Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
f0c072944d342b7fa760db35713b35f3_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f0c072944d342b7fa760db35713b35f3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
f0c072944d342b7fa760db35713b35f3_JaffaCakes118
Size
1.5MB
MD5
f0c072944d342b7fa760db35713b35f3
SHA1
b8c943994c8761a2084df911aa1b820d12e7d0f2
SHA256
154e71adb7dddbd691bba515e3ac5a62abd14f1f6514d007eeee7d3a4456dcb0
SHA512
5a828a5c41cc9cc1247327d69b7ac1e4ecd2885e2aad59e3081bb9549c9258e49f49c8adbf03ad737474f2298758c21801c6aa8622a26cb13799b99f695e3c06
SSDEEP
24576:ZZJJtF+q5jv73XgNNLPnbBLhXAPoSMov7UERkpTx/Nbux7cXTMxo7pxRhpuGVs:/7v7ClhX4vPkrZX4xaXpvu
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
FreeEnvironmentStringsA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
KillTimer
OleInitialize
VariantClear
3�k�]��O�-Fc���hJ-�q�����������kȠN���7��5a�@�oꗷu�N�Nm )ݕ=�6��a��{�Vb!�ishS�V��(��Xޠ�r�B�W����r�x��z|l�O��# ����{=Y d/�-� �Z�wb�}{�r�r���hI�L�BE��p�]�Q'��38�k�.(��L"���C����fZg�3*'&��%E: �����!�o�*�si�<���|.$n��i��6�o��d�����:���ӻ��m��:�`���W�荞�1.����>'�a���,���_���:�|�6,1�5�I���Ŕ�{�;� �M�_4j�Pu!��P]i�Ѥ�����I.�Y�9M�Z��cT^qh�� �~Nv�q� �c�e2���ǧ���Gf��3���vz��W�d7+%b�`�\�MV�;$^��<ۏ˔wK���~����oM�� <~EĈ�'�+����5m��ȉ����nbZoo��d��wW���+���A�O�����U���_~�}�vd<�v��h���g7U���{�l��г��hlƍ����k 9�}*4پ�拴�?Y�Z>�l5�_c|SΫYwh��Fa^����T]���n4J���K%�Ũ�a��8�ƓC��?B�XU6�� mQ�w7���ϲ���H���a����y���49ܠ��_�n��h���ⳗ�T�ϻ�kH1��DeC�Q�3/Q^�[���R���W��u��VM!<��;m�P�莔6\��0�}��L]�Zo��)����}#���_�cZ2x�}z�G�U!O�n�p�4� [`E�Y��[])GHqk���e}E���z<�!a�:1E���5.H�㪯��G�xCZU�aK�j��~���T�!vwdƉ�5��[�l��T+�C���n\q�͞�P��`����Y�W+�<�9���ZXL;XpH$��7�o���<m�+)į���@�n[m�����ƒҡ����9���� 5�t!-~8l�r¨��]�3��d~~� ��$��?W囗���&��*L%����b@h����e���4�+��2��b��7�l%�A7U�ɪ�k���|�"EK����"�t�O8�9)N%��e`"_$���Ȯ�;��μ�^��uU��!l�!����0ya~)Vu8�]�����bzJ�S���iz+k�Zy��5=��Wrp�#4v��ت05U�7��|��m��֝�C�ځ����~3��P�m�n������������@?�<�9��{[��p#��獧Hg�ЍW��u]D���l�۸@o�m4^�h����C�� iue�]e�/:�@A}ap�4S(@tTv܀,_c�|��,����1�s�U�,!����:�lu�y�*]Ϣ���١��o�����9�� X'c5PÙ�� 9S��NNj��Yr#:�0�I-�*WҎQ�4cU*}��,��v��4�ՠ�= �n.��0�1�>��`d�&J�b|7w�2�L�Y���S�4z��I����\���\[���"�������D�ے�̠�L���@��q�_f5�y~ӗ�U�4Z��W�>�D�"���Z��B%_q�(+y�5�=O}D�?Kj�zN3b3������lߣ!VG=;�m�� �� c��P����V�mo�?u+l/��L�=e�],r�����n3o,~�V�.j�_����Ƨ�c���'���g����HIȥ�$<?��ԕ,�F<[r*�E��/���}) u����lA����*Ub �hv6�Ua�<S�Ɉ�Z8���5���0 4!�y����F�+Fk���<�'-ت�p�W�:�1��Pl}XJ�1��)�k���V6����ҹ.p�l�Y��f�8�����бZN9:x���cLt�V���kƩ�Hd�V:����>�I�L��2:6��Ğs����5z�][����91H5�^v]����S�pt��?����+'��ś�E���C�}0}�-��.{��o����m[��,��N���#W/mBGį�j�_#�̖A"qI��+ap�f��AP�F�>#��w(XH@�?0�5�,��[��=�*�:�wZ�)}�)@N��&;U�WSuf�����],R禓3w��N����TTU�L�8#Y4Š���"�m�|[�G3�\��zZ�; �`^�(¾��a��y<� C��7�(y~ &�<6�c^�Y�Τ�8'�?b �e���)�,��:xw�lB�f@���ҷ������0��%�Fi%Xah$A�3./��^/�9nJ��+c� �To�E?�3v��˾<�OV��#/U�ڳ+[���E�.�S/��C�9� J�y��N]B<!cA��r;� ��i�i=S`[�� ���yp�u����^�7���ևr��3C�bK(�z��Q��c��WJTC���_��t���C$w�4f~��.G�l����)������fm3HL��)}^�M"#,�} �lN��u���mꍰ��zP��Ӄ���P4W�u�'+ި���yʔ�55q����̈́z�8���Y<%�I�S�el��q˳�~�i�o�4�����P�ibu�0����i����7��5�39nX�vyLn��^9����d/�QJ�S����P�{�>o�w����J8� j�.��e�Mnoӑ[�����ך��gL��;��tcF�UB7�!�2Ó�-�NDk���T�-73[�����"�0%�h@��<6�D��o��oaܳ1�d�_հ�R�Е@�/���'� �<q��Z�}yߴ��\#�&j0�ְ�i"�f�LѾ-�tHgSH�cO|s38�mZ� R��&%����"��R�j��̓��B���3�g��T�����t�]���c���Ci�s=�� �X26��ѷ?ڶgh�׳�q�dg�|eͪ�J\~�t-�\��C��?v�I<�Ý�H�����F�c'[:F�?�'�ڼ�4O$�W#�r�t�d{!��� Y�e����Z���X��*���C'|�fܦF|۳R�����W\�J*���.���[^p��Ջ��o��~$'��CUZ9|�����شG W�������Ȇr�����Ի���g 4��L
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ