Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
fad965e6e07465b3f341ea7ec1dc6eea_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fad965e6e07465b3f341ea7ec1dc6eea_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
fad965e6e07465b3f341ea7ec1dc6eea_JaffaCakes118
Size
1.4MB
MD5
fad965e6e07465b3f341ea7ec1dc6eea
SHA1
10fa8504f958ae6daa66b4179a36c1b99cb9394e
SHA256
061d739816fa997ee40e05fe83ca25a2252ca6e01347511f1a014138d0a2a590
SHA512
4ce5ead13b561ab53641644756673ad8c6143d154200cfb1313b7923a654b3da7fe3fca3f986bd5d8af927480d49ae3e2709dfaa058e5e64bb3e091adf477ff1
SSDEEP
24576:Zi5m/VvgwEWOZoqJoZjOtQBMaFmEGYfFfmGTl9kDYLjBIMhBuAIaSOQkG6LJQjV+:3awHwYjBXmEZfhplODYLjBIMhRIv6Fqc
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateSemaphoreW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
RegisterClassExW
OleInitialize
VariantClear
p�Z�i��i����L�ǼW�ĖvG`��Φ.�c�]]�iۓ���ο�?�¥bʪ� ZV�@��=�ϡ{����!F�����G3Ҥ=U�c��pV���5~^D�Z>?A���&�ge�^��T�+M�5l���יe��1?�u���|��z��+���!⊮J;�������:�ѻ������JH�]���ϑ�q@�+!�Ҙ�%�R%�ԕU�o"Y1�����x��j���-�9�`��-0�T��-�v�|9�K��,'��h��;�ڼ[�NehxHue��'���i���eR�(lMI��YdS�vv�s�'�Z�?I߱����D�[�9dTy�1��# �kƙE����a������9c�h/���R�F}s���D9��{����&�3���mqh���17e/2�A��p��T{���Ӭ�"��ء]�p{,sJ��r����n!iKu� �ki���:v�-n���`���!������J2��q�)����|������C��7b/��'.�]H�{�֪������{�+�xY�!�l+��^P�����$����|z`G<n�08@�.&��4��DHu���3����d��2�YL�kJ�]w�D�Þ�5!@]˸R.��O�v)&�*�6�:�O�|2g���3�A�_v�]�݅"��H�t� ��>�����K�{g�Ifxqa��NNq�e����B��_ }'�g�]U�x*��Wa�R�*v��)���eҴH�%�G 'ls����3�f��P9�ٿ]iµ���Pn�EIc� eб�2"uȵ��l,>!\�X�ѫ<n��Q�~߯W����IbF�䐃�~�0B�������w>�2ӧ$���ڦ�J�(���VH��m��`[�����Ή�~<i�Sé�<�q ���Gz++���a��VA���>GރF&-�*kn�~�n���}��Ҽ�����E��O�>�|���+��lF���j^����H�s�{��e���WP}�i��rt!h8ޕ<�N|(��^č~�� ����<?Z]] FqJ8��#E^�k����/�+J_W3c�����s��8�-��-�!%hTN=C13g�����~N&�!�+#ƻo��Qu�~{�Y�r�[�^Y���w��z-��9U'Z�W�ĘY� z�K]�b[�昩��7��^ꛝ%(ȔZְ)X�z���4�A,zF�r�״���CN3E {b\&� B��C;D7|B���Ga�KjQ{��7v�Ԟ=�-������Ԛ�h#���-��P�`R�G("Ě��i�H�EҌ� �Q3UH�]��57 4�����V~N^d�9D#2��.��Ԩdu���3�]�k� �Ƀ�����b��F�����s��v�j����d�S\G�{!�J u��±mkd�ݴ��i���KBJ:1Br�svp��#�p�o!u���.�MYR?L�$)���$dB �¥_w��>�C�*�%z���1���G�4e�vq�*?GPI7%�Uf '�%��*��F!��%Rq�@�_*�5�؋��k�.7��j�&�%%:�$3a:41�>,�a�^ӜBk�Hx����Z7bSF}��ߡ���{���9#���/��'B�@6\b�(rq�\��6"��qN�����@�������fH������|�b7~{1\oΏ��r,�,=R���Jo EDOj��a&�9錫�S(=�k��ߕY�}n}2����J���pY��+��{#�Ū4v,οo�!��֛��USG��E��BF1��E�ۉ� ���bތ�?�`pk��M�X�_��c�U�kTQ�i��2��8���C��� $�E%w�t��U������9����S1̂yo����ͦ�`�R����n!%��ts�YbV�k�peu�%���?�m�C]�V�����a�)�}I�2�;8�m�lg\:%� "�7}�]G������j�,��K�V�<������B�15lypFl� {{���K���Ύ�l�Ŷ��d�8�҈{L�VB ��H¢�(>����F���e1I�9`����Wp] �]�����x3��C�����wڠ6���\{�� E�>�� � ��Q�u8)�,`_�qGIa�/|*K�B{�O�Dn��+I�r� Ȅ��냋P�;agS_��^��fb����d�P�W�@f1���x����_���}���0Qh(W�?�����R���(��e���uyT��o���t�)�Te]a�BU���X���.k��ɷ�# ���ӏ��{�uA�ф ��anWg ��M�%�Q â5aO,5z��c�`�o��m����Ջ�f.�&\Y������1������K+E6���}�z�U*]�Ԛ��B� ��An�rd -+k<��k����4���q5�r )���Xz�qt���O?�u�?� �g���r��o���VzY�����8!�(l۽�~�V[��DA�G<�Q�_�]���PR-r0A�I�~���U�0�̛�q����'��| �|:�jǷW�P���^�:浽;6��>�lSh��}`�X��^H�cFW�$�4���s�&�[4&�a�$j�G@ į�'\�v�� ��e�Wso��v�ݎ��TX��C�1 �ԠX��,� �g�} 8��V��A�M�J�#��Id��9�p�Z<=�@�a���tQ|#�OT��G��#;Q!jH��k�_��X��!E6�+�?�?�8��@�a�Q��Yisl-l�����'vx�3}��������e��?��P���!�6#��)̯%�������"lh �_�c�W�0s���P0 �R�JL������Y��Oz��]ꭠ��?R�����H�ѹ��ΝZ �ⅻ�ԏ�5|��ڴ1��^z��''���JS o���`D>�����1ߥ�ߴ��4�����Tk��%3H��X�+Vyx=�o�RS̀ ��d2�k2����w���_���e��q�孢/���i�AL��b@}��R��HSj/�25���7�����;v�����a��IKФ�jO�����(ӹ�f�Ԭ��p�_α���t{�Y����H�� C��X
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ