Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
fde06dc615206e47f80231e558ea6b3f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fde06dc615206e47f80231e558ea6b3f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
fde06dc615206e47f80231e558ea6b3f_JaffaCakes118
Size
1.5MB
MD5
fde06dc615206e47f80231e558ea6b3f
SHA1
5f9ce3762430b39eeb2558d75356d2e930b51b17
SHA256
240d90a07bfe667a4edf1193c3f14db55d2bd1fc3d2c3ba49bfa20b8aa876601
SHA512
1d466b7c70b1984258b1d9081641e57040ebaccfbc9678371869a937ba941f6a140184f03174c111189bc2819cf23fbdcebf0003f3ac37c3564b97680ab1fc45
SSDEEP
24576:6OrtcX4oDYKYKmf9WF/0ENFVPwh1zNBKeq9tI57wFgvkeSmWDtALqat11cBvcDnS:6KcX5DYKY/f9Q/0KXwhv3oGddMmqGcES
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadResource
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
DefWindowProcW
OleInitialize
VariantClear
�24�^p<� ��6�8I�_z��M��pj��8�E��>��.���R�Ke���)'_�"#2�'��ܨ��7��g!N��.�L�r֚�!(fA�J�?X��������#���s��T��\�����c8�}�pV�0�{Sy.���>��إ�N�m�iɽj��O,h��l���WlK��T�V�'.��7 V �}�� jV�*�IKL�X���9�-��q������Y�F�j鴩�� �N�톸�<�Āj�Pgؗ1�b��~��y�o4u*�[/ ��jk ��Y'ݙمDS/h�t�l�jz6ߎSܽ����a�F�p�l��g�h晪�)�,��(�qi��h^��fG�q��ڠ;�?�Р��m]�>e��B0�_j��cW�q�.tP��ir� �b��pAwf�[���ѽHUTp����'���fuSbt�X; B���+���B��d�[^5 L<k ���R�P����xϛ�l��0=4���|'�&�X��p� 5�F��\��1}��h��l Q/b�>��;�" �F�o7��H.��p�l�VL<S+�l*A�nG��RS����(24�3Hq^�:)�`&(�,X�0���Y�;�luN���j�U�����c}+��Td�"3�T�e�Qz������~��#&�X�c���"s�Ɍ;x|��3 �Ca��|��ӿ���xxՠ��+mh^�PB��g2~�V��Th͏:� �h }'B�ri ŵ�o�F�|$��_|�!`�l<��Z����Da�������"J�*E�W6��S=��ʢT��Þ1���� ّ�lQD�)�� ����(s��.6ӆ���<>j�\���j�`+U���?�ܐ�d�)�%h�o���i@��~�L�p��n;b�U�+��c%�ƞW#,��p0��U[#pJL��ΩtR��X�߬_�L��ƒU-\4ثu�4���� XL���f?�L,��)�F�حn�=Q��u��':o��kA��m�X9��z�A �e\�0�IP���E��k�1��Ƞ�O� ty<�g���F�u@̻x����uP$`���%��m|e�j���q1���*R�|��T� � ���B"��Dä��4� �m���Qj xp�y4eZ2ϭ������xv���?�ڵEX�qM��gQ������p� %3��AGLb�5n�6���QR�iL�O{��M/��>)˛z ��ր�f�(@oQ���?F֡���Bs!��Q!ILj�����~�P19E�3/Kr.�p���:��'Ϸ@�7>o�!�=��V+/�5C�t��;����Z>N�&������=��"�q)���2��D0ʪ��z�9�����Rn������ے�.��-!�q8�].:�ڹ��/�>���ᣚK˶$��/����X�bpb�>K�s���^�Z%��j��������� �Lꉐ��F%�uq4R�����z���WTl� lij�������E1�q� ��H�+IH�a,!���$ǼKY莖j�%.�Q��:���{ie��r��D�{��䡇x�˙�2�/=�Ӧ3s�%�2��������;|)����6H+��M�Z��zET��:m|Uغk]$i�?b���a�<��zÖ���$,~�������Esnd�D���t�ZL��1�#V��#����<ڝ�V]23g |�O�&���M�w;�<H�/L"�}���U��(��\�t�n�����.wG�P�h8�N闕;?ڿ��ՓL\�����NC�bf�����V��O�A�-����3�Q�u�����\a�������F�K���\["w;j=[b�����iԆ�AbR��{�H]����Fz�r}���v[��{W?�� �%�|K�_��+�c��a5B���;��,�YC���5�4����.p!�����Ee� �b�Iɒ���8 �{t4Ļ�r�xd��#��,f�������#S�"Q�>1������F��A�+2K���N�E=<�𧋘HyaW -9�>!�zef�H��fǵ�d��7����x��.��<C��Hgoe_~�.ոR��O��(�j.��Y��(I��^eE]�L����E�ڣ��7�D�r�"�О��k2�%���/0�����,�����J>�!__�BQM#���pЁ�;����Cm��}�����[l}���D�4�l�����v�x�I�-ǧjG�{��n�mT4/�p�@W�UM���H'��T��*v h���O �w>#!��> }�����ٍH�1�#`��ARuaH;�y*J2�<4��N�z��nL8f�6���~�C���H1���H��DP����KpDn��,~Rz�lZ����:���.�@���������[Z\oz�<�O ��Hؘ������Z�<�� ��P�!�ow�,=rU��] �P�x߰ԶUt�x�L1�?�� ���9vT�D���c���#Y�O֘��nw@v<'�����bTQ��2fA�^��'�9�Ƥ�#d,�G�����0�@ٸ��랝�B�N�N��7��?�g��*�D���r%r7�gC�E���7l4��uO�:�V��xz�$S�V=#�6��x���7�M��:f l3���o?��"��e�hJ���Nu�ن���>>7NJk����g;^�����e���[�;h�����w3�!cG���<i^U��%y����y�����C��~ǚF���+���A��^ C�)�Ѹ/�����v�#�GdJӢr���������M��.K/$�r�7�����K���������Z��_���������ȃc�w�Hdg�'��6{��Ȱa]}��z��[p�'��X���4!����e��De����ť���}��ܧ�ޟ���8>�b$ӄA�:g�ge'ABW<P��_�Ϝm�(Z �#�A�<��fSq��G=W�Iq��i�P-MY\@�I(D� �؏����_x����[�눩t�0���&��G��������Ħ��2�]�v��Z��R�" �%���c�B��ʛ���$�.8��j�{��ը�}�9�;a��@F2I��� �'5\��z��o~p�~��Ui�����>���J�U�T���s�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ