Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
df9e35ddce876b85ad8fd4c4f3d7a100_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
df9e35ddce876b85ad8fd4c4f3d7a100_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
df9e35ddce876b85ad8fd4c4f3d7a100_JaffaCakes118
Size
1.3MB
MD5
df9e35ddce876b85ad8fd4c4f3d7a100
SHA1
4375d244b7b7ee148ef57d1df7cae80d32aeefae
SHA256
5c62131955d1f71684bca786764f91b050f44ef1b65bf1329e241638d772dcab
SHA512
e81b434feb6e56ea1799925cda1bfa99e719044c2dd03c88cc011dc6864896ea4dbcc1945489aa2922d75fdb8763edb05af92ab04cfad80ee368f9c69ca83488
SSDEEP
24576:sqGxV1EXurviL4OcOBwuIRy7nj/ExBu7SmsIs5ZQjIdFnyWa:s9EerviL6EARSn7su+8s5ZFHS
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
StrStrA
StrNCatA
StrChrA
wnsprintfA
StrToIntA
StrStrIA
PathFileExistsA
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
GetExitCodeProcess
GetFileAttributesA
MoveFileExA
Process32First
OpenProcess
TerminateProcess
Process32Next
CreateToolhelp32Snapshot
MultiByteToWideChar
GetModuleHandleA
InterlockedDecrement
WideCharToMultiByte
OpenMutexA
GetComputerNameA
FindResourceA
FreeResource
LoadResource
GlobalLock
GlobalAlloc
SizeofResource
MulDiv
GlobalUnlock
GlobalFree
LockResource
GetFullPathNameA
DosDateTimeToFileTime
SetFileTime
GetFileTime
LocalFileTimeToFileTime
GetLocaleInfoA
RtlUnwind
FlushFileBuffers
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
GetTempPathA
GetEnvironmentStrings
FreeEnvironmentStringsA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetEndOfFile
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
GetStringTypeW
GetStringTypeA
VirtualAlloc
DeleteCriticalSection
VirtualFree
HeapCreate
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RaiseException
HeapSize
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoA
GetCommandLineA
GetConsoleMode
GetConsoleCP
GetFileType
GetModuleHandleW
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
GetCurrentDirectoryA
lstrcmpiA
SetCurrentDirectoryA
CreateThread
GetDiskFreeSpaceExA
GlobalMemoryStatusEx
lstrcpyA
GetVersionExA
GetLocalTime
LocalFree
LocalAlloc
GetVolumeInformationA
SetFilePointer
CreateMutexA
GetModuleFileNameA
GetLastError
CreateDirectoryA
ReadFile
CreateProcessA
Sleep
GetTickCount
SleepEx
WaitForSingleObject
GetFileSize
ExitProcess
WritePrivateProfileStringA
DeleteFileA
LoadLibraryA
GetPrivateProfileStringA
GetProcAddress
lstrcatA
GetWindowsDirectoryA
GetCurrentProcess
FreeLibrary
lstrcpynA
lstrlenA
CloseHandle
WriteFile
GetProcessHeap
HeapFree
HeapAlloc
CreateFileA
lstrcmpA
InitializeCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
GetKeyState
GetFocus
IsWindowEnabled
SetCursor
UnregisterClassA
ExitWindowsEx
DrawFocusRect
SetWindowLongA
GetWindowDC
DrawEdge
UpdateWindow
DrawTextA
GetWindowTextLengthA
GetDC
GetWindowTextA
InvalidateRect
IsDlgButtonChecked
PostMessageA
CheckRadioButton
EnableWindow
EndPaint
FillRect
GetParent
BeginPaint
ReleaseDC
GetDlgItem
SetWindowTextA
GetDlgCtrlID
MoveWindow
DestroyWindow
GetMessageA
GetWindowRect
RegisterClassExA
PostQuitMessage
LoadIconA
GetClientRect
SetFocus
SendMessageA
IsDialogMessageA
TranslateMessage
GetWindowLongA
CreateWindowExA
PeekMessageA
DefWindowProcA
SetWindowPos
ShowWindow
DispatchMessageA
SystemParametersInfoA
LoadCursorA
MessageBoxA
FindWindowA
LPtoDP
GetDeviceCaps
DPtoLP
SetMapMode
GetMapMode
CreateDIBitmap
CreateCompatibleBitmap
GetTextExtentPointA
GetTextExtentPoint32A
TextOutA
BitBlt
SetTextColor
DeleteDC
CreateFontA
SetBkColor
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
GetObjectA
GetStockObject
CreateSolidBrush
AdjustTokenPrivileges
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
LookupPrivilegeValueA
SetNamedSecurityInfoA
RegDeleteValueA
CheckTokenMembership
RegOpenKeyExA
RegOpenKeyA
SetFileSecurityA
FreeSid
AllocateAndInitializeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclA
RegSetValueExA
RegCloseKey
RegCreateKeyA
RegQueryValueExA
OpenProcessToken
SHGetFolderPathA
ShellExecuteA
CreateStreamOnHGlobal
OleLoadPicture
VariantClear
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ