Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
1b45059779f239c4e9d99cf27e5515d7_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1b45059779f239c4e9d99cf27e5515d7_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
1b45059779f239c4e9d99cf27e5515d7_JaffaCakes118
Size
121KB
MD5
1b45059779f239c4e9d99cf27e5515d7
SHA1
221111745eee5d31dea463cd07c1ea26551fcfb5
SHA256
9c76b6a50f88848dbca1529c90dd15ca470cc74a0c4f570feca73ff1e086a6ce
SHA512
8e95e2e3ab877b3785e8e63aa5b2d1233ff431acc6e47b0fa27ad4efb5353ab704e15c901346659b22adde7320bad89b22c3977ee359525b997b36912d16a551
SSDEEP
1536:T1IF3ONWJyyhmVgB7GDMeGA+1nVBDMJcOgUGvtbq6a7C2:T1IFeNWbhwgB7sMeGA+/hMJcOgUG1bYz
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
F:\Hummer\QQ1.76_QD2.6\Basic_Hummer3_VOB\Hummer2010\Output\Bin\CPHelper.pdb
?InitPlatformModeConfig@Boot@Util@@YAHXZ
?InitPlatformCoreConfig@Boot@Util@@YAHXZ
?InitPlatformFileSystem@Boot@Util@@YAHXZ
?InitPlatformI18NConfig@Boot@Util@@YAHXZ
??1CTXBSTR@@QAE@XZ
?InitPlatform@CoreCenter@Util@@YAHPA_W@Z
??BCTXBSTR@@QBEPA_WXZ
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
??0CTXStringW@@QAE@PB_WH@Z
??0CTXStringW@@QAE@H@Z
?AllocSysString@CTXStringW@@QBEPA_WXZ
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
??0CTXBSTR@@QAE@PB_W@Z
?IsEmpty@CTXStringW@@QBE_NXZ
??4CTXStringW@@QAEAAV0@PA_W@Z
??0CTXStringW@@QAE@PB_W@Z
?Format@CTXStringW@@QAAXPB_WZZ
?GetLength@CTXStringW@@QBEHXZ
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
?Left@CTXStringW@@QBE?AV1@H@Z
?InitNetwork@Network@Util@@YAHXZ
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?IsFileExist@FS@@YAHPB_W@Z
?GetString@CTXStringW@@QBEPB_WXZ
??ICTXBSTR@@QAEPAPA_WXZ
??0CTXBSTR@@QAE@XZ
?OnUninitCom@Misc@Util@@YAXXZ
?OnExitCoreCenter@Misc@Util@@YAXXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?GetPlatformCore@CoreCenter@Util@@YAHPAPAUITXPlatformCore@@@Z
?GetBuffer@CTXStringA@@QAEPADH@Z
?Append@CTXStringA@@QAEXABV1@@Z
?GetLength@CTXStringA@@QBEHXZ
?AppendChar@CTXStringA@@QAEXD@Z
??1CTXStringA@@QAE@XZ
??4CTXStringA@@QAEAAV0@ABV0@@Z
??0CTXStringA@@QAE@UtagGBK@@PB_WH@Z
??0CTXStringA@@QAE@XZ
??H@YA?AVCTXStringW@@ABV0@0@Z
?IsEmpty@CTXBSTR@@QAEHXZ
??H@YA?AVCTXStringW@@PB_WABV0@@Z
?RecordTransBegin@Perf@Util@@YA_JPB_WHH00@Z
?RecordTransEnd@Perf@Util@@YAJ_JPB_WHH11H@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
?Mid@CTXStringW@@QBE?AV1@H@Z
?Find@CTXStringW@@QBEHPB_WH@Z
?InitPlatformGFConfig@Boot@Util@@YAHXZ
??0CTXStringW@@QAE@XZ
??4CTXStringW@@QAEAAV0@PB_W@Z
??0CTXStringW@@QAE@ABV0@@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??BCTXStringW@@QBEPB_WXZ
??1CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@PA_W@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
LoadLibraryW
GetModuleHandleW
GetProcAddress
SetLastError
lstrlenW
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
RaiseException
WideCharToMultiByte
CloseHandle
CreateProcessW
LocalFree
LocalAlloc
lstrlenA
GetLastError
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
lstrcmpiA
DeleteCriticalSection
GlobalAlloc
GlobalLock
GlobalUnlock
GetModuleFileNameW
IsDebuggerPresent
QueryPerformanceCounter
InitializeCriticalSection
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
SetClipboardData
OpenClipboard
EnableWindow
CloseClipboard
UnregisterClassA
EmptyClipboard
SendMessageW
GetParent
GetClientRect
LoadImageW
LoadBitmapW
RegisterClipboardFormatW
IsWindow
DeleteObject
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
ShellExecuteW
ProgIDFromCLSID
CoTaskMemFree
CoCreateInstance
SafeArrayLock
VariantChangeType
SysFreeString
VariantClear
LoadTypeLi
LoadRegTypeLi
SysStringLen
SafeArrayCreate
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayCreateVector
SafeArrayUnlock
VariantInit
ord581
ord1200
ord1170
ord1168
ord1192
ord1115
ord1162
ord371
ord1093
ord764
ord3627
ord3596
ord3590
ord266
ord265
ord4480
ord1176
ord1178
ord662
ord1182
ord425
ord3229
ord5669
ord762
ord1079
ord6751
ord1194
ord807
ord2243
ord314
ord2241
ord2244
ord2011
ord496
ord3249
ord1172
ord5316
ord6282
ord760
ord1139
ord4255
ord3943
ord2638
ord3703
ord3713
ord3712
ord2527
ord2534
ord2708
ord4301
ord2829
ord2725
ord2531
ord5196
ord1590
ord1646
ord1647
ord1955
ord5171
ord1353
ord4961
ord3339
ord6275
ord3796
ord6273
ord1513
ord2163
ord2169
ord2399
ord2381
ord2379
ord2397
ord2409
ord2386
ord2402
ord2407
ord2390
ord2392
ord2394
ord2388
ord2404
ord2384
ord931
ord927
ord929
ord925
ord920
ord5229
ord5231
ord5956
ord1199
ord4276
ord4716
ord3397
ord5210
ord4179
ord6271
ord5067
ord1899
ord5148
ord4238
ord1393
ord3940
ord1608
ord1611
ord5911
ord6721
ord5327
ord6293
ord2340
ord1571
ord1156
ord1123
ord2132
ord572
ord493
ord3678
ord476
ord701
ord5712
ord3390
ord6749
ord3204
ord577
ord1118
ord870
ord1197
ord293
ord1925
ord2362
ord3155
ord1271
ord1058
ord1908
ord745
ord651
ord557
ord416
ord1555
ord605
ord354
ord3176
ord4256
ord2640
ord2856
ord5199
ord1392
ord5908
ord6720
ord1542
ord1661
ord1662
ord4884
ord4729
ord4206
ord5178
ord4347
ord1894
ord1386
ord4123
ord4574
ord3635
ord3471
ord410
ord4267
ord2711
ord1553
ord1351
ord3338
ord5202
ord5147
ord1610
ord5910
ord6763
ord3968
ord4854
ord4857
ord4373
ord4378
ord4375
ord4393
ord4395
ord4380
ord4770
ord4581
ord4172
ord4165
ord4974
ord4383
ord4775
ord4198
ord4784
ord4437
ord4438
ord3734
ord4908
ord4513
ord4514
ord4914
ord4553
ord5043
ord4433
ord4362
ord4495
ord4840
ord4964
ord4523
ord4474
ord4965
ord4510
ord4667
ord4942
ord4788
ord4281
ord4370
ord4371
ord4957
ord4790
ord4704
ord4358
ord4799
ord5047
ord4958
ord4643
ord4940
ord4501
ord4955
ord4668
ord4125
ord1293
ord1999
ord4126
ord648
ord4337
ord5162
ord2366
ord2413
ord2414
ord2415
ord2412
ord2411
ord3644
ord4194
ord3015
ord1161
ord5425
ord6184
ord924
ord3054
ord3677
ord566
ord3327
ord4475
ord2832
ord5562
ord5209
ord5226
ord4562
ord3942
ord5222
ord5220
ord2925
ord1911
ord3826
ord5378
ord6215
ord5096
ord1007
ord3800
ord5579
ord2009
ord2054
ord4320
ord6274
ord3795
ord6272
ord4008
ord4032
ord757
ord5379
ord1144
ord2239
ord1044
ord1043
ord6248
ord1191
ord1114
ord1087
ord1033
ord315
ord765
ord2311
ord1591
??0exception@std@@QAE@ABV01@@Z
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_except_handler4_common
_malloc_crt
_CxxThrowException
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
__CxxFrameHandler3
memset
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
_encoded_null
??0exception@std@@QAE@ABQBD@Z
_invalid_parameter_noinfo
_recalloc
memcpy
free
memcpy_s
PathFileExistsW
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
ord32
ord31
ord58
ord30
GetUrlCacheEntryInfoW
InternetCrackUrlA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ