Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
177bd9a24fa8306e1fd84af7ea405200_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
177bd9a24fa8306e1fd84af7ea405200_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
177bd9a24fa8306e1fd84af7ea405200_JaffaCakes118
Size
240KB
MD5
177bd9a24fa8306e1fd84af7ea405200
SHA1
b1cf08e7d6b252178730be5a1b4041a4dbe244f1
SHA256
1e1577f82608a82e0a363c5822507700840e1de261acb03ec956f3ee9410461f
SHA512
376642063aa55ced68db84acaf3bdc86fb0f93f923b937c7e1f319fe7d49c134715a87ad8a88dc9796f14d2d2339762faddb6d4e2f2e9f20d91f693fcb58f9eb
SSDEEP
6144:NMVBCLVzodJbl7hZDBG4XZHH+zkya8db9:NMVBAVMdlbZ8H
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
WideCharToMultiByte
GetThreadLocale
GetStartupInfoA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
ExitProcess
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileA
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleA
lstrcatA
WriteFile
TerminateProcess
SetFileTime
SetFilePointer
ReadProcessMemory
ReadFile
OpenProcess
LoadLibraryA
GetWindowsDirectoryA
GetVersionExA
GetSystemDirectoryA
GetProcAddress
GetModuleHandleA
GetFileTime
GetFileAttributesA
GetCurrentThreadId
GetCurrentProcess
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
DeviceIoControl
CreateFileA
CreateDirectoryA
CloseHandle
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
GetKeyboardType
MessageBoxA
CharNextA
PostThreadMessageA
GetMessageA
GetInputState
MessageBoxA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegFlushKey
RegCreateKeyExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
SysFreeString
SysAllocStringLen
ShellExecuteA
NtQueryInformationProcess
�eNB�jPkO�s.�Lq� �Y[��gtd����P���d��\1�LR��Ml�Sm}8t@#�vi���ōbG(NVxOl�C8h��lq�|� ��0t����b&�hS���`u�"3�ݨ���Y����+zxR%1�*>MS��!��!d|,��� u"�;~ %�����ƕ�� �e>@�ix�{�%���='��\�.i��� n��G��F�R(�er������k��ڛ,��'�i�F���&� �=��<�?��|s��^�̚����L\9Ė�w��.�������:;���A���͊�_�e�������E�34a�;D,�.O����o�]��H���[���r~�-��E�7�����x����sx�����1m�=7�|�� ��z �F4���T��Ur��������!Qp�]���m�,��x��][ݘ�z��<��H��5'ֆΎj3B`�T���7��Дc�B���A���i���(2��/K�}��2�X��eT��S���O�[U�@8���=g�G�1^����=�ׂC��3�(�, �P?*����>� ���y� H<�Dl,(i��aU 6�&5�I��P�b��B�#G���yuTp���z�Х*���t�w����@z��.s�ȇ.�7��\�lv���L��q� ���h�HT�h��j�t��X����A�W�Vq����q���D|Y���:νϯ9������30���c>�#�v��W\���%�r�U��Y�ژ���;��Ʀ��J���>�h�u�5+��-+����&$���c>��~Jp��fgY��<:+�)i�X�"�*�g�y��.8>ݸ����/�:� �GnP���3H��m9ц�X� ��ǖ�q�� ���"�E��qx`��M�d0��պ�$cds����?Z�C Ԁ������C ��� �Zxf�����m�����[_抻��O��,�=gr�T��74Bv,���Ax�o�1^�0q�M�6��C����G����e�,�i�+, ���gm��u �2�4%"HR�ڒ,2?��eI,6���+��\�5���?�ӕ�z�\���Z���w���g���������'�R�Ky��!�բr��l����6��}�g�P�~"�v�9a�:�J����AiV�!���["[>�/�)�JQ���<2�5o��Zxu+��z #up�raa��8�KT"���=�`$پj�`vE y�U%f|�nXI_}g��Z4`T �]���9��������?xQ��ܯ�S��r:o��o��G�6�uj���e[�L���m��e�����l.��z���}��������ao w1��Ȟ��N�}i��s��P��Aj�)_b"�����`0[���ILM�h�}TH�����n�s}5 *�\/�O�cs���J��s�`aA�����c��\f?Y��������>V�����{ژ�aTj��EN�AeL@�$��S�; ��!?��ri��Ul�C�N�ÙV�^��X��ъ0�Xj ���c [4�Ġ<�Y�d����RU���@�ТO��n�֎ɞy.S�9*��R`Ԉ����S�ek��pK�.]Щ���*����`�~��]hf�{OB���>�MS����ܑ�U��H��ԡ�ۛ_Vs�\�u�� `}g�ʼ�?ZYNO*�"���|5Nm��3Jn|`(�9:��5�-�T7&� R�n2���ǭ���q�MGB�\��cZ��و٧��KZ�|�5�,�Ӊ�]�b�:留��U��(�1�uȬ��s��i�e�l8q[5�(�4��O��"K��\[��I*Qa��*���qћ1��q_��"����G��Zٻ�G���kD���F�0 �����@%DyE�]^Ȃ�[-N� Ud$nH�,C�lk��RYk=)Π���2?zWZ�r����������mn�\,�์w���{X�(NRñC=-��Qh>5����<$ V.���\�� �,��1�-���/����08�R.���ϔ F���7���8S��UQy�q=-D��;nc�H��N���s�&�W���z'g�;�qn�{Z ����h�f�j�� ͭL��>�%�EY u��a�/����l�* #����(����Gm��ƴ�QI����BQ��J�9HK��Cd���^W n�l |�%x9��@���K�I%r�i� C��Tqe�3�- ��!�E&I�v[ml������(t��3!�B�;z o*n�Qb��J��f�w���QD��+C9�/c���8жr��r3��ӑ2�\@�&��!���*1�t^&J_����4�g�D Z]���c6V�*�C�OA��r��:��]B8��"����g�|�LF3��T!�*!PzP�0�pt�R!I@O�Hv��]@��{�n��f��I�S4�b.�w� ��'��Q'1��c�} �[�fxDRj@3�Lԍ[�:Ʊ��Pdd}zS:�U`K�9268�����BJ�ʊ�N#5��֡��4Kt~��c�b߹���I�&,���2�=$NC�l9�`s��8in���`����_1���'�x� ُ���jq�`# g5܄��]��'Vhb�S��xl�p�F�B�҈4)> � ���)��U�ˁ�$��m�:O)u���℀Ӏͪ4����H_���c�[�b:���=!h�����f����i�jW�]�R�ǜ{�{m�����tWاVtp�3���b�ɂŐ&���|�"�@�YUHlX����Y���6�3*�l�3��0���BiW�Lc�� ���DD���|4�,=7��MnF�k�1��GR{Gt�s��^Os��ŚW� "��I��5:R�=�Rp4�����o�i��n 6������RD��46���K�lO9^UM���5�#���W"�����9��#� �V�i��cŋO$�K�bsMw{�d�(3�rz��w������6�~��<��5#�簉�eS$T��WRym2[gl� �ƹ�p�4���x������T�k#c�ŀ��2��*J�J�`2�4Z�á���'���h��@��b���j��)�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ