Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
e81c1861e4a25f4f32bfbc101b256f30_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e81c1861e4a25f4f32bfbc101b256f30_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
e81c1861e4a25f4f32bfbc101b256f30_JaffaCakes118
Size
689KB
MD5
e81c1861e4a25f4f32bfbc101b256f30
SHA1
b9ed16581dbf53f078b79fc77b46b9000eb732ab
SHA256
44840144a214ec754ef4acd950f7cc6f79364a4d5113aad74f1c5af4d0ef7f68
SHA512
d6147c65f45a95e51c258a7e1630658f3fa35fc6848c83582e0c573cd303aa37a6627f54be8be2d31106494a70cc725a541a78dd355242e5219a2d2b39d602e2
SSDEEP
12288:+v9Bql8a5Rx6CgV/aHmcLZniK+zHLIa+P5ZdzyNFNBDTXhXYBtOW8V6e+:+vfo8a5Rx6CgV/aNZnTXP5S3BDTxXYe4
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
G:\UDBSDK\mobagentsdk\vs10\Release\mobagentsdk.pdb
setsockopt
WSAGetLastError
recvfrom
connect
ioctlsocket
__WSAFDIsSet
htons
sendto
recv
bind
send
inet_ntoa
gethostbyname
WSAStartup
select
WSACleanup
socket
closesocket
inet_addr
EncodePointer
DecodePointer
InterlockedExchange
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WaitForSingleObject
LeaveCriticalSection
SetThreadPriority
EnterCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
InitializeCriticalSection
IsDebuggerPresent
InterlockedIncrement
SystemTimeToFileTime
GetSystemTime
Sleep
CreateMutexW
ReleaseMutex
CloseHandle
GetCurrentProcessId
TerminateThread
GetLastError
CreateThread
GetCurrentThreadId
GetProcAddress
GetModuleHandleA
GetVersion
GetFileType
GetStdHandle
GetTickCount
GlobalMemoryStatus
FreeLibrary
LoadLibraryA
GetVersionExA
MultiByteToWideChar
FlushConsoleInputBuffer
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
DeleteCriticalSection
IsProcessorFeaturePresent
GetProcessWindowStation
GetDesktopWindow
MessageBoxA
GetUserObjectInformationW
ReportEventA
RegisterEventSourceA
DeregisterEventSource
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?flags@ios_base@std@@QBEHXZ
?good@ios_base@std@@QBE_NXZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?_Swap_all@_Container_base12@std@@QAEXAAU12@@Z
?_Orphan_all@_Container_base12@std@@QAEXXZ
??1_Container_base12@std@@QAE@XZ
??0_Container_base12@std@@QAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_BADOFF@std@@3_JB
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
qsort
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_crt_debugger_hook
_except_handler4_common
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
memmove
strerror
fputs
atoi
_errno
fopen
fread
??3@YAXPAX@Z
fclose
??2@YAPAXI@Z
_purecall
_time64
_beginthread
rand
memchr
free
malloc
_vswprintf_c_l
sprintf
memcpy
memset
__CxxFrameHandler3
_CxxThrowException
fflush
fprintf
__iob_func
??0exception@std@@QAE@XZ
_snprintf
wcsstr
_vsnprintf
vfprintf
_exit
raise
strncpy
strchr
realloc
_getch
strcmp
isdigit
getenv
isspace
ferror
fwrite
_setmode
_fileno
ftell
feof
fseek
fgets
_wfopen
_strnicmp
isxdigit
tolower
isupper
strncmp
sscanf
strtoul
_gmtime64
strstr
signal
_malloc_crt
GetIMobAgentSDK
GetIMobAgentSDKDL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ