Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
b64df6cf28a3e262dfcf3ef6611fa884_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
b64df6cf28a3e262dfcf3ef6611fa884_JaffaCakes118.exe
Resource
win10v2004-20240508-en
Target
b64df6cf28a3e262dfcf3ef6611fa884_JaffaCakes118
Size
2.1MB
MD5
b64df6cf28a3e262dfcf3ef6611fa884
SHA1
ca0302d87adc7b672db8f7ad1e624616a45ca7c3
SHA256
7d5d2830e5fdeb87a44ddb7aa4f548b581c3e1657a425de9e51345214c25d458
SHA512
65312f88d3a02e2c206a5f3f2fbe993e531f5b788e351851057bc13c3c216a911259170c3e2f638e42f2393297f693823d20610013fd919b13b0d6f35e275967
SSDEEP
49152:uoF6EWDh5+lF0cIAULgEfHccPEq7Nz6mrqtA5:uoFPWX+30rAULgEk3q7NV
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\Jenkins\workspace\srf_develop\ShuRuFa\程序\Trunk\Bin\pdbmap\SmartCloud\SkinReg32.pdb
PathFileExistsW
InterlockedDecrement
InterlockedIncrement
TlsAlloc
FindResourceW
SizeofResource
LoadResource
LockResource
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
GetFileAttributesExW
GetCurrentDirectoryW
SetEnvironmentVariableA
FreeEnvironmentStringsW
SetFileTime
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
SetEndOfFile
WriteConsoleW
SetStdHandle
FlushFileBuffers
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
SetConsoleMode
ReadConsoleInputA
SetConsoleCtrlHandler
LocalFileTimeToFileTime
DosDateTimeToFileTime
TlsSetValue
CreateMutexW
GetEnvironmentStringsW
ReleaseMutex
IsBadReadPtr
LoadLibraryA
VirtualProtect
VirtualFree
VirtualAlloc
Sleep
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
RaiseException
GetLongPathNameW
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
DecodePointer
CreateThread
WideCharToMultiByte
MultiByteToWideChar
MoveFileExW
FreeLibrary
GetProcAddress
GetCurrentProcess
GetCurrentProcessId
GetDriveTypeW
FreeLibraryAndExitThread
ExitThread
GetACP
GetModuleHandleExW
ExitProcess
GetConsoleCP
ReadConsoleW
GetConsoleMode
SetFilePointerEx
SetUnhandledExceptionFilter
GetCurrentThreadId
SetErrorMode
CopyFileW
FindNextFileW
FindFirstFileW
DeleteFileW
GetFileAttributesW
SetFileAttributesW
RemoveDirectoryW
GetTempPathW
GetModuleHandleW
lstrcmpiW
GetTickCount
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindClose
ReadFile
WriteFile
GetFileSize
WaitForSingleObject
GetLastError
CloseHandle
GetExitCodeProcess
OpenProcess
LocalFree
LocalAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
VerSetConditionMask
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetVersionExW
QueryPerformanceFrequency
QueryPerformanceCounter
GetPrivateProfileStringW
GetEnvironmentVariableW
CreateFileW
CreateDirectoryW
WritePrivateProfileStringW
GetPrivateProfileIntW
CreateProcessW
GetModuleFileNameW
FindFirstFileExW
GetFullPathNameW
RtlUnwind
GetTempFileNameW
GlobalMemoryStatus
FlushConsoleInputBuffer
SystemTimeToFileTime
GetSystemTime
FormatMessageA
GetLocalTime
LoadLibraryW
EncodePointer
PeekNamedPipe
GetStdHandle
GetFileType
WaitForMultipleObjects
ExpandEnvironmentStringsA
VerifyVersionInfoA
GetSystemDirectoryA
GetModuleHandleA
SleepEx
InitializeCriticalSection
GetFileAttributesExA
OutputDebugStringW
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
WaitForSingleObjectEx
ResetEvent
SetEvent
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
GetSystemTimeAsFileTime
TlsFree
CreateEventW
SetLastError
TlsGetValue
SetWindowPos
LoadCursorW
IsIconic
CharNextW
MessageBoxW
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
DefWindowProcW
EnumDisplayMonitors
GetMonitorInfoW
SystemParametersInfoW
FindWindowW
GetDesktopWindow
SetWindowLongW
IsWindow
BringWindowToTop
MoveWindow
MessageBoxA
GetUserObjectInformationW
GetProcessWindowStation
GetWindowLongW
GetWindowRect
CreateDIBSection
SelectObject
DeleteObject
DeleteDC
CreateCompatibleDC
CryptEnumProvidersA
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyW
CryptSignHashA
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextA
ReportEventA
RegisterEventSourceA
DeregisterEventSource
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
OpenProcessToken
GetTokenInformation
LookupAccountSidW
RegCreateKeyExA
RegCreateKeyExW
ShellExecuteW
SHGetSpecialFolderPathW
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
OleInitialize
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoInitialize
CLSIDFromString
OleUninitialize
VarUI4FromStr
?CreateControl@WindowImplBase@DuiLib@@UAEPAVCControlUI@2@PB_W@Z
?GetTextStyle@CLabelUI@DuiLib@@QBEIXZ
?SetTextStyle@CLabelUI@DuiLib@@QAEXI@Z
??1WindowImplBase@DuiLib@@UAE@XZ
??0WindowImplBase@DuiLib@@QAE@XZ
?SetIcon@CWindowWnd@DuiLib@@QAEXI@Z
?Close@CWindowWnd@DuiLib@@QAEXI@Z
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PB_W@Z
??8CDuiString@DuiLib@@QBE_NPB_W@Z
??1CDuiString@DuiLib@@QAE@XZ
??0CDuiString@DuiLib@@QAE@PB_WH@Z
?Notify@WindowImplBase@DuiLib@@UAEXAAUtagTNotifyUI@2@@Z
?OnChar@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnClose@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnCreate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnDestroy@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnFinalMessage@WindowImplBase@DuiLib@@UAEXPAUHWND__@@@Z
?OnGetMinMaxInfo@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKeyDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKillFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseHover@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?MessageHandler@WindowImplBase@DuiLib@@UAEJIIJAA_N@Z
?OnMouseWheel@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcActivate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcCalcSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcHitTest@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcPaint@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSetFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSysCommand@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?ResponseDefaultKeyEvent@WindowImplBase@DuiLib@@MAEJI@Z
?messageMap@CNotifyPump@DuiLib@@1UDUI_MSGMAP@2@B
??0CDuiString@DuiLib@@QAE@XZ
??BCDuiString@DuiLib@@QBEPB_WXZ
?OnLButtonUp@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
??4CDuiString@DuiLib@@QAEABV01@PB_W@Z
?GetCheck@CCheckBoxUI@DuiLib@@QBE_NXZ
?HandleCustomMessage@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?SetInstance@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z
?Create@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@PB_WKKHHHHPAUHMENU__@@@Z
?ShowModal@CWindowWnd@DuiLib@@QAEIXZ
?CenterWindow@CWindowWnd@DuiLib@@QAEXXZ
?GetStyle@WindowImplBase@DuiLib@@UAEJXZ
?GetSuperClassName@CWindowWnd@DuiLib@@MBEPB_WXZ
?GetZIPFileName@WindowImplBase@DuiLib@@UBE?AVCDuiString@2@XZ
?OnMouseMove@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?HandleMessage@WindowImplBase@DuiLib@@UAEJIIJ@Z
?GetClassStyle@WindowImplBase@DuiLib@@UBEIXZ
GdipDrawImageRectRectI
GdipDeleteGraphics
GdipCreateFromHDC
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
bind
gethostname
ioctlsocket
sendto
recvfrom
listen
accept
getservbyname
gethostbyname
htonl
shutdown
freeaddrinfo
getaddrinfo
WSACleanup
WSAStartup
WSAIoctl
setsockopt
ntohs
htons
getsockopt
getsockname
WSAGetLastError
socket
__WSAFDIsSet
select
WSASetLastError
recv
send
getpeername
closesocket
connect
URLDownloadToFileW
ord143
ord46
ord211
ord60
ord41
ord50
ord301
ord200
ord30
ord79
ord35
ord33
ord32
ord27
ord26
ord22
ord217
CertFreeCertificateContext
CertDuplicateCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertGetCertificateContextProperty
CertOpenStore
InternetOpenW
InternetSetOptionW
InternetReadFile
InternetOpenUrlW
InternetCloseHandle
HttpQueryInfoW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ