Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
07c3462afa0026ab045cc353d041214b_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
07c3462afa0026ab045cc353d041214b_JaffaCakes118.dll
Resource
win10v2004-20240426-en
Target
07c3462afa0026ab045cc353d041214b_JaffaCakes118
Size
159KB
MD5
07c3462afa0026ab045cc353d041214b
SHA1
8db5468381c7943d6d1917236a1c81d8ccbe145b
SHA256
1cd856b869d8630a6b78df8e82bea053012efc297753e7b6669eb64af81067c4
SHA512
8950e1bf444c969cc3e32d1e7d70e91ac6a557944e69049d2b3967334f0dc55d868500e441a541ab3f49d85647f4b4ebf1179297573f49da686cbb4638bef6e9
SSDEEP
3072:J2X4zLrDpYbb9fQOh4qntoAQ32C44FH4f4wS9o9UKOgINzNd:IX43pYbb9fHhMv2CNHE4jMUKOgIB
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
e:\Code\ThirdParty\pdb\release\lua.pdb
GetModuleFileNameA
FormatMessageA
GetLastError
FreeLibrary
LoadLibraryA
GetProcAddress
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
free
fprintf
strstr
fputs
isspace
strtoul
_CIpow
floor
fgets
__CxxFrameHandler3
exit
_CxxThrowException
_pclose
_popen
tmpfile
fscanf
clearerr
fwrite
ftell
fseek
setvbuf
fflush
iscntrl
localeconv
isalnum
isdigit
isalpha
_CIsin
_CIsinh
_CIcos
_CIcosh
_CItan
_CItanh
_CIasin
_CIacos
_CIatan
_CIatan2
ceil
_CIfmod
modf
_CIsqrt
_CIlog
_CIlog10
_CIexp
frexp
realloc
rand
srand
_HUGE
strrchr
getenv
strtod
sprintf
strncat
strcspn
strncpy
_difftime64
_gmtime64
_localtime64
_mktime64
_time64
system
remove
rename
tmpnam
clock
strftime
setlocale
tolower
toupper
isxdigit
isupper
ispunct
islower
memchr
strpbrk
strcoll
??3@YAXPAX@Z
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
__iob_func
getc
freopen
fopen
ungetc
ferror
fclose
_errno
strerror
feof
fread
memcpy
strchr
ldexp
?luaL_addlstring@@YAXPAUluaL_Buffer@@PBDI@Z
?luaL_addstring@@YAXPAUluaL_Buffer@@PBD@Z
?luaL_addvalue@@YAXPAUluaL_Buffer@@@Z
?luaL_argerror@@YAHPAUlua_State@@HPBD@Z
?luaL_buffinit@@YAXPAUlua_State@@PAUluaL_Buffer@@@Z
?luaL_callmeta@@YAHPAUlua_State@@HPBD@Z
?luaL_checkany@@YAXPAUlua_State@@H@Z
?luaL_checkinteger@@YAHPAUlua_State@@H@Z
?luaL_checklstring@@YAPBDPAUlua_State@@HPAI@Z
?luaL_checknumber@@YANPAUlua_State@@H@Z
?luaL_checkoption@@YAHPAUlua_State@@HPBDQBQBD@Z
?luaL_checkstack@@YAXPAUlua_State@@HPBD@Z
?luaL_checktype@@YAXPAUlua_State@@HH@Z
?luaL_checkudata@@YAPAXPAUlua_State@@HPBD@Z
?luaL_error@@YAHPAUlua_State@@PBDZZ
?luaL_findtable@@YAPBDPAUlua_State@@HPBDH@Z
?luaL_getmetafield@@YAHPAUlua_State@@HPBD@Z
?luaL_gsub@@YAPBDPAUlua_State@@PBD11@Z
?luaL_loadbuffer@@YAHPAUlua_State@@PBDI1@Z
?luaL_loadfile@@YAHPAUlua_State@@PBD@Z
?luaL_loadstring@@YAHPAUlua_State@@PBD@Z
?luaL_newmetatable@@YAHPAUlua_State@@PBD@Z
?luaL_newstate@@YAPAUlua_State@@XZ
?luaL_openlib@@YAXPAUlua_State@@PBDPBUluaL_Reg@@H@Z
?luaL_openlibs@@YAXPAUlua_State@@@Z
?luaL_optinteger@@YAHPAUlua_State@@HH@Z
?luaL_optlstring@@YAPBDPAUlua_State@@HPBDPAI@Z
?luaL_optnumber@@YANPAUlua_State@@HN@Z
?luaL_prepbuffer@@YAPADPAUluaL_Buffer@@@Z
?luaL_pushresult@@YAXPAUluaL_Buffer@@@Z
?luaL_ref@@YAHPAUlua_State@@H@Z
?luaL_register@@YAXPAUlua_State@@PBDPBUluaL_Reg@@@Z
?luaL_typerror@@YAHPAUlua_State@@HPBD@Z
?luaL_unref@@YAXPAUlua_State@@HH@Z
?luaL_where@@YAXPAUlua_State@@H@Z
?lua_atpanic@@YAP6AHPAUlua_State@@@Z0P6AH0@Z@Z
?lua_call@@YAXPAUlua_State@@HH@Z
?lua_checkstack@@YAHPAUlua_State@@H@Z
?lua_close@@YAXPAUlua_State@@@Z
?lua_concat@@YAXPAUlua_State@@H@Z
?lua_cpcall@@YAHPAUlua_State@@P6AH0@ZPAX@Z
?lua_createtable@@YAXPAUlua_State@@HH@Z
?lua_dump@@YAHPAUlua_State@@P6AH0PBXIPAX@Z2@Z
?lua_equal@@YAHPAUlua_State@@HH@Z
?lua_error@@YAHPAUlua_State@@@Z
?lua_gc@@YAHPAUlua_State@@HH@Z
?lua_getallocf@@YAP6APAXPAX0II@ZPAUlua_State@@PAPAX@Z
?lua_getfenv@@YAXPAUlua_State@@H@Z
?lua_getfield@@YAXPAUlua_State@@HPBD@Z
?lua_gethook@@YAP6AXPAUlua_State@@PAUlua_Debug@@@Z0@Z
?lua_gethookcount@@YAHPAUlua_State@@@Z
?lua_gethookmask@@YAHPAUlua_State@@@Z
?lua_getinfo@@YAHPAUlua_State@@PBDPAUlua_Debug@@@Z
?lua_getlocal@@YAPBDPAUlua_State@@PBUlua_Debug@@H@Z
?lua_getmetatable@@YAHPAUlua_State@@H@Z
?lua_getstack@@YAHPAUlua_State@@HPAUlua_Debug@@@Z
?lua_gettable@@YAXPAUlua_State@@H@Z
?lua_gettop@@YAHPAUlua_State@@@Z
?lua_getupvalue@@YAPBDPAUlua_State@@HH@Z
?lua_insert@@YAXPAUlua_State@@H@Z
?lua_iscfunction@@YAHPAUlua_State@@H@Z
?lua_isnumber@@YAHPAUlua_State@@H@Z
?lua_isstring@@YAHPAUlua_State@@H@Z
?lua_isuserdata@@YAHPAUlua_State@@H@Z
?lua_lessthan@@YAHPAUlua_State@@HH@Z
?lua_load@@YAHPAUlua_State@@P6APBD0PAXPAI@Z1PBD@Z
?lua_newstate@@YAPAUlua_State@@P6APAXPAX0II@Z0@Z
?lua_newthread@@YAPAUlua_State@@PAU1@@Z
?lua_newuserdata@@YAPAXPAUlua_State@@I@Z
?lua_next@@YAHPAUlua_State@@H@Z
?lua_objlen@@YAIPAUlua_State@@H@Z
?lua_pcall@@YAHPAUlua_State@@HHH@Z
?lua_pushboolean@@YAXPAUlua_State@@H@Z
?lua_pushcclosure@@YAXPAUlua_State@@P6AH0@ZH@Z
?lua_pushfstring@@YAPBDPAUlua_State@@PBDZZ
?lua_pushinteger@@YAXPAUlua_State@@H@Z
?lua_pushlightuserdata@@YAXPAUlua_State@@PAX@Z
?lua_pushlstring@@YAXPAUlua_State@@PBDI@Z
?lua_pushnil@@YAXPAUlua_State@@@Z
?lua_pushnumber@@YAXPAUlua_State@@N@Z
?lua_pushstring@@YAXPAUlua_State@@PBD@Z
?lua_pushthread@@YAHPAUlua_State@@@Z
?lua_pushvalue@@YAXPAUlua_State@@H@Z
?lua_pushvfstring@@YAPBDPAUlua_State@@PBDPAD@Z
?lua_rawequal@@YAHPAUlua_State@@HH@Z
?lua_rawget@@YAXPAUlua_State@@H@Z
?lua_rawgeti@@YAXPAUlua_State@@HH@Z
?lua_rawset@@YAXPAUlua_State@@H@Z
?lua_rawseti@@YAXPAUlua_State@@HH@Z
?lua_remove@@YAXPAUlua_State@@H@Z
?lua_replace@@YAXPAUlua_State@@H@Z
?lua_resume@@YAHPAUlua_State@@H@Z
?lua_setallocf@@YAXPAUlua_State@@P6APAXPAX1II@Z1@Z
?lua_setfenv@@YAHPAUlua_State@@H@Z
?lua_setfield@@YAXPAUlua_State@@HPBD@Z
?lua_sethook@@YAHPAUlua_State@@P6AX0PAUlua_Debug@@@ZHH@Z
?lua_setlevel@@YAXPAUlua_State@@0@Z
?lua_setlocal@@YAPBDPAUlua_State@@PBUlua_Debug@@H@Z
?lua_setmetatable@@YAHPAUlua_State@@H@Z
?lua_settable@@YAXPAUlua_State@@H@Z
?lua_settop@@YAXPAUlua_State@@H@Z
?lua_setupvalue@@YAPBDPAUlua_State@@HH@Z
?lua_status@@YAHPAUlua_State@@@Z
?lua_toboolean@@YAHPAUlua_State@@H@Z
?lua_tocfunction@@YAP6AHPAUlua_State@@@Z0H@Z
?lua_tointeger@@YAHPAUlua_State@@H@Z
?lua_tolstring@@YAPBDPAUlua_State@@HPAI@Z
?lua_tonumber@@YANPAUlua_State@@H@Z
?lua_topointer@@YAPBXPAUlua_State@@H@Z
?lua_tothread@@YAPAUlua_State@@PAU1@H@Z
?lua_touserdata@@YAPAXPAUlua_State@@H@Z
?lua_type@@YAHPAUlua_State@@H@Z
?lua_typename@@YAPBDPAUlua_State@@H@Z
?lua_xmove@@YAXPAUlua_State@@0H@Z
?lua_yield@@YAHPAUlua_State@@H@Z
?luaopen_base@@YAHPAUlua_State@@@Z
?luaopen_debug@@YAHPAUlua_State@@@Z
?luaopen_io@@YAHPAUlua_State@@@Z
?luaopen_math@@YAHPAUlua_State@@@Z
?luaopen_os@@YAHPAUlua_State@@@Z
?luaopen_package@@YAHPAUlua_State@@@Z
?luaopen_string@@YAHPAUlua_State@@@Z
?luaopen_table@@YAHPAUlua_State@@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ