Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
e1d681bfef1ab4c536e4d2cd2e89de32_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e1d681bfef1ab4c536e4d2cd2e89de32_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
e1d681bfef1ab4c536e4d2cd2e89de32_JaffaCakes118
Size
1.4MB
MD5
e1d681bfef1ab4c536e4d2cd2e89de32
SHA1
34c3a1cabe0fed5ea11702e5065768d95948c436
SHA256
10111357e3f69afb0ad9ac16ae6015f051cd6dd930c82e66f7a3c263bfec2fe7
SHA512
6070a0215e5dee3455535e4bbb2a6586258fb5dabe7c0b4c3db2f0f458ee467f2bdaa0023bf5f24ca07a5018f263e968b915b32f6bba81db4768d0ce55c25c58
SSDEEP
24576:HqBsMu4MM1igTA8Ee6gBaqn2h1xRNlwtkTlJMidZD1uESdZ5xLr8lJKAJ/2QfMnr:HCs5JM1XHEe6gBaqn8rlPxnri3H8yATu
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
RtlUnwind
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
UnregisterClassW
OleInitialize
SysStringLen
��)��N%� "Z��m@={E�6jkJ 3p�9���Vk ����S�s�������VP�@K�������~���Q���N ���y(�z���IU�lB�l�$ ̨h�#|׃��n��� ��;�$x�m3בI��H�@���jqx��}D�Ccw���?v���1R˷��9���M̲�ZV����Zk���y ���T=EI.��%B�Lj�UU�R ���'$Jț^P��2��T�h��n+-_�KZ, Yd�=���t���"���Ue�����=�]�'�}�IBAl��8�Ә���ý��+�����Ϲ���� q>b�[� ��H�k�-�����P66��w|?V�i�)� �p�RJR�n�/<직�V��;�&�/*n���V,��̵�8oi�k��/��x-V����W�ۈ������sU����?Q;�3LƸG��p!�Lh���^���0C�s8�@��Mۆ?<{[�߲�!I��!�Y�f\�j��Ahܒh��&u�.O�_l7UJ�b�{k������@w��y�l�[AR��J����(��Q�� w���2�jt�^���ɣ�\�"<�pe������]w����I^�O��M�U+�[e;�c�`�>-H��Q-�C[}�Og,�Y�:oEpH\���ՖΊC��\xpc�.�Q� y��J ����r1���d�����P�*�J�2O��> @���g��������i^�Z-�C ��4� ���ܘ���-�;p�����m���LfƤ:I��q>���ћ1�d����0+0{a%����6���/��Z|�M<���L����#��@L��u�ޓ�((���~�N0�����~�3�e: ���� ��g���qi�:B�R��h���m�̈́�MZ h�xӣB���Y�dI�m�_���*/T�v�����ˏ�bn��ð)�� �؛��s��+h�>� 4�M����B��ܫ�u�Rs���U����&R4�nM�z�f�+`�W�^P �R�tx�\!~��P�7t�h�VR�2Ѿ�!�Q�lt��oid)�%-�B����w��C�Bb"�x��x-Գ����+`$��<!�|}�{�{�6u�~��-���dr��'4�5+�>8�;]?:y�<p�~\�������H�ܩﰼ�胓�%���/�gٜE�g���M:��^��\�"�IAT�RY2�k�Q5�/!���э�!L��iۍ%������e��+q�g��?2+GT'Y�u�p{��!��SU8�����Y���2x��'BQ9w-��`2w /�_)���O�#m" �|vQ������S6 4��]6E�pL��FsqXX���ꎯ{m��A�P�8�h��� qX��3�"-p�KǦ�]3� Ǟ��Ϭ�J�_���M���D��A�T����2V�a�Q�����)��j6�j��l�i,� �NU��M<4�������5k���MR��j���B��U�,����f�����'�<��O6'Z�Jb^7��N�١��+�tz6ƙ|�� #�kgF��[�����[)1V��W�K',#���]���M<E^�"��K^�r~�qi�wGQ�#��I��/[�Q��8Œ�<K��{'�+#����H怙F?�ظ��Y��B��ڊ�vuϜ��M~�qtx�2a�l�_� ���SF" ;����yU��){�~�EF��7�qzh��a6?u��$��;��I+iOѻ��v�mRD�V��t���Nτ%� �:ѻv%�3#��黭W:]�}�%�_�3�T�E��9(����UT�G�8x��@����*Ί'�U ��& 0yEN��3#�\'��7�E�.E�ew�c���p�|?��H�]�͆�ab-C�\�[v���7~w���ϱ�*D>�����l��"��6l֙Y���N^Ed|��F��9���q�gR�J�ƻ�ި��Q�s{�t�F���O��ٞ�J6C~[hӲ�R���7?ar�ϵq6u`��ľ.8pMP%����ϝY݈y�C������X� � ��խ?�5M���ʮu֫��$����fb��$Д;��nc�(�cNy:��u7�(��n�3��m�q^s�/�0���������7T��7c�������Q�V�Q�r�Do���2� � ���H�Q�/A�Me���� ��et�%��m�����d�]j3�sUt��ʋ�ǝ����8vp�6��eA^P�oG�S=����w��z~0b23_7�{|�,f�d��|�dP��]=��j����.>>���h�C*G�Rl�pg �p9�h��� 3����WMX[7w_�>��"��Ȼ>jQ����D��f��2���������%� �X��(�����"O5蜕���������������+U��B�0\n��>=�����v��-R5�iE�J��V�77܁�$ wI���y�<m�^��y���/"5��Z��í\�H��w����`T�C,2���?�Gs��{k!$�*\m��9�?�o�Pa>��n���i>�{Dr�9�,�Q3�Xg/���u��E��������vcƕ�(-�v�,��s��?�P!31�&��D�)S�l7צYд��)+ 2-]�ܸl��A���&?��˛�WP�Rd�����������D��j�Y�EG�S�X�$M�3�7к�l0:�:���� ���r"��F��?����������t>�,)$��a�&+�Ț��Q�%w�����6��K����us�VLv���@�( *j,rޗ�'�'��5|�1{g5ػ��0*i�>Z�M�+����*<!�Or���)�Ϋ��w��"!\s�>�Vʯ�Z�����>B�9���3�����M��ښ��7C�/�@öP(�)��Ko��QO��6��*;n�Zf��������bι��NȪ/��H���s��_o%*�p�s���=�p��v"�8D�'�[�aNJz_ȒO�}�X1~.ͦ�v�����X~��$Y�t.��,d� ��������Rދ���:�6v�zY�kY���F��,n��������y�f
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ