Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
a8e9fea1d794958757f56436dfc96637_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a8e9fea1d794958757f56436dfc96637_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
a8e9fea1d794958757f56436dfc96637_JaffaCakes118
Size
6.4MB
MD5
a8e9fea1d794958757f56436dfc96637
SHA1
c5b386d80c435f5edb7e64bf59674a8c28a14c09
SHA256
a5587c9f8c777f277db34a3c498667cd4754373516ab0c171c08505cca1831da
SHA512
2a71c5ec82dc7b9ba834905f43bbb51f98c465c3b1f18f9e69455c0db89ecaceb1379a1d4241d11db3d485677ab843dfd013145862a83d88a3fed6922f87c2cd
SSDEEP
98304:xeOQ4KCQP4sC61B5RE9IJ5Z48ouTalQxtJyJlN4ILCHg9DLX90dtnT:YOVXklCiB5REOPZfjWUOalA9/8tT
resource | yara_rule |
---|---|
sample | vmprotect |
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
RaiseException
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
OleInitialize
SafeArrayCreate
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
�m@�$���K�>:��+(w���p^Gn���w"SIaN�U0�9o?"A�b�=y��n��ƞ�A����T`;���F*����[��y1�%�f�)�kGE����d5�/��O��8Ꝼ�.{�[�a_ag��������z���{�����}W����{'���jy�����Hgj;��k\�?DhR��E��4g�{ ~�tsɝ���`y�i\O,�Q�'X^U[�2���t�˲�77��8lco0��5G�c�� y����-���+�DcayR��<���� �2�����:��� �ձ�����D�V�Ͷ�����x:.�I�f�����\XE�2���/�P��ϠM�P�V���M �������`LEh>�ڶ�~�k�R) �}p��g� w5�ٖH� �FT�BD�8�$эM��!�^<����D'2y g<O��E$�"�H���N�P�(-h�i��Ű� ��C�p^lj�K+N+Qiz�HhE��3u3�2��Ћ,�a�JĩJHzI�_]5�N����-�pHȲ�M�ձd6�>n#U��\��gC���Lp����S���7F���M{^��i�����Ԡ�Eku�9JF�T~xsV�w���x��#_�#0^�Jq�*L�`�s��qU�C۔��y�B!��.��d\%�WY8,9ϑ�M��=γ6ҝu;����U%M4#+|����*��" �J)$K9j�n��O5[�1cPԘ�^�)c@!����锺<iw�8m�wT������?�q��@�B�& G`<ţ��E�Y<(�wm��E�P ��M�;H�L ���s���� �f t��A�Y�ZԻ>�(R��q���o���a�d"�M��Z�Ԅ0g�dN��3��q,�$c�kavM���#E"ע�����4Q�b�����CK�u��%.�z.��6�Rxo�������E�����h!�V��2-�E�/�%��$r�*�S��1�B[gxX9�z{�cu�) l絥B���'~0�[#�_+��x^�i��T�$�q������P�:r��P���EI'���A��G�o��� ҉l�Q,� �1z��R�x��J����%넙 ���8�ݞ��� J����'v�A�?U����Y/�fS���P�FT'�;ȃ���5����X�-����� H7��Wi����u������8�;�,��뵍@2M��o�|�z�S��u��]�4�<c�&�5�F!W��=�T�H��h�����*�S�t,u��5]�PG���d������Ny֖�R�2�%������1�r��v��:F�ny*�l������(�;I��An���쬞�w����5��Z$}�����3ꭷ3���"�Bu��1��m� �ΚkUjG ʧ��� �sP>-$w� 6z�m ��S#��_瓄U8�*��ٺ0����q3��Q�<H���^��-m�:�Sj��ԦϪ:�`�*�f�������Y7Ik����� �_�RA��T6�ee��76����hU���#�fH����/P��c���i�m��d�έX4�^�L�v�$!�?҇��M���h��r&K�\��ta,�CY���g�*O���-4n�A��u����J�d�R�@����c"�bD��{�p������E�Z�RI��a�x=\���3�A�#"gα�mOhG=4=��#XT�9�hɝ�$5�(d��3�f��82��m�܆�,���4�f='�nZQ���O��$�����͕�� �$���ܣ�Ɨ�QG�9��ΞG�mܭgT���e8 �]����7؉���l��Q��66�.(���d#�Z3� �yp/t�O���a WF^�P�����;����E�i�*����E'���e���=+�:gy�S�Հ*u"~��g'��`� �5V]{�;|��ͨM�!%�rn�������$�r�� ^�Us� ��^��-����\(�R�S�~��[Hu�Q�X�jS�'%�����Z�S06��u���=\ڙ������v0*��YIeY1rtK����2Y�V\��=��v`|��/�oAT-+�������!>�1�S,���� ��p]�s#b�Q�9A������AF+����Ҋ�U����G�X�r� �Y,����b;�\ʼ@2���>�O��g�⎷\\m<�5�?�];��a܁a�2X��,�;����2��G�kܼ��=nE-��">i"��Ցm�,��!���o��?s���swO1L���8.K���2x.���a���f�*ݭW��2!F�}�겙�魛^ۜʱ(���o�:9��;&0��y�����4�8T)�����ݱ͢��� ���k�'U�K+������.���8_�rZh���r�0��e��eS������!C��=I�Zѓ6A��`�s��7IҘyn�a����dO���q7���S����y:L�(>q�5��wlǁL!i�� MW�)>#�w�!�F�HǿH�V0�4��f�L�E��Hyk�b�����,� �U� ��d+t� K�.�).D����<��+�����]2�%��ڑ:��My`v��$�Mq�m��N7��8ݍ4��:0�tT~gj��qZ�gM������T ��m��be_�B]= �~����1�۴a�S|�a�0��!��)�"�cG!���E� ��� d/����y�Jp��!�54�\�߲����?�u�Mjgx]'_�� @/AҼ��gR��9|ѿ,z�����xq</I�[^�d�@y|ތ� !��Q+�ZU� ��ܹ׆�s�h�dK����.a(2�^�[���XU��s�k@�Q}�B�j�d����#r��U����#m�5�ؑ}RĠ.>P�W?&�q��yލp��C8�9���X�e�2��C���\�.,��g�`-�����"Y�Z8�';Ð�*��Bx�/腭HU��7�f}���#���K����dB�q�h$#����/���u�!��OS� �Қ��I�I���R�"�T���c�:�V�/�129~���J�j��CH�y["x�@��F��;,:�c`�ݕ��b�k} )v�
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ