Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
260edb1f869e5d32d71f59a228b47b12_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
260edb1f869e5d32d71f59a228b47b12_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
260edb1f869e5d32d71f59a228b47b12_JaffaCakes118
Size
512KB
MD5
260edb1f869e5d32d71f59a228b47b12
SHA1
ed06d2f35a01f2ff830b806694f1471812af3e4b
SHA256
93ac35b9428946af6cfc990b444fd4bedd3ddd684950a18b99e702a1aeaf3ebf
SHA512
2666219624ac1a6a0210169d99235c1a974fd1d9607328f3f2571e47b0303d79e7e0b23317f3943f7683daac8eca0c952b4606617a40bc005365dba3a6e9ecb2
SSDEEP
6144:JsskivR5/xOA2zyZupAC569sjoYnZFmQ8B+sw/s0HkxRXT2LErpWA0VZQNJinzY+:qYvR5/cPSC8/4zQo/uDtrpWA2gMq9Y
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NS_CStringContainerFinish
NS_StringContainerFinish
NS_CStringContainerInit
NS_Free
NS_StringGetData
NS_CStringGetData
NS_Alloc
NS_GetServiceManager
NS_StringContainerInit
NS_GetComponentManager
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
_wfopen_s
free
_vsnwprintf_s
malloc
isalnum
wcsncmp
wcstok_s
wcscpy_s
strcpy_s
??_V@YAXPAX@Z
_wcsnicmp
wcstod
wcstoul
wcsnlen
fwprintf_s
_purecall
memmove_s
wcsncpy_s
_snwprintf_s
rand_s
??0exception@std@@QAE@XZ
_stricmp
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
??0exception@std@@QAE@ABQBD@Z
towlower
??2@YAPAXI@Z
??3@YAXPAX@Z
fclose
calloc
strcpy
strlen
memset
memcpy
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_amsg_exit
__CppXcptFilter
_wcsicmp
_adjust_fdiv
_CxxThrowException
_unlock
__CxxFrameHandler3
EnumChildWindows
IsWindowVisible
GetPropW
EnumWindows
CoUninitialize
CoCreateInstance
CoInitialize
VariantInit
SysAllocString
SysFreeString
InternetCrackUrlW
PathRemoveFileSpecW
UrlUnescapeW
URLDownloadToCacheFileW
URLDownloadToFileW
GetAdaptersAddresses
UuidToStringW
RpcStringFreeW
UuidCreate
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
OpenProcessToken
GetTokenInformation
ConvertSidToStringSidW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorSacl
SetNamedSecurityInfoW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
RegQueryValueExW
LoadResource
FindResourceW
SizeofResource
DisableThreadLibraryCalls
GetModuleFileNameW
CreateWaitableTimerW
GetLastError
GetSystemTimeAsFileTime
SetWaitableTimer
CreateThread
CloseHandle
UnmapViewOfFile
CreateEventW
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
HeapFree
GetProcessHeap
CreateMutexW
LockResource
GetTickCount
LoadLibraryW
GetProcAddress
FreeLibrary
DeleteFileW
FindFirstFileW
CreateFileW
GetFileTime
FindNextFileW
FindClose
GetCurrentProcess
Sleep
OutputDebugStringW
LocalFree
GetTempPathW
WaitForMultipleObjects
OpenFileMappingW
MapViewOfFile
SetEvent
WaitForSingleObject
ReleaseMutex
MultiByteToWideChar
GetCurrentThreadId
InterlockedDecrement
CreateDirectoryW
GetTempFileNameW
WideCharToMultiByte
GetVersionExW
SetLastError
InterlockedExchange
InterlockedCompareExchange
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
OpenEventW
PR_AtomicIncrement
PR_AtomicDecrement
NSGetModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ