Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
common.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
common.dll
Resource
win10v2004-20240412-en
Target
f3ef3b7add2c144c95c73b9d9e152fa1_JaffaCakes118
Size
793KB
MD5
f3ef3b7add2c144c95c73b9d9e152fa1
SHA1
df587a2e03097a44e32365a1a6ed659bc046b3b4
SHA256
023129859f01fffa64c623b8cee78e704b7f82cb00f71ba38e2e1fd6586517b2
SHA512
f78fe952dad951d6b8478631ab0bda9555efd10cb289653ea34b53df9179648d5751871c87c5bec33f6c4c87d3fb22f518aa704e8e68ec9d74756cb4ff39cbba
SSDEEP
24576:XDHxcrwgxrCOqMqK/QYM32FSwFTyInlu9:XjxcrwZ3MqK/QV29FTJny
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
D:\PokerBuilder11.1.8\winclient\game\compiled\release\common.pdb
WSASetLastError
send
gethostbyaddr
listen
setsockopt
accept
inet_ntoa
WSACancelBlockingCall
shutdown
ntohl
select
recv
bind
socket
__WSAFDIsSet
closesocket
getsockopt
connect
inet_addr
WSAStartup
ioctlsocket
htonl
WSAGetLastError
htons
ntohs
getservbyport
WSACleanup
getservbyname
gethostbyname
FreeEnvironmentStringsW
GetModuleFileNameA
GetStartupInfoW
SetHandleCount
ExitProcess
InitializeCriticalSectionAndSpinCount
FlushFileBuffers
GetConsoleCP
WriteFile
FreeLibrary
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
GlobalMemoryStatus
GetVersionExW
GetSystemInfo
GetDiskFreeSpaceExW
Sleep
CreateMutexW
WaitForSingleObject
GetTickCount
ReleaseMutex
CloseHandle
GetSystemTime
GetEnvironmentVariableW
GetLocaleInfoW
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleW
GetFileAttributesW
CreateDirectoryW
FindClose
GetModuleFileNameW
GetEnvironmentStringsW
GetWindowsDirectoryW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FindResourceW
SizeofResource
LoadResource
LockResource
GetFullPathNameW
DeleteFileW
SetLastError
GetCurrentThreadId
GetLastError
GetVersion
GetFileType
GetStdHandle
QueryPerformanceCounter
GetCurrentProcessId
GetVersionExA
FlushConsoleInputBuffer
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
HeapSize
LCMapStringW
ReadFile
SetFilePointer
SetStdHandle
GetFullPathNameA
GetFileInformationByHandle
PeekNamedPipe
GetCurrentDirectoryW
CreateFileW
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
LoadLibraryW
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
GetDriveTypeW
SetEndOfFile
GetProcessHeap
GetCPInfo
HeapDestroy
HeapCreate
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RaiseException
MulDiv
CreateFileA
VirtualFree
GetWindowsDirectoryA
GetVolumeInformationA
VirtualAlloc
DeviceIoControl
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
HeapFree
DecodePointer
EncodePointer
HeapAlloc
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
GetCommandLineA
HeapReAlloc
ExitThread
CreateThread
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
SetConsoleCtrlHandler
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
GetTimeZoneInformation
RtlUnwind
GetProcessWindowStation
GetDC
MessageBoxA
GetDesktopWindow
ReleaseDC
GetUserObjectInformationW
MessageBoxW
TranslateCharsetInfo
GetDeviceCaps
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegSetValueExW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
ShellExecuteW
SHChangeNotify
SHGetSpecialFolderLocation
SHFileOperationW
SHGetPathFromIDListW
CoCreateInstance
CoInitialize
Netbios
??0CGSConnection@@QAE@ABV0@@Z
??0CGSConnection@@QAE@XZ
??0CProtocolMessenger@prcl_core@@QAE@ABV01@@Z
??0CProtocolMessenger@prcl_core@@QAE@PAVCPackageMapperAbstract@1@PAVIGeneratorVersionMap@1@@Z
??0IGSConnection@@QAE@ABV0@@Z
??0IGSConnection@@QAE@XZ
??1CGSConnection@@UAE@XZ
??1CProtocolMessenger@prcl_core@@QAE@XZ
??1IGSConnection@@UAE@XZ
??4CGSConnection@@QAEAAV0@ABV0@@Z
??4CProtocolMessenger@prcl_core@@QAEAAV01@ABV01@@Z
??4IGSConnection@@QAEAAV0@ABV0@@Z
??_7CGSConnection@@6B@
??_7IGSConnection@@6B@
?ClearStatus@CGSConnection@@UAEXXZ
?Connect@CGSConnection@@UAE_NPBDJ@Z
?ConnectSSL@CGSConnection@@UAE_NPBDJ0PAPBDH0@Z
?ConnectTCP@CGSConnection@@UAE_NPBDJ@Z
?DecodeCompressed@CGSConnection@@AAE_NABV?$vector@DV?$allocator@D@std@@@std@@@Z
?Disconnect@CGSConnection@@UAE_NXZ
?EncodeCompressed@CGSConnection@@AAE_NAAV?$vector@DV?$allocator@D@std@@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@@Z
?Flush@CGSConnection@@UAE_NXZ
?In@CProtocolMessenger@prcl_core@@QAEPAVCMessageInputStream@2@H@Z
?InitClient@CProtocolMessenger@prcl_core@@QAEXJAAVCInputOutputStream@2@_N1@Z
?InitClientEx@CProtocolMessenger@prcl_core@@QAEXJAAVCInputOutputStream@2@ABV?$set@PAVCIdVersion@prcl_core@@U?$less@PAVCIdVersion@prcl_core@@@std@@V?$allocator@PAVCIdVersion@prcl_core@@@4@@std@@_N22@Z
?IsConnected@CGSConnection@@UBE_NXZ
?Out@CProtocolMessenger@prcl_core@@QAEPAVCMessageOutputStream@2@H@Z
?PackageRecognizer@CGSConnection@@AAE_NXZ
?ReadBinaryPacket@CGSConnection@@AAE_NAAVCGSPacket@@@Z
?ReadField@CGSConnection@@AAE_NAAIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV23@@Z
?ReadFromSocket@CGSConnection@@AAE_NH@Z
?ReadStringPacket@CGSConnection@@AAE_NAAVCGSPacket@@@Z
?Recv@CGSConnection@@UAE_NAAVCGSPacket@@@Z
?RecvCompressed@CGSConnection@@AAE_NXZ
?RecvUncompressed@CGSConnection@@AAE_NXZ
?ResetConnectionState@CGSConnection@@MAEXXZ
?Send@CGSConnection@@UAE_NABVCGSPacket@@@Z
?SendCompressed@CGSConnection@@UAE_NABV?$list@VCGSPacket@@V?$allocator@VCGSPacket@@@std@@@std@@@Z
?SetPublisherFlag@CGSConnection@@EAE_N_N@Z
?SetPublisherFlag@IGSConnection@@UAE_N_N@Z
?SetSessionGalaxyID@CGSConnection@@QAEXH@Z
?Status@CGSConnection@@UBEHXZ
?VerifyCertificate@CGSConnection@@IBE_NABVX509_certificate@socklib@@ABVX509_publickey@3@@Z
?WriteBinaryPacket@CGSConnection@@AAE_NABVCGSPacket@@@Z
?WriteField@CGSConnection@@AAEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@@Z
?WritePacket@CGSConnection@@AAEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVCGSPacket@@@Z
?addInputOutputStream@CProtocolMessenger@prcl_core@@QAEXAAVCInputOutputStream@2@J_N1@Z
?removeInputOutputStream@CProtocolMessenger@prcl_core@@QAEXH@Z
HubServices
Initialize
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ