Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
8516f2c622f42053a0f1bf6bac973d8d_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8516f2c622f42053a0f1bf6bac973d8d_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
8516f2c622f42053a0f1bf6bac973d8d_JaffaCakes118
Size
433KB
MD5
8516f2c622f42053a0f1bf6bac973d8d
SHA1
0ea6d9e0400c788e5b7af873bf735e6c7de70a17
SHA256
a43ca32a524cc3325288b3ad89be78d3e150f8c3d6f6ab26310904287bf1a627
SHA512
06ec1e9d88a6cea6cee5f25ba6810e555703d50a88129f392d796273d10233e32d365482687a218061465d67a69e8d1cbd5d1f665c1b5f3106f46e8d86cb6d5e
SSDEEP
12288:OQidGzfbwro5rI7sODzcIfog/2wMPmSSOeXff0V9WYdw:OphDJgg/2wMenJXpYdw
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
C:\Users\Administrator\Desktop\work\hydeviceid\branches\hydeviceid_1.2_maint\win32\hydevice\Release\hydevice.pdb
DeleteCriticalSection
GetLastError
InitializeCriticalSectionEx
GetDiskFreeSpaceExA
FreeLibrary
GetProcAddress
GetLogicalDriveStringsA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
EnterCriticalSection
LeaveCriticalSection
Sleep
SleepEx
GetTickCount64
CloseHandle
WaitForSingleObjectEx
VerSetConditionMask
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
VerifyVersionInfoA
ExpandEnvironmentStringsA
GetStdHandle
GetFileType
ReadFile
PeekNamedPipe
WaitForMultipleObjects
SetLastError
FormatMessageA
CreateFileA
GetFileSizeEx
OutputDebugStringW
LocalFree
GetVersionExW
WideCharToMultiByte
CreateThread
GetModuleFileNameW
MultiByteToWideChar
IsDebuggerPresent
CreateDirectoryW
CryptDestroyKey
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGenRandom
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
GetUserNameA
CryptEncrypt
CryptImportKey
SHGetFolderPathW
CoInitializeEx
CoSetProxyBlanket
CoUninitialize
CoCreateInstance
VariantInit
SafeArrayGetUBound
SafeArrayGetLBound
SysFreeString
SysAllocString
VariantCopy
SafeArrayUnaccessData
SysAllocStringLen
SafeArrayAccessData
VariantChangeType
VariantClear
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_BADOFF@std@@3_JB
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
htonl
gethostname
ioctlsocket
sendto
recvfrom
listen
accept
freeaddrinfo
getaddrinfo
WSAIoctl
setsockopt
ntohs
htons
getsockopt
getsockname
getpeername
connect
closesocket
bind
send
ntohl
WSASetLastError
select
WSAStartup
WSACleanup
__WSAFDIsSet
recv
WSAGetLastError
socket
ord301
ord200
ord30
ord79
ord35
ord33
ord32
ord27
ord26
ord22
ord41
ord50
ord45
ord60
ord211
ord46
ord217
ord143
memset
_except_handler4_common
__std_type_info_destroy_list
memcpy
strrchr
strstr
_CxxThrowException
__telemetry_main_invoke_trigger
strchr
__std_exception_copy
__std_exception_destroy
memchr
__std_terminate
memmove
__telemetry_main_return_trigger
_purecall
__CxxFrameHandler3
__sys_nerr
_beginthreadex
_invalid_parameter_noinfo_noreturn
strerror
_seh_filter_dll
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_errno
_execute_onexit_table
_crt_atexit
_cexit
terminate
_initterm
_getpid
_initterm_e
strpbrk
strncmp
isupper
strspn
strcspn
tolower
strncpy
_strdup
fwrite
fgets
fputs
_open
_close
_write
_read
__stdio_common_vfprintf
fseek
fclose
fflush
ftell
__acrt_iob_func
__stdio_common_vsscanf
__stdio_common_vsprintf
__stdio_common_vsprintf_s
fputc
fopen
_lseeki64
fread
_wsplitpath
_access
_stat64
_fstat64
strtoll
atoi
strtol
strtoul
malloc
free
realloc
_callnewh
calloc
_gmtime64
_time64
qsort
getenv
CertFreeCertificateChainEngine
CertFreeCertificateChain
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringA
CertAddCertificateContextToStore
CertCloseStore
CertFindCertificateInStore
CertOpenStore
CertGetCertificateChain
CertFreeCertificateContext
CryptStringToBinaryA
_except1
getSafeDeviceId
init
setDeviceInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ