Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
26c96caa1b8a72cce1efb59c65de82a5_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
26c96caa1b8a72cce1efb59c65de82a5_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
26c96caa1b8a72cce1efb59c65de82a5_JaffaCakes118
Size
891KB
MD5
26c96caa1b8a72cce1efb59c65de82a5
SHA1
35c7dd7e726f3e456b311eb0d19bed87fe445598
SHA256
175f250b8de4ce13cedc94dd857594122eeb062da158b6a917d36612d5286b68
SHA512
13d5b208db476e648cdb53ae71eccc85d1f508d2c4e43bf4d581b350708bcea4bb4b187020bffd30c863f7b165ba6c33f1984591532c07bdfa995c7ad69b012d
SSDEEP
24576:lcoHtGf44kwnYYIV5T5O+5bvWS7AUHsjYKFZIfxPMHZr4XBzRaR47TGQeZNgeP9M:SoE+Ag0HSaR4v8ZNgeP6j5HPd
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
InternetSetOptionW
InternetCrackUrlW
InternetConnectW
HttpOpenRequestW
HttpSendRequestExW
InternetWriteFile
HttpSendRequestW
HttpEndRequestW
InternetCloseHandle
HttpQueryInfoW
InternetReadFile
InternetOpenW
timeGetTime
IsProcessorFeaturePresent
InitializeSListHead
GetStartupInfoW
WaitForSingleObjectEx
GetSystemTimeAsFileTime
IsDebuggerPresent
lstrlenW
SizeofResource
LockResource
LoadResource
FindResourceA
GetTempPathW
GetModuleFileNameW
GetCurrentThreadId
GetCurrentProcessId
RaiseException
SetThreadPriority
GetCurrentThread
WaitForMultipleObjectsEx
GetLastError
SetThreadExecutionState
GetModuleHandleW
GetTickCount
GetCommandLineW
LocalFree
GetCurrentProcess
CloseHandle
OpenThread
QueueUserAPC
MultiByteToWideChar
CreateFileW
SetUnhandledExceptionFilter
LoadLibraryW
GetProcAddress
TerminateProcess
WideCharToMultiByte
SetFilePointer
SetFilePointerEx
GetFileAttributesExW
ReadFile
WriteFile
CreateFileA
DeviceIoControl
lstrlenA
FreeLibrary
GetVersionExW
LoadLibraryA
IsBadReadPtr
WaitForSingleObject
UnhandledExceptionFilter
LoadLibraryExW
QueryPerformanceCounter
QueryPerformanceFrequency
CreateEventW
SetEvent
ResetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
LeaveCriticalSection
Sleep
WaitNamedPipeW
CancelIoEx
GetOverlappedResult
ReadFileEx
WriteFileEx
FormatMessageW
FreeResource
PeekMessageW
MsgWaitForMultipleObjectsEx
IsIconic
GetClientRect
KillTimer
SetTimer
wsprintfW
DispatchMessageW
TranslateMessage
SetWindowPos
GetParent
ShowWindow
SetPropW
CreateWindowExW
RegisterClassExW
GetWindowRect
IsWindow
DefWindowProcW
CallWindowProcW
DestroyWindow
PostQuitMessage
GetPropW
CommandLineToArgvW
SHGetSpecialFolderPathW
SHGetFolderPathA
CoCreateInstance
PropVariantClear
CoTaskMemFree
CoInitializeEx
CoCreateGuid
CoUninitialize
CoInitializeSecurity
CoSetProxyBlanket
VariantClear
SysFreeString
SysAllocString
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
_Current_get
?_Winerror_message@std@@YAKKPADK@Z
?_Winerror_map@std@@YAHH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
??1?$codecvt@_WDU_Mbstatet@@@std@@MAE@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@I@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QAEX_N@Z
?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z
?_Schedule_chore@details@Concurrency@@YAHPAU_Threadpool_chore@12@@Z
?_Release_chore@details@Concurrency@@YAXPAU_Threadpool_chore@12@@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_XGetLastError@std@@YAXXZ
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
??0task_continuation_context@Concurrency@@AAE@XZ
?_Reset@_ContextCallback@details@Concurrency@@AAEXXZ
?__ExceptionPtrAssign@@YAXPAXPBX@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?_BADOFF@std@@3_JB
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?_Xlength_error@std@@YAXPBD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Xout_of_range@std@@YAXPBD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
_Mtx_lock
?_Throw_C_error@std@@YAXH@Z
_Mtx_unlock
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exceptions@std@@YAHXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?pubseekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?in_avail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?_Xinvalid_argument@std@@YAXPBD@Z
_To_byte
_To_wide
?_Syserror_map@std@@YAPBDH@Z
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_broadcast
_Xtime_get_ticks
_Cnd_timedwait
?_Throw_Cpp_error@std@@YAXH@Z
_Mtx_current_owns
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
_Thrd_join
_Thrd_id
_Query_perf_counter
_Query_perf_frequency
?_Xbad_function_call@std@@YAXXZ
_Cnd_wait
_Thrd_start
_Mtx_destroy
_Cnd_destroy
_Cnd_signal
_Cnd_do_broadcast_at_thread_exit
_Mtx_init
_Cnd_init
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
?_Xbad_alloc@std@@YAXXZ
??1facet@locale@std@@MAE@XZ
??0facet@locale@std@@IAE@I@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
_Strxfrm
_Strcoll
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?tolower@?$ctype@D@std@@QBEDD@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?id@?$collate@_W@std@@2V0locale@2@A
_Wcsxfrm
_Wcscoll
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBUtm@@PBD3@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
_Mtx_trylock
_Thrd_sleep
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AAEXXZ
_Cnd_register_at_thread_exit
?__ExceptionPtrToBool@@YA_NPBX@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
_Cnd_unregister_at_thread_exit
?__ExceptionPtrRethrow@@YAXPBX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
av_freep
av_cpu_count
av_get_picture_type_char
av_log_format_line
av_log_set_level
av_get_pix_fmt_name
av_log_set_callback
av_buffer_unref
av_hwdevice_ctx_alloc
av_hwframe_ctx_alloc
av_buffer_create
av_hwframe_ctx_init
av_malloc
av_buffer_allocz
av_frame_free
av_image_copy
av_frame_alloc
av_image_alloc
av_pix_fmt_desc_get
av_hwdevice_ctx_create
av_hwdevice_get_type_name
av_buffer_ref
av_get_colorspace_name
av_free
av_mallocz
av_frame_unref
av_get_bytes_per_sample
av_samples_alloc
av_opt_set_sample_fmt
av_opt_set_int
av_get_default_channel_layout
av_hwdevice_iterate_types
av_get_sample_fmt_name
avcodec_find_decoder
avcodec_default_get_buffer2
av_packet_unref
avcodec_open2
avcodec_send_packet
avcodec_free_context
avcodec_flush_buffers
av_init_packet
avcodec_default_get_format
avcodec_get_hw_config
avcodec_alloc_context3
avcodec_receive_frame
av_packet_alloc
avcodec_get_name
av_packet_free
avformat_find_stream_info
av_guess_frame_rate
av_read_frame
av_register_all
avformat_close_input
avformat_open_input
swr_convert
swr_get_out_samples
swr_init
swr_alloc
swr_free
sws_scale
sws_getContext
sws_freeContext
htonl
ntohl
htons
WSAStartup
WSAGetLastError
ntohs
Direct3DCreate9
DXVA2CreateDirect3DDeviceManager9
PdhAddCounterW
PdhCollectQueryData
PdhGetFormattedCounterValue
PdhOpenQueryW
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
memcpy
_except_handler4_common
__vcrt_InitializeCriticalSectionEx
__CxxFrameHandler3
__std_terminate
memmove
__std_exception_copy
__std_exception_destroy
_purecall
strchr
__std_type_info_compare
_CxxThrowException
memset
_time64
_ftime64
_localtime64_s
_errno
_invalid_parameter_noinfo_noreturn
terminate
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe
_controlfp_s
_set_app_type
_configure_wide_argv
_initialize_wide_environment
_get_wide_winmain_command_line
_beginthreadex
_register_thread_local_exe_atexit_callback
_c_exit
_invalid_parameter_noinfo
_exit
exit
_initterm
_initterm_e
__acrt_iob_func
__stdio_common_vsprintf
_set_fmode
fread
fopen
__p__commode
__stdio_common_vswprintf_s
__stdio_common_vsnprintf_s
__stdio_common_vfprintf
fgetc
ungetc
feof
fseek
_get_stream_buffer_pointers
fclose
fwrite
fputc
fflush
setvbuf
fgetpos
_fseeki64
fsetpos
_unlock_file
_waccess
_lock_file
strncmp
strncpy
wcscpy_s
strnlen
_dtest
__setusermatherr
ldexp
_libm_sse2_pow_precise
_except1
roundf
nan
realloc
free
_set_new_mode
_malloc_base
_free_base
malloc
_callnewh
wcstol
atoi
strtol
_wtoi
_configthreadlocale
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ