Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
f0af8ffe1833bd8b85314df283199e85_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f0af8ffe1833bd8b85314df283199e85_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
f0af8ffe1833bd8b85314df283199e85_JaffaCakes118
Size
181KB
MD5
f0af8ffe1833bd8b85314df283199e85
SHA1
371b10195b806c038b8a0f25b87ee5465819e811
SHA256
8c39fd25b6e3d40d8b2b537f123f99e6c811ae8092037206b5bcd4cf974e6e49
SHA512
ca5fcafa3a71d220a7942daae03a201649c99c8aa35d80e8026e532d4802a0105d059ad3b75e04d7ccc6bc9305b058d864de88e974f564b39ce8785a2baf5486
SSDEEP
3072:45cEW4QB3Z36qaKKANnnumlttqEOdZiLk25Uo5l2Om:kW4Q5haKnumY2k2SOIOm
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_controlfp
GetLastError
LoadLibraryA
VirtualProtect
GetModuleFileNameA
CharUpperA
MessageBoxA
QueryServiceConfigA
SHGetSpecialFolderPathA
�S�[@�1���%�s�ۃ�o�?R'7Qno2˙�ǡ�c�>RG�MM*��%�6"%ʺ�'�����IÒ���s�v�*��RZ̬@7Ж̮3�C��߸�ݞ�������C������S��n�pۦ����SE)k����_"�U�7 ��K�7�^P��I������G? ֵI�Fo�*fW�t�ͯ��|k+��ǖf�u~�:V��w��9T��s/����Y��7�J��˾Իv�>_X�dJ�����<v�n�(*�k�;� �=*��d��7S���oL*z���/��;U�;���@�g�=��B��z1�B�4RJ ��T����^������"X�ڽϮP��;-����5#:����f �ʷJ�.4n��#K3���-�I�=k�g����6{��k��>��I�Z�ʹG��c��B��1�d)e2�ac���������Z��[�B���~cuT9g��(!8ȔtH��҇e<x�K%J���_٥s�`�H���"�oF�o�p�xƷ͎.3cRVv�K'+c@n4���Ɩz��c^�o���f�cuT`_X|1uT\�Pq�K�6b�S��-�qp��g��}ʓ��Z����s+����h�Q��]���b�Xm���`��㲖 ���UKBIC9�#�'<&FuO�Ok�B�{�H��-x�d/x��\ߍ�:� �Y���]j ��[��WL����oMyL�����<Rq'��H�[Ԑ���� ݐ�������g�G��Xլ��������6�:�.@ŒŤ�ҮM���^�D:3�{�PC�˹��ǀ�T|��;n�SG#�^�}�(�o��r�2W��qiR���r���J2;3���� O�K�D)�؍������ň��3K<|�Ģ�,�;�6�4˯����-�q��Q �u��;�G{XJV{z�tJ�����q�#d��$���(�SVW�U�klu���8�0;��̘�i����ޙ�R��� &�k�8�������"@�J.�����,D��#��*�*����DKi�$��w> ����~�Xٵ�2���S��Bt�}siх1iTV������l�2щ++����b<\}��a%���}�g�R���fX$��_"�oT��G����{l�x<1�\6�w{�B�/ ��\_�j���6��t���=w'@��P�\��p݀����"Xjul�j�@���2i%\{�y��L]��0��LR'��z�� ��5>�S���>oQ��5&�����Wp�N,��ߞ�S^��8��,`G�t�ӉO��/�f0���6G�M�"�k����z�K7#ˤ�R��!/8m�4 H��u�`�kؽ2�B}�t 9Y��:xО:�@<T�'�u���i���c��xJ��@Q����6?��#�4���)�EP6륧�+w{?F|A��=GHFY�� y�h1A�ibȺ��ЀÜ�f����$���&=�!�� ��������B�� ���'�/����#��D6j_��T: ���ȋ�Q���v�ɑ�=�ɛlmm��@�(ٓOT�.�ac�XGa���h#� ��]�*^w�_��ai_U��*`gS���7���2���6���u�_�H�S�� w�Cm��S�l����u���P%4#����z��[ݶ)-E,3+=��7���q �R��ԛf#,�Y&��+2�bQ��'�Xu;��¦�Kؙ^�۪X �K ��`�39���i�9��ʭ�ze��ļ1�<x��³0�����CU�z}�YϐDnQy{�,���Յ�2kB@&����ؘF&ӷ��F Y��3��?�p�MOb�H ����x�6T]�����0���N0><u�!��%FY8ܘ���瓽l�~��A��*��L��rkhn���� ���|��{B�s:s}F�5[���jÉ�i�t��ΪANVI�X\�!s�C���\�b�Y,f�%�VgQ�7�"���d�Ӛb���1cճ�i��2Llg�EAF '���}�1�C��q�M=~$(I4D��O�FuU�;�D�������Ov2����D��%�z�徱Q��.��E����ľy3��S>�u�^��{��s��qX�^���{�P�f����|U`�����L^��6+q����j� b�i�̞�����7���VF������z��i��"�u`����g"��t.����5Cp���?��#f�9n���\�1�d$'~JB�@��{�j�� 6�N$�}����i�ݔspu�rQz�"V,h�1�"rJ �yf�;��I��yo�Kڲ��q[��4�GRō��h�N�0���|t��TUکE���a�vp��}�r�1l��<�.�Ҝ��a��2�E����r���%f�7���&��͓o��dĞ���T�~���+�Y�4>.�aB?o�-��4y[�`�Ȼl����}��ɇk蘔R�'�H�K9�S�D�u���0 ��0��ٶl�Wyg�p��H�,�Ԧ��B���r�z�Hke�N�B������y���~ϝ�����9��P�������&�f])�]��q�r�������<.����q�(�\[��Bz'����g�S/A�L�^O� \�l�͠��ѧ���,ɟPG�8�G��G3�VqY$0��+*����)��I�@6u�I w((��Q`��K�.�n� ��� �q1�fS�`��y� ^ r��Y��:��"�$�?>XG�Ҫ2�z���C@m����~<SBЗs�<'LJ0���XB���Mf�葓�7 ���� "2�~�P����(�C�MՍ�3�$���u�r'〞�}�%�a�A=q\Acp��G�~W������7��@�/�_Q���>��I�7��Qo�J��,?F�$xsD������m���a�i�8mu�����]�*� d��y���D{&+���i�x�?fPl`TƷ+-�_�f| Y�z��I.fw�L���p����t$��am r�I{�}�CK�m�f�9A��,TL�R�/.-���@�ӛY�0��Qi�y����-^!��%(�P�{!��u��Ny�0�%Ƅ>�H|.��w$�%���u���aDz7���ϠS��<�&�UL�i<����bK�+��Zچw.����n
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ