Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
64a28b938baeb176dc73f37e7137a7f5_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
64a28b938baeb176dc73f37e7137a7f5_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
64a28b938baeb176dc73f37e7137a7f5_JaffaCakes118
Size
91KB
MD5
64a28b938baeb176dc73f37e7137a7f5
SHA1
bdad92d3994f8a3a3f83d47529f663eb61211d99
SHA256
8bc9e563a5f46aa858d619ea352fbf626cbc9c87630b6257941c82d2670b4d5f
SHA512
37ab66b8b9020fcc9e0ea672dcc7c0ce1f012b2a786ba4a8b6005d82f3ce30b97dfe04efb3557a1d5b7205ea525c46cac4b760e07d58ff614dacd3d09a2bf96a
SSDEEP
1536:lzVC2Wnx4C/Lsxo1FoHUEkyVdMF4HSnOAAuH5:8x4CQ1Vdo4HSnOAAw5
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
R:\TempView\Output\Plugin\Com.Tencent.QQLive\Bin\QQLive.pdb
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
?Empty@CTXBSTR@@QAEXXZ
?Format@CTXStringW@@QAAXPB_WZZ
??4CTXStringW@@QAEAAV0@PB_W@Z
?GuidFromString@Com@Util@@YAJPA_WAAU_GUID@@@Z
??8CTXBSTR@@QBE_NPB_W@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
??BCTXStringW@@QBEPB_WXZ
??0CTXStringW@@QAE@PA_W@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
?IsFileExist@FS@@YAHPB_W@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
??9@YA_NABVCTXStringW@@PB_W@Z
?Right@CTXStringW@@QBE?AV1@H@Z
?IsEmpty@CTXStringW@@QBE_NXZ
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
?AllocSysString@CTXStringW@@QBEPA_WXZ
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
??0CTXStringW@@QAE@ABV0@@Z
??0CTXStringW@@QAE@PB_W@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
?ConvertTXDataStringBundle@Convert@Util@@YAHPAUITXData@@@Z
??0CTXStringW@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
?GetTXDataStr@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXStringW@@@Z
??0CTXBSTR@@QAE@PB_W@Z
?GetBSTR@CTXStringW@@QBEPA_WXZ
??1CTXStringW@@QAE@XZ
??0CTXBSTR@@QAE@XZ
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
??1CTXBSTR@@QAE@XZ
??ICTXBSTR@@QAEPAPA_WXZ
?Decode16@Encode@Util@@YAHABVCTXStringW@@AAVCTXBuffer@@@Z
?GetMinorVer@Version@@YAEXZ
?GetMajorVer@Version@@YAEXZ
?IsOnline@Contact@Util@@YAHK@Z
?GetSelfUin@Contact@Util@@YAKXZ
?DelOldVerPluginRegDomain@Misc@Util@@YAHABVCTXStringW@@@Z
FindResourceExW
GetLastError
lstrlenW
lstrcmpiW
GetModuleHandleW
GetModuleFileNameW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
FindResourceW
LoadResource
LockResource
SizeofResource
RaiseException
GetThreadLocale
SetThreadLocale
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
IsDebuggerPresent
SetUnhandledExceptionFilter
HeapSize
GetProcessHeap
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
InterlockedDecrement
UnhandledExceptionFilter
CharNextW
UnregisterClassA
RegOpenKeyExW
RegDeleteKeyW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
RegQueryValueExW
SHGetFileInfoW
ShellExecuteW
StringFromCLSID
CoTaskMemFree
CoCreateInstance
CoFreeUnusedLibraries
VariantClear
VariantInit
VarUI4FromStr
LoadTypeLi
SysFreeString
SysStringLen
LoadRegTypeLi
SysAllocString
ord15
ord32
ord31
ord30
ord58
ord61
ord23
ord64
ord22
ord18
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_adjust_fdiv
??3@YAXPAX@Z
_CxxThrowException
memset
_recalloc
memcpy_s
malloc
free
wcscpy_s
wcsncpy_s
wcslen
__CxxFrameHandler3
??_V@YAXPAX@Z
memmove_s
_purecall
memcmp
_invalid_parameter_noinfo
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
_time64
_except_handler4_common
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ