Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Behavioral task
behavioral1
Sample
eaaa0408c3cd686a30871fedf31ce241_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eaaa0408c3cd686a30871fedf31ce241_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
eaaa0408c3cd686a30871fedf31ce241_JaffaCakes118
Size
1.3MB
MD5
eaaa0408c3cd686a30871fedf31ce241
SHA1
6246c66140be50c416d0d304ecc0c9ba79a0a586
SHA256
d6f3151ed4fb00b766cf70df678b932c616a122c6c9f2a62e33d4a103465f8af
SHA512
503c0a8bee57d8e5e78b6b0863974b28fb44b90b6b35fffd9cbeb0eb00e83e09962fa8d1eb5fa8e0c4c612204aa5e51b1dd83b911b85241483dc44e59450a8e5
SSDEEP
24576:IQAyB6pT8iMsBc1LezSVBmzFPkUPwPNyxTJnFA7ixUsCFHRnwzZjj+64Nyg:IuB66scoKBikUPWUTJpxpeQjjZAyg
resource | yara_rule |
---|---|
sample | upx |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
GetVersionExA
GetVersion
Thread32Next
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetThreadDesktop
CreateCompatibleBitmap
GetServiceKeyNameA
CommandLineToArgvW
CoInitialize
recvfrom
PathMatchSpecA
DnsFree
LsaFreeReturnBuffer
GetModuleFileNameExA
NetLocalGroupAddMembers
capGetDriverDescriptionA
WTSFreeMemory
DestroyEnvironmentBlock
GetFileVersionInfoA
Install
LoadPerfCounterTextStringsW
PerfectWorld
ProxyDll
ServiceMain
TM�o���1[cd�Q���ᢅB�Fy�(X�m��o�JPwe���B�S��* �A�;��������;�N�����|����t|;'��O!c��R��L��̛5`9�Ε�\���~���q�/����5��C��%����{[�/���A[���>'��Ʋ� R�"K�4�7���a+p?^+�Dѝ��5�~H�D�����~��/����ћ�|�0aF}�ܵ!�7��e ����RIXoYN�W�xVj�7G��D*�����@窜{e�6����ÃyA�qA�v����3,q%��zkǃ2�/r�� ����<p��V"+�� �����Zp$|��\������+�%�/\�|�9�`������x��J������+�J�$:� �H[����u^cy>��hܗVl�ZH�^6��Z ��|^7^U�L��j!�)*Q��m$�z�aX�)m��ws��u擤P���=ϽTVpd��W�^6��������S��z%�!,�~���IZ~�U6�5�(��L��=ZM�7��B}Q�?y\�*�"� �5v ���r�U��<:�'�r���e���,��]��Nqo+(����%Ѥ}�9)Ҥ���F ����c� z�dKH�������ڞ�L>o�X��A͇/K�cL���@���5��P�1������%J���٠ךWD}�X���q�3�n�L�A���ޠ���a1.����d��� 7M�g�?�5OU�%��&Y�{�w�"���5A��Ϥ-T� �9 �wd ���V��x��N����k���N��5uw��sW �Yv<�v;�|�8R¥���A�̡���Ѐ��2�eh��3�7�����) 3DT��Y�l�0��Log"F������XC�#Z' %x�ю�������*���J�7�q�XrA����^9��!l��M��!_рT�S��������#�;�h�Y���f"�*�� �P �K������w��;�!�&�#n�%ė�C,���`W��r���Ҟ֢���1*�jS^��ǭe�O7q?���S �2mA|��8��X���l��DU�DG������jO�;�|D�^M�&�#�]��k�Zt�����d=�@���Dl%�d?�Aߴ�M�d� �!��2Ì���Su�����Y�-⳿�o����@1_Νs2�3�Ka�Jf���� 47s-�����قq��� w��LT�g�&q}_)� ?W�g�܈*����F� `�1\�h�ʺ�-C����%������cG�Yv\�)�H��]q�TE�Q���E�b�7c ▢���Տ��*��\X�玸�����c|�����~/c>1:�Z���T���.��1� q����'u3R�����x��UȔT���#����x��<U�fX�����u�t�%/ȡ��϶�ﵣ�m�Rc#:ꑬN�4~��뺋/�s�/�ܛ��$~fV�,�����_=A(��=��ŲSra���j�P^w�v2ì�Ą��]-����k�����kWn>��t�Qp3�N3��}�=��0 �!Tg��sш��)(4���.��Q��m`�3���f�?7��������u����P�ı��24 � ]ٻ��u� �����ذ]��&ѹK$>��xXjmލ�S��D�Z�C#�V,9�qG�nh��Mz���������[LI$ zN���ӢlSpD/�%��:ܠ��>��K�h%d%��Y �P������2�,�S�+��"4Pv��tЯ)�&��Lں {�O�=��R$��R\_ϱ��M�Z�ZQi9h#�0- Y�e���Y����f�F����wv�ֲ�'IV������f�ܢ?�����W)߉��T��x0��%+'cQ� ���d_��$놡;\���B�M?���K}g�_�EU1z��L��7�rHỹD�߽:���!P� KF�/�9�o�;>x����u�t���6 w����{VT�;��w�뼋����,���o`9��B�V�� 0F�Hg�Se�ɫ�%�����K6˴ſJ��k�(����C�_8�l��t��yD�瘧{Zrp�4n;�cZȰ���2L(2�ۿ��5)������7P��(��3b1�D[qnu��͝ym=b/���j�)w�o�i�-Ye.ٱ���9�y���y�)jŒ*/�R�i��~er�I��qC�^H�SW*���kr��x6��U;�{K�Y}�?����ӄ��(w���#R����E�x.��\%�`�T>v@���|�Qo�zWl���������g�bb&Ji�.!qVn��A~�xJ�ވ�{<�.��=��g�鬥C]@mBɐ} ��8�G����kXG��x V�[H��X4:��a�Sn2�M��]G���Hi�3SВb�3�%��y�-���ˍ��0�)'@�a@�~�&GJDoL7�(�=�] �_�[+�]#[.:�W�yػoyyu}�<|L|��y�y�ց��� �S�ޗ���a�i�vc��M����9�Ќ0plkB,��,�NR�/��ND�����P����h�co����-8d� ��歋#��J-I��</��o�i�/�Tۍ�t�2ف������ڦ���w���\�� ���JB��H]�H�2jk6���j��{���2�Z�[=���h�T���my�,�)F}Q�Wu�с�f�M:���[�?_���M��B�DEe���w@#"�0��_��4k����3��f&���O�of2k�����&�>)�n�Jӗ���������� Y���f�Դ�=�"����˺Xbq���h�����AZ�P@��� �#3v7`aD�1BtS\�Ldf�q�N� ���x���߷:1�({E8~1Q�C�����HH_��W��b6|lO@9�,F�;��)����Eeȩ���� Q6�L�+_�^R��N�~*�"n>5�]�jU�3_��Ύu����*v�����M��_WQW�T&\]�e(�ZR�r��%�I�m6����4�Z ��B�����1ϑ�EU�?�Ou�g�jd�F�J^�do�|f�Uw���(#���pv��?ET�9|μ��, ���R��ς���&���H�`���ﮪ#
UnloadPerfCounterTextStringsW
nxProxyXll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ