Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
13e11044bd7b904149f9ab23ac21df43_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
13e11044bd7b904149f9ab23ac21df43_JaffaCakes118.dll
Resource
win10v2004-20240419-en
Target
13e11044bd7b904149f9ab23ac21df43_JaffaCakes118
Size
1.2MB
MD5
13e11044bd7b904149f9ab23ac21df43
SHA1
bd0a675d9667a25dbbb6142d86842c74e2bb9e42
SHA256
7c05ad23e265914e9e456898da176c7e7a92045121e164ac828207fc657dc1ff
SHA512
9029602432a8d4d2f338565c0eac292c05c3cbb98239a295e48470885246f5df9e19c6b5096c864ef12942c381757fe0f3af929ce8e7550352240b13bef977ca
SSDEEP
24576:npGhQb9dQCm/CRmBsKXRPwRNnwNfokeu95KWT7S+g4lK5kgSCLR:kVCQxXRSNnwNfok190WT7S+pokgSCL
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
G:\2345code\RCImage_release\bin\Win32\Release\pdb\2345Weibo.pdb
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipCreateBitmapFromScan0
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipBitmapLockBits
GdipFree
GdipDisposeImage
GdipGetDC
GdipAlloc
GdipBitmapUnlockBits
GdipCloneImage
GdipReleaseDC
GdipSaveImageToFile
GetCurrentThreadId
GetCurrentProcessId
lstrcpynA
SizeofResource
InterlockedExchange
GetModuleFileNameW
WaitForMultipleObjects
DisableThreadLibraryCalls
LoadLibraryW
ResetEvent
LoadResource
FindResourceW
GetProcAddress
GetModuleHandleW
FreeLibrary
InterlockedIncrement
lstrcmpiW
LoadLibraryExW
GlobalAlloc
GlobalLock
GlobalUnlock
lstrcmpW
MulDiv
Sleep
GetTickCount
lstrlenW
WaitForSingleObject
ResumeThread
InterlockedExchangeAdd
GetFileAttributesW
InitializeCriticalSection
FindFirstFileW
FindNextFileW
FindClose
GetACP
GetLongPathNameW
CreateFileW
GetFileAttributesExW
ReadFile
WriteFile
SetFileTime
SetFilePointer
SetEndOfFile
GetFileSize
GetFileTime
CreateMutexW
ReleaseMutex
InterlockedDecrement
HeapFree
GetVersionExW
OpenProcess
HeapAlloc
LocalFree
GetProcessHeap
CreateDirectoryW
GetFullPathNameW
GetTempPathW
GetSystemDirectoryW
SetFileAttributesW
DeleteFileW
GetCurrentDirectoryW
GetWindowsDirectoryW
GetTempFileNameW
LockResource
GetSystemInfo
QueryDosDeviceW
GetCurrentProcess
GetVolumeInformationW
GetDiskFreeSpaceW
GetLogicalDriveStringsW
ExpandEnvironmentStringsW
FileTimeToSystemTime
VirtualAlloc
VirtualFree
LoadLibraryExA
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentVariableW
FormatMessageW
GlobalMemoryStatusEx
DeviceIoControl
EnterCriticalSection
CloseHandle
SetEvent
OutputDebugStringW
CreateEventW
SetLastError
WideCharToMultiByte
DeleteCriticalSection
DecodePointer
RaiseException
GetLastError
LeaveCriticalSection
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
GetFileSizeEx
lstrcpyW
lstrcatW
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
IsDebuggerPresent
SystemParametersInfoW
IsRectEmpty
GetWindowTextLengthW
GetFocus
GetDC
FillRect
ScreenToClient
InvalidateRgn
RedrawWindow
DestroyAcceleratorTable
IsChild
GetSysColor
CreateAcceleratorTableW
GetClassNameW
SetCapture
RegisterWindowMessageW
ReleaseCapture
InvalidateRect
ReleaseDC
BeginPaint
UnregisterClassW
GetWindowTextW
MonitorFromPoint
CreatePopupMenu
TrackPopupMenu
DestroyMenu
CharNextW
AppendMenuW
EnableMenuItem
GetCursorPos
GetWindowLongW
GetMessageW
CreateDialogParamW
DefWindowProcW
CallWindowProcW
PostMessageW
GetWindow
GetWindowRect
DestroyWindow
SetWindowPos
GetPropW
MonitorFromWindow
SetActiveWindow
SetWindowRgn
CreateWindowExW
SendMessageW
EndDialog
SetWindowTextW
RegisterClassExW
EnableWindow
ShowWindow
IsWindow
OffsetRect
DispatchMessageW
SetTimer
GetMonitorInfoW
ClientToScreen
PeekMessageW
MapWindowPoints
IsWindowEnabled
MoveWindow
SetFocus
SetPropW
TranslateMessage
LoadCursorW
SetCursor
SetWindowLongW
EndPaint
GetActiveWindow
PtInRect
DialogBoxParamW
GetParent
GetClassInfoExW
GetDesktopWindow
KillTimer
PostThreadMessageW
GetDlgItem
GetClientRect
SetViewportOrgEx
BitBlt
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
GetStockObject
GetDeviceCaps
GetObjectW
CreateSolidBrush
CreatePolygonRgn
CreateFontIndirectW
DeleteDC
DeleteObject
GetUserNameW
RegCloseKey
RegQueryInfoKeyW
RegDeleteKeyW
RegCreateKeyExW
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
SHGetFileInfoW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetFolderPathW
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc
CoGetClassObject
OleUninitialize
CoTaskMemAlloc
CLSIDFromProgID
CreateStreamOnHGlobal
OleInitialize
CLSIDFromString
OleLockRunning
StringFromGUID2
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
DispCallFunc
SysStringLen
VariantClear
SysAllocStringLen
SysAllocString
SysFreeString
VariantInit
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetLBound
SafeArrayGetUBound
VarUI4FromStr
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Xbad_alloc@std@@YAXXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
InternetReadFile
InternetConnectW
HttpOpenRequestW
InternetCloseHandle
HttpSendRequestExW
HttpEndRequestW
InternetWriteFile
wcsstr
wcschr
strstr
__std_exception_destroy
__std_exception_copy
memcpy
memset
memmove
_except_handler4_common
_CxxThrowException
__std_type_info_destroy_list
_purecall
__CxxFrameHandler3
wcsrchr
memchr
__RTDynamicCast
_invalid_parameter_noinfo
_resetstkoflw
_errno
_invalid_parameter_noinfo_noreturn
_beginthreadex
_initterm_e
_initterm
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
_execute_onexit_table
free
malloc
_recalloc
calloc
_callnewh
__stdio_common_vsprintf
__stdio_common_vsprintf_s
__stdio_common_vswprintf_s
__stdio_common_vswscanf
__stdio_common_vswprintf
isalnum
_stricmp
wcscpy_s
wcscat_s
wcsncpy_s
wcsncpy
towlower
tolower
towupper
_wcsnicmp
_wcsicmp
_time64
_mktime64
_localtime64
srand
rand
_splitpath_s
strtol
wcstoul
_wtoi
floor
modf
ceil
_except1
_dtest
WeiboShareImage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ