Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
39c1f400b5ce88d66565db0643998060_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
39c1f400b5ce88d66565db0643998060_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
39c1f400b5ce88d66565db0643998060_JaffaCakes118
Size
1.1MB
MD5
39c1f400b5ce88d66565db0643998060
SHA1
ce0811e6ede51804763db8077a2c5eaa42801def
SHA256
ca88ba94f37bdfc3c00b3a7e643613396818adef263f22de77666bc91ea45bd8
SHA512
d17fdafdf3c16130244e19afd6c5f3e1e0b6452ebe97c0e7c9bdf67439b0d0b1e01585dc1efacd06248afc65fd3cc624700961dc74aae0256f53f06d0f1bc543
SSDEEP
24576:TPBloov9ya6ZoMZxV8EhgAzvWge35PVUesI4GSN:Vh9x6ZZ58M7JyyesI4GSN
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
D:\webapps\b\build\slave\repo\build\src\out\Release\updater.dll.pdb
UuidCreate
ImmDisableIME
InternetReadFile
InternetOpenUrlW
InternetCloseHandle
InternetQueryOptionW
InternetOpenW
WSASetLastError
setsockopt
ntohs
getaddrinfo
getsockopt
getsockname
getpeername
connect
bind
send
freeaddrinfo
WSAGetLastError
socket
closesocket
WSACleanup
WSAStartup
__WSAFDIsSet
select
accept
listen
recvfrom
sendto
ioctlsocket
gethostname
htons
recv
timeGetTime
PathCanonicalizeW
PathAppendW
PathIsDirectoryW
PathFindFileNameW
PathCommonPrefixW
PathFileExistsW
PathRemoveFileSpecW
AddAce
OpenThreadToken
OpenProcessToken
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
QueryServiceStatus
QueryServiceConfigW
OpenServiceW
OpenSCManagerW
CloseServiceHandle
RegSetValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
CheckTokenMembership
SetSecurityInfo
GetSecurityInfo
SetEntriesInAclW
FreeSid
AllocateAndInitializeSid
CopySid
SystemFunction036
RegQueryValueExW
CreateProcessAsUserW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
GetUserNameW
IsValidSid
InitializeAcl
GetTokenInformation
GetLengthSid
GetAclInformation
GetAce
EqualSid
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RtlUnwind
IsProcessorFeaturePresent
ExitProcess
AreFileApisANSI
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualQuery
GetCommandLineA
GetFullPathNameW
SetStdHandle
GetConsoleCP
GetConsoleMode
GetCPInfo
UnhandledExceptionFilter
GetStartupInfoW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsValidCodePage
GetOEMCP
GetTimeZoneInformation
CreateFileW
DeleteFileW
FindClose
FindFirstFileW
FlushFileBuffers
GetFileAttributesW
GetFileSize
GetFileSizeEx
GetTempFileNameW
ReadFile
RemoveDirectoryW
SetEndOfFile
SetFileAttributesW
SetFilePointer
SetFilePointerEx
WriteFile
GetTempPathW
DecodePointer
CloseHandle
RaiseException
GetLastError
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetCurrentThreadId
GetExitCodeThread
SuspendThread
ResumeThread
FindResourceExW
GetModuleFileNameW
LoadResource
LockResource
SizeofResource
LocalFree
FindResourceW
CopyFileW
MoveFileExW
MultiByteToWideChar
FindNextFileW
GetCommandLineW
SetEvent
WaitForSingleObject
CreateEventW
OpenEventW
GetLocalTime
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryExW
LocalAlloc
lstrcmpiW
GetPrivateProfileIntW
WritePrivateProfileStringW
FileTimeToLocalFileTime
SetFileTime
Sleep
CreateProcessW
GetSystemTimeAsFileTime
GetTickCount
LoadLibraryW
GetPrivateProfileStringW
FileTimeToSystemTime
SystemTimeToFileTime
GetACP
SetUnhandledExceptionFilter
GetCurrentProcessId
GetExitCodeProcess
ReleaseMutex
CreateMutexW
OpenMutexW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
SetLastError
GetCurrentProcess
GetCurrentThread
GetVersionExW
ResetEvent
SystemTimeToTzSpecificLocalTime
QueryPerformanceCounter
QueryPerformanceFrequency
GetEnvironmentVariableW
SetEnvironmentVariableW
GetCurrentDirectoryW
GetFileAttributesExW
GetVolumeInformationW
TerminateProcess
DuplicateHandle
SetHandleInformation
AssignProcessToJobObject
GetStdHandle
ExpandEnvironmentStringsW
GetFileInformationByHandle
GetHandleInformation
FindFirstFileExW
IsDebuggerPresent
GetNativeSystemInfo
CreateThread
GetModuleHandleExW
TlsGetValue
TlsSetValue
TlsAlloc
TlsFree
WaitForMultipleObjects
FindFirstVolumeW
FindNextVolumeW
FindVolumeClose
GetDriveTypeW
GetVolumePathNamesForVolumeNameW
DeviceIoControl
CreateFileA
SleepEx
FormatMessageW
GetFileType
PeekNamedPipe
GetModuleFileNameA
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
ReadConsoleW
SetEnvironmentVariableA
ExitThread
lstrlenA
GetStringTypeW
EncodePointer
OutputDebugStringW
LoadLibraryExA
WideCharToMultiByte
CoInitializeSecurity
CoInitialize
CoTaskMemFree
CoTaskMemRealloc
StringFromGUID2
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CLSIDFromString
OleRun
CoSetProxyBlanket
VarUI4FromStr
SysAllocString
SysStringLen
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
VariantClear
VariantInit
VarUdateFromDate
VariantTimeToSystemTime
VarDateFromStr
SysFreeString
SystemTimeToVariantTime
GetMessageW
CharUpperW
PostThreadMessageW
wsprintfW
GetActiveWindow
TranslateMessage
DispatchMessageW
PeekMessageW
CharNextW
MsgWaitForMultipleObjects
MessageBoxW
FindWindowW
WinVerifyTrust
CreateEnvironmentBlock
UnloadUserProfile
DestroyEnvironmentBlock
AliIMEntry
ChromeMain
GetHandleVerifier
RelaunchChromeBrowserWithNewCommandLineIfNeeded
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ