Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
0a19c6b84ac5c3052d1b710da8d4c492_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0a19c6b84ac5c3052d1b710da8d4c492_JaffaCakes118.dll
Resource
win10v2004-20240426-en
Target
0a19c6b84ac5c3052d1b710da8d4c492_JaffaCakes118
Size
1.9MB
MD5
0a19c6b84ac5c3052d1b710da8d4c492
SHA1
e19436956154f28448ea5cf82712e98d209159bd
SHA256
1f33f4ead1c9a54e961cd836a708f2fd79243dc1a78b248c48d64ed710d1275f
SHA512
0182e2696234c1bb89ed338f4fca4726a973dbbdca1d57d71720f38254f239b1d7f91150a5bff15a52c96cd7253dab6bffa04f97925da2858632dc4029ecd6b3
SSDEEP
49152:UM/d/wutKL5tj112jGLF2eoRdDyLI3QAJhbngmRQObs:U09hc
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
D:\TemporaryBuilds\main_app_builder_1\19\s\App\_bin\soda\Win32\Release\pdfactivedoc.pdb
WTSQueryUserToken
WTSEnumerateSessionsW
BeginPaint
EndPaint
ReleaseDC
SendMessageTimeoutW
SendNotifyMessageW
PostMessageW
DefWindowProcW
CallWindowProcW
GetDC
RegisterClassExW
GetClassInfoExW
CreateWindowExW
IsWindow
IsChild
DestroyWindow
ShowWindow
SetWindowPos
SetFocus
GetFocus
UnregisterClassW
PtInRect
SetWindowRgn
GetSystemMetrics
WaitForInputIdle
CharNextW
LoadCursorW
SetParent
GetParent
SetWindowLongW
GetWindowLongW
InvalidateRect
EqualRect
OffsetRect
UnionRect
IntersectRect
FillRect
GetClientRect
GetKeyState
NetUserGetInfo
NetApiBufferFree
DeleteCriticalSection
SetEvent
WaitForSingleObjectEx
CreateEventA
GetCurrentProcessId
GetCurrentThreadId
ProcessIdToSessionId
GetModuleFileNameW
GlobalAlloc
GlobalUnlock
GlobalLock
LocalAlloc
MulDiv
FormatMessageW
MultiByteToWideChar
EncodePointer
HeapDestroy
HeapReAlloc
HeapSize
GetCurrentProcess
DisableThreadLibraryCalls
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryExW
LoadResource
SizeofResource
FindResourceW
LocalFree
lstrcmpiW
GetLongPathNameW
GetShortPathNameW
GetTempPathW
InitializeCriticalSectionEx
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
CreateFileW
FindClose
FindFirstFileW
GetFileAttributesW
DuplicateHandle
OpenProcess
WTSGetActiveConsoleSessionId
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
FormatMessageA
GetNativeSystemInfo
SetFileAttributesW
LeaveCriticalSection
EnterCriticalSection
GetProcessHeap
HeapFree
HeapAlloc
SetLastError
GetLastError
RaiseException
CloseHandle
DecodePointer
SetEndOfFile
RemoveDirectoryW
GetFullPathNameW
InterlockedFlushSList
RtlUnwind
VirtualProtect
VirtualQuery
CreateThread
ExitThread
InitializeCriticalSectionAndSpinCount
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameA
GetCurrentThread
GetACP
GetStdHandle
GetFileType
OutputDebugStringA
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetConsoleCtrlHandler
GetTimeZoneInformation
FindFirstFileExA
FindFirstFileExW
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetFileTime
SetEnvironmentVariableW
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
WriteConsoleW
GetFileInformationByHandle
GetFileAttributesExW
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateWaitableTimerA
GetModuleHandleA
GetLogicalProcessorInformation
GetSystemInfo
ResumeThread
Sleep
SetWaitableTimer
OpenEventA
WaitForMultipleObjectsEx
ReleaseSemaphore
ResetEvent
QueryPerformanceFrequency
QueryPerformanceCounter
AreFileApisANSI
GetDiskFreeSpaceExW
FindNextFileW
DeleteFileW
CreateDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetEnvironmentVariableW
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
MoveFileExW
CopyFileW
CreateDirectoryExW
GetWindowsDirectoryW
DeviceIoControl
SetFileTime
WideCharToMultiByte
GetStringTypeW
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
IsDebuggerPresent
OutputDebugStringW
InitializeSListHead
SetFilePointerEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
LPtoDP
TextOutW
SetTextAlign
SetMapMode
SetBkColor
SaveDC
RestoreDC
GetDeviceCaps
DeleteObject
DeleteMetaFile
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreateMetaFileW
CreateDCW
CloseMetaFile
SetSecurityDescriptorDacl
CopySid
LookupAccountSidW
RevertToSelf
ImpersonateLoggedOnUser
DuplicateTokenEx
RegSetKeySecurity
RegQueryValueExW
RegEnumValueW
RegEnumKeyW
InitializeSecurityDescriptor
InitializeAcl
FreeSid
AllocateAndInitializeSid
AddAccessAllowedAce
CreateProcessAsUserW
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
ConvertSidToStringSidW
RegSetValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
IsValidSid
InitializeSid
GetTokenInformation
GetSidSubAuthority
GetSidLengthRequired
GetLengthSid
OpenProcessToken
SHGetFolderPathW
OleRun
CreateOleAdviseHolder
OleRegGetUserType
OleRegGetMiscStatus
OleRegEnumVerbs
CreateDataAdviseHolder
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
StringFromIID
CoUninitialize
CoInitializeEx
CoTaskMemFree
StringFromCLSID
CoCreateInstance
LoadTypeLi
VariantChangeType
VariantClear
VariantInit
SysAllocStringByteLen
LoadRegTypeLi
SysStringLen
SysFreeString
SysAllocString
SetErrorInfo
GetErrorInfo
CreateErrorInfo
OleCreatePropertyFrame
RegisterTypeLi
VarUI4FromStr
SysStringByteLen
UnRegisterTypeLi
LoadUserProfileW
CreateEnvironmentBlock
DestroyEnvironmentBlock
UnloadUserProfile
??0?$oserializer@Vxml_woarchive@archive@boost@@UCreateProcessRequest@KernelBridgeProxy@@@detail@archive@boost@@QAE@XZ
??0?$singleton@V?$extended_type_info_typeid@UCreateProcessRequest@KernelBridgeProxy@@@serialization@boost@@@serialization@boost@@IAE@XZ
??0?$singleton@V?$extended_type_info_typeid@UCreateProcessResponse@KernelBridgeProxy@@@serialization@boost@@@serialization@boost@@IAE@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UCreateProcessRequest@KernelBridgeProxy@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UCreateProcessRequest@KernelBridgeProxy@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@UCreateProcessResponse@KernelBridgeProxy@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UCreateProcessResponse@KernelBridgeProxy@@@23@XZ
?get_const_instance@?$singleton@V?$iserializer@Vxml_wiarchive@archive@boost@@UCreateProcessResponse@KernelBridgeProxy@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vxml_wiarchive@archive@boost@@UCreateProcessResponse@KernelBridgeProxy@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$map@Vxml_wiarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAABV?$map@Vxml_wiarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$map@Vxml_woarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAABV?$map@Vxml_woarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ
?get_const_instance@?$singleton@V?$oserializer@Vxml_woarchive@archive@boost@@UCreateProcessRequest@KernelBridgeProxy@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vxml_woarchive@archive@boost@@UCreateProcessRequest@KernelBridgeProxy@@@detail@archive@3@XZ
?get_lock@singleton_module@serialization@boost@@AAEAA_NXZ
?get_mutable_instance@?$singleton@V?$map@Vxml_wiarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAAV?$map@Vxml_wiarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$map@Vxml_woarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAAV?$map@Vxml_woarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ
?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ
?is_destroyed@?$singleton@V?$map@Vxml_wiarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$map@Vxml_woarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ
?is_locked@singleton_module@serialization@boost@@QAE_NXZ
?load_object_data@?$iserializer@Vxml_wiarchive@archive@boost@@UCreateProcessResponse@KernelBridgeProxy@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z
?lock@?1??get_lock@singleton_module@serialization@boost@@AAEAA_NXZ@4_NA
?lock@singleton_module@serialization@boost@@QAEXXZ
?save_object_data@?$oserializer@Vxml_woarchive@archive@boost@@UCreateProcessRequest@KernelBridgeProxy@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?unlock@singleton_module@serialization@boost@@QAEXXZ
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ