Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
8349defc4295b27f92a0a13b91dfff22_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8349defc4295b27f92a0a13b91dfff22_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
8349defc4295b27f92a0a13b91dfff22_JaffaCakes118
Size
12.3MB
MD5
8349defc4295b27f92a0a13b91dfff22
SHA1
2b6e9d0e30248551b83a175a238162e3064fa1be
SHA256
6c3f22612faa440348512b59a962a9082f9952fec2d77d05ccabdb55b897e28a
SHA512
482d3a0a525a7ab2927d828416c17fc29fa9fc28a21d9a408bd279f4e4a0cf13e99e37cc797ed21f25d68f145346597eb93064460f44656b63c7bfa60e7be9b6
SSDEEP
393216:MM30wKFcP3RltXw1aqFVoB69/kpc9qDrJCV4UVayA:MMElKP3R3gaqX79spprJaVayA
| resource | yara_rule |
|---|---|
| sample | vmprotect |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
midiStreamOut
WSACleanup
GetVersion
GetVersionExA
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SetWindowRgn
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
GetViewportExtEx
OpenPrinterA
RegQueryValueExA
ShellExecuteA
CLSIDFromString
LoadTypeLi
ord17
ChooseColorA
WTSSendMessageW
�Wx�2>�Zq^��F��pZ~7�"�kDh�iLtH\��֟��3�}��eqj�w���O�^��sw[�5�1m���c�<�#��������L������%��� r�$XV(<^�ל��>��/�` _��^����T^��K/�N_��r�Q`���O�廒K��&��S>n��N"d�_v�{�� ��.����IG^~^jO���GxʶF߶z}a*�N�\qz��8vVtuw�&Ŧ�X��%�TҨ���ԟ���������E\��5s�Ca�W[�� ���LouXR��)=1�ot��Zh]�a���eFPzEa�I�/T�vQ��'G.@��ld�UE����[���ͼ 0Pg��!�ꕌ<���|3T�V0��g���L��cM:����!�$����S�zOhOU�-{�L�bt�/y�ј�"�<zGM���'�i�����?xԦ3%�̒������II�U79.D7�]ܕ�t�nc.�<Z�G�vb��^��3t��1�V;cv�X��D�߰��9s�RΤ�z�����'�2[S�b`���g�ZNI$���k��&�B�삊ގ[����l%�lxF�`�m�o*���kv�,��C];�� A�j�7��@s��*����C">��$�{�]4��u!H�����Di�(���ǐ���c)��*����/D *��qJ :|Lz?O�u�����#�I�Aoۜ�o��-Ԧ��R���=ʛ�AK����y��7R��ߑ�B:�'���-�:��snm���Y H�s��V>�}":'*E5Tc�6x��1[ pR秈]�������ӥ��=�䲕�<!0s����\Ô�Zd��Y�e��x;��@*�8�.�`aa6O6L��f������d�",��.���q]�+Ms�����2S7�أ@_h�L<��K\ְ� ���.X�z\�uCA�#�F���:��Q�SuJ&��T�X�����d�d�{j�k����γ�)��ZR������� ��G�]�>2� ̂X��&��FS��+B��45k���;8���8a��^��e��z��}[��j$�G�\���|�j+L�܄��RQ��{H���M�s�D�.1��F��86Z6���͇��0Sf<J�=���->y��>�-��o(?���e��hy�0��.Ђ��Q����{���">W��Ф�r�)��L��ɘ�ë���Rľ.�5z�W+8O p�`�͐ٚ��Y������� R��UN���!Q"D��O��Џ��)�䨲�M[O���<�����?[q�qb*�*+ͽ�@H��Cδ�3�D��>�����r��٩�\m ����� ��>�;o�ʺ�� c��I���n�w�DJ�ՃrX����k�dSf0p�����l?C<�O"t��g�o�?�oҋ�v��Y?z.'`��v��{�}`�X��3�V8Ra�u�������6Q� ]+L'��Yv�1�V�e�A,�N_�}Qz��;�Y�畅��r�_�џ�n7DVAz�P���h�~a�t�v^u�� �s6��0s���C3���ne���ʷ�W��v@�D^�7��?:_�}��ջ�h��@J/� �ϸf��#� D9��`W���^p��1j�v������F��t�w����R\�֒$�Pj�LM�V������L�ad�"=}~���_�!J%`�p\-��~y"��X-�E]6��Q��0D,��AM'k��n�ڦ>�R��U�������{��H�# (P��Xl���x��Uws�.�=%`�DS����c�0�$�OBq����5sף����ÊJ��T�_�H^���weo ;��qm�A�i�t{W�iB{N���y��U�c����S���`v�=&9Hvm;�Fl1p�d3�ߌ�=���)Zt��ߑ����Qȡ�I�0wI�#�5�D`��Rg_�M���\��~�m��M]����RQ���\��;de�d~�d p#��:eQ��FjDp[���M�<�$,=�S��lT2A����|D��}��0h���ncG��}���g�ܕ�>��F��WoPe�ˌ1�{�&�yb(�M�V��-�aA���.���*+�{�y�'���c��C٠ʿ+P�A�9x^�3`���d���>*� �`tb�*��v�G1�95<�؉]ߐ_� �`��� ��8Y��T����%($��y��$ 3��v[�T���Zg+\��,p �S ]WI���I���7g,?.�NNbs%�J�>J��a%ʢ5�.K4[��m-LL�g�aC7���_6~D���S�w�dw~L����z�w�V��j����y`)ͬǦ.<�v���|�P��iC�q{͍��j�̈�G�hi��g*_7L��jl?j��̜/����P��s� %c�0�k[�sIubs]��M�U��^>���������ll����W����g�]��/���O�w��5��߈B�ƞ�k��6���E�zĸ�,��C����g'�½�6M�?2ՂOV �7O��+�Q�Hb/Z4M&73�0���6���)���W����0��Q9���F�mjG)k ��#��F�~Գ��U�ɐ����c�Q'>�4�䤍��v�!V����{�2�$������;W͊��kl��:$v%k2zdDZ�R��~�<�S��eS�i3jc���Ç��H��u��Z�+��oW�4��n\�:Bז��]]�H� �;Ԭ0�߈!����Q4��'UՑ[�&"�ㅫr��0qM�� ߌ�Gܽ{�~��q �i��l(�0��Sԗ.�zk������V���>*�����[�Ȏʪ�}� #��|is���X ���أG�xI��lsx\c�g��f��� B�zA,�����CsBೇR�r��e�g㵁��D�P��W|Z� �L��m�e�*����F�F�9�1y&X0%��k����s��]ä;+����U7�Јl�vml1y��xb�� �W�W)B1M�j��� �Y���J�#<4ݲ��n/i�c�a���Ef.�mM{>�TȚ�,�;��=a*��:�9.�����g�)R+�9�!�]X�*7��*�a~<<`�(>�~�y��C����B}f��pU�Ԭ��8�a=o��T�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ