Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
421cf6105844b5d6a857f658f1dfd5c6_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
421cf6105844b5d6a857f658f1dfd5c6_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Target
421cf6105844b5d6a857f658f1dfd5c6_JaffaCakes118
Size
3.8MB
MD5
421cf6105844b5d6a857f658f1dfd5c6
SHA1
7879ad59325d0cb120228e15ef9bf9e38af29353
SHA256
063bcf8a48db577df966285844dd893e9a93280c7704aecd6cb9732610d90e98
SHA512
49f148f29dd26b097f8e9f81c5836fdf6873c09a0a4bf0b818a1f7f444fcb1d2f97c384fd8d491507216f2dbffc0b2810f28b8ca5aa5911515dce8ed7e42c1fd
SSDEEP
98304:U/g+hjmmwIBMm+qF88KG/AqrtfrnuNH+PU7AVixLY6e8HTAR/sApK2ZNg4kpgq4G:U/BjmmwAKGYqrl2H5TxLY6e8kR/m2ZNc
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
c:\dev\closecombat\tbf\CloseCombat_STEAM.pdb
WSAStartup
gethostname
gethostbyname
htons
bind
closesocket
listen
accept
connect
send
recv
setsockopt
ioctlsocket
WSAGetLastError
socket
WSACleanup
inet_addr
HttpSendRequestExA
InternetCloseHandle
InternetOpenA
HttpEndRequestA
HttpQueryInfoA
InternetSetOptionA
InternetWriteFile
HttpOpenRequestA
InternetOpenUrlA
InternetConnectA
InternetSetCookieA
InternetReadFile
Direct3DCreate9
D3DXMatrixInverse
D3DXMatrixLookAtLH
D3DXQuaternionSlerp
D3DXCompileShader
D3DXCreateTextureFromFileInMemoryEx
D3DXGetImageInfoFromFileA
D3DXSaveSurfaceToFileA
D3DXMatrixRotationQuaternion
D3DXCreateVolumeTextureFromFileInMemoryEx
D3DXGetImageInfoFromFileInMemory
D3DXMatrixMultiply
_AIL_start_sample@4
_AIL_end_sample@4
_AIL_close_stream@4
_AIL_open_stream@12
_AIL_set_stream_loop_count@8
_AIL_start_stream@4
_AIL_set_sample_loop_count@8
_AIL_stream_status@4
_AIL_stream_ms_position@12
_AIL_set_sample_file@12
_AIL_set_redist_directory@4
_AIL_startup@0
_AIL_open_digital_driver@16
_AIL_last_error@0
_AIL_register_timer@4
_AIL_set_timer_period@8
_AIL_start_timer@4
_AIL_allocate_sample_handle@4
_AIL_stop_timer@4
_AIL_release_timer_handle@4
_AIL_release_sample_handle@4
_AIL_mem_free_lock@4
_AIL_shutdown@0
_AIL_file_read@8
_AIL_file_size@4
_AIL_sample_status@4
_AIL_set_sample_volume_pan@12
_AIL_stream_sample_handle@4
_AIL_set_named_sample_file@20
timeGetTime
timeEndPeriod
timeBeginPeriod
AlphaBlend
ord17
InitCommonControlsEx
WaitForSingleObject
GetCurrentProcessId
TryEnterCriticalSection
WriteFile
FindClose
FindNextFileA
FindFirstFileA
GlobalUnlock
QueryPerformanceCounter
QueryPerformanceFrequency
CreateMutexA
LocalAlloc
GetFileAttributesExA
DebugBreak
CopyFileA
RemoveDirectoryA
CreateDirectoryA
ReadFile
GetFileAttributesA
SetFilePointer
GetFileSize
CreateFileA
OutputDebugStringA
CloseHandle
DuplicateHandle
FatalAppExitA
GetCurrentDirectoryA
GetModuleFileNameA
InterlockedExchange
RaiseException
InterlockedCompareExchange
GetStartupInfoA
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
LoadLibraryA
GetProcAddress
SetLastError
GetEnvironmentVariableA
GetCurrentThread
GetCurrentProcess
SetUnhandledExceptionFilter
FreeLibrary
CreateThread
SuspendThread
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GlobalLock
MoveFileA
DeleteFileA
SetFileAttributesA
GetExitCodeProcess
LocalFree
GetLastError
FormatMessageA
ReleaseMutex
GetTickCount
CompareFileTime
Sleep
GetTimeFormatA
GetDateFormatA
IsDebuggerPresent
CreateProcessA
PtInRect
OffsetRect
SetRect
InflateRect
GetCursorPos
CreateDialogParamA
IsDialogMessageA
SetForegroundWindow
MonitorFromRect
GetFocus
ReleaseDC
GetSysColorBrush
GetDC
ClientToScreen
GetWindowRect
SendDlgItemMessageA
SetWindowTextW
CloseClipboard
GetClipboardData
OpenClipboard
GetKeyState
GetWindowTextA
EnableWindow
SetWindowTextA
SetWindowLongA
RegisterClassA
CallWindowProcA
SystemParametersInfoA
ReleaseCapture
SetCapture
TrackMouseEvent
DialogBoxParamA
EndDialog
GetDlgItem
DestroyWindow
EndPaint
BeginPaint
GetUpdateRect
SetCursor
DefWindowProcA
PostQuitMessage
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
SendMessageA
RegisterHotKey
SetFocus
UpdateWindow
GetClientRect
MonitorFromWindow
GetMonitorInfoA
SetWindowPos
GetWindowLongA
AdjustWindowRect
CreateWindowExA
CreateWindowExW
RegisterClassExW
RegisterClassExA
LoadCursorA
LoadIconA
UnregisterClassW
UnregisterClassA
GetWindowInfo
ShowWindow
MessageBoxW
ShowCursor
FillRect
InvalidateRect
MoveWindow
GetSystemMetrics
FindWindowExA
EqualRect
GetAsyncKeyState
ScreenToClient
DeleteObject
SetBkMode
SelectObject
CreateFontIndirectA
CreateRectRgn
SelectClipRgn
GetTextMetricsA
SetTextAlign
TextOutA
CreateCompatibleDC
GetStockObject
CreateSolidBrush
CreateDIBSection
GetOpenFileNameA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
SHGetFolderPathA
ShellExecuteExA
CoUninitialize
CoInitialize
CoInitializeEx
StrStrIA
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0strstreambuf@std@@QAE@PADH0@Z
??1strstreambuf@std@@UAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@JH@Z
?freeze@strstreambuf@std@@QAEX_N@Z
?ends@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
memmove_s
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
??_V@YAXPAX@Z
fclose
fopen
isspace
strncat
strncmp
sscanf
strncpy
fprintf
strchr
_wtof
fread
fwrite
_vsnprintf
_strnicmp
_stricmp
qsort
sprintf
??2@YAPAXI@Z
free
malloc
??3@YAXPAX@Z
??0exception@std@@QAE@XZ
realloc
strstr
isalpha
isdigit
atoi
_time64
rand
fgets
_localtime64
strftime
fscanf
atol
_getcwd
abort
fflush
_vscwprintf
tolower
_vswprintf_c_l
strtoul
memmove
_fullpath
toupper
feof
_atoi64
_towupper_l
_create_locale
_wassert
_free_locale
longjmp
isxdigit
ftell
fseek
memchr
strtok
ceil
atof
_setjmp3
_purecall
_snprintf_s
strncat_s
_wcsicmp_l
_wcsnicmp_l
sprintf_s
strpbrk
srand
_errno
_isnan
_mbsnbcpy
_ltoa
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
_crt_debugger_hook
_fileno
memcpy
_CIacos
_CIasin
_CIfmod
_CIatan
memset
__CxxFrameHandler3
_CIlog10
_CIatan2
_CItan
_CIpow
_CIexp
_except_handler3
_CIsin
_CIcos
_CIsqrt
floor
_CxxThrowException
_fstat64i32
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ