;��")��ݚ��_� *��G [��!�P�O�ۀ9I��R�P��LhA�qoR= El�-�y�a:TR=������]�zQ�\�,��ϋ�z� _zc[n�����[�2�뵕���x���� �1i��q��:�9R͞,癅�jڇ���͟�D��џ��8Y�D�FT�2�Y��V��Q/�r(.�E���'|�V� ��Kd����n�$BUbq��Y�Bo���nP�7�c��%t<g�r��W�!K8�D���t��Rn�;6��<�gI�_bϒp��٬�sYq H�7�MBwU90�돩�:X�ʥ��]����o�{��;X7#'�d`����_��Ј�=��W&�o�;A�kp�9e�e� �~+@��^Rw�H0]7K�|����3�j� ���T@H���p.DH�J%7��ҡg:��LQH�"ϓ�:i�B��H�]F�*�;ݣ�UEb�s��Is.4G)-���m< ��t�Ah/:�eA���R�_��a��_�\<�x�5������\8�3&R�l���*��]s��C��3M��{�����S�3�"�.; {���u��И�v2����$�Nj� �}�A(�.B�|�}�}KC �o�w9��a� T�^T��a�Δ�Վ�^���L��5/fnE��7�B!v�=U�zxs3�S���6(��������jOi�waL��7�[s�E( z #N+/$�:�~B�l�A ���t5����W�X�P��;���^��'��L�'%?U�(�l��ԧ�QP4S&�x�a����m���$����h^?�S�gE���(T�gy94�tu�{�.Q�\4�n�o�TJ��߀�;��R9�q�;b��X��,����6i ��i�A�nd�]T��E9�w{R�4T�*i[�Q]��&�բ������e�9�NKж;�j O���u�����4�u �숬���A�iV�S �Q�k�2��8�A�W6.:p��݁� �yz��GmIa[Ή�����j�>yښ���VG�X�?�^��=���?�"ƫ�f�7�Ŏ7j3ʿ��}9澘TG��������T�x�3
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ