Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
47de35c097983dd2b444d1abfa9fcde4_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
47de35c097983dd2b444d1abfa9fcde4_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
47de35c097983dd2b444d1abfa9fcde4_JaffaCakes118
Size
274KB
MD5
47de35c097983dd2b444d1abfa9fcde4
SHA1
50d14231e36a221b8ff355c592513277648f6b30
SHA256
73044ff8763f8c312f0b5c80b84df87c815ac4df13ecacb10f64dbbccba5fc91
SHA512
7f2d37d0fc72f386fa0b3ba55ba12c8499d99128fb1a9f66e33c4bbf999d1822cc96ae3779ea983f1a0b91bf47347e3c04ca8135dcebce2621f8a7d4b9007e46
SSDEEP
6144:1pqzISw7Rs2F/WDkIv8iD3W/yXuFqpEp3iqRLOqJyCwa2OqefoD6N+fuj7iBgVlq:1pqz3s3F/WDnv8n/yXuFPK
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
D:\jenkins\workspace\minibaidu_tag_20160121_2.3.0_Normal\Basic\Output\BinRelease\ExternalMgr.pdb
GetReportMgr
waveInGetNumDevs
waveInOpen
waveInPrepareHeader
waveInStart
waveInClose
waveInUnprepareHeader
waveInStop
waveInAddBuffer
?OutputDebugInfoEx@Log@Base@@YAXHPBD0IHPB_WZZ
?UTF8AToW@StringUtils@Base@@YAPA_WABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PA_WH@Z
?GBKToUTF8@StringUtils@Base@@YAHPAE0H@Z
?WToA@StringUtils@Base@@YAPADPB_WPADH@Z
?SafeLoadLibrary@Library@Base@@YAPAUHINSTANCE__@@PB_WH@Z
?Instance@IPCMessager@Base@@YAAAVIIPCMessager@12@XZ
?OutputDebugInfoEx@Log@Base@@YAXHPBD0IH0ZZ
OpenEventA
ReleaseSemaphore
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
ResetEvent
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
CreateEventA
GetSystemTimeAsFileTime
GetProcAddress
GetLastError
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetEvent
WaitForSingleObject
TlsAlloc
InterlockedExchangeAdd
CreateEventW
SleepEx
PostQueuedCompletionStatus
SetWaitableTimer
CreateWaitableTimerW
TlsGetValue
TlsFree
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
TerminateThread
QueueUserAPC
CreateIoCompletionPort
GetQueuedCompletionStatus
InterlockedCompareExchange
SetLastError
HeapAlloc
GetProcessHeap
HeapFree
WaitForMultipleObjects
TlsSetValue
GetTickCount
FreeLibrary
GetCurrentThreadId
GetCurrentProcess
TerminateProcess
Sleep
DecodePointer
CloseHandle
IsProcessorFeaturePresent
ResumeThread
SystemTimeToFileTime
CreateWaitableTimerA
LocalFree
FormatMessageA
EncodePointer
?_Xlength_error@std@@YAXPBD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPAD_J@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Init@locale@std@@CAPAV_Locimp@12@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?id@?$ctype@_W@std@@2V0locale@2@A
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Incref@facet@locale@std@@QAEXXZ
??Bid@locale@std@@QAEIXZ
?do_length@?$codecvt@DDH@std@@MBEHABHPBD1I@Z
?do_unshift@?$codecvt@DDH@std@@MBEHAAHPAD1AAPAD@Z
?do_out@?$codecvt@DDH@std@@MBEHAAHPBD1AAPBDPAD3AAPAD@Z
?do_in@?$codecvt@DDH@std@@MBEHAAHPBD1AAPBDPAD3AAPAD@Z
?do_encoding@codecvt_base@std@@MBEHXZ
?do_max_length@codecvt_base@std@@MBEHXZ
??0?$codecvt@DDH@std@@QAE@I@Z
?_BADOFF@std@@3_JB
?_Xout_of_range@std@@YAXPBD@Z
??1?$codecvt@DDH@std@@MAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?pubimbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPAV123@PAVfacet@23@I@Z
?_Id_cnt@id@locale@std@@0HA
?id@?$codecvt@DDH@std@@2V0locale@2@A
??0_Locimp@locale@std@@AAE@ABV012@@Z
??1_Locimp@locale@std@@MAE@XZ
?classic@locale@std@@SAABV12@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
__clean_type_info_names_internal
?terminate@@YAXXZ
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_CIsqrt
_CIlog
memset
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
_onexit
_lock
__dllonexit
_unlock
__CxxFrameHandler3
wcscat_s
_purecall
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??8type_info@@QBE_NABV0@@Z
_beginthreadex
_gmtime64
??0exception@std@@QAE@XZ
??_V@YAXPAX@Z
memmove
??0exception@std@@QAE@ABQBDH@Z
??2@YAPAXI@Z
??3@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??9type_info@@QBE_NABV0@@Z
?before@type_info@@QBEHABV1@@Z
strerror
_CxxThrowException
memcpy
WSAStartup
WSACleanup
DllCanUnloadNow
DllGetClassCount
DllGetClassInfo
DllGetClassObject
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ