Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
efa50ef32356d7a84b3f8bc8a3170b99_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efa50ef32356d7a84b3f8bc8a3170b99_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
efa50ef32356d7a84b3f8bc8a3170b99_JaffaCakes118
Size
308KB
MD5
efa50ef32356d7a84b3f8bc8a3170b99
SHA1
20fa9f3538ea723a2eaf8e76af926bde26c4562e
SHA256
1183fcf29d006e59a2f52ced8b2248acdf32a08be1ebdda382d00dbb0117517f
SHA512
f7cfee1d41bf14400832402535c4d2ddd3f0d59056590206c9d7e397ed5f8c8fd05d58ddf65ac6103cb83fe321c70fb482ad447ba820fc13a20c06791a1a8970
SSDEEP
6144:+yt9HuK7K47+46NvC24o3VO7fy9JThDCFZL4w9rG8FzapScUw:9pHK47+M21mZp9rpEScUw
ExtKeyUsageCodeSigning
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryExA
ReadFile
CloseHandle
CreateThread
ExitProcess
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetProcAddress
GetCurrentProcess
GetModuleFileNameA
LocalAlloc
LocalFree
SetCurrentDirectoryA
SetErrorMode
SetFilePointer
FormatMessageA
VirtualAlloc
LoadIconW
RegisterClassExA
LoadCursorA
LoadIconA
GetStockObject
memset
_XcptFilter
__p__commode
__p__fmode
__set_app_type
__setusermatherr
__wgetmainargs
__winitenv
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_ftol
_initterm
_ltow
_wcslwr
_wfopen
_wfullpath
_wsplitpath
exit
fclose
floor
fwprintf
swprintf
wcsncpy
wcsstr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ