Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
f52f5d972e87edb981db5112a31b58b7_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f52f5d972e87edb981db5112a31b58b7_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
f52f5d972e87edb981db5112a31b58b7_JaffaCakes118
Size
1.5MB
MD5
f52f5d972e87edb981db5112a31b58b7
SHA1
01240a7053f8275ffd304cce88a063c5c42063f4
SHA256
1543a81592e35bea751cb122eb559027c3118c7312c23abd967910f06710a5c2
SHA512
7c94b84236ee31849796a2613a07aa91f8a2f11361ba4691266e3abae3ad9a192af9c205994c59c961ade65222eec0565a7c65bf649e37f04194fb9b613a3363
SSDEEP
24576:qiYU28wYDQ7A0EDKeopxFLrCEdXtrjBLRArFlltZJfqaVc04b95fNaDOTCclVl:q9UsyQnFXrtfBtaJtZJCV0ifH
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetCPInfo
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetTimer
OleInitialize
VariantClear
�hէ\';õ����g�v�����,�� 9y�9<Ծ�:L�3.h.q��R�U5��+dG���bA�a�x� ��&�e����������Cś� �?g0h�����5L#j�CL�`��*0Q|��z}��X�{ �����YG���;4;�1ߌ�^���Gў��U�@�a�lZ;�f��SOɿVF���M�������B.$j�m�o��`Z�%y��($�o[s�8r6[���M(冠���]m��#�3����a|h������?m��������B�D������H��$�GT��mY�o�����g��f�E¥B�Y���eV6ً嬨���M�k������j�PL��z'����IY��[j�ŔۀaMs\�U��[�Cd�D�������������$��#��g���U�� ���Q�ȼ�ec�4n9+ʐiܫ��)�(�U�@�+��&ֹT�����O����_VFjd��Е��^����WF!�c�i���f�i7����bY�S�s@����{�_t�JI��{�Y$�;r��gI�R{k��3��@��r�-��Vd NI5�z�)�̷�����z�%K���T��(�Fr�1�J���Z+1���Ȍ��y4�����;�7J;j�֙����7�&Д(#Y�j�e�H���F������Q� �E���|�2}x}4h^j�Y��g�L�$w�.���;��/Mp���(ҫ�}?X��(�G��m��i=R���u�Ko_�2#�`L�>��z���/Rtt�Rvذ�{f��Lq�&��!��U���K�«�g*)Z!&����p���QKc�-6��l�s�]?uEl%&��a4Y�+p�L ����ڶ�ʍ[t32�T�u�>_�"KR�uI6 ����'�s����?��?_���^%�������0��kr�{z#z����O.�Z=*��L6���oZ7��Jl5���%G=�:�z�0�����C�c~T�u���;���4������H4,*��b%�2���[L*�5�ަ�!#�V�@SX�?�OE�/˓+W�JA3?">������VȰa�`P8�ĽR�ڨ�<��\wI�q�rVhbk�C�ִi�i]�(�A-���! ��9��&����R����U�����>�S)W�_4yu2��ζ3�pl8���ꂬ_���&J�O�rX*؛�n�����K���A�wE��^�\�{��0Z��s��/���SJ_��[�Z�#aTt����x��D��G�BA��"��1!dt���q`��]&��%��5���*d<�X獆�<V�R:w8���Dn��A���}/�*�*+�j�_�B\�R��7��`5���m ��[gE��{�>�eޑݏ��Cij���G*�{�g�vҷ4�����W<�Y�1V�_���2��z<e�N�ĺ��W��� �`��R�e셞Է@+v�LB���y�����&�Y#q�:�%���s.��+��K�K���alSD|a����� ��(�$����UKc�v:�e&���x�Js+V�#�>�ّI� �W��v~�X]tS���ɖ[��G |�N��#���l�^g�Ի����$i[m��őۙ��d���!w��B��H9�W e%��(���*�9������>8�B:;��u��̯��ݓ�PB0H��+�NR��C��ww� 0[H��Ÿ=M̏�x �Nh�1��#�H{!{-�����+�vM��nUp69���o���G����`�EKu\��&�lF�{ �E0#]'��$�\%�El�� M�0y��-��Ѳr�����^#�ۼ ��z��jɈlƝI�%KP2B��,�z2[�{��;��A� Ύּڮ���e�퍘>��W��U8c���O��v4�0�4��~�[�;��KD���}r�;���9*$1*�H��_��2�3��&����]�y!��"- i�(*�_��J����C߄C��ex��o2��������$�v9Q�k<ư�;�3�_Ӥu�EW�zd0�?/�C� j�gX���N�654�|ti�_J<��s�x1��HX�7�N��Yn tء+�S���C�+�DOɆ-i-�$Ѡ{e��H�����7 nlD�$��wbj��籧����n][��W�`����a�Lt8B�(S��~^�sW_(�#&I�xmͤ��%jy�Zj��hXŔ[��1"���y�V� ���{{e�coG����������Y�����ݷe7G�"X���!tr�=L�5;k�v#��~��j�!P06l��-�����]��������)�� �J�H��F���3�NaD۵7j�,��JƋ�Ir��F=R�U��-�S�xu����*m�wy��� ����Ún��Θ�: B6�R1�"��V���QXh`���<f!!&���U S���]�j�^���q��߰Ҍ��0� %�ୌ|Քs����֜��ϴJ��U��~?�7%|f��ܕ� t���⽆��8��:ɮ��Kr:o��`����9r��������C[��V/ �����#����Y��Kؒ�4���NEF����mBտJNtq:n�)OuH��y��<8ZӢzA.��}�j4����H����������xZ�f���������G�/���vMCؤ<��k���S���D�Ho������c(���1�V�4��C�F�]3wɡZf�_��=8����,p��\���,� �kXz����f�N��3<s���{�Zgl�2��Uq(�_�Ġ�w]Qn� X:KLp*��Ԩ1�|W�p:�3���/}��(h�����p �Tg9��!�~^6FV|4����P�v��]��Wz�����͈il��ge�Q��4��o�Dg���w�9�?;�Ұ�W{z�����WmQ��6�=��7i�b�����8����#�u�{�RZ��9;2�r��{�Y�K�I~-�/Rk���D| $�d�d��y��f(����1*�v��B@��H_P�rLJ�ŕ��w�Zfp)����}�S�tH�%�Wlb�e}�r�;U�||���/�b-�ur�90`Oa0��5��h���@C�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ