Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
f8d37e0eb345cb87f9f40f075717042a_JaffaCakes118.dll
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
f8d37e0eb345cb87f9f40f075717042a_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
f8d37e0eb345cb87f9f40f075717042a_JaffaCakes118
Size
227KB
MD5
f8d37e0eb345cb87f9f40f075717042a
SHA1
930c7317167b2e24e60353475e423e94692fbe98
SHA256
b665fa02924373769e0a221bdf3656c04e259063e882c4daa22185e321759615
SHA512
f6040f92d7581be15ee7ae45724e79f8f171dabf4261fb5105ef2fd7f6c7cda20a39394062ab62b59e8a2e38433e78f9a39bbb3878a85bf70df1be1a8418456b
SSDEEP
3072:FlHJNx3S3t3fPRceLl32doI5PsBLhjQq1Kp1ILNXvacOAzYZF9j1LPe:FlHbxC3t5Ll3udsjf1Kp1jcOAAFve
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
R:\TempView\Output\Plugin\Com.Tencent.PayCenter\Bin\PayCenter.pdb
??0CTXBSTR@@QAE@ABV0@@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
??8CTXBSTR@@QBE_NABV0@@Z
??0CTXBSTR@@QAE@H@Z
??8CTXBSTR@@QBE_NPB_W@Z
??0CCmdCodecBase@@QAE@XZ
?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z
?AddRef@CCmdCodecBase@@MAGKXZ
?Release@CCmdCodecBase@@MAGKXZ
?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z
?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z
??1CCmdCodecBase@@UAE@XZ
?CodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?DecodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?GetRegulatedTime@Time@Util@@YA_NAA_J@Z
?Mid@CTXStringW@@QBE?AV1@HH@Z
?Find@CTXStringW@@QBEHPB_WH@Z
ord34
?Mid@CTXStringW@@QBE?AV1@H@Z
ord33
?Left@CTXStringW@@QBE?AV1@H@Z
?GetYear@CTXTime@@QBEHXZ
?GetMonth@CTXTime@@QBEHXZ
?GetDay@CTXTime@@QBEHXZ
?GetHour@CTXTime@@QBEHXZ
?IsEmpty@CTXBSTR@@QAEHXZ
?GetSecond@CTXTime@@QBEHXZ
??0CTXTime@@QAE@_J@Z
?IsEmpty@CTXStringW@@QBE_NXZ
?GetLength@CTXStringW@@QBEHXZ
?BrokenCodec@CCmdCodecBase@@IAEXPB_W@Z
?DecodeBufferToChar@CCmdCodecBase@@IAEXPB_WD@Z
?DecodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?GetDecodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
?EnableUnicodeString@CCmdCodecBase@@IAEXH@Z
??9CTXBSTR@@QBE_NPB_W@Z
?PropertyDWord@CFmtString@@QAEHPB_WK0@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
??0CTXStringW@@QAE@_WH@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
ord26
??8CTXBSTR@@QBE_NPA_W@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
??9@YA_NABVCTXStringW@@PB_W@Z
??1CTXStringA@@QAE@XZ
?Format@CTXStringA@@QAAXPBDZZ
??0CTXStringA@@QAE@XZ
??M@YA_NABVCTXStringA@@0@Z
?Replace@CTXStringW@@QAEHPB_W0@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
?Length@CTXBSTR@@QBEIXZ
??0CTXStringW@@QAE@PB_W@Z
?Format@CTXStringW@@QAAXPB_WZZ
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??0CTXStringW@@QAE@ABV0@@Z
??0CFmtString@@QAE@XZ
?PropertyStr@CFmtString@@QAEHPB_W0@Z
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??1CFmtString@@QAE@XZ
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??BCTXStringW@@QBEPB_WXZ
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
??0CTXBSTR@@QAE@XZ
??ICTXBSTR@@QAEPAPA_WXZ
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
?ConvertTXDataStringBundle@Convert@Util@@YAHPAUITXData@@@Z
??0CTXStringW@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
?GetTXDataStr@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXStringW@@@Z
??1CTXBSTR@@QAE@XZ
?GetBSTR@CTXStringW@@QBEPA_WXZ
??1CTXStringW@@QAE@XZ
?GetMinute@CTXTime@@QBEHXZ
??0CTXBSTR@@QAE@PB_W@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
?SaveMsg@Msg@Util@@YAHPB_WKKKPAUITXMsgPack@@PAUITXData@@@Z
?IsVASFlagValid@Contact@Util@@YAHKE@Z
?GetMinorVer@Version@@YAEXZ
?GetMajorVer@Version@@YAEXZ
?AddReport@URL@Util@@YA?AVCTXStringW@@ABV3@0@Z
?IsMsgOffline@Msg@Util@@YAHPAUITXMsgPack@@@Z
?GetStatus@Contact@Util@@YAGK@Z
?AdjustUrl@URL@Util@@YA?AVCTXStringW@@ABV3@W4URLMODIFYLEVEL@12@0@Z
?GetRTypeByUin@Contact@Util@@YAKK@Z
?IsPrevented@Contact@Util@@YAHK@Z
?IsInBlackList@Contact@Util@@YAHK@Z
?GetSignFmt@URL@Util@@YAXAAVCFmtString@@@Z
?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@W4URLMODIFYLEVEL@12@0@Z
?GetSelfUin@Contact@Util@@YAKXZ
?SetMsgTime@Msg@Util@@YAXPAUITXMsgPack@@_J@Z
?CreateMsgPack@Msg@Util@@YAHPAPAUITXMsgPack@@@Z
?Get32ByteValueAddedSign@Misc@Util@@YA?AVCTXStringW@@XZ
?AddContactToSessionList@Misc@Util@@YAXK@Z
?OpenContactChatSession@ChatSession@Util@@YAXKPAUITXData@@@Z
?FlashContactChatFrameWnd@ChatSession@Util@@YAXK@Z
?IsContactChatSessionOpen@ChatSession@Util@@YAHK@Z
?WriteMsgInContactChatSession@ChatSession@Util@@YAXKPAUITXMsgPack@@KPAUITXData@@@Z
?OpenUrlWithIEWnd@URL@Util@@YAPAUHWND__@@ABVCTXStringW@@W4URLMODIFYLEVEL@12@0HHPB_WPAPAUIGFStandardWin@@HV4@HPAUIIEHost@@@Z
?GetTipIconFile@Misc@Util@@YA?AVCTXStringW@@W4IconIndex@@@Z
?OpenUrlWithWnd@URL@Util@@YAPAUHWND__@@ABVCTXStringW@@W4URLMODIFYLEVEL@12@0HHPB_WPAPAUIGFStandardWin@@HV4@HPAUIWebKitJSHost@@@Z
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
SetThreadLocale
GetThreadLocale
RaiseException
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetLastError
lstrlenW
lstrcmpiW
GetLocaleInfoA
GetModuleFileNameW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
InterlockedExchange
GetModuleHandleW
GetVersionExA
CharNextW
GetSystemMetrics
UnregisterClassA
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegCloseKey
SHGetFileInfoW
CoTaskMemFree
CoCreateInstance
StringFromCLSID
SysFreeString
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
SysStringLen
ord31
ord32
ord61
ord23
ord64
ord22
ord18
ord58
ord30
ord15
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
__clean_type_info_names_internal
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
??3@YAXPAX@Z
_CxxThrowException
memset
_recalloc
memcpy_s
malloc
free
wcscpy_s
wcsncpy_s
wcslen
__CxxFrameHandler3
??_V@YAXPAX@Z
memmove_s
??2@YAPAXI@Z
_purecall
memcmp
_invalid_parameter_noinfo
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
_time64
_except_handler4_common
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
??0exception@std@@QAE@ABQBD@Z
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ