Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
0e062f699332968732c466d88d11fcb9_JaffaCakes118.exe
Resource
win7-20240903-en
Target
0e062f699332968732c466d88d11fcb9_JaffaCakes118
Size
423KB
MD5
0e062f699332968732c466d88d11fcb9
SHA1
7896a1208b365c27a687873e6fa8832b2b1f9d1f
SHA256
1e5c750df33433ffbe2ea6b8ac24171a157c773f8ae192c0b91d0453d4ae385c
SHA512
38ab5062b0a187f328c7e32a8a0ca54da06fe7c16d7bdb8f7849cd2c38507fc0a4f8322b13eb8d86c80b47e76981a0cfe5f87c977e96069299843545e3cc3859
SSDEEP
6144:WBfLTb5uXeZh5svTynIW7ZIUXB6K1qhnVzuzXP4:WJsXen5QTyIWlX0xVZubg
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetUnhandledExceptionFilter
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
TranslateMessage
MessageBoxA
RegDeleteValueW
ShellExecuteW
CoCreateInstance
SysAllocString
HTMLayoutPostEvent
GetAdaptersInfo
InternetCloseHandle
։ԥ<������:O��ip�2 ������)�!���;�5�a�[���V�Ɇ�Z�6zu�Xe��5��pU@�9GEJ�Ӿ�A|�ί�?�s��ʓO�Rtp������V�V��fN��XԨ�8AA�����z#J�F��"7�A��K�*�����(�3D���[�4,��W�Lku�P�j�����>:����8����/=L<M� �b��6/�j�H�0T�NڑV�[��f�j���ʪ���P��c~_]_�}c��w��#�=%�gC���K%?����}cf I6����[kP��(�+ ���I�wѨ,ff��ZWĶ�60�`/A"�� Ԕ����L��`���]�Ej�K��� 4 �'7��c�`Y_އ9�o�d�$��~'����rρ�e�@���"�Y5�vT�th^� וú֙�G߶w����E��d�Ϋ_4v���2���" �Dc��0��3D�?B�a雝h�x�(�*%��M�'s����y�f���idz������Y�S3Q����������d�1h�E�%N���Y���R�Pl+�V>��W��9����E6�`T��j�$G�֩1�� ���ip�fWu&�GR.�%#�����M�~�Pp�e�������P�O���YdҺ-'�Q�9�e�(�^��������r9�!k�s'��KEM���ƅmZ0BV#���8O��G=5������:�a�����ޛ�}�� ��퐕�����h�q6��9a����c�:��WR��e`��ye�%q���Jp���Ftn[V���g��ʆ�;���jmׅ�F�]�DM�ɝ�y���/ڜqQ�6��#ٴa��M5����):��%�H��F�����uU�d��`D���Z).��}mD!�]��6�C��qur�}] T�z+ !������2�Gq�!����h��E���ہ��N_I�sr�9]�J���ө �Ѧ(R��A֧V�t�̓��QQ �YT{�a�Բ=<1�BϢGku���\���%_����� �E5�Zd���͚�H� �l��nM~����'�m)R��Ϭ܄��B�� �Ctr8�Z�]/�C��Y%h[��:hR��\��{���"IZ6�x�2��R���MR���-d��-��)�5�\}����;���$�ؼ�b���� ��h�:����dG���ќ1��'�}���(���4�!��HqH��t�M7��"���7�YS���b\�1��Z_X]���~C2�������.9B�?I��fs��o�F��_�kQo0U�z�D�u��2'3QT%�g^�+w�P��j�w��� ;z�}��o�Ҕ��{���WZ��Ai�)ݿ���MV�( &t�<��@@��(>�߇?�d�������0��ƚ_����3Yz��N1���@.�ɤ\(�dc�x���a��×'�c�� �3��.1�V��\gx���}[L� �]��i�p!�C�n�����P��x�IE��Y1Vt��s�G��t���ϕ��A*���>:�n}��U���0b��9:�~ ���܆Zv��E�4Q />�7:h��U�u��l�?c\����QӤ���0���,4G�,�\��۟3�fck�/p��y8��X��*Z(k��?(���X�p<%>{z�vP��|2�Ye��H�Q�1����5ܳXK1 �_�&��@m�,���7$*a��Sq���v� q�C��wyB��i�?JI)e���Y�X7������>�3P���DA���@�M �gT ����"�4v]Q�~����X���2����*�H�B��a= ���>X�C`�M�v.ﯢ�/��5>�����m�e����:�Yg�"�>����E��uj]omL���7�AY��D����J�\�GX?CԮfAI�*��@9�M�jȠ���GI1m�� ��v�ʲㄼd\:�1_Ar��%��7+�l~#.z���-��:��OxX�4[`u�~������6dY1"�Q�BW���A���tZr�r���`��[�9��~�:2�T�A3�F��Rpf�w�7�� ��k+~q�ѹ{�t�>u�N�H�,�?���" ��(8��;I��z��L�m���(��G�3:M�+`TK��>��{�Խ�!�ՇJ���}C]�q��W���9l%��+S;���D��BMF�cwc�}�������i�z钔�=�<�ʥ������RA�� �~8<�D��(ΧJUs|�HڰP?�ɦFI�uQe����fV�x�&��P�ۄX���D{��[�z(b�֨�j�/�=["�������� k���eόZMݰ���,+ƪ�v2P"�#�HIw!4u��s�ov8D�(*iW���_����/<Ć�+3���f�Z���!�RA�`���h��tYU������|��.���㓿�P�8|���?��7��o��:�%=Y��+n��B���KrQ����k7�5l! ���pR��i=���������'����˃�}�߇bB_���hH��H�)��Jgv�}L�x0�0���T�at�7�0R��r���N���)�,�,�A��$�C�]���� 6�C��8����0)��c�?#�t���ӳlj��ץ�@��7��/��g�1��8ac0 1����+�;��s���z0c���Ú�*�r�Vy.��pu�/Q��q$B�KG����y`TZ���jl�uH�W$�l�C��qPiK�A�X�����S��G�a�����pa�>k��D�٪°��*��~�7av�����ڌ���W�1���f �G�����K'�Ym�����L�'R:m�L���=�����v��A� ��9�yo�O����t8{�푹��9���\��&U&#��� �0�RI>��A��8������2E��3�,�4�Ew �B�DP��g%���4w/�B������^Jɪ��m&E�H]R�� �#��;�*K.�Q�V�+6����`��mx����2/C�\y�V$���y:(�6%�Sm��2��\ �$|%����*ۊěM@�I� P��س�Z{����27>��d=zeu��z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE