Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
6c0942a2b8efa0584c6ee9e411a01eba_JaffaCakes118.exe
Resource
win7-20240508-en
Target
6c0942a2b8efa0584c6ee9e411a01eba_JaffaCakes118
Size
816KB
MD5
6c0942a2b8efa0584c6ee9e411a01eba
SHA1
cbf434d6e67010f957e2510a7b507e8a7167f52e
SHA256
a365ff794cd2e024e60471ca540a6ebada1dd111278ceb0f2c34e76055e72d6a
SHA512
b374447c89b3d9dc18d5c588113024ea84375743d5ef838ae688f34405f473f46eb4588dc1a105e03a65726275131a87687d605c83c6617f923345ed149d3ea3
SSDEEP
12288:0SFiwvzQpHtZBBtdDrqQhUspJERAS/TGdZvkokx/j:0SMwv8pHtZBBtFxPTox/Trjxr
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
C:\BuildAgent\work\e9b1557ebfdd84fc\build.msvc\Win32\Installer-Release\BootstrapperClient\RobloxPlayerLauncher.pdb
InitializeCriticalSectionAndSpinCount
CreateEventA
WideCharToMultiByte
MultiByteToWideChar
GetVersionExW
DeleteFileW
GetTempPathW
GetModuleHandleW
OpenEventW
CreateEventW
CreateMutexW
lstrcmpW
GetSystemTime
CloseHandle
WaitForSingleObject
ReleaseMutex
ResetEvent
WriteConsoleW
OutputDebugStringW
SetStdHandle
SetFilePointer
ReadConsoleW
GetOEMCP
GetACP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetFileType
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
SetFilePointerEx
IsProcessorFeaturePresent
IsDebuggerPresent
ReadFile
LoadLibraryExW
ExitThread
CreateThread
AreFileApisANSI
GetModuleHandleExW
ExitProcess
GetCommandLineW
SetEvent
GetLastError
GetProcAddress
RtlUnwind
GetStringTypeW
DecodePointer
EncodePointer
HeapSize
HeapReAlloc
HeapDestroy
QueryPerformanceCounter
DebugBreak
GetExitCodeProcess
CreateWaitableTimerW
SystemTimeToFileTime
ResumeThread
GetCurrentProcessId
SetEndOfFile
InterlockedDecrement
LocalFree
FormatMessageA
LockResource
FreeLibrary
LoadResource
SizeofResource
LoadLibraryW
FindResourceW
FindResourceExW
CreateDirectoryW
CreateFileW
GetFileAttributesW
FindClose
FormatMessageW
lstrlenW
FindFirstFileW
FindNextFileW
GetFileSizeEx
GetFileAttributesExW
VerSetConditionMask
InterlockedIncrement
OpenProcess
GetCurrentProcess
TerminateProcess
RaiseException
GetCurrentThread
GetCurrentThreadId
DeleteCriticalSection
Sleep
GetLocalTime
CompareFileTime
GetTickCount
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
GetModuleFileNameW
CreateProcessW
GetDiskFreeSpaceExW
RemoveDirectoryW
SetFileAttributesW
VerifyVersionInfoW
GetGeoInfoW
GetUserGeoID
GetSystemTimeAsFileTime
CreateSemaphoreA
WaitForSingleObjectEx
ReleaseSemaphore
DuplicateHandle
GetModuleHandleA
GetProcessHeap
HeapAlloc
HeapFree
InterlockedExchange
InterlockedExchangeAdd
InterlockedCompareExchange
TerminateThread
SetLastError
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
QueueUserAPC
EnterCriticalSection
LeaveCriticalSection
WaitForMultipleObjects
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SleepEx
SetWaitableTimer
GetShortPathNameW
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
WriteFile
GetFileTime
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
lstrcmpiW
lstrcpyW
lstrcatW
OpenEventA
WaitForMultipleObjectsEx
SetWindowLongW
GetWindowLongW
GetWindowRect
InvalidateRect
ShowWindow
CreateWindowExW
CallWindowProcW
DefWindowProcW
SendMessageW
MessageBoxA
AllowSetForegroundWindow
GetParent
SetForegroundWindow
IsWindowVisible
PostMessageW
LoadBitmapW
LoadIconW
FillRect
EndPaint
BeginPaint
ReleaseDC
GetDC
GetSystemMetrics
GetWindowTextW
EnableWindow
KillTimer
SetTimer
GetDlgItem
CharNextW
CharUpperW
GetMessageW
TranslateMessage
DispatchMessageW
PostThreadMessageW
SetWindowPos
SetFocus
LoadAcceleratorsW
TranslateAcceleratorW
SetWindowTextW
MessageBoxW
EnumWindows
GetWindowThreadProcessId
PostQuitMessage
RegisterClassW
DestroyWindow
Rectangle
GetStockObject
GetDeviceCaps
SelectObject
DeleteObject
CreatePen
CreateFontW
SetBkMode
CreateSolidBrush
SetTextColor
CryptDestroyHash
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
GetUserNameW
CopySid
CheckTokenMembership
RegDeleteKeyW
RegEnumKeyExW
RegFlushKey
RegDeleteValueW
RegQueryValueExW
DuplicateToken
OpenProcessToken
OpenThreadToken
IsValidSid
GetSidLengthRequired
InitializeSid
GetSidSubAuthority
GetTokenInformation
GetLengthSid
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
ShellExecuteExW
SHGetFolderPathAndSubDirW
ShellExecuteW
CoUninitialize
CoInitialize
StringFromGUID2
CoCreateGuid
CoCreateInstance
CreateStreamOnHGlobal
RegisterTypeLi
VariantClear
VariantInit
SysFreeString
SysAllocString
StrCmpW
StrCpyW
PathAddBackslashW
PathFileExistsW
StrCmpNW
StrDupW
StrRChrW
StrStrW
SHDeleteKeyW
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
IsNetworkAlive
UnloadUserProfile
gethostbyname
socket
sendto
closesocket
connect
htons
freeaddrinfo
getaddrinfo
WSASocketW
WSASend
WSARecv
WSAGetLastError
WSASetLastError
WSACleanup
WSAStartup
setsockopt
select
ioctlsocket
getsockopt
InternetCloseHandle
InternetConnectW
InternetSetOptionW
HttpOpenRequestW
HttpQueryInfoW
HttpEndRequestW
HttpSendRequestExW
InternetQueryDataAvailable
InternetWriteFile
InternetReadFile
HttpSendRequestW
HttpAddRequestHeadersW
InternetOpenW
InitCommonControlsEx
_TrackMouseEvent
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipAlloc
GdipFree
GdipCreateHBITMAPFromBitmap
GetProcessImageFileNameW
EnumProcesses
GetAdaptersInfo
?FastLog@FLog@@YAXEPBDPBX1111@Z
?FastLog@FLog@@YAXEPBDPBX11@Z
?FastLog@FLog@@YAXEPBDPBX@Z
?FastLogF@FLog@@YAXEPBDMMMM@Z
?FastLogFormatted@FLog@@YAXEPBDZZ
?FastLogS@FLog@@YAXEPBD0@Z
?FastLogS@FLog@@YAXEPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?ForEachVariable@FLog@@YAXP6AXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0PAX@Z1W4FastVarType@@@Z
?GetFastLogCounter@FLog@@YAHE@Z
?GetNumSynchronizedVariable@FLog@@YAGXZ
?GetValue@FLog@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV23@_N@Z
?Init@FLog@@YAXP6ANXZ@Z
?NowFast@FLog@@YANXZ
?RegisterFlag@FLog@@YAHPBDPA_NPAPA_NW4FastVarType@@@Z
?RegisterInt@FLog@@YAHPBDPAHPAPA_NW4FastVarType@@@Z
?RegisterLogGroup@FLog@@YAHPBDPAEPAPA_NW4FastVarType@@@Z
?RegisterString@FLog@@YAHPBDPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAPA_NW4FastVarType@@@Z
?ResetSynchronizedVariablesState@FLog@@YAXXZ
?SetExternalLogFunc@FLog@@YAXP6AXEPBD@Z@Z
?SetValue@FLog@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4FastVarType@@_N@Z
?SetValueFromServer@FLog@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?WriteFastLogDump@FLog@@YAXPBDH@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ