Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
8aa4491a8a0e2e4b687c0c1308387951_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8aa4491a8a0e2e4b687c0c1308387951_JaffaCakes118.dll
Resource
win10v2004-20240426-en
Target
8aa4491a8a0e2e4b687c0c1308387951_JaffaCakes118
Size
111KB
MD5
8aa4491a8a0e2e4b687c0c1308387951
SHA1
568411b3185c53a4a7b155bd65c8610b5ff6198b
SHA256
faf1286f81e6c6835b2d73f64ee5bdc42e99eb55fd2bb3305011b57d514598e4
SHA512
fe8de0ea732371496c5bf87622c5e2a91750773c8f92b1a6cbc80ac303c49a82ee60d24a1034fa7bde9361d2485811e8dae8be1da2493599168f089038fa7717
SSDEEP
1536:zunMPb/5EosQXLT/fbHU/7cgosQfkXw48LWnQ9Y1g9oFwN4VAN4MIcAUIcQ9BFp1:KnweNDaueqxDB6t/BuyOA0ktw
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
R:\TempView\Output\Plugin\Com.Tencent.Graffito\Bin\Graffito.pdb
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??0CTXStringW@@QAE@PB_W@Z
??YCTXStringW@@QAEAAV0@_W@Z
?Delete@CTXStringW@@QAEHHH@Z
?GetAt@CTXStringW@@QBE_WH@Z
?GetLength@CTXStringW@@QBEHXZ
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
?DecodeUrl@Encode@Util@@YA?AVCTXStringW@@ABV3@_N@Z
??8@YA_NABVCTXStringW@@PB_W@Z
?MakeLower@CTXStringW@@QAEAAV1@XZ
?Format@CTXStringA@@QAAXPBDZZ
??0CTXStringA@@QAE@XZ
??M@YA_NABVCTXStringA@@0@Z
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
?GetBSTR@CTXStringW@@QBEPA_WXZ
?ConvertTXDataStringBundle@Convert@Util@@YAHPAUITXData@@@Z
??ICTXBSTR@@QAEPAPA_WXZ
?SetUIInterface@CTXHttpDownload@@QAEXPAVCTXHttpDownloadSink@@@Z
?MoveDownloadFile@CTXHttpDownload@@QAEHPB_WH@Z
??BCTXStringW@@QBEPB_WXZ
?EncodeHash@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@@Z
?GetFileHash@FS@Util@@YAHPB_WAAVCTXBuffer@@AAK@Z
?GetDownloadedFilePath@CTXHttpDownload@@QAEHAAVCTXStringW@@@Z
?Download@CTXHttpDownload@@QAEHPB_WPAU_SYSTEMTIME@@0H@Z
??0CTXHttpDownload@@QAE@XZ
?Run@CTXHttpDownload@@EAEIXZ
??1CTXHttpDownload@@UAE@XZ
??1CTXHttpDownloadSink@@UAE@XZ
??0CTXHttpDownloadSink@@IAE@XZ
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@@Z
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnProgress@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnError@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@K@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
??0CTXStringW@@QAE@XZ
?GetTXDataStr@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXStringW@@@Z
?IsEmpty@CTXStringW@@QBE_NXZ
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
??0CTXBSTR@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
??1CTXBSTR@@QAE@XZ
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??0CTXBSTR@@QAE@PB_W@Z
??0CTXStringW@@QAE@ABV0@@Z
??1CTXStringA@@QAE@XZ
??M@YA_NABVCTXStringW@@0@Z
?Find@CTXStringW@@QBEH_WH@Z
?Left@CTXStringW@@QBE?AV1@H@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??1CTXStringW@@QAE@XZ
??H@YA?AVCTXStringW@@PB_WABV0@@Z
?Mid@CTXStringW@@QBE?AV1@H@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
?AdjustUrl@URL@Util@@YA?AVCTXStringW@@ABV3@W4URLMODIFYLEVEL@12@0@Z
?CreateMsgPack@Msg@Util@@YAHPAPAUITXMsgPack@@@Z
?InputMsgInChatSession@ChatSession@Util@@YAXKHPAUITXMsgPack@@@Z
?GetChatSessionMainWnd@ChatSession@Util@@YAHKHPAPAUIGFFrame@@@Z
lstrlenW
lstrcmpiW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetModuleHandleW
GetModuleFileNameW
GetSystemTimeAsFileTime
GetCurrentProcessId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
GetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
RaiseException
GetThreadLocale
SetThreadLocale
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
Sleep
FindResourceExW
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
UnregisterClassA
CharNextW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
SHGetFileInfoW
StringFromCLSID
CoCreateInstance
CoTaskMemFree
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
SysStringLen
SysFreeString
ord15
ord22
ord64
ord23
ord61
ord58
ord30
ord32
ord31
ord18
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
_crt_debugger_hook
__clean_type_info_names_internal
??3@YAXPAX@Z
_CxxThrowException
memset
_recalloc
memcpy_s
malloc
free
wcscpy_s
wcsncpy_s
__CxxFrameHandler3
wcslen
_invalid_parameter_noinfo
_time64
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??_V@YAXPAX@Z
memmove_s
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
_purecall
memcmp
wcschr
_except_handler4_common
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ