Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
46a0199b3eec9b49327203c864d5fc51_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
46a0199b3eec9b49327203c864d5fc51_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
46a0199b3eec9b49327203c864d5fc51_JaffaCakes118
Size
2.2MB
MD5
46a0199b3eec9b49327203c864d5fc51
SHA1
f890bb97b2a2bbec48d185d1b52dc310a62ae43e
SHA256
f026e1b3b4c3127653c4dd7aeccff19d0b9f2627cd0a7b35d6bfaa4e9f4f3c45
SHA512
55e1802ab8d41324f3fb2da0e488e8d928165de4f1bed980b3d8fc4448db823870f5f84c2bb756d2046c928a599bdf920d9aa07f8817e51502572a51d18da48d
SSDEEP
49152:9UeMDRialaUaeCN8tG7WTTsecJTK8uAys:9EMalgeCNAG7W0B
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
F:\branches\5.4.1\Rhino\Safe\Bin\Win32\release\pdb\UsbGuard.pdb
GetProcessImageFileNameW
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
GetModuleFileNameW
CreateFileW
GetLastError
DuplicateHandle
CloseHandle
GetCurrentProcessId
Sleep
DeviceIoControl
InterlockedIncrement
InterlockedDecrement
HeapFree
GetProcessHeap
InterlockedExchange
GetDriveTypeW
SetThreadExecutionState
GetTickCount
GetProcessTimes
GetSystemDirectoryW
FileTimeToSystemTime
GetLocalTime
LocalAlloc
GetCurrentThreadId
FileTimeToLocalFileTime
LocalFree
GetModuleHandleW
GetProcAddress
SetFilePointer
WriteFile
FreeLibrary
LoadLibraryW
CreateFileMappingW
GetEnvironmentVariableW
VirtualQuery
GetLogicalDriveStringsW
QueryDosDeviceW
OpenProcess
CreateMutexW
GetModuleHandleExW
WaitForSingleObject
ReleaseMutex
GetUserDefaultLangID
GetFileTime
ReadFile
SetFileTime
SetEndOfFile
GetFileSize
FormatMessageW
SetFileAttributesW
DeleteFileW
GetWindowsDirectoryW
RemoveDirectoryW
SetCurrentDirectoryW
MoveFileW
OutputDebugStringW
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
EncodePointer
GetFileSizeEx
LoadLibraryA
DecodePointer
RaiseException
GlobalMemoryStatusEx
SetLastError
InitializeCriticalSectionAndSpinCount
LocalFileTimeToFileTime
GetSystemTime
SystemTimeToFileTime
DosDateTimeToFileTime
GetCurrentProcess
WaitForMultipleObjects
WritePrivateProfileStringW
GetPrivateProfileStringW
GetFullPathNameW
GetTempFileNameW
MoveFileExW
CreateDirectoryW
CopyFileW
HeapAlloc
GetTempPathW
FileTimeToDosDateTime
GlobalFree
GetCurrentDirectoryW
WideCharToMultiByte
GetACP
MultiByteToWideChar
SearchPathW
FindFirstFileW
GetLongPathNameW
GetFileAttributesExW
GetShortPathNameW
TryEnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetDiskFreeSpaceW
GetVolumeInformationW
InterlockedExchangeAdd
FindClose
FindNextFileW
GlobalAlloc
SetEvent
ResetEvent
CreateEventW
OpenEventW
MapViewOfFile
UnmapViewOfFile
OpenFileMappingW
LoadLibraryExW
ResumeThread
FindResourceW
LoadResource
GetVersionExW
LockResource
GetSystemInfo
lstrcmpiW
ExpandEnvironmentStringsW
CreateProcessW
GetExitCodeProcess
GetFileAttributesW
lstrlenW
lstrcatW
lstrcpyW
OpenMutexW
GetFocus
AttachThreadInput
SetFocus
GetForegroundWindow
SetWindowPos
GetShellWindow
SetForegroundWindow
GetWindowRect
ShowWindow
IsWindow
SendMessageW
OpenDesktopW
GetWindow
FindWindowW
ExitWindowsEx
UnregisterClassW
GetWindowLongW
CloseDesktop
GetClassNameW
GetDesktopWindow
SwitchDesktop
FindWindowExW
GetSystemMetrics
IsWindowVisible
GetTopWindow
PostMessageW
GetParent
GetWindowThreadProcessId
WindowFromPoint
SetNamedSecurityInfoW
LookupPrivilegeNameW
AdjustTokenPrivileges
FreeSid
AllocateAndInitializeSid
LookupPrivilegeValueW
EqualSid
GetTokenInformation
OpenProcessToken
SetEntriesInAclW
CoCreateInstance
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_C_str@?$_Yarn@D@std@@QBEPBDXZ
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?flags@ios_base@std@@QBEHXZ
?fail@ios_base@std@@QBE_NXZ
?good@ios_base@std@@QBE_NXZ
?rdstate@ios_base@std@@QBEHXZ
??Bios_base@std@@QBE_NXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?_Getname@_Locinfo@std@@QBEPBDXZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@HPBD@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?global@locale@std@@SA?AV12@ABV12@@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@_N@Z
?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z
?uncaught_exception@std@@YA_NXZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Xruntime_error@std@@YAXPBD@Z
?_BADOFF@std@@3_JB
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??0_Container_base12@std@@QAE@XZ
??1_Container_base12@std@@QAE@XZ
?_Orphan_all@_Container_base12@std@@QAEXXZ
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
??0id@locale@std@@QAE@I@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setf@ios_base@std@@QAEHHH@Z
?setf@ios_base@std@@QAEHH@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
_fseeki64
fflush
fgetc
fsetpos
setvbuf
_lock_file
_wtoi
_vswprintf_c_l
calloc
_stricmp
_splitpath_s
sprintf
sscanf
swscanf_s
_wcsicmp
wcstoul
isalnum
wcsncpy
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
__clean_type_info_names_internal
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__CxxFrameHandler3
_except_handler4_common
fgetpos
ungetc
_unlock_file
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
fputc
toupper
tolower
memchr
strchr
strstr
_localtime64
_mktime64
?terminate@@YAXXZ
_beginthreadex
_wcsnicmp
_time64
srand
rand
_errno
towupper
_vsnwprintf
wcsstr
towlower
wcschr
fclose
fseek
ftell
fwrite
fread
rewind
_wfopen_s
wcsrchr
realloc
malloc
atoi
?name@type_info@@QBEPBDPAU__type_info_node@@@Z
_except1
free
memcpy_s
??2@YAPAXI@Z
_hypot
??3@YAXPAX@Z
_purecall
memmove
memcpy
memset
sprintf_s
_dtest
strpbrk
abort
modf
_recalloc
memmove_s
_CxxThrowException
__RTDynamicCast
??_V@YAXPAX@Z
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
CM_Request_Device_EjectW
CM_Get_DevNode_Status
CM_Get_Parent
SetupDiEnumDeviceInterfaces
SHGetFolderPathW
RCVBusGetModuleCount
RCVBusQueryModule
RCVBusReleaseModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ