Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
ea4be2817857764ac3df9541f9c71b12_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea4be2817857764ac3df9541f9c71b12_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
ea4be2817857764ac3df9541f9c71b12_JaffaCakes118
Size
2.2MB
MD5
ea4be2817857764ac3df9541f9c71b12
SHA1
4b0c9f4e47a72102fca25abdc58b45bd63e68502
SHA256
b1eb7e0621e6a732eb4d6f68dcfc8ae863691850fe550e9fa932457d342d5ef1
SHA512
56795a85db721716dd659fed3c3f13f653cc9bcdc04b7ac9bcc9643441007ea5a852b4b94fb81e55b0354b50e42f66e3cb0ffbbe9e6517d034bd052810c2b650
SSDEEP
49152:o2OOenGxGipXs22a/tgrYJUGfZC3wA6EylfwEaFWM:COenWhXvttLxC3sEwwMM
resource | yara_rule |
---|---|
sample | nsis_installer_2 |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\codes\VS2010\SogouSoftware\trunk\Src\MiniDownLoad\Release\MiniDownLoad.pdb
CloseHandle
DebugBreak
GetCommandLineW
GetTempPathW
CompareStringW
GetProcessHeap
SetEndOfFile
WriteConsoleW
SetStdHandle
SetFilePointer
LockResource
PeekNamedPipe
GetFileInformationByHandle
GetFullPathNameW
GetTimeZoneInformation
FlushFileBuffers
GetConsoleMode
GetConsoleCP
FindFirstFileExW
GetDriveTypeW
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateThread
ExitThread
lstrlenW
MultiByteToWideChar
CreateFileW
SizeofResource
WriteFile
GetModuleHandleW
OutputDebugStringW
InterlockedDecrement
InterlockedIncrement
LoadResource
FindResourceW
lstrlenA
GetCurrentDirectoryW
FreeResource
CreateFileA
CreateMutexW
lstrcmpW
GetSystemDirectoryW
DeviceIoControl
ReadFile
CopyFileW
RaiseException
EnterCriticalSection
LeaveCriticalSection
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
HeapFree
HeapSetInformation
GetStartupInfoW
EncodePointer
DecodePointer
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
IsProcessorFeaturePresent
HeapCreate
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetProcAddress
LCMapStringW
GetStringTypeW
ExitProcess
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapReAlloc
HeapSize
Sleep
RtlUnwind
WideCharToMultiByte
GetUserDefaultLCID
GetLocaleInfoW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
FreeLibrary
InterlockedExchange
LoadLibraryW
GetEnvironmentVariableW
CreateDirectoryW
GetPrivateProfileStringW
WaitForSingleObject
OutputDebugStringA
InitializeCriticalSection
FindFirstFileW
FindNextFileW
FindClose
GetVersionExW
GetLocalTime
CreateEventW
CreateSemaphoreW
ResetEvent
ReleaseSemaphore
SetEvent
WaitForMultipleObjects
DeleteFileW
lstrcpynW
lstrcpyW
GetFileSize
SetEnvironmentVariableA
wvsprintfW
wsprintfW
CharNextW
LoadStringW
ShellExecuteExW
ShellExecuteW
SHGetSpecialFolderPathW
SHFileOperationW
CoInitialize
CoGetClassObject
CoCreateGuid
CoUninitialize
StrCpyW
PathIsDirectoryW
PathFileExistsW
SHSetValueW
SHGetValueW
PathAppendW
GetModuleBaseNameW
InternetConnectW
InternetCloseHandle
InternetOpenW
InternetSetOptionW
InternetQueryDataAvailable
HttpQueryInfoW
InternetCrackUrlW
HttpSendRequestW
HttpOpenRequestW
InternetReadFile
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
NetApiBufferFree
NetWkstaTransportEnum
Netbios
RegOpenKeyExA
RegCloseKey
OpenSCManagerW
OpenServiceW
QueryServiceStatus
CloseServiceHandle
RegQueryValueExA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ