Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
8f4a392bf47746cad1aeadba8dc6f7bb_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8f4a392bf47746cad1aeadba8dc6f7bb_JaffaCakes118.exe
Resource
win10v2004-20240426-en
Target
8f4a392bf47746cad1aeadba8dc6f7bb_JaffaCakes118
Size
1.8MB
MD5
8f4a392bf47746cad1aeadba8dc6f7bb
SHA1
61eee45d10f9ff5f4951b255c19ff636c0e8c8ac
SHA256
70673e529e95271d2fed7851f126bc093521e92b6be1f391438f7f0274a3df4b
SHA512
824e46af5796de1b4348dae97dc9d30086b6f7a47544a87ba4195d6050b53d3806cecad93fda85a74f043cd5ae492b1856f0901327bdc4b24a748eb01c721a4c
SSDEEP
49152:f1rLUIABxDGA8uRWkWbjdOpn1Elg/8Qg:drIn3DGURWbg1L8
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
E:\CQS\branches\CQT_Video\Source\VideoEditor\Output\Pdb\VideoEditor.pdb
socket
inet_addr
htons
closesocket
connect
setsockopt
recv
send
ntohl
htonl
GetModuleFileNameExW
GetMappedFileNameW
GdipLoadImageFromFile
GdipFree
GdipAlloc
GdipGetFontHeightGivenDPI
GdipGetImageWidth
GdipGetImageHeight
GdipCloneImage
GdiplusShutdown
GdiplusStartup
GdipCreateFont
GdipDeleteFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipDisposeImage
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
TRAE_DestroyEngine
TRAE_CreateEngine
InitCommonControlsEx
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?InitPlatformCoreConfig@Boot@Util@@YAHXZ
?SetMainAndLogicThreadId@Misc@Util@@YAXKK@Z
?GetSession@TXLog@@YAKXZ
?GetLCID@NLS@@YAKXZ
?ClearDeadQueue@Misc@Util@@YAXXZ
?SetBugReportUin@TXBugReport@@YAXK@Z
?SetBugReportFlag@TXBugReport@@YAHK@Z
?InitPlatformGFConfig@Boot@Util@@YAHXZ
?OnExitCoreCenter@Misc@Util@@YAXXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?InitPlatformI18NConfig@Boot@Util@@YAHXZ
?InitPlatformFileSystem@Boot@Util@@YAHXZ
?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ
?InitBugReport@TXBugReport@@YAXPB_W000GGKHHKKP6GHPAUtagBugReportInfo@1@PBD200PAPAXPAKPAX@Z@Z
?GetAt@CTXStringW@@QBE_WH@Z
??1CTXStringW@@QAE@XZ
??M@YA_NABVCTXStringW@@0@Z
??0CTXStringW@@QAE@ABV0@@Z
??0CTXStringW@@QAE@PB_W@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??0CTXStringW@@QAE@XZ
??1CTXBSTR@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??0CTXStringW@@QAE@PA_W@Z
??0CTXStringW@@QAE@H@Z
?GetBuffer@CTXStringW@@QAEPA_WXZ
?Format@CTXStringW@@QAAXPB_WZZ
??4CTXStringW@@QAEAAV0@ABV0@@Z
?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
?Truncate@CTXStringW@@QAEXH@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
??BCTXStringW@@QBEPB_WXZ
?TXAssert@@YAHPB_W0H@Z
??7CTXStringW@@QBE_NXZ
??H@YA?AVCTXStringW@@ABV0@0@Z
??0CTXStringW@@QAE@UtagEN@@PBDH@Z
?GetLength@CTXStringW@@QBEHXZ
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
??ICTXBSTR@@QAEPAPA_WXZ
?IsEmpty@CTXBSTR@@QAEHXZ
??0CTXBSTR@@QAE@PB_W@Z
??0CTXBSTR@@QAE@XZ
??4CTXStringW@@QAEAAV0@PA_W@Z
?GetBSTR@CTXStringW@@QBEPA_WXZ
??8@YA_NABVCTXStringW@@0@Z
?InitPlatform@CoreCenter@Util@@YAHPA_W@Z
?Append@CTXStringW@@QAEXABV1@@Z
?Compare@CTXStringW@@QBEHPB_W@Z
?Empty@CTXStringW@@QAEXXZ
?Left@CTXStringW@@QBE?AV1@H@Z
?Format@CTXTime@@QBE?AVCTXStringW@@PB_W@Z
??0CTXTime@@QAE@ABU_SYSTEMTIME@@H@Z
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?Mid@CTXStringW@@QBE?AV1@HH@Z
?Find@CTXStringW@@QBEH_WH@Z
?Find@CTXStringW@@QBEHPB_WH@Z
?MakeLower@CTXStringW@@QAEAAV1@XZ
?TrimRight@CTXStringW@@QAEAAV1@XZ
?TrimLeft@CTXStringW@@QAEAAV1@XZ
?IsEmpty@CTXStringW@@QBE_NXZ
??YCTXStringW@@QAEAAV0@ABV0@@Z
??9@YA_NABVCTXStringW@@PB_W@Z
?Right@CTXStringW@@QBE?AV1@H@Z
??4CTXStringA@@QAEAAV0@PBD@Z
?Mid@CTXStringA@@QBE?AV1@H@Z
?ReleaseBuffer@CTXStringA@@QAEXH@Z
?GetBuffer@CTXStringA@@QAEPADH@Z
??1CTXStringA@@QAE@XZ
??4CTXStringA@@QAEAAV0@ABV0@@Z
?Left@CTXStringA@@QBE?AV1@H@Z
?GetLength@CTXStringA@@QBEHXZ
??0CTXStringA@@QAE@XZ
??YCTXStringW@@QAEAAV0@_W@Z
?Mid@CTXStringW@@QBE?AV1@H@Z
??0CTXStringA@@QAE@PBD@Z
?GetBufferSetLength@CTXStringW@@QAEPA_WH@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
?Append@CTXStringW@@QAEXPB_W@Z
ord10
ord4
ord6
ord5
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
??YCTXBSTR@@QAEAAV0@PB_W@Z
?Format@CTXStringA@@QAAXPBDZZ
??M@YA_NABVCTXStringA@@0@Z
?Length@CTXBSTR@@QBEIXZ
??4CTXBSTR@@QAEAAV0@PB_W@Z
?SetAt@CTXStringW@@QAEXH_W@Z
?GetTXDataStr@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXStringW@@@Z
??H@YA?AVCTXStringW@@_WABV0@@Z
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
?OnUninitCom@Misc@Util@@YAXXZ
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?SetCustomObjectFactory@GF@Util@@YAXP6AHABU_GUID@@0PAPAX@Z@Z
?ExtractOleDDData@GF@Util@@YA_NPAUIDataObject@@AAIAAPAE@Z
?FreeOleDDData@GF@Util@@YAXAAPAE@Z
?CreateDropSource@GF@Util@@YA_NPAPAUIDropSource@@PAPAUIDataObject@@IPAE@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
LockTextureBits
CreateTexture
UnlockTextureBits
?ToElement@TiXmlNode@@UBEPBVTiXmlElement@@XZ
?LoadXML@TiXmlDocument@@QAE_NPADHW4TiXmlEncoding@@@Z
?FirstChildElement@TiXmlNode@@QAEPAVTiXmlElement@@PBD@Z
?IterateChildren@TiXmlNode@@QBEPBV1@PBV1@@Z
?Value@TiXmlNode@@QBEPBDXZ
??1TiXmlDocument@@UAE@XZ
?FirstChildElement@TiXmlNode@@QBEPBVTiXmlElement@@PBD@Z
?Attribute@TiXmlElement@@QBEPBDPBD@Z
?Accept@TiXmlDocument@@UBE_NPAVTiXmlVisitor@@@Z
?Clone@TiXmlDocument@@MBEPAVTiXmlNode@@XZ
?ToDeclaration@TiXmlNode@@UBEPBVTiXmlDeclaration@@XZ
?ToDeclaration@TiXmlNode@@UAEPAVTiXmlDeclaration@@XZ
?ToText@TiXmlNode@@UBEPBVTiXmlText@@XZ
?ToText@TiXmlNode@@UAEPAVTiXmlText@@XZ
?ToUnknown@TiXmlNode@@UBEPBVTiXmlUnknown@@XZ
?ToUnknown@TiXmlNode@@UAEPAVTiXmlUnknown@@XZ
?ToComment@TiXmlNode@@UBEPBVTiXmlComment@@XZ
?ToComment@TiXmlNode@@UAEPAVTiXmlComment@@XZ
??0TiXmlDocument@@QAE@XZ
?Print@TiXmlDocument@@UBEXPAU_iobuf@@H@Z
?Parse@TiXmlDocument@@UAEPBDPBDPAVTiXmlParsingData@@W4TiXmlEncoding@@@Z
?ToDocument@TiXmlDocument@@UAEPAV1@XZ
?ToDocument@TiXmlDocument@@UBEPBV1@XZ
?ToElement@TiXmlNode@@UAEPAVTiXmlElement@@XZ
?LoadFile@TiXmlDocument@@QAE_NPAU_iobuf@@W4TiXmlEncoding@@@Z
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetSystemTimeAsFileTime
HeapSetInformation
VirtualFree
DecodePointer
EncodePointer
InterlockedPopEntrySList
VirtualAlloc
IsDebuggerPresent
IsProcessorFeaturePresent
InterlockedPushEntrySList
HeapSize
HeapReAlloc
HeapDestroy
LocalFree
InterlockedExchange
OutputDebugStringA
CreateThread
GetCommandLineW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
TerminateProcess
LoadLibraryExW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateFileMappingW
GetLogicalDriveStringsW
QueryDosDeviceW
GetEnvironmentVariableW
SetEnvironmentVariableW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteFileW
WideCharToMultiByte
GetTempFileNameW
GetTempPathW
GetLastError
MultiByteToWideChar
lstrlenA
GetPrivateProfileIntW
GetTickCount
GetModuleFileNameW
GetModuleHandleW
CloseHandle
WaitForSingleObject
CreateProcessW
QueryPerformanceCounter
GetCurrentThreadId
InterlockedIncrement
OutputDebugStringW
GetFileSize
CreateFileW
SetEvent
OpenEventW
InterlockedDecrement
GetPrivateProfileStringW
RaiseException
InitializeCriticalSectionAndSpinCount
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetProcAddress
lstrlenW
lstrcmpiW
GetCurrentThread
GetCurrentProcess
ReleaseMutex
CreateMutexW
OpenMutexW
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
InterlockedCompareExchange
SetLastError
GetHandleInformation
ResetEvent
WriteFile
SetEndOfFile
SetFilePointer
HeapAlloc
GetFileAttributesW
CreateDirectoryW
CreateEventW
HeapFree
GetProcessHeap
FlushInstructionCache
ReadFile
SetThreadPriority
TerminateThread
WaitForMultipleObjects
LoadLibraryW
FreeLibrary
Sleep
GetCurrentProcessId
GetVersionExW
VirtualFreeEx
ReadProcessMemory
VirtualAllocEx
OpenProcess
GetVersion
MonitorFromRect
GetMonitorInfoW
SetFocus
GetForegroundWindow
IsIconic
AttachThreadInput
GetParent
GetWindow
GetClientRect
LoadIconW
RegisterWindowMessageW
GetDoubleClickTime
SetTimer
LoadMenuW
GetSubMenu
DestroyMenu
SetMenuDefaultItem
SetForegroundWindow
TrackPopupMenu
GetWindowThreadProcessId
SendMessageW
MapWindowPoints
CopyRect
FindWindowW
SystemParametersInfoW
GetClassNameW
GetWindowRect
PeekMessageW
CallWindowProcW
RegisterClassExW
DefWindowProcW
CreateWindowExW
DestroyWindow
LoadCursorW
GetClassInfoExW
ShowWindow
GetDesktopWindow
GetMessageW
TranslateMessage
DispatchMessageW
PostMessageW
GetWindowLongW
SetWindowLongW
IsWindow
SetWindowPos
MoveWindow
GetCursorPos
PtInRect
GetDC
CharNextW
EnumChildWindows
UnregisterClassA
EnableWindow
PostThreadMessageW
SetWindowTextW
SendMessageTimeoutW
EnumWindows
KillTimer
DeleteObject
EnumFontFamiliesExW
GetObjectW
GetOpenFileNameW
RegOpenKeyExW
RegDeleteKeyW
RegCloseKey
RegSetValueExW
RegEnumKeyExW
SetNamedSecurityInfoA
RegCreateKeyExW
SHAppBarMessage
Shell_NotifyIconW
SHGetFileInfoW
ShellExecuteW
CoTaskMemFree
StringFromCLSID
CoLoadLibrary
OleUninitialize
OleInitialize
CoReleaseServerProcess
CoAddRefServerProcess
CoInitialize
CoCreateInstance
CoUninitialize
CoInitializeEx
SysFreeString
SysAllocString
SysStringLen
VariantInit
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
DispCallFunc
VariantClear
ord31
ord58
ord43
ord11
ord10
ord30
ord44
ord64
ord32
PathAppendW
PathFindFileNameW
StrCatW
?_Orphan_all@_Container_base12@std@@QAEXXZ
?_Xfunc@tr1@std@@YAXXZ
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Xlength_error@std@@YAXPBD@Z
??0_Container_base12@std@@QAE@XZ
?max@?$numeric_limits@I@std@@SAIXZ
?max@?$numeric_limits@K@std@@SAKXZ
?min@?$numeric_limits@K@std@@SAKXZ
_Inf
_Nan
_FNan
_FInf
??1_Container_base12@std@@QAE@XZ
wprintf
_wcsnicmp
_vsnwprintf
vswprintf_s
_vscwprintf
isxdigit
toupper
_wtoi64
ferror
_fseeki64
_ftelli64
fopen
tolower
strstr
vsprintf_s
fwrite
wcsrchr
clock
_wfopen
ftell
srand
wcsnlen
_wsplitpath_s
wcstoul
_wtoi
rand
fread
fseek
memchr
strnlen
_beginthreadex
_snwprintf
_atoi64
_wfopen_s
fclose
strncpy_s
_vsnwprintf_s
_swprintf
strcpy_s
sprintf_s
swprintf_s
memmove_s
wcscpy_s
wmemcpy_s
malloc
_waccess
_snwprintf_s
wcsncpy_s
_time64
printf
_recalloc
calloc
free
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
__wargv
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
memmove
??2@YAPAXI@Z
memset
_purecall
__iob_func
fprintf
memcpy_s
_invoke_watson
_controlfp_s
wcsncpy
_wcsicmp
_errno
_time32
_snprintf_s
feof
fgetc
_vsnprintf_s
__CxxFrameHandler3
memcpy
??_V@YAXPAX@Z
??3@YAXPAX@Z
__argc
_lock
__dllonexit
_unlock
__RTDynamicCast
strtod
strchr
strtol
strtoul
_strtoui64
_strtoi64
ldiv
_snprintf
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
??8type_info@@QBE_NABV0@@Z
??0bad_cast@std@@QAE@ABV01@@Z
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_vsnprintf
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
atoi
sprintf
fflush
setlocale
wcstombs
vfprintf
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
_except_handler4_common
?terminate@@YAXXZ
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
??1exception@std@@UAE@XZ
_onexit
??0exception@std@@QAE@XZ
HttpAddRequestHeadersW
InternetQueryOptionW
InternetErrorDlg
HttpSendRequestW
InternetReadFileExA
InternetSetStatusCallbackW
InternetOpenW
InternetCloseHandle
InternetCrackUrlW
HttpOpenRequestW
HttpSendRequestExW
InternetConnectW
HttpQueryInfoW
HttpEndRequestW
InternetWriteFile
SymCleanup
SymLoadModule64
SymGetModuleBase64
SymFunctionTableAccess64
SymGetOptions
SymSetOptions
StackWalk64
SymGetModuleInfo64
SymGetSearchPath
SymGetSymFromAddr64
SymInitialize
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ