Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
45f1a9c9e9f96b37dab024a827dab478_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
45f1a9c9e9f96b37dab024a827dab478_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
45f1a9c9e9f96b37dab024a827dab478_JaffaCakes118
Size
4.8MB
MD5
45f1a9c9e9f96b37dab024a827dab478
SHA1
b03c0122aa4571ca328175f1d0d5a92be33238e9
SHA256
836dcea64c190a351ab3325a79e91c4165cc5868943a030f74753e3b342ec1df
SHA512
bdc3ac7c2e5c8e713706d34d05756ad48ada1cf0a6cb85ef81275406e6aa6296d83662babb1d25b36a9dd1e66550eb52b7a0fcb6dfabb01e710c3b7577ddda7f
SSDEEP
98304:aiICFc9NveadQeETZJchBBONaNHfn+wOl4zi+8kUuovoIaUs:CCWZtDhBQNaNHfSl88kUtoys
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SHGetFolderPathW
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
�0��fu����waY,j�SL��bp6��-9������k��.��_���J售*��;��e��u&�)]�w��?�G���^� ��I�|y�xg�X�"�9H�_�yo����.���aU�z2v_�w�W+ALS�I��##��2@���^8-K.�r�HdU���} �#�g蒲q�(�߇�jG�}�>Cz�����*�FO�U���1Mﰎ��E}�Z�I(��^�K��W�l^Y'D��u��( �����j�a+X�N E�����@�eT@4̘�����el�w�4��sA���W����҄�VӀ���/�{O�1kL�5�c���@���D��F�����h���!\�2�CPL�An���n�4W��� A4�����'Sk/�#��S�T���gaU� ������������.�E���͊�-��3��x�����|�LScz����LG��;(QaB�����ŷ�:K.��1:�Yr�K�0�ޅ�x|j�: �l�W�7����:��Z%g�d ƴC�u��N�Ъ���7\8��X��C �굯)_�}�G��`yΚzN��o�H�J8Vs�����_�ٍ��y�tj˶A��֪�w�`taf�I��u`m����Tg�B��O�����A���&`������P�(ʎ*"� |������VI�����,+�(<wP@py� �إ\k�d����a�:wA>V�v H��jJ�#�VQн6N��u�� �:��\{�E�����w=W��Fņ�a���*;V8�w��$�R�̀��V�M�4���Q�����L���쥩����ή �B�BL7�����a:#b>n���\J.d��s$:<u)W��<�����% ��LJ�_��>~��@�����r�5� �bR�T�KF;����|�zC�(�^}�<fBEN2�@�>�Vi] ����1��{��P�v�qe@�WFi�%��JT�e��侃fm���Ne�UFHQPnQ ��a�y�$�Dg�g�:q�ӑ�]�' �ט �?��xj�j��ECş=9r���;Sc��d�X�ko�E���*լ4R��-R�]������ή�Gp3ΦsdK�4�O b��Hr��4C�'YG��LU3�b�Iv�}���/6<��s��v#��=�'=n =���S��7/�p%4�Д�����3 S���a5�Tƿ��'݂3q��ܪ �<��r˳����fp��$����#�x���"�[%�E����ݧ�-��SB�g��q�����e!���5af�"�GN�-�v��]GU�������7�D� <��,D�S�ŪO�j�6��x��/���W�ĺOS�ĵ{w��hisye��� �<i������} i�Em�S�7��o��+��)�{�'�k=tb���d�N(Z�Z�$:���Y���%��.��p/����"i��[\XQ*�v�����%����_2�i5� 3��0���8�A&��o���?�Q�(����?p�I�O�fVx�}��#�!�� l=J��C��v��d��+������b� 6PG��x���Cq�o��g6u� d���\�|��K��n���u"�]�7V�S�\�5�L� �YhCI���|��t8����+w��I������n�Ѯ��Q�ї�m���|̸H�A������=����dm��Ֆ�:�@_�^�Ṙ9��o�j��X+��j"����(�:-w]�6�D�� 6�� L0���q&b@��Z�2G$��=z E��:}zP���}.`;�c�8�6�K��i��Ԑ��@M����K��e���P�����eZ��r�u��J��<"m�`X�4�.M�I�����=u�u�s�*{+�����d���R��'��!xQ�;'�d����=���8#'�4Û"�4^:���?`]��]���/,�juƺ!�K�k���9vc{]���0������1Sq���V�Qc�8ԕ���l�m[�>f[��\YP�����2��~����PK��_�D/�C�V�����R��=i$����5>J�J$+O��dYQ&�����F��J)\L.+��'�h�?.���?�Y��W$BmH��{Q��C��3��~����c����!��t�A��?վ)1W3T'�����?^^xE�XH��i� ?������7�g�Do�m�iek�m��:F����Żg�z/L�S��_>��<��(���'$/ZOA��ί֘,�9����L��B���Ͱ�'H̺�Ն���-����J��ȭ<�ngϣ�T[5�o�UQ�-3�k�1�7i�ю��c#��ح��>���>�X�JC��獆�ҫ.�ºJ��vz/**[�$z�7�,>���1��b���A�ų��J��y�!O'hW���'d͞|@#�Br9���<&����_�� �� ��2'��*B�����ZN������H�K��)�I�ٷl�&������Ǐ�8 .�'�� wc��z�,.*ka �z̳4�W��X��ѽ�]}M���WD�5��$T�.�t�9�k�[eKP�V���smr������|�T��;���O�Ӊ[1 ����{���\�� "(\!��Dڀ����9Z�u��a������3��H�_^Bu��&�W�ph���z�Rmy����)����gp6��&TQ���UG\�Ѯ����{F�؆��U0(q�szǨ����_� ��BZ�hV�YL0ӹ�>��V/�Su��Кo1}���~�^�1���\S�4W�7�y��kʮ�aU���͌ �(E�˪-�N�h��^�;U� �-I�T�`���t��D�u��I��)i�ގyH�b?��w��Dn)��̲�q7�"���Oꘈ��z�)z�cz�23�(���_�Ӛ�/�d�3�+ͯ�O�䨿�툆E��ܣt�?w.GfZ�� Z7W]2�$B�#������q&� ���f�)l��cl8�=�gi�� &�Ī�/<:���@r��`Ə����Q�B�P���~/�s9�9��N�<"�����e���ϩc-�־�4�#�Q䛗��*ТY���n|m���Voh3��0_]����cD~�����κ�M��S���b�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ