Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
f03a70188281512a4ee4a7b2298b9064_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f03a70188281512a4ee4a7b2298b9064_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
f03a70188281512a4ee4a7b2298b9064_JaffaCakes118
Size
1.5MB
MD5
f03a70188281512a4ee4a7b2298b9064
SHA1
a08dc99717cd4e3b0e41eaf6317d86364fcc4e27
SHA256
249bf14598678ebb29b06c153de0a78a0d2f8808689b008fe6ce643fd48cb68b
SHA512
dbcfae79ef38696d262bd3fa8984cea19a89f249d07f11570352ec4f603b7019e9ab4b3835ac712c9630f4c92bf232db5d6c50fcd046ffbc3b6311d62a5a6339
SSDEEP
24576:mNT1i7yLCMfJTu+/B9FOVQ4zD++N52cWXJJp5+hWBz3m/dlebwGfFfm3/Vs:GytAhrFOVFzT52cQJJp5+hWp3btfY3/O
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
FreeEnvironmentStringsA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
MessageBoxW
CoInitialize
VariantClear
��Dw{���;��@����lwRp���8K�v��۩�b�km�Ɛ���x��7�����w\E�>0)�(�i��e{��l;4�K�:2Z:����Z˩!ϝ�8��&>��g� 78K)�z��G��7�p�/�������^���UOզ���v�t�������o�J�0�-�@�Ç���`�=}Hĺ%�AiTUz�#LO*��3��7��wn�"�Zo��H��Ө�AI��d��4�.o��.|=����@B)U�D:�'e� *����`Vn�'�5Z��n�Nt�cn����j:}b�|���i�`&TG�&�Z.�� Pl�|���/�!O���gc�(�6 �F�Z�q:w�ei=h��H�U��@h�����j���1�'L$Wmd��S�I��� �H)7u�����t��n�L��ː��@�C�[��YȒx��^I$kq�}�u��!���i�ԅ��KMl6q���S��ͤ��{�EO~,��ږy9*�:��ꅑ�[ē`�7�D���\`C2�%�#������[|�Ŗβ��L�nAF�W<���w'����nM��Zh�e��ܚ�_��H?ԏ���S�H�H�z؋���tN'�f�����A�4��2�:q# #1W�q���p�����|8�jb`Ա�GwC�W��3oڑ�V������?x�Bb��#�%E�u�y!t䟴��ݶ��1%1��J����S����7����.i]���F�������'��#���A�A>'8�s�U�o�͉�xtb���b�l�S&u鑏+U"�;���tl�?�ܑ��N~z�|�0\�4���rE����@�!�c�C���2�8�!ʟdЬ��I$,�H�MYޜ2��ˑ��tW"�({��-MM�>)�cHJr���s >s�(ȸ������g� �E�Ӿ���n��{�����U ���iO�-%mkg+ͪ|���C���g9�d�,�F��0��5��TzQW-i*�f�b��'U�~���74��6�܆nxXH]bv6��$N&δlQh�9L��p����@�m?E�.-LR*Å����N*��Ղ�/ڃ��G\�W�֔۩zS���L��xIj ��(V��50}���Q@a���������/����Kp���3�m���{��P�%�I��:�ih}�Ӷ �P�^�|��nΖ��)4Ww��,E����Ň������}z�� �J�P�9Sz��9��)�M��<��O����q�h� K!6��6s���������]�Him�NK�y����?N�K�_�ܢ&fP};ɠhE�K.�a�����hPذ�k��5�g?��s͆u�����d�.R\�@l˸�<roK�~Qu�(U/;�=��9���;��8���Zr&3>�fk�]s��*��d� k���x��|��d>�� ���Т��Xk���V�C_f�y��Mr���h��Sj ?��W��A0�Pj�'�+�:�/�}"8�U�����KЈ����ٛ.�`o � +y���`���.����=�e���?�7.'�W.Ktr?_#��P~dˌ-��O#�݅��j��ZPg��']>Ŋ{_Mc�p�S�Bx0�p��꼄���h(��R������/�l�� ���9bX���#��Rip��d��tI�x�u�����6�5Y�\����~D!-x.� �]۴س��@����p�@��k/�V���5:�����V\�Ra{�lN���P]��$f�wG��u �:�����;�/H�_R�����wHo��֢,�ȥE�Nk�i��0|��{m�0,�ꫧ�rEC��.t�O��/�����e ._l;㷤��`��n��w���o��J�p/D�զ��9��/����j�3# �m�[o,�;��Ә��ۓ�YI(��`�gh EY#���mR:� � (�c�{.#��ut�g ;���E��E�3o3*!8��^-�E��\%ܯ+�o��P��L�&9O����m=ǟ���F�G�T���<�`��ؓ�p�D������fГ�������<�4!13����LsW����c���Zx(��|�&�S,N,���M�>v^�������}�4o�l�B,Hk0˺4��O�H�����C��<�i����bPD��Vi[;L�Txa[��&����b\6>�)��� 1�`�a��)!پ�|e��N.g9r�W3��1R|�O[%�q6J o�|����.��g�ʨ��Tn����r���T��o�)����y�@���{�K_(�wʈ`}���v4B�i��e� |����W�H�ܻ�td5��3Q�5����V�ł5�2�n�hPc��V�Tb��~�/!���cl�:�n���E�ׄZ�Ѭ[>�Ϝ�G%f侚���ʊ"��ۿ��%���r+�Q^� ���fS}<��O~�u���ΔHW�C�,�p��rt���T�>��Gm��z�<1�ȥ0�/��R����J5��bD���S������I��`g����Q�N�Tb�\�{��Xa�<(���[Ў'�7L��ϕ�K���))�@�,c0�z���[�`V�C�y�ø��A߾Ig2֊f�o�Naqƒ�䡖QI㒕5>��y̮'�(���z�l�W��rn�B��0���D��n� TRBC��y��B�x����:켔7�87��&��LЩ�ɟ���3F�Jt)�/M n�6��g-V�q���x�$��'4���?�-]���<b⊏ڴa��R���y"#�^&i��Nͷ>_sވ,�{�l���G�F`���qLt<ғP6�7V�u?t�*�o��ǹ�<�\�8z�~"S/1��2�5��T.�+z�c66���a)k�o�̘�B��暹��#��s� 4�B�@ 5] fb���L��䎴[W��A��6�\����l�A��қjq�H{1����?߲��(��� ����{6������=����{P�7L��T�/��:۷֚Q�;l��v���ҕ�'���4�Gu<�!��m,��q�[e����J9��.���tcv�;'�aQ�0�^L!nL�/�| ��������������j��k "�5>h�^�� ���nv�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ