Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
54f6c3142c01a209e89d1e6c1f91e5ff_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
54f6c3142c01a209e89d1e6c1f91e5ff_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
54f6c3142c01a209e89d1e6c1f91e5ff_JaffaCakes118
Size
4.8MB
MD5
54f6c3142c01a209e89d1e6c1f91e5ff
SHA1
ec33e742d88812f3e8ecb83c3ceb2247ee19c6c4
SHA256
d08e9485d198123d21019b0ba0ac3e2d090e4ae56b29e4753fdcbf79ba238fc8
SHA512
2dfd7b182d839b18043761d2786d724b492b3e6b2c6e6145d4aab4a2e1b88a4f43a7eb4bc0783d47f83d2a4fb0bb28707985c29b7c7ad26c2d870285d9f89da5
SSDEEP
98304:ZcvIfGTKw/JjCYEno+o4I6/HlrcWjc+rCrkMd3thoftmbpQA8qkuBu4arwSl+:BfG+w/JdEujIH91c+AkMV+tmdQAEvrwh
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
LoadLibraryW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SHGetFolderPathW
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
~���$�]��y#K�q ��H;�5�Fڞy��nN��ie,��XS�gY� �\FP��h��썍��.�P�?����c-}��aE}�ƅT9�9�\�-����M�5�L����xk��Њ����A�ʧ�O$�����P����R�i7>+����%�8�0 ��~P���lG{���P��S�����}xgg �/m7Ώ�WI�>J����2�Bx+#H*i�R�ެ��vD(�WB@L�晳����>�s�n�G���˼��'N��� �Jxy�\GW����o����Њ���k�8q �'?|�P��3Q�c�RxjZӵ�#a�?`b(( ��_��;Mr�g�W�����I`%[�,"����������b��F�)���� Z9&hּDYN���J<�8*V�L 8���ɛ�-P����Ę V�"ɮP�Mµh�QE��q�Rε��(d]%`�Kd�9�R�@:���A�� �NP ^Vm��JI^kē���j�4c*J�����Ǧ�u��c�a(D�5-��6��mkN�o�����R����t9)��i>��wGYٮBMrF��"��4�g @`��)�UO�CQ��F�S$$��L�؏�e���}&�����3�ŵ>8ڪ S�����S�p�ۜ�:��ݖ���Aqb�i���WR��|��K���5�^��}e���a�)��{P1sÍ���S�fC1\Ŭ����-�x-��(���(F++lTD>xPh����������ed��ۢ�7U_�cp����S2'���tl3�''�>�L�DzJ�1HV_a ��^$;A�}��������_SL@l+�`N,��/�-fjI�5�;ji�Fj�}f�J;tؗaF J̀��&��u�1�ЈD��SȲ���nL���#�H]�_6���@���>x�S͗�\I�-r�;��ԠU���i�E#�[���@���37���� �8�~���H���ϗ!:���=�X�[}����|��gO ��-�D��Y���/m��F]�Nq���h��w�kU����r��M�Iç���k���L�=.~x7�>���J�`�J쿭��Ga�D<����h|�lc)j��!�666q'Ń�%%]���JmT𥪥{9F�\^�R�����De:]��^��}�8�i�[�S1t��6�I��n.E���셽�y���P����I����LҌ<���#"��_�{�@���#�!��C�(��T*2�o���(���w�E���z�%II���'���x�����Ee@ᛤ�FE7U��t(�(����,�Io�z䶉�����{��I�'���!���^�Uo{��n2���aK���:��ĉ$z0,�R�U����R�4h�6̀ � ���KL�:c!������U2��^�#n���?Vh�?0N��~��0Lj�z��� (H$韀հ����m�˜y�k�����}���?�3;l�M�*�{�����7��{g[S�`�^p�y}#���䭷�#�`�.E�I��\R�rܴ�J��1ˈ����G�\=���3W�ąk�Ff�jF_��1��WVɦ�ȷ�B�yf�צ*iPk��~���daj:��,�t}=�0ˍpaU��%d6�]DCa�>�LbR�R��AE�<��GͿ�7u��A�=�yC���v:��.�8�C������������fȻ%�+l��p��H#���{�l��%%��$��l]]%,85�4��7ڃ�#�&L��?��i�9l�IfI�O��؝�~���tVz��2��#o(�V{���v=�'8�WWF @u��b�?��Z1ی�_�h�4���b��c٢жY�81�Jՠ~����p��b����s�<�_�'��/N0�i���YB�F����R�ԓd�o-)��zAxb��m1�2L�sf�6�>@�k؟0����"o�ԕ_�����`\�h{�X�M��bn�+a� �iH�h��+f�a'�X&ur�.�l�^�vw"7�q�`8+cKfL+s��R��i�`�]�t�X25�\�(��Hg#y�v����_�%+k����eJE�<�|��j���w2�A"���t����&=9��?J4lS�چ��@.�*�](�bg�W�Xc���ޑ�����'x5R�Ea U�jlτȒe��~���%����I��z+�ɱJ���՛(}��Hi:�nД̒b�*w!�g��IZޚx�8�-nj�9}v��N�+ڣE������&�G�Ļ!���g�R2>�_����M����4�H�7��w� ���u�u ��],��5�LZ� ���ϲ�FY%�]A���z3�������){����S���_���d��5C�#w')�������:IJ\ݜ[�$X��I���4Щ�)���PZ���x��Hd0�������+ ��Po�5�3u�[�)F+��?���[̗��L�"� �7��H�qK���:X�%m�a�Nj��e��~Y��Be`ŭ=?�>��2�����r�� ~|�+�D����So(����?�d�� Ƴz8f -��5F�u�u0�~�� 1��{�F |����YT��oj)��[�+k'���R��Q������ہ��j��`�f�K���e �s����B���y�@��dF��-�Hqe�2��^E�V}!^�_��7�,Ų�='K0e�Q�1�;��ֈ������z&�^O�I&9qzm�Lź�Y�ض@�c���̎�?3��1 �v[b#1m��D܍L"3�J�:Z�vǭY�f^wQ��5����� z{�P���]�u�^k/K�;#t�4��+[��"���G1���k1�kҧ �Lv�O R5�柚nG(J9���q�Sג�7�wL;�U��ڌ�cxLN�;)�ʴ,�{� �q�j}�'��xB���g�H�h�/���5���4]�H�f�{O�o��� 1��yh@���3�� e�TyB�3��V����-4��Q2�K�E&.��4ʵSH���l QE�l��������u�k6�Q<���M����9$�H�4��P��Y�����F�@�]�%=��5�,9r�+��\�̗�)���D0o�ٳ��4�A��/7�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ