Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
3ac2b24a99fb3549d8023c1145949f9e_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3ac2b24a99fb3549d8023c1145949f9e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
3ac2b24a99fb3549d8023c1145949f9e_JaffaCakes118
Size
140KB
MD5
3ac2b24a99fb3549d8023c1145949f9e
SHA1
aa9b7e09cb213f79d770a0cd932cfc46ca0a8462
SHA256
685bcb524af84356407a8baa7dbe45b4f95d1e038171d06aa464b028d5fe883a
SHA512
db5df6c75974ba36cece361889c9467fc570166ffa431ed82101b404ee1f95ad9acc4e89bd58811bf7d1a7a43017ec3c802878aef7a289a6bbcc949757d0be44
SSDEEP
3072:ykS/RDdFt5l17T9exC/0EOeV8etaQYgn9Q5HAVcBmDic9JMwXGgU0A4:Q/RDPt53XdpsQN9Q5F8EsGgU8
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
MultiByteToWideChar
GetLastError
InitializeCriticalSection
DeleteCriticalSection
lstrcmpiA
lstrlenA
lstrcatA
lstrcpyA
SetEvent
CloseHandle
WinExec
GetTempFileNameA
GetTempPathA
CreateFileA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetTickCount
WaitForSingleObject
FreeLibrary
GetProcAddress
LoadLibraryA
CreateEventA
WriteFile
DeleteFileA
ReadFile
lstrcmpA
Sleep
CreateThread
lstrcpynA
LeaveCriticalSection
EnterCriticalSection
ResetEvent
GetVersionExA
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetModuleFileNameA
GetCurrentProcessId
TerminateThread
CreateDirectoryA
WaitForMultipleObjects
CreateMutexA
SetFileAttributesA
GetFileAttributesA
GetLongPathNameA
GetWindowsDirectoryA
GetSystemDirectoryA
CallNamedPipeA
DisconnectNamedPipe
ConnectNamedPipe
CreateNamedPipeA
GetFileSize
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetShortPathNameA
MoveFileExA
CopyFileA
GetFileType
DuplicateHandle
GetCurrentProcess
SystemTimeToFileTime
DosDateTimeToFileTime
GetCurrentDirectoryA
SetFileTime
TerminateProcess
OpenProcess
GetCurrentThreadId
FindClose
FindFirstFileA
GetThreadLocale
GetLocaleInfoA
GetACP
GetSystemTimeAsFileTime
QueryPerformanceCounter
ExitProcess
GetStartupInfoA
GetModuleHandleA
InterlockedExchange
SetFilePointer
wsprintfA
DestroyIcon
GetWindowThreadProcessId
PeekMessageA
TranslateMessage
DispatchMessageA
UpdateWindow
RegisterWindowMessageA
GetDesktopWindow
DefWindowProcA
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA
RegCloseKey
CoCreateInstance
CoInitialize
CoCreateGuid
CoUninitialize
SHGetFileInfoA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA
SysAllocString
VariantInit
SysStringLen
SysAllocStringLen
VariantClear
SysFreeString
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Xran@_String_base@std@@QBEXXZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@Viterator@12@0PBD@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@XZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?_Nomemory@std@@YAXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1exception@@UAE@XZ
_CxxThrowException
??0exception@@QAE@XZ
free
malloc
__CxxFrameHandler
??3@YAXPAX@Z
??0exception@@QAE@ABV0@@Z
atoi
_itoa
_mbschr
_mbsstr
_controlfp
__security_error_handler
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
?terminate@@YAXXZ
_onexit
__dllonexit
??1type_info@@UAE@XZ
_callnewh
memset
strncat
wcsncmp
wcschr
wcsncpy
wcsstr
strncpy
gmtime
calloc
_mbsnbcpy
_mbsrev
_mbsicmp
isdigit
mktime
time
atol
bsearch
_vsnprintf
strncmp
??_V@YAXPAX@Z
strrchr
memmove
strchr
strstr
_mbslwr
_except_handler3
_strnicmp
_strlwr
_stricmp
_wcslwr
_wcsicmp
_setmbcp
_mbsnbicmp
ord2415
ord2392
ord2396
ord2398
ord2400
ord2390
ord5233
ord5235
ord1054
ord6090
ord757
ord566
ord3333
ord4261
ord4481
ord2838
ord5566
ord5213
ord2403
ord395
ord4541
ord3683
ord4038
ord4014
ord6278
ord1207
ord5230
ord4568
ord3948
ord2248
ord5226
ord5224
ord2931
ord1920
ord3832
ord5382
ord6219
ord5102
ord1010
ord3806
ord5583
ord2018
ord2063
ord4326
ord6276
ord635
ord3207
ord4265
ord4486
ord3949
ord2644
ord3709
ord3719
ord3718
ord2533
ord2646
ord2540
ord2862
ord2714
ord4307
ord2835
ord2731
ord2537
ord5200
ord1599
ord1655
ord1656
ord1964
ord5165
ord1362
ord4967
ord3345
ord6277
ord3802
ord6279
ord1522
ord2172
ord2178
ord2405
ord2387
ord2385
ord2408
ord2413
ord2394
ord2410
ord934
ord930
ord932
ord928
ord923
ord3801
ord5960
ord1600
ord4277
ord4722
ord3403
ord1306
ord2173
ord5205
ord4185
ord6275
ord5073
ord1908
ord5148
ord4244
ord1402
ord3945
ord1617
ord1620
ord5915
ord4019
ord2424
ord2425
ord2992
ord5356
ord943
ord4904
ord2939
ord4135
ord4309
ord5012
ord5009
ord2615
ord1913
ord2246
ord4299
ord4799
ord1160
ord1557
ord2372
ord1084
ord3648
URLDownloadToFileA
GetAdaptersInfo
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
HttpQueryInfoA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile
InternetOpenA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ