Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
eed1c81df3fb645a720de06f942ef2f4_JaffaCakes118.exe
Resource
win7-20240903-en
Target
eed1c81df3fb645a720de06f942ef2f4_JaffaCakes118
Size
423KB
MD5
eed1c81df3fb645a720de06f942ef2f4
SHA1
fdebaba8f81a45cd1c8672beecb591ab1728ee60
SHA256
2d1c4c35e53158cebba57bb4fd9f19ec5e8d3c5aa347c02bd00761f1cd256b70
SHA512
18ff119d86bddd5ebea625696e8bcc7efd843ccf79c6053cb7ac2c174207f879ca43d430f68269049d17dbee0a9b93aadccd6b734ccb09c09bc21b023f3bdc90
SSDEEP
6144:wBkbLbTck5ks5PvU7/7WFh/z0KfN5jWmbxFe82:wW8k5f5HAjc9PjW6ja
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
TlsFree
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
PostMessageW
MessageBoxA
RegEnumKeyExW
ShellExecuteW
CoCreateInstance
SysAllocString
HTMLayoutRequestElementData
GetAdaptersInfo
InternetCloseHandle
�A���,�\ ӱͯ�l~��.(�T���* Ȃ�Ȱ�߅ P}�#r���F -�Z?7b0�s� �<����!�&r�abf���k�cY�-�A�wb�Y��.4�Zb�?��������:�߳�z�9��r�h��;�N��#r�u4?M�-|U��_�����A1�]�4�� � �<�)�R�y.�T����\�/�h ��K���|�!����b�g��,Q�My��篸�m�@�b��)3ؚ��,b.��A)1��G=ӊ��S:�pK[�2�����4h���[vYu��<�9]a�����hMqxg��NX�ںM`�*���j��P���Y �[U�������.Ȼ�Y6�z���Pu�^Õ+<o�&�BX��ecaF!�Њ�o�^)�l|��`��M�nQ��c�^�"�j�����I����G��x5��-��uF�I�T�������x����A ��R���E{fV�H� �W<Y>����x1$� �)6;i�?D��>fUMuh�l>b�6qd!�3ߠ�Y�A�Km�j@B~���Ŷ��)�gC���8s}�o�ď�K�[x2�H�\��"^hZqW�#��A����M�C{�> ů�W��E�Y�|�nCý��_˥?]��Y�_�2Ii�� P�OO�"����R���2��LJ!��y X�Y�����5�OD�x�YZ+����h�: �Gn)U(A���H���L6V�)U���83}aH�����C0��R��R �R���!ЗeVA%�L����RaN��ĪΛ���,� �/k�Y���^O� 4C ���4�^kHp�a�4���xn��.��dT���+��8ٛ�=�ʧ�7���q�����jJӜ�����?v�s,(��3xϛ�e�b".�ti'q�ջ,c�h�cx+y�C����n|��lHH9Ͷj1��jjvO��(5,ٓ�˾}4�ɕ,����!�,�z`2ӫ�{�t!_h�-f�W��\x(��!R��ǔmMA��'&�5�96K��M�{���]0�:��� ��Z��9����-/�%]�=$���[�G)o���y��y������bѰ) �o8�ߚ�n0�ߨ�Yu��У���d*j�d�C��Y��@�IH(�U�1��C}� ��+�P�T�>��o���7��*8.�r�,}��LƵ�HF�$��RL�s:m���m�k��Z�+�/��P������G��M8�|?v���U�<�{%�� ���=�^�����<,h�k��t�r���K-`p+��l�V�N��#\�P�}�������NQNo����*\Ou��ف�N+E4���uV�O6I�$�p`���VP�/$j�K��l�I�Κ�B���a� q9|F(_>�&�ge08?$�"!��u���)�&���w��b�dz��4b�'YNVm���ڊ��Fm���&mk7$�^1����+�B�ؽ"p_�/3+��d���3 ��N��\�ia�ь�/;@�]n G����J�c�I��T� �׃�����ه*z��XL�C�l(��!�w���L�:�o�gJ'1V��OU��C}&gs��f=�=|�,[�`��?�0"��w��ьTb�6��1W�c�`�y�>ޛ�k��h�~��� #��������,�����8� w��%jJ�3��7�3-��oR\L��6�:�@�����G./������>��z2�,��azz|�d��2[�/�y ��؝�Ð#�ޜζP�����T����Oʻ#$�8ݹ�=;��Y/��VS-���4@��Ƭckr`f�q1n��2B�O�8<k[���������=(�������=@s ���%��`��پ(���ׯ�M�[y�Q�[�0�F;���W��K@\9[�-fHz���Fd�����o2�C���w�����u�t$�j<�L6gM�ۊ�#�� D��S\m��aNc�T΅��s��~���o�$�-��zY�㛉q���_��u�i�K��y�ƼQL���0��#���A�UaFXD��)�7�o,V-�|�:���e r����[J���9�D��x�B�e�S��Q��K���'酩�x��5=a��ֲ[�ay3 ��xK�j����*��s4�x��u;����,�G�<G��Ih}�k{ �qnH�JV$�1@��Rrt2�$�Qd�zJ�Mjz;>��:�Y��w�=�S �"��j�݊��m�z\W3���^� !��#<��Xd�o�T�!�=F���ﳘ�����:3�}��;+4���ij��E����%���ſ�0�+��½iU�3*�Rԩ���Z�z�L}!x��{A��UK�=e�*�N�Μ��'�a��S�1�c���e����ZA����R�,�9=Sr�z]�����������i+���S�D����7��x������B+��>=� lz���gȔ����QC��K`�� L��&��Y��%���1��^b5ˣ!z_���hG�4u�a>B��)�i��x�b �gB9��o��m�k�*q�&�^ǡic�'��:-c�w�o��NJw�� J���#Lgq;�4#;�U��S��q=��{�ҙ�ێ: �����' �\���O�����pRvH�ݢ��ZAⳗ��:���1��P�p���]��[���E��������K��!�غ�+�>��ij%C��-���%P��)���k�2��H�4b^��('��G/�N%�M��V��̘|��TnCt�h%J*��F�}3��LHQ"©s�f��*��o�vb92��p��囨�tְYuNӍK��G?o5����l�\K1"����g�m��7�""M��bX;,�Z��zt;R���Oe��[���Wu�k2����O �f5��I1J'\�Z�uF[@��<p����������Hsrf��q@�a�-��W(�R������u���.�2���h��ٟa�+k�[�|_F|�XC}�i��Iډ�;6%瑘������L��ڵ�0�$�d�g[�ml�P̬�]w�U+VM����3��,j(]m�:��=��5������-�s��,�q4�5�yr�j���
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE