Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
fc0a74a11154fb04eaae80dcc8f90307_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc0a74a11154fb04eaae80dcc8f90307_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
fc0a74a11154fb04eaae80dcc8f90307_JaffaCakes118
Size
75KB
MD5
fc0a74a11154fb04eaae80dcc8f90307
SHA1
97843a35e5c42e5015b7b42b749f9a8567459fa5
SHA256
f4f391c2907b5d1fc7d9aa6777efe206f7e56804f7707d6f6e284c1c30a679e6
SHA512
457793c5dd3b558d41d32a54b25febfe598722c7ef4937170ff23ea39824cf86b55ccb0dcaf3a13499db73488f7cbf25aab2cf433c799f6bf9d293915df44c3f
SSDEEP
1536:gYLJBginnG7IiqhCMzeQ5R0SnbhcIoJk/H7s2VTcz7LLzL:gafgieYCMzvLhcdmbs2Kfv
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
GetCurrentThreadId
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
CharNextA
MessageBoxA
SysFreeString
�6����2�0L�9���<��;a�1s���ǰ�,l@��������'vHu�b@����������H��`��A4��2=���T0���s��W� T����s��g�̓����T�3�o�������Чј�����zdK�a�\)�y\!p�E� ���)�$�(+B�� VmtX�0U�^o���ePR~���4�]Kָ�1��>�`��S��RN^�wv9氂76�o�9�6��kǝ��H�A��`n������{�$�?�ب�6�Mf��U�#/�"�;�/ScJBNh>S�7�x;5 HZ���E�č���u�t�q� ����@_ �IW�2�j��%F\���n������̯i��!�IT��I������p�?Qg�;!�Ư�$�a� M��^>��QD��v/K����Zl�I�M�Q��^sm)���uQ)!L�ڼ�dW���]�̯u|�&R�gp/��������y��U�=�J�OD�7���vW����<[Sf��r����� l��Xٔ�3���` ��Kv/����碡�??K+���;NE���dL�� m�e�?��#@ ��*�~�i,8d#� p��K�ɶR*@�2�a�3�5#a|9�*_�Ԝ���h�s�� �Wv�u�I�@܆T��K+3x&�S���}W�*�r���y-|+CƼ��7�E �0���(��̧m��1�n[��S@z���|W�Gy!&¡�6R���[D����� qWmhI�Q|�OG+�r��Q��i���$0А�Th�vw$� 6E����,�����L��O ����|���`Ktg��؛�>��Ca�b���}�E%�{F2V������#�g�n�� ۍ>z��>�+i<�7%%_*���懲.'�]=�O�%�ᯮ\�;���YԬ���'ے��.�^e��~M�w_�=|�����.����0�q#w���n7��t����J*@�~��t:��8o�Ь��-���v�Y}-{���2���c�T���؞�v����|>���E��밍S�<���IRC���zJ� UD��x�o� �L�-Z�ǧ��r!�\�d�N�����9y o0{�9�cd�l���xǂ�5�e���$��!��(~�λ���#�n�7� ��\� ���P��aS>�p"�"��h�c:��r�<���@�?��!a��R��?�h˭\CB�ǒwj ��Q�-�������O��K���!���xӾFQ����@�<B��+���>��QS>Z�����w�2��� } s"<�W����҂�ľ��{#�n��8a�xJ�3G\D���Y�3�&�P��{�����#�\�2�� Ml�n2��O0� u��-�a�x��u�_���PK���l?�"m���|��ٚi$xZ�� �i T(YNK�E������K�!Weoz16!��GV��c ��˴�76���>�y��ߥ����Z6Ў��K��f�Bw`���\��jʮ����#`,����`�l�F�֬���$Rr�{�a����Y���r%�~Z��VD���ð3��]��J5#�~F��ݿu{��t��~��9ZVL�A|n@ُu(���$!�����ʎ�vU��c��tVW��$�/�Yt�y`J7'S�*i��Qp�P�g�q0������8y<�ꪳG���*�:p�vb3^2$w��}yx�@r���'6����J�2�{>�����M�-��;"�S��Veb��1����% �n��+��;+g��SɋE��]i������ ����ī�2���mI��eIs���ߏ~I<��X[�.KX��O�� �1�h���~�j��0�V�~��su��t>aM�T.�D<�m���x���NL$������u�yVH����.�͎�'.u�ϭ�OI|�8M'Ɔ�AW�;s��_�fG�,)H0���j�;�h�����o8����8;.?��K1��ջO�W&�^\�Sw�a����;'�ـ�P�E��M��=4�+@Ӗ��`����z'�?��� ��9[/�a<oL���o��T���$1 ��q���;��D��pG���{l����r[�l^�1��jo�����`n�ɓ� �>�FQΛw=1!�/�%E�T�33� ���ŷ�;�M�H@o��>��ϔJ��e���$� IM�ٻ�s**��Wy�~�o7ix9�!��Q<�H�� �b@9:��w������U����a��=Q^�g^��30te�{�,T2/Q�J�nQ��b��Gf1��D�&@�&,�D��δ����&�'�!���v�V����d��Z�8��H�� S�9N�<>ЮX����K[���'m���/{p���p@���s#�������uohF�MyĻ 2ˎHy��G+���D?��}��I�͕�%}�W=�G���aw@��J �-JX LàT�*���~1����;D��Ο�&:�RjM!"¹��* v�N����w��#��Ǹ �=�$�x�8s��IF��P�d��_���������lvH���_S���&7jJVn��r�Q�Xy�0ݓ|��#{�~�jQ.�Dܗ�Zb�0 P�o��^sݰz�/��R����� ��z9v:�^�ۥh, mL��?n�:O��G�`0�m�Y;�j)�!�=��I�q�̼aL�<6���?�1$�5�3p=*-3� �\ǁ�ʹ�kc*:O3[�I�n���D���U�$��� pf[�Kn�z U#���)7�=��=8�lJ����ٷ���`ύt���QZ���+�A��d���@jqC�J�f7H!�� �O�5��ƾ�v5��م�3�2�R츹�>�{���LA߾��}"����p����lΐ ��_1��U�Hͩ�|R�8�`���� ��0�����$�3���o�j)N��7(\���tB�eX�Q��c/�p�-5ԧ���r�'����]��I}���l�RPf��ph"�l3�c �F �(6tl���:���D`�?毩�eZE���)�����J,��(R��z�Twf��m�1���U! �Z�P�D?�x�D\�͈����i���c .Lm m���U������ya���=z�T�Q
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ