Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
6e13df3da08bc23ca98c90954858988c_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
6e13df3da08bc23ca98c90954858988c_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
6e13df3da08bc23ca98c90954858988c_JaffaCakes118
Size
156KB
MD5
6e13df3da08bc23ca98c90954858988c
SHA1
182614fed814b4e90fd7071774b9aab84e615366
SHA256
f6ba54888f5047a82cd80f8e8a79ce70411f94985f83d69117c53f78ffc45e45
SHA512
68dd7d1699f30b986137e2e64a77ec1f00d428359612d8b492f03ba10ad042bd8e7e52491e722d7ad0f639d3459162e1b902ddb6a85f2783cc722a80a7ac3598
SSDEEP
3072:265ZqUsSngWryFc7e80Lb2nm0D3Tfk2a3aPl48UEnOfPavkqP:f5QmnEFc7afEZdPl4dEnOfPa1
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
D:\jenkins\workspace\minibaidu_tag_20160121_2.3.0_Normal\Basic\Tools\NSIS\Plugins\InstallHelper.pdb
?IsEmpty@CStdString@BDMUtils@BDMSkin@@QBE_NXZ
?GetLength@CStdString@BDMUtils@BDMSkin@@QBEHXZ
??0CStdString@BDMUtils@BDMSkin@@QAE@XZ
?m_pStrResourceZip@IResourceManager@ExpandInterface@BDMSkin@@0VCStdString@BDMUtils@3@A
?BDMSkinMessageBox@BDMSkin@@YAHPAUHWND__@@PB_W1IK11111H@Z
?BDMSkinMessageBoxSetBtnText@BDMSkin@@YAXPB_W00@Z
?OnFinalMessage@CBDMBaseWnd@BDMSkin@@MAEXPAUHWND__@@@Z
?GetClassStyle@CBDMBaseWnd@BDMSkin@@MBEIXZ
?GetSuperClassName@CBDMBaseWnd@BDMSkin@@MBEPB_WXZ
??0CBDMBaseWnd@BDMSkin@@QAE@XZ
?GetHBitmapFromRes@CRenderEngine@BDMSkin@@SAPAUHBITMAP__@@PAVIControlManger@ExpandInterface@2@PB_W@Z
?GetControlSnapShot@CRenderEngine@BDMSkin@@SAPAUHBITMAP__@@PAVIControlManger@ExpandInterface@2@PAVIControlUI@52@@Z
?GetAt@CStdString@BDMUtils@BDMSkin@@QBE_WH@Z
?SetFont@CBDMLabelUI@BDMSkin@@QAEXH@Z
?IsSelected@CBDMOptionUI@BDMSkin@@QBE_NXZ
?Stop@CBDMGifViewUI@BDMSkin@@QAEXXZ
?Play@CBDMGifViewUI@BDMSkin@@QAEXXZ
?GetAnimationFactory@BDMSkin@@YGJPAPAUIAnimationFactory@1@@Z
?SetValue@CBDMProgressUI@BDMSkin@@QAEXH_N@Z
?SetMaxValue@CBDMProgressUI@BDMSkin@@QAEXH@Z
??1CBDMControlManger@BDMSkin@@QAE@XZ
??0CBDMControlManger@BDMSkin@@QAE@XZ
??1CBDMBaseWnd@BDMSkin@@UAE@XZ
??4CStdString@BDMUtils@BDMSkin@@QAEABV012@PB_W@Z
??HCStdString@BDMUtils@BDMSkin@@QAE?AV012@PB_W@Z
??YCStdString@BDMUtils@BDMSkin@@QAEABV012@_W@Z
?MakeLower@CStdString@BDMUtils@BDMSkin@@QAEXXZ
?Left@CStdString@BDMUtils@BDMSkin@@QBE?AV123@H@Z
?Mid@CStdString@BDMUtils@BDMSkin@@QBE?AV123@HH@Z
?Right@CStdString@BDMUtils@BDMSkin@@QBE?AV123@H@Z
?Find@CStdString@BDMUtils@BDMSkin@@QBEHPB_WH@Z
?Find@CStdString@BDMUtils@BDMSkin@@QBEH_WH@Z
?GetHWND@CBDMBaseWnd@BDMSkin@@QBEPAUHWND__@@XZ
?Create@CBDMBaseWnd@BDMSkin@@QAEPAUHWND__@@PAU3@PB_WKKHHHHPAUHMENU__@@@Z
?ShowWindow@CBDMBaseWnd@BDMSkin@@QAEX_N0@Z
?CenterWindow@CBDMBaseWnd@BDMSkin@@QAEXPAUHWND__@@@Z
?SetResourceZip@IResourceManager@ExpandInterface@BDMSkin@@SAXPB_W@Z
?TranslateMessage@IControlManger@ExpandInterface@BDMSkin@@SA_NQAUtagMSG@@@Z
??1CBDMDialogBuilder@BDMSkin@@QAE@XZ
??0CBDMDialogBuilder@BDMSkin@@QAE@XZ
?Create@CBDMDialogBuilder@BDMSkin@@QAEPAVIControlUI@ExpandInterface@2@VSTRINGorID@BDMUtils@2@PB_WPAVIDialogBuilderCallback@2@PAVIControlManger@42@PAV342@@Z
?AttachDialog@CBDMControlManger@BDMSkin@@QAE_NPAVIControlUI@ExpandInterface@2@@Z
?AddNotifier@CBDMControlManger@BDMSkin@@QAE_NPAVINotifyUI@ExpandInterface@2@@Z
??YCBDMEventSource@ExpandInterface@BDMSkin@@QAEXAAVCBDMDelegateBase@12@@Z
??0CBDMDelegateBase@ExpandInterface@BDMSkin@@QAE@ABV012@@Z
??0CBDMDelegateBase@ExpandInterface@BDMSkin@@QAE@PAX0@Z
??1CBDMDelegateBase@ExpandInterface@BDMSkin@@UAE@XZ
?Equals@CBDMDelegateBase@ExpandInterface@BDMSkin@@UBE_NABV123@@Z
?GetObjectW@CBDMDelegateBase@ExpandInterface@BDMSkin@@IAEPAXXZ
??0CStdString@BDMUtils@BDMSkin@@QAE@PB_W@Z
??0CStdString@BDMUtils@BDMSkin@@QAE@ABV012@@Z
??1CStdString@BDMUtils@BDMSkin@@QAE@XZ
?GetData@CStdString@BDMUtils@BDMSkin@@QBEPB_WXZ
??BCStdString@BDMUtils@BDMSkin@@QBEPB_WXZ
??4CStdString@BDMUtils@BDMSkin@@QAEABV012@ABV012@@Z
??8CStdString@BDMUtils@BDMSkin@@QBE_NPB_W@Z
??BCBDMBaseWnd@BDMSkin@@QBEPAUHWND__@@XZ
?HandleMessage@CBDMBaseWnd@BDMSkin@@MAEJIIJ@Z
?Append@CStdString@BDMUtils@BDMSkin@@QAEXPB_WH@Z
?SendMessageW@CBDMBaseWnd@BDMSkin@@IAEJIIJ@Z
GetProcessImageFileNameW
RemoveDirectoryW
Process32NextW
lstrcmpiW
FindNextFileW
CreateToolhelp32Snapshot
DeleteFileW
GetCurrentProcessId
GetThreadTimes
lstrcpyW
SetFileAttributesW
CreateThread
ExpandEnvironmentStringsW
WaitForSingleObject
CreateEventW
GetDriveTypeW
GetModuleFileNameW
GetFileSize
UnmapViewOfFile
GetCPInfo
MapViewOfFileEx
IsDBCSLeadByte
CreateFileMappingW
GetWindowsDirectoryW
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
IsProcessorFeaturePresent
GetTickCount
FreeLibrary
OpenProcess
LoadLibraryW
GetVersionExW
GetProcAddress
CloseHandle
MultiByteToWideChar
FindFirstFileW
FindResourceExW
FindResourceW
LoadResource
CreateProcessW
SetDllDirectoryW
MoveFileExW
GetCurrentProcess
CompareFileTime
CreateDirectoryW
GetModuleHandleW
WriteFile
GlobalAlloc
LockResource
OpenThread
Process32FirstW
FindClose
GlobalFree
GetLastError
CreateFileW
Thread32Next
TerminateProcess
GetFileAttributesW
lstrcpynW
SizeofResource
CopyFileW
WideCharToMultiByte
Thread32First
GetSystemDirectoryW
UpdateWindow
SetDlgItemTextW
CloseWindow
GetDlgItemTextW
MessageBoxW
GetDlgItem
EnableMenuItem
GetWindowTextW
InvalidateRect
KillTimer
PostMessageW
SetTimer
GetSystemMenu
SetWindowPos
ShowWindow
SetWindowTextW
CallWindowProcW
wsprintfW
EnableWindow
GetDC
IsWindow
FindWindowExW
PostThreadMessageW
DestroyWindow
SetWindowRgn
ScreenToClient
GetWindowRect
IsIconic
IsZoomed
FindWindowW
GetClientRect
OffsetRect
GetWindowLongW
SetWindowLongW
GetCursorPos
SendMessageW
EnumFontsW
DeleteObject
CreateRoundRectRgn
OpenProcessToken
AllocateAndInitializeSid
FreeSid
CheckTokenMembership
CreateServiceW
CloseServiceHandle
DeleteService
OpenSCManagerW
OpenServiceW
RegQueryValueExW
LookupPrivilegeValueW
StartServiceW
QueryServiceStatus
RegOpenKeyExW
ControlService
AdjustTokenPrivileges
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegCreateKeyW
RegQueryInfoKeyW
RegDeleteKeyW
RegEnumKeyExW
IsTextUnicode
SHGetSpecialFolderPathW
SHGetMalloc
SHBrowseForFolderW
SHChangeNotify
SHCreateDirectoryExW
ShellExecuteW
SHGetPathFromIDListW
CoInitializeEx
CoUninitialize
CoCreateInstance
CoInitialize
SysStringLen
SysFreeString
SysAllocString
??0_Locinfo@std@@QAE@HPBD@Z
??1_Locinfo@std@@QAE@XZ
??Bid@locale@std@@QAEIXZ
?_Incref@facet@locale@std@@QAEXXZ
?_Decref@facet@locale@std@@QAEPAV123@XZ
??1_Locimp@locale@std@@MAE@XZ
??0_Locimp@locale@std@@AAE@_N@Z
?toupper@?$ctype@_W@std@@QBE_W_W@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?_Init@locale@std@@CAPAV_Locimp@12@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Xruntime_error@std@@YAXPBD@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
_time64
srand
rand
_itow
_itow_s
wcsncpy
exit
_CxxThrowException
memcpy
__RTDynamicCast
fclose
wcscat_s
memcpy_s
free
malloc
wcsspn
wcscspn
__CxxFrameHandler3
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_wtmpnam_s
_vscwprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
memmove
??_V@YAXPAX@Z
wcstoul
_wcsnicmp
wcsnlen
_snwprintf_s
_wfopen_s
wcschr
memmove_s
_purecall
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??8type_info@@QBE_NABV0@@Z
fwprintf
_wtoi
wmemcpy_s
vswprintf_s
wcsrchr
wcsstr
memset
PathFileExistsW
PathStripToRootW
PathRemoveFileSpecW
CallHoldProc
CallWebDownloadDll
CleanBeforeKillProcess
CompareVersion
CopyHelp
CreateDir
CreateInstallWnd
CreateProcessLow
CreateUnInstallWnd
DeleteDirectory
Encrypt
ExitInstallProcess
ExitRunningProcess
FileExist
FindYhFont
FireWallAddApp
FireWallDelApp
FolderExist
GetAllUserAppDataDir
GetAllUserProfileDir
GetCostTime
GetDeleteConfigFile
GetParentProcess
GetQuickLaunch
GetSetDefault
GetSysTempDir
GetTempDir
GetUnInstallReason
GetUserAppDataDir
GetWndHandle
GetXmlPath
GoNext
HandleFirewall
HandleInviterUK
HandleTipsConfig
HideInstallWnd
InitReport
InitSetupLog
InstallBaiduService
InstallBaiduServiceDelay
InstallSC
InstallSCDelay
IsMainWindowExist
IsProcessRunning
IsSystemCompatible
IsWow64
IsZhunruExist
KVMessageBox
KillRunningProcess
NavigateUrl
NotifyHostSetupStatus
NotifyHostSetupStatus_GS
RecordEndTime
RecordSetupBeginTime
RecordStartTime
RefreshIcon
RegisterSC
RegisterSCDelay
RemoveDefaultBrowser
RenameAndDeleteFile
ReportInstallCancel
ReportInstallFinish
ReportInstallLaunch
ReportUninstallCaller
ReportUninstallCancel
ReportUninstallFinish
SendComplete
SetInstallParam
SetUnInstallParam
SetWebDownloaderPath
StartPin
StartUnPin
StopDocker
TaskBarPin
TaskBarUnPin
UnInstallSC
UninstPangolin
UnistallBaiduService
ValidateInstDir
WriteRegForDockWhenInstall
WriteRegForDockWhenUnInstall
WriteRegTnBin
WriteRegValue
WriteSetupLog
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ