Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
feb0a871ed836b8602223a605d18c669_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
feb0a871ed836b8602223a605d18c669_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
feb0a871ed836b8602223a605d18c669_JaffaCakes118
Size
1.5MB
MD5
feb0a871ed836b8602223a605d18c669
SHA1
682ab8fd4d49979b696f0bcf20e83e07a42af624
SHA256
210c211b1d9122a78cbaf3b03b9fe6e03199601bcadc56b7ad513602235a484f
SHA512
c3df62db212b2f2a3c235bda641b0cb26aa20636e7c320811691698890fecbc41fa1564531dcb5286c1d6d9e12b74e5251d935f10090a2685f02e92cd6411d75
SSDEEP
24576:QtDodwd8rVHtbCYdSNgu1/7eDJlqHYzo9ECb7mqX3KEfVzCuRLcD+uNmxT2qPdvM:CFmP+2SyubHGo9E8KSfVzLxuuT2qPde3
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
EnumResourceNamesA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CreateWindowExW
CLSIDFromProgID
VariantClear
DvkT8Ó�����hb|�r�0�2UK��z`�(���W����U����E����?�W̰��kl�]Ŵ��K�%ݡT,�>X�1��e߬?�p+�3�����f�3�ԫq��N!�~�������)��n�9R�^��[O�M�y�[�����7����i~�x�0|��n��Z�5*(�}��C��l�5��߽NE>��E�{Ȍ(�?��#�jgcE���D��ԑ���&�N�&x�Mc�=H4�l8'�4����G��0�/<"N-���h�@+�B6nF�)!@�C�[���䗄(�����ڞ�^����Z��2Sԋ_=aN_���E?�N]�a����s���Z�9��z i\2�2�Ʒ|Og��5+h��@�W������6�T�4����^���}���br�U�V�@.Π'm�r)�M+�G����gM#�xr�wQX�y,�z\i��.�=��dL?m�L�����ng4ןu������`�����GȊ5B��A���s����T*7������$HL�7]�<�{��S�����,�/ïu �w �W�ܓ��R���d�x��O�,�m��і�d �B*1(-t��>�\�p�z�Ur[�R��5(�xѲ�<�|7FY���(cG�e�����d|��h���W�W$�� !�G:�0S�\� ����h��K�H"�������� U���/%�7��<[���I3�=�0)�N���f0Ƶͻ���ݖ�Lm�i.����$��O���HjM�cP�%�s��*<�ݨNTR~�;��k9�)#�4�jϯ$�Nd!���@�D��&^ۉ6k�3��Q4��g9sa�Bö��:�H�����lw= ���¹����8������O"����6Zӵ1����7�'*A�jy�yr3�[ߟTO�����\4�*�9�2ށ�����e�;� �ت��/�5����?�7}��>/������ ��84l��)l[z 1�?����g����u�S�?)$Yi���P�R)e6��ڲ��|*� ���������EZ�a��S�y�~b�R�g8����b�b�5x@y�IW��g�6W��"ͭv,��U-N7� �����( ��6Ou��}/<����5�x,y���P�b�H!����-@�~�~��x����[�m�C�$��%>�����5@��<����<�؉п�Efe��i8����B �1quf�9�L4a�u�<��p\{�Gt6�ھ�@ZW��9I(����;�gvsW<MDj@����losP�|��p�d��y�l��kb�b�-�m�7�>Dֶ�{�\E�sk?�OEql��emH��;SV<Έ�`k�"�����{�]\�4���E �A"ZTZ��$ӛ^�w_��lz7p����K��!f��iQ�G�����zEQ��dJ�����mcY����<���ef0t�7��Oc�5�r��=ժ>� 8�Bʅ1�h!��B?��pX����X�M�6#zvAz�2�dF��w���z/�x��8�|�c�%wDx�R�k�U%rF��"����_rx���h�UCj��>vSCSp���h�RQ�5j���e�Z���nob�H�x�U�D��f����nJ���r���~ŊV':�G�TL�n5�a��y@�-����/+�T�A���Ü��HW�YǏxg�������u��X�e ��S�= WM!ō����C,e� �Ln�_\�-7蛹a�����L,{����U������ a�d��I��l���3�|z� ��?�(��Qy����fъ31��8�����w��[%�Sd��J� z&Ķ��ĪL�u��wn����PN�#8�*�̇�k������N�z&�cV���is���z�Մ��a9 6a9��=:s���x��p7g�BƐ���tTJC��2�m����?�NMZڱ�/���� ������B��������]��G�*)��)7Hq�ߕW�D�i)x������M�kэ*=�������X�����KB�jp���&i�/Ĵ��51���GҤ����L��'���;Q�S�٦���P \��H&�L�І����CxZ��P�\|!�)���>=��8w�џw+-�Ć��ЇQ4�Pݲ� 6�'�q�H[+���i��&�k���.�)�W�gm���GT�s�Y�M��\�ǟ+��XN�7�s��Lc��R�CD�S橚,�K5�l�q��Ms}����y���C���ڥ`��!���m�7 �� =9�y6�%t���V��@��qBhIԼmVt����/"S�m�B)d����ďPe7\���<yؾ��L���*1B@^[�<��c�m�+ꑚf��D��Wɗ���T2��8_���ШY�ۻ��Ƞy0=U�T�py��0������)��9)�;&�[o^�K�,B����uO^�p�y\�~#�ԪE�"N�k-�,��BC�ᵗb��씅2�1��I��2("�u.��WX��=����W�o �dd�Kf��r#}/j"�O�<�}�Y���D���=Y��<�X7�T�2���k���xlO��'������g00f�[�����2K01���f�����"d��`g�2�(5���� stk^[?�{����dz�0��';��N�%�g֘ɡ�0h* �������ȝ{�zL�l����7( [&���9N��f6(f���������!�)y��Wg�ib㳌�?����#ƣ��OK�7���$iN5�}�6�*����ԣ��]�ٴ�sU@�_pd��J��l��B����/��H�� (��0�7u'(LL��Mn���g��'z�I���p�U���|�������C���L�0,�:�G�����0�<���>C`*�h�A5�;� �)�Y'����'S�:2���1�Ђ*������+�|���L�=�f{�T���R-�oΑ��E���l�zv���Ar7��tU�u������#�:T.�?�|��4'�@�Q�Z~�h�{��j ��nª���]�g/,�jPX+"�ͺ�~��wk䣻�������FCGI ��-�3�� 5���X�$cb��<�[گ�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ