Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
2f038ad0ebcbb7802fe4c400cd15d577_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2f038ad0ebcbb7802fe4c400cd15d577_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
2f038ad0ebcbb7802fe4c400cd15d577_JaffaCakes118
Size
96KB
MD5
2f038ad0ebcbb7802fe4c400cd15d577
SHA1
da22ff138e375db1a7f1416e865f7f8c363cc851
SHA256
dcb3641926fda39998e111ffc2828119e44f24e7eb14af2bbe790170c1343968
SHA512
0bddc133c176bf44dc7af55558348769dede58f8b7acf135ba571df6ca3ccbcb234875764c50ac4d38b5c3768912c52c974aa6471f77d23086e297bdfb08f3e5
SSDEEP
1536:8E+JG18/q9dHm1mT3/PZmkXcMo6lUlXpc+YHuI6KxfRNgM:n++q4E1C/BFo62HFbIVpCM
ExtKeyUsageCodeSigning
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateFileW
GetWindowsDirectoryW
LoadLibraryW
GetProcAddress
lstrcatW
CloseHandle
VirtualAlloc
RegOpenKeyExA
memcpy
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ