Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
666ffb08b2ab202e3ddc6fcffb1e7d41_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
666ffb08b2ab202e3ddc6fcffb1e7d41_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
666ffb08b2ab202e3ddc6fcffb1e7d41_JaffaCakes118
Size
5.5MB
MD5
666ffb08b2ab202e3ddc6fcffb1e7d41
SHA1
90f23dfa2475e6e40327dd89fd450b5bdd69fbf6
SHA256
04d26d537fd5850997bb0ebeb3445938963ea9dea29ce7bb07a46bdd1295d9d0
SHA512
8c5d5891adf12545ef21960bda67d2ebfd8bf6d184b2abb53d0a2fa6d671a2ca51fa46e1743fc4d914e81768ffb00b8b1c0a1867dc367b1a869fc8740b12f039
SSDEEP
49152:D0LlVU9/A0HNmBTFn8rCAOJrRd6rrX5WE+D0Tr3UfdDKFTIhmebfQMj+uy+XFgRF:sX2YemBTx8rCAGb+X5Z20n3cecmeLPG
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
D:\TemporaryBuilds\4\321\Sources\App\_bin\architect\Win32\Release\bl-views.pdb
ReleaseDC
GetDC
LoadStringW
VirtualAlloc
VirtualFree
VirtualProtect
IsDebuggerPresent
GetFileType
GetStdHandle
GetSystemInfo
SystemTimeToFileTime
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryW
OutputDebugStringA
GetTempPathA
GetTempFileNameA
DeleteFileA
WideCharToMultiByte
InterlockedExchangeAdd
CreateFileA
CreateFileMappingA
UnmapViewOfFile
OpenThread
GetThreadContext
SuspendThread
ResumeThread
HeapAlloc
LoadLibraryA
WaitForMultipleObjectsEx
SetWaitableTimer
MapViewOfFile
GetThreadLocale
GetACP
WaitForSingleObject
InterlockedExchange
FormatMessageA
GetLongPathNameW
CreateWaitableTimerA
InitializeSListHead
GetTempPathW
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapFree
IsProcessorFeaturePresent
InterlockedCompareExchange
CreateDirectoryW
CreateFileW
GetThreadTimes
QueryPerformanceFrequency
DeleteFileW
GetFileAttributesW
GetFileAttributesExW
GetFileTime
RemoveDirectoryW
GetCurrentThread
GetLastError
DeviceIoControl
GetProcessHeap
ResetEvent
OpenEventA
GetCurrentProcessId
GetModuleHandleW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeCriticalSection
CreateSemaphoreA
GetCurrentProcess
DuplicateHandle
GetProcAddress
GetModuleHandleA
GetTickCount
Sleep
WaitForSingleObjectEx
GetCurrentThreadId
AreFileApisANSI
MultiByteToWideChar
GetStringTypeExW
LCMapStringW
GetUserDefaultLCID
ReleaseSemaphore
GetTimeZoneInformation
TerminateProcess
SetEvent
CreateEventA
CloseHandle
FormatMessageW
LocalFree
FreeLibrary
GetLocaleInfoA
DeleteDC
SelectObject
CreateICW
CreateCompatibleBitmap
GetObjectW
GetDeviceCaps
CreateCompatibleDC
DeleteObject
BitBlt
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
_SLGetStringFromAtom@8
_SLGetAtomFromString@8
_CreateSingletonStaticData@16
_CalculateSequenceHash@12
_IsSingletonStaticDataStorageAvailable@0
_GetSingletonStaticData@12
_SLConvertUTF16ToUTF8@16
_SLConvertACPToUnicode@16
_SLConvertUnicodeToACP@16
_ServiceProviderGetModulesRootDirectory@4
_ServiceProviderGetServiceObject@12
_PDMODELProvidePDModelHFT@4
_PDMODELProvidePDEReadHFT@4
_PDMODELProvideAcroFormHFT@4
_PDMODELProvidePDTextBlockHFT@4
_PDMODELProvidePDEWriteHFT@4
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MAE@XZ
?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QAE@I@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@ABV123@@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PAV32@@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?_Xinvalid_argument@std@@YAXPBD@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?widen@?$ctype@D@std@@QBEDD@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?narrow@?$ctype@D@std@@QBEDDD@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@M@Z
?classic@locale@std@@SAABV12@XZ
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAM@Z
?set_new_handler@std@@YAP6AXXZP6AXXZ@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
_Mbrtowc
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?id@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?id@?$numpunct@_W@std@@2V0locale@2@A
?toupper@?$ctype@_W@std@@QBE_W_W@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_J@Z
?_Getcat@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?put@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBUtm@@PB_W4@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
_Wcscoll
_Wcsxfrm
?id@?$collate@_W@std@@2V0locale@2@A
??0facet@locale@std@@IAE@I@Z
??1facet@locale@std@@MAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Xbad_function_call@std@@YAXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_BADOFF@std@@3_JB
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?exceptions@ios_base@std@@QAEXH@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??Bid@locale@std@@QAEIXZ
?id@?$ctype@_W@std@@2V0locale@2@A
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
?narrow@?$ctype@_W@std@@QBED_WD@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?in@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPAV123@PAVfacet@23@I@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
GdipDeleteStringFormat
GdipGetRegionBounds
GdipAlloc
GdipCreateFontFamilyFromName
GdipSetStringFormatMeasurableCharacterRanges
GdipDeleteFontFamily
GdipCreateFont
GdipFree
GdipDeleteFont
GdiplusStartup
GdipStringFormatGetGenericTypographic
GdipCreateFromHDC
GdipDeleteGraphics
GdipMeasureCharacterRanges
GdipCreateRegion
GdipGetGenericFontFamilySansSerif
GdipDeleteRegion
GdiplusShutdown
GdipCloneStringFormat
memmove
__std_exception_destroy
_purecall
__std_exception_copy
__std_type_info_compare
__std_type_info_name
strchr
memchr
memcpy
__std_terminate
__RTDynamicCast
memset
strstr
_except_handler4_common
__vcrt_InitializeCriticalSectionEx
__std_type_info_destroy_list
strrchr
_CxxThrowException
__CxxFrameHandler3
_initterm_e
_errno
strerror
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
terminate
_invalid_parameter_noinfo
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
exit
raise
_invalid_parameter_noinfo_noreturn
_beginthreadex
abort
_wcsnicmp
wcsncmp
iswprint
tolower
wcsnlen
toupper
isdigit
isspace
strnlen
_stricmp
strncpy
strncpy_s
strncmp
_callnewh
malloc
realloc
free
_aligned_free
calloc
_aligned_malloc
fread
ferror
feof
fseek
__stdio_common_vsnprintf_s
__stdio_common_vfprintf
fopen_s
ftell
rewind
setvbuf
fsetpos
__acrt_iob_func
_fseeki64
fgetpos
__stdio_common_vfscanf
fwrite
fflush
_get_stream_buffer_pointers
fclose
fputc
__stdio_common_vsprintf
fgetc
ungetc
_unlock_file
_lock_file
strtol
strtod
_strtoui64
atoi
wcstod
wcstol
_itoa_s
clock
_time64
_gmtime64
_localtime64
_tzset
_localtime64_s
rand_s
rand
getenv
_libm_sse2_cos_precise
_libm_sse2_sin_precise
_CIfmod
_libm_sse2_log_precise
_libm_sse2_pow_precise
ceil
floor
_except1
_dtest
lrint
_dpcomp
_CIatan2
_libm_sse2_acos_precise
_libm_sse2_asin_precise
_libm_sse2_atan_precise
ldexp
exp
sqrt
_libm_sse2_sqrt_precise
timeGetTime
CryptUIDlgViewContext
CertDuplicateCertificateContext
CertVerifyTimeValidity
CertCloseStore
CertCompareCertificate
CertEnumCertificatesInStore
CertOpenSystemStoreW
CertFreeCertificateChain
CryptFindOIDInfo
CryptDecodeObjectEx
CertFindRDNAttr
CertRDNValueToStrW
CertNameToStrW
CertGetNameStringW
CryptBinaryToStringW
CryptFormatObject
CertGetEnhancedKeyUsage
CertFindExtension
CryptHashCertificate
CertGetCertificateChain
CertEnumCertificateContextProperties
CertGetCertificateContextProperty
CertFreeCertificateContext
CertCreateCertificateContext
CoCreateInstance
idna_to_ascii_8z
CreateServiceObject
ReflectServiceObjectInfo
ServiceObjectModuleInitialize
ServiceObjectModuleOnCleanup
ServiceObjectModuleOnFree
_CreateServiceObject@8
_ReflectServiceObjectInfo@8
_ServiceObjectModuleInitialize@0
_ServiceObjectModuleOnCleanup@0
_ServiceObjectModuleOnFree@0
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ