Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
3f1392216aa3f22fdf6e1d61ddae9d78_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3f1392216aa3f22fdf6e1d61ddae9d78_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
3f1392216aa3f22fdf6e1d61ddae9d78_JaffaCakes118
Size
138KB
MD5
3f1392216aa3f22fdf6e1d61ddae9d78
SHA1
b893b5f3417b4b2882785f290e308eb35c4869bc
SHA256
66d34c5d70e039de88d1b2aeebd1e115bf9ebb3e0ad9a1a2f84e010122664cad
SHA512
8fe2b37b1a34878a7089350c95d67510bac5b222ce320b0adc2cfb7116e0d6ac854c79a3677dcc838c71d24bd94122a18e4a864bdab4badb292ab1f93e57950e
SSDEEP
3072:4L5VcFrlCYOENAhN2KBC5CH+xF7vCww95YeoLoSqtIzp:IV00YOENclBC564ubYe5t
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
U:\develop\global\Release\bin\common\FaroImporter.pdb
InterlockedDecrement
SetFilePointer
ReadFile
ReleaseSemaphore
WriteFile
GetTempPathW
GetTempFileNameW
CreateFileW
CloseHandle
OpenSemaphoreW
LocalFree
TerminateProcess
DeleteFileW
SetFilePointerEx
GetProcessHeap
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapFree
Sleep
InterlockedCompareExchange
GetStartupInfoW
GetCurrentProcess
InterlockedExchange
SHGetFolderPathW
CommandLineToArgvW
OleRun
CoCreateInstance
CoInitialize
CoUninitialize
GetErrorInfo
SysAllocString
SysFreeString
fgets
strncmp
atoi
atof
fclose
_wsopen_s
wcscpy_s
_read
_close
_lseeki64
qsort
wcscat_s
_strlwr_s
_wfopen_s
srand
_time64
rand
_CxxThrowException
memset
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
?terminate@@YAXXZ
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_invoke_watson
_controlfp_s
wcsncpy_s
??2@YAPAXI@Z
??_V@YAXPAX@Z
??3@YAXPAX@Z
_purecall
memcpy
_CIpow
__CxxFrameHandler3
swprintf_s
__RTDynamicCast
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE