Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Overview
overview
3Static
static
305282cd889...18.exe
windows7-x64
305282cd889...18.exe
windows10-2004-x64
3$_0_/Appli...he.exe
windows7-x64
1$_0_/Appli...he.exe
windows10-2004-x64
3$_0_/Appli...er.exe
windows7-x64
3$_0_/Appli...er.exe
windows10-2004-x64
3$_0_/Appli...gy.dll
windows7-x64
3$_0_/Appli...gy.dll
windows10-2004-x64
3$_0_/Appli...um.dll
windows7-x64
3$_0_/Appli...um.dll
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
05282cd889bbd51be8f1c979af9f033c_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
05282cd889bbd51be8f1c979af9f033c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$_0_/ApplicationOntology/NvOAWrapperCache.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
$_0_/ApplicationOntology/NvOAWrapperCache.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$_0_/ApplicationOntology/OAWrapper.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$_0_/ApplicationOntology/OAWrapper.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$_0_/ApplicationOntology/Ontology.dll
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
$_0_/ApplicationOntology/Ontology.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$_0_/ApplicationOntology/UWPEnum.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
$_0_/ApplicationOntology/UWPEnum.dll
Resource
win10v2004-20240802-en
Target
05282cd889bbd51be8f1c979af9f033c_JaffaCakes118
Size
10.5MB
MD5
05282cd889bbd51be8f1c979af9f033c
SHA1
b89958310d9dc79b4fca887fb30688e36009dabd
SHA256
de8170a0c460c89034e8bf8836fdff770629b3dbfd9295d06c2d1af3887bb242
SHA512
44f9ce52609df223bf622a7694a00aa3972993cea267ee5e6eecd7c08d93b050287f2c99be2a65de3830ce5fc92d4f93d10f048f9de31d5cb0fdb6028b3db613
SSDEEP
196608:jlSn78QbulL3djAIBpGygsY3wI9vHOqDlFhnqClLaEKJk2U8Vk0myfTMQ2vEzqQq:xS78GulRJc3n3J1luEImyfk+Vq
Checks for missing Authenticode signature.
resource |
---|
05282cd889bbd51be8f1c979af9f033c_JaffaCakes118 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
C:\b\baab02d9f839a7c2\sw\devrel\GFE\ApplicationOntology\release\build\bin\Release\NvOAWrapperCache.pdb
CreateNamedPipeW
WaitForMultipleObjects
OpenEventW
DisconnectNamedPipe
CreateEventW
Sleep
GetLastError
SetEvent
CloseHandle
ResetEvent
ConnectNamedPipe
FlushFileBuffers
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetProcAddress
FreeLibrary
LocalAlloc
GetSystemDirectoryW
CreateFileW
LocalFree
GetModuleHandleW
SetLastError
LoadLibraryExW
MultiByteToWideChar
WideCharToMultiByte
GetStringTypeW
EncodePointer
DecodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
LCMapStringW
GetLocaleInfoW
GetCPInfo
WaitForSingleObjectEx
WriteFile
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RtlUnwind
RaiseException
GetModuleFileNameW
HeapAlloc
HeapReAlloc
HeapFree
ExitProcess
GetModuleHandleExW
GetStdHandle
GetACP
GetFileType
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCommandLineA
GetCommandLineW
FindClose
FindFirstFileExW
FindNextFileW
SetStdHandle
HeapSize
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
UnhandledExceptionFilter
ReadFile
SystemFunction036
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
C:\b\baab02d9f839a7c2\sw\devrel\GFE\ApplicationOntology\release\build\bin\Release\OAWrapper.pdb
ShellExecuteExW
PathRemoveFileSpecW
CreateFileW
ReadConsoleW
WaitForSingleObject
GetLastError
CloseHandle
FreeLibrary
GetProcAddress
LoadLibraryW
MultiByteToWideChar
ReadFile
WriteConsoleW
WideCharToMultiByte
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RtlUnwind
RaiseException
LoadLibraryExW
GetModuleFileNameW
HeapAlloc
HeapReAlloc
HeapFree
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
GetACP
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
GetProcessHeap
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
FindClose
FindFirstFileExW
FindNextFileW
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapSize
SetFilePointerEx
CreateApplicationWrapper_3
SystemFunction036
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
C:\b\baab02d9f839a7c2\sw\devrel\GFE\ApplicationOntology\release\build\bin\Release\Ontology.pdb
ntohl
GetFileAttributesExW
GetModuleHandleExW
GetModuleFileNameW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
LocalAlloc
GetSystemDirectoryW
CreateFileW
LocalFree
lstrcmpA
GetModuleHandleW
SetLastError
LoadLibraryExW
OutputDebugStringW
lstrcmpW
GetFullPathNameW
CreateProcessA
GetFileAttributesW
ExpandEnvironmentStringsW
FindNextFileW
FindFirstFileW
FindClose
SetCurrentDirectoryW
GetExitCodeProcess
ReadFile
WriteFile
SetHandleInformation
CreatePipe
SizeofResource
LockResource
LoadResource
FindResourceW
CreateProcessW
GetLastError
WaitForSingleObject
CloseHandle
GetProcAddress
FreeLibrary
GetCurrentProcess
MultiByteToWideChar
WideCharToMultiByte
AreFileApisANSI
TryEnterCriticalSection
HeapCreate
HeapFree
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
GetTempPathW
CreateMutexW
GetCurrentThreadId
UnmapViewOfFile
HeapValidate
HeapSize
GetTempPathA
FormatMessageW
GetDiskFreeSpaceA
GetFileAttributesA
FlushViewOfFile
CreateFileA
VerifyVersionInfoW
WaitForSingleObjectEx
DeleteFileA
DeleteFileW
HeapReAlloc
GetSystemInfo
LoadLibraryW
HeapAlloc
HeapCompact
HeapDestroy
UnlockFile
CreateFileMappingA
LockFileEx
GetFileSize
GetCurrentProcessId
GetProcessHeap
SystemTimeToFileTime
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateFileMappingW
MapViewOfFile
QueryPerformanceCounter
GetTickCount
FlushFileBuffers
CreateDirectoryW
GetModuleFileNameA
GetModuleHandleA
QueryPerformanceFrequency
WritePrivateProfileStringW
CallNamedPipeW
OpenEventW
GetPrivateProfileStringW
InitializeCriticalSectionEx
RaiseException
DecodePointer
GetStringTypeW
EncodePointer
GetCPInfo
CompareStringW
LCMapStringW
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetEvent
ResetEvent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
RtlUnwind
InterlockedFlushSList
CreateThread
ExitThread
FreeLibraryAndExitThread
ExitProcess
SetStdHandle
GetFileType
GetConsoleMode
ReadConsoleW
GetConsoleCP
GetACP
GetStdHandle
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetFilePointerEx
GetTimeZoneInformation
MoveFileExW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetCommandLineA
GetCommandLineW
WriteConsoleW
VerSetConditionMask
LoadLibraryA
GetSystemMetrics
EnumDisplaySettingsA
EnumDisplayDevicesA
SHGetFolderPathW
BCryptOpenAlgorithmProvider
BCryptGetProperty
BCryptDestroyKey
BCryptEncrypt
BCryptFinishHash
BCryptCloseAlgorithmProvider
BCryptDestroyHash
BCryptHashData
BCryptCreateHash
BCryptGenerateSymmetricKey
BCryptDecrypt
PathFileExistsW
SystemFunction036
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
RegQueryValueExW
RegEnumValueW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
RegCreateKeyExW
RegQueryInfoKeyW
RegCloseKey
CryptReleaseContext
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptAcquireContextW
RegGetValueW
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyA
CreateApplicationOntologyFactory
CreateApplicationWrapper_3
FreeOntology
GetApplicationList
GetTranslation
InitOntology
InitOntology2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
C:\b\baab02d9f839a7c2\sw\devrel\GFE\ApplicationOntology\release\build\bin\Release\UWPEnum.pdb
WindowsDeleteString
WindowsCreateString
WindowsGetStringRawBuffer
RoUninitialize
RoGetActivationFactory
RoInitialize
CoAllowSetForegroundWindow
CoCreateInstance
HeapSize
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
GetLastError
CloseHandle
MultiByteToWideChar
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateEventW
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetStringTypeW
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LCMapStringW
GetCPInfo
FreeLibrary
LoadLibraryExW
RaiseException
InterlockedFlushSList
RtlUnwind
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
SetFilePointerEx
GetConsoleMode
GetStdHandle
GetFileType
GetACP
WriteFile
GetConsoleCP
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetCommandLineA
GetCommandLineW
SetStdHandle
FlushFileBuffers
WriteConsoleW
CreateFileW
SystemFunction036
FreeDir
FreeUWPPackages
GetUWPPackageConfigDir
GetUWPPackageInstallDir
GetUWPPackages
LaunchUWPApp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ