Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
b364fe94a5af15a24994181f5b64b7f8_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b364fe94a5af15a24994181f5b64b7f8_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
b364fe94a5af15a24994181f5b64b7f8_JaffaCakes118
Size
3.5MB
MD5
b364fe94a5af15a24994181f5b64b7f8
SHA1
4326c8b7d4c84daec1eb6079bcce8621e1f34f5c
SHA256
107f7d63a7ad36e9f869f1298a2606e812ac1fb2fa7470e83275a4fc178a708a
SHA512
d11dfaec14b3452d732dab8a8ff309c9f6503f4023f3b5aff8edc22e9171ecc83e60a032896f7debdc9bb8708c4ac44fa4ccf3cc773a6f3e846f4e383c2c4381
SSDEEP
49152:w2W94/XlqrtQlIFreGH4VEb4g77UuhO7mX3cOh2U6rh33TRoGEcymq0aQzr:qGKeC464gvUuhRncK2RT
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
F:\branches\5.4.1\Rhino\Safe\Bin\Win32\release\pdb\Exam.pdb
RefreshPolicy
UuidFromStringW
PathFileExistsW
PathIsNetworkPathW
PathIsDirectoryW
PathIsRootW
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
GetProcessHeap
CreateFileW
GetTempPathW
CloseHandle
GetTickCount
WaitForMultipleObjects
FreeLibrary
LoadLibraryW
GetProcAddress
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
GetCurrentProcessId
InterlockedExchange
GetDriveTypeW
GetCurrentProcess
SetThreadExecutionState
GetProcessTimes
OpenProcess
GetSystemDirectoryW
FileTimeToSystemTime
GetLocalTime
DeviceIoControl
GetCurrentThreadId
FileTimeToLocalFileTime
GetPrivateProfileStringW
GetModuleHandleW
GetFileAttributesW
WaitForSingleObject
DeleteFileW
SetFilePointer
WriteFile
HeapFree
VirtualQuery
GetLogicalDriveStringsW
QueryDosDeviceW
MoveFileW
InitializeCriticalSectionAndSpinCount
GetUserDefaultLangID
CreateMutexW
GetModuleHandleExW
ReleaseMutex
GetFileSizeEx
GetFileTime
GetACP
MultiByteToWideChar
FindResourceW
LoadResource
GetVersionExW
LockResource
GetSystemInfo
lstrcmpiW
TryEnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
ExpandEnvironmentStringsW
SearchPathW
Sleep
CreateProcessW
GetExitCodeProcess
OutputDebugStringW
GetSystemTimeAsFileTime
MoveFileExW
LocalFree
LocalAlloc
GetLastError
GetFullPathNameW
GetTempFileNameW
CreateDirectoryW
CopyFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
RemoveDirectoryW
GetWindowsDirectoryW
SetFileAttributesW
FileTimeToDosDateTime
DosDateTimeToFileTime
SystemTimeToFileTime
GetEnvironmentVariableW
GetSystemTime
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
EncodePointer
GlobalMemoryStatusEx
DecodePointer
RaiseException
SetLastError
FormatMessageW
LocalFileTimeToFileTime
LoadLibraryA
FindFirstFileW
GetLongPathNameW
GetFileAttributesExW
GetShortPathNameW
GetDiskFreeSpaceW
GetVolumeInformationW
FindClose
FindNextFileW
HeapAlloc
GlobalAlloc
GlobalFree
WideCharToMultiByte
InterlockedExchangeAdd
SetEvent
ResetEvent
CreateEventW
OpenEventW
ResumeThread
lstrlenW
lstrcatW
lstrcpyW
LoadLibraryExW
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
OpenMutexW
GetFileSize
SetEndOfFile
SetFileTime
ReadFile
GetShellWindow
SetForegroundWindow
GetWindowLongW
ShowWindow
UnregisterClassW
SendMessageW
GetParent
OpenDesktopW
WindowFromPoint
FindWindowW
SendMessageTimeoutW
CloseDesktop
GetClassNameW
GetDesktopWindow
SwitchDesktop
FindWindowExW
GetSystemMetrics
IsWindowVisible
GetWindowThreadProcessId
GetWindow
IsWindow
ExitWindowsEx
RegSetValueExW
RegCloseKey
RegQueryValueExW
RegCreateKeyExW
AdjustTokenPrivileges
FreeSid
AllocateAndInitializeSid
LookupPrivilegeValueW
EqualSid
GetTokenInformation
OpenProcessToken
QueryServiceConfigW
QueryServiceStatus
OpenServiceW
OpenSCManagerW
CloseServiceHandle
RegOpenKeyExW
ShellExecuteExW
SHGetPathFromIDListW
ShellExecuteW
SHGetFolderPathW
ord232
CoUninitialize
CoInitialize
CoCreateInstance
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_C_str@?$_Yarn@D@std@@QBEPBDXZ
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?flags@ios_base@std@@QBEHXZ
?fail@ios_base@std@@QBE_NXZ
?good@ios_base@std@@QBE_NXZ
?rdstate@ios_base@std@@QBEHXZ
??Bios_base@std@@QBE_NXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?_Getname@_Locinfo@std@@QBEPBDXZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@HPBD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?global@locale@std@@SA?AV12@ABV12@@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_New_Locimp@_Locimp@locale@std@@CAPAV123@_N@Z
?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z
?uncaught_exception@std@@YA_NXZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Xruntime_error@std@@YAXPBD@Z
?_BADOFF@std@@3_JB
??0_Container_base12@std@@QAE@XZ
?_1@placeholders@std@@3V?$_Ph@$00@2@A
??1_Container_base12@std@@QAE@XZ
?_Orphan_all@_Container_base12@std@@QAEXXZ
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
??0id@locale@std@@QAE@I@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
_Nan
_Inf
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??7ios_base@std@@QBE_NXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setf@ios_base@std@@QAEHHH@Z
?setf@ios_base@std@@QAEHH@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
fflush
fgetc
fsetpos
setvbuf
_lock_file
sprintf
atof
_mktime64
_localtime64
_time64
rand
srand
_stricmp
_splitpath_s
_beginthreadex
_vswprintf_c_l
calloc
_wcsnicmp
wcsncpy
_wcsicmp
isalnum
sscanf
swscanf_s
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
__clean_type_info_names_internal
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__CxxFrameHandler3
_except_handler4_common
_fseeki64
fgetpos
ungetc
_unlock_file
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
fputc
toupper
tolower
memchr
strchr
strstr
_errno
towupper
_vsnwprintf
towlower
wcschr
fwrite
rewind
_wfopen_s
ftell
setlocale
fputws
_wfopen
realloc
wcsrchr
malloc
free
wcsstr
swscanf
wcstoul
_wtoi
?name@type_info@@QBEPBDPAU__type_info_node@@@Z
atoi
??_V@YAXPAX@Z
?terminate@@YAXXZ
memcpy_s
fclose
fseek
fread
fopen
??2@YAPAXI@Z
_hypot
_except1
_purecall
memmove
abort
modf
sprintf_s
__iob_func
localeconv
fprintf
_dtest
strpbrk
memcpy
memset
_recalloc
memmove_s
_CxxThrowException
__RTDynamicCast
??3@YAXPAX@Z
RCVBusGetModuleCount
RCVBusQueryModule
RCVBusReleaseModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ