Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
ea88dd6a4f5566c01ca2b4b0663db0e9_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ea88dd6a4f5566c01ca2b4b0663db0e9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
ea88dd6a4f5566c01ca2b4b0663db0e9_JaffaCakes118
Size
694KB
MD5
ea88dd6a4f5566c01ca2b4b0663db0e9
SHA1
6cba60b79eb71af7b1fb1f7a4685b40b24043d19
SHA256
13ee50594998f54f212da309db168e062f38c06c89a7d237a41ed42c36da7da2
SHA512
8601857362f1a60e65e5502bf7c4a6ee20f8c654dc396dba0bdde8c3e2ea5304630e03f628e6bf6dfd2fd245d3d082aef099bc0112210c9dc48b9441e3772903
SSDEEP
12288:lEAnv+zNuGYyuyUngyxwLzEJ3JXM/giH70r:2Av+7Vuy8n33JXYb0r
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PathUndecorateW
SHRegCreateUSKeyA
StrCSpnA
UrlUnescapeW
PathIsFileSpecW
PathGetArgsW
StrRetToStrW
SHSetValueW
StrNCatW
PathRemoveBlanksA
UrlCompareA
PathIsDirectoryW
PathIsContentTypeA
StrToIntW
CoRevokeMallocSpy
CoFileTimeNow
IsEqualGUID
StgOpenPropStg
OleQueryCreateFromData
ChooseColorW
ChooseFontW
ReplaceTextA
PrintDlgExA
WantArrows
LoadAlterBitmap
ChooseFontA
FindTextW
SafeArrayAllocDescriptorEx
VarCyInt
VarR4FromUI4
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDList
SHPathPrepareForWriteA
StrRChrW
StrRChrA
ShellExecuteEx
SHGetPathFromIDListW
PrintersGetCommand_RunDLLA
SHFreeNameMappings
DocumentPropertiesW
QueryRemoteFonts
QueryColorProfile
DeletePortA
WaitForPrinterChange
FlushPrinter
DeviceMode
PerfCollect
EnumJobsA
PerfOpen
GetSpoolFileHandle
AbortPrinter
DeletePrinterIC
SetPortW
WmiQueryAllDataMultipleW
TreeResetNamedSecurityInfoA
SaferiChangeRegistryScope
GetTrusteeFormA
LsaQueryTrustedDomainInfoByName
CryptEnumProvidersW
CredUnmarshalCredentialW
CryptHashData
LsaSetInformationPolicy
StartTraceA
LsaGetSystemAccessAccount
GetServiceKeyNameW
RegEnumValueW
RegisterEventSourceA
WmiQueryAllDataA
GdiStartPageEMF
GetCharWidthI
GdiConvertPalette
STROBJ_bEnumPositionsOnly
GetTextCharsetInfo
CreateMetaFileA
GetTextExtentExPointW
FlattenPath
GetTextExtentPointA
EnumFontFamiliesA
GetFontLanguageInfo
GetEUDCTimeStampExW
ExtEscape
PtVisible
MaskBlt
CopyMetaFileW
GetCharWidthA
UnrealizeObject
GetPixel
CreateDCA
GetClipRgn
EngDeleteSurface
VerFindFileA
VerQueryValueA
VerLanguageNameA
VerLanguageNameW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileW
VerQueryValueW
VerInstallFileA
WTSSendMessageA
WTSLogoffSession
WTSUnRegisterSessionNotification
WTSSetSessionInformationA
WTSRegisterSessionNotification
WTSEnumerateServersW
WTSEnumerateServersA
WTSOpenServerA
WTSEnumerateProcessesA
WTSShutdownSystem
WTSCloseServer
WTSVirtualChannelPurgeInput
WSARecvFrom
WSACloseEvent
shutdown
WSCUnInstallNameSpace
WSCUpdateProvider
WSALookupServiceNextW
WSANSPIoctl
WSAUnhookBlockingHook
WSACancelBlockingCall
WSAGetLastError
getaddrinfo
WSCDeinstallProvider
socket
WSAEnumProtocolsW
getservbyname
WSAEnumNameSpaceProvidersA
gethostname
WSAGetServiceClassInfoW
getsockname
getnameinfo
GetEffectiveClientRect
ImageList_Destroy
LBItemFromPt
FlatSB_ShowScrollBar
ImageList_SetIconSize
ImageList_GetIcon
ImageList_Create
UninitializeFlatSB
ImageList_LoadImage
CreateToolbarEx
PropertySheetW
MenuHelp
ImageList_GetImageRect
ImageList_Read
ImageList_SetFlags
InitializeFlatSB
ImageList_DragEnter
ImageList_Duplicate
CreateToolhelp32Snapshot
AssignProcessToJobObject
GetVersion
LoadLibraryExA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
�����X�Jz�ƚh�`ON�bTl;dw��ߊf���M���6���Ű��"�z>�i=��]�U���ukDwn�}�J0J�o� [��g����&v�{a�'��h%��l�\� I���_��&���~����}�mX:���q���5��� ���Ӛ*HS�� �1ܢB����3A�!�#�\Jr\̼ϒ���Mk�ړ�E���H�|���H6]6�>���St��G�P8d�������`�T�#Pb�?Z����0+�����l���?X�v���}����^��U��X�2;.Uo�V.� !�B��*]y��pY��L��Ki�>�?��F]�L3o<����i9��A#d8��(µ|�\���� +'��v��\1F��#1&��M�M䝴���P��W���-�p��j�]2�����А��A��JJT2�\Wy�V����"�J��Y����:q�Kh���[�t�=��$�9 ^��M�����B�%ͱ�N���3��%McʹVאͮ2"/�y~��H�����)����8�B1���9�i+��}���y���j��m�{����Ba��Xx�����2<I� s<C���/��CC���RB��j���O���}o��$r�^��������焄��B��L�.�v:�D���t�z3�(� ���n�|������d_T��2;�E��FO�pk���̣���I NڷE��w?j�S�Ri�����{���~O< ���2-�n��Y�A�#nu��i9S`�(^y���ꅪ�=aqӍ�I�Uz��^ �`�� ?O����!�R�_�e;�')M�kk&[^���a��r+HM�N�H��+ȼ,�#��l��~�'�F�u�|>�[/�9�9�:yr+��Q}���BѨ��a�O���%�䍑z� ��A��N�xA]�"9bjIL0�l��j'aє��b�~������ǜD�i5�k�D�����P�V�Α�S@�;:j�W�����'��F����\��r�(2���i]�F�Ō����{�[��?wgV���� ӗ"Ȟ]v�Al0��Л��^�� $;��1�h:��S}-R������������ ���}�t�͋�1Ej�̯ ٢��e�;��|�"��n�Ɠ�i��qJ��U�^��K��vX�ܝ���U��Y`!�V���zK�X~�2.�;�x��ǹ� ;2��^Nҁ���!/j�_Y?9L�ygg�זBҠAk[�.�ru-��4�sf����8$������7�D�ߺ��e�u��D���-G�+ݨ� 0r(��7^��®/�c\�Lvz���o����4�^}�F��a�GD0V�'���V(�-6����k��w���!YAn&�T��������bpjҧkP�fU}Mq��]�r'���eS-^Ud�P��C��s�d-Ĩm@o�^>g���H�JI" ��A������~�@m���4���&�o��P�G �$2'��%@A\���l�jC��W>�T�ӊ9u�C!�V�%�@��+�x���yO�z���V&�L�����o=�����s�u�Q.#���p/��D���8\-�jh�.9�WT�@�-=?������'�����o"daZ� �s�.�:lx���x:�Ӏ��m��,��1��EC3����k��?�@VOWӖ��t� ��2i����3�]ϖ��u��Ri��}d����[d�sKu�HhGA.���5̦�g0��{���@!B��rǶ�(����&A9Ė)�1�|�@��Ў���c2��Xp���/�F��nH5�T�����3����*��N����(��N/(��=�F��m�#Ս�OUCqڣ#�"T�d��]�"�I2>�� �����|P�V��4��/��&K�I!�Q"Yɢ{�~w�r�Y�9��l���f5(��9��8#<��Q��` �:�$V�A�I ���~o�}��H�1E?�����r)��nu��ĩ�j ,ZŭsQ���q�55�Ұk>�;Bl��V<����q��Ĥ��BWTp��_#>�ʬ}�I��)^N���ˣ=���\T4m�^�k�Ƿ�QbyN�/"S���3a9��W��#��Ic����yz}�%kD�:�^�[��vI��/��O@�ι �k�ŷE�>��U���g���)���#7��ac�5��\��=U�X?Œ�g��̴]��N�Q�t��ی0��f ��L����}Hh�]Co#��Wa�%�V�t�G��^��94���)��j�(�� s>M�ߺ��'���� ��Sg�=�Q��5l��OX�c\��Y'뉟8�UY+q�w�>�Ԟhm��~3��^�o��n�p����~�N;���^�������*T�.�2{������z����ڻP�E��T���&d|�q�X�N�,M^M�8�dU��a@(��f�����-.�[Ƈ�)��HJy�5��#���~��Y3+�l2����m:�_���ŀOZx9H��A�'��r��|ɞ(n��HKr��8#��_˶Ҕ��x.�,R�E�'Z\�:��쪞e�H{���a�y6��@� ��!��H�f�.�t?�����Hn}}��Z�v��� 5Mv�F�8�_w�sR>��根��� ��%)�-��gvm@'B��0Z`�=��fV����OϬ��<;߆z����I��|M�4�8�T�Hw��>��ج��¸��\d\^c���\�ޢ~]��O7�+�#��Ͻ���%��� b-�9��;�VBEp����z0����]7�9B%�����[���;0�)����ۣ^?���h� ��S���q�$+)��-J`K.{� ����8j96��Zf ��k�����L��Z��k[Ly5�bt(B��R�� .�G��8Oա�-ivE�/� o�t+�d��49KsL0�G�/+B���/���H�G��'�T<�h�����<�7#��q��D϶���RZ�Zyc���[�(���3���XIe�!c�\��z �a���S?�`�xeѷ�t��ֱͼ�Z�屽|��Y�s�:_�����e����N�����^L(_�Y��=l%���P���\?�=��}�^ү�fQ��r�b+Mɱ��kT��^�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ