Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
27c2eb31a763026511b71d5f174e216f_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
27c2eb31a763026511b71d5f174e216f_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
27c2eb31a763026511b71d5f174e216f_JaffaCakes118
Size
353KB
MD5
27c2eb31a763026511b71d5f174e216f
SHA1
919fb4f27c5b6b219d44f0cb6d4d22be702c8fad
SHA256
da05dffb2494a677a6fb52addf1d1c5defadd14c145efb8448f60ecb34358749
SHA512
d9f13f7732db0b293ae083ced341e95224d1209e90a5fab3ad9a05f1847322515adbdf395429476f6438b0d6dafea472ced52361af8ad5d836439d3e1f52ed1a
SSDEEP
6144:9HjcGKh9ro2pNuwjbt+IwweqFWPTckPSOA2KJYw:9DcGKh9rouowjbt+twC7cyw
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
I:\Hummer\QQ2011UpdateProj_2\Basic_Hummer3_VOB\Hummer2010\Output\Plugin\Com.Tencent.Today\Bin\Today.pdb
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
??0CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@PB_W@Z
?GetBSTR@CTXStringW@@QBEPA_WXZ
?GetTXDataStr@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXStringW@@@Z
?ConvertTXDataStringBundle@Convert@Util@@YAHPAUITXData@@@Z
?CodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?DecodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
??0CCmdCodecBase@@QAE@XZ
?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z
?AddRef@CCmdCodecBase@@MAGKXZ
?Release@CCmdCodecBase@@MAGKXZ
?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z
?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z
??1CCmdCodecBase@@UAE@XZ
??0CTXStringW@@QAE@ABV0@@Z
??1CFmtString@@QAE@XZ
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
?IPToString@Network@Util@@YA?AVCTXStringW@@K@Z
?GetLCID@NLS@@YAKXZ
?PropertyDWord@CFmtString@@QAEHPB_WK0@Z
?PropertyStr@CFmtString@@QAEHPB_W0@Z
??0CFmtString@@QAE@XZ
??4CTXStringW@@QAEAAV0@PB_W@Z
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?Right@CTXStringW@@QBE?AV1@H@Z
?GetLength@CTXStringW@@QBEHXZ
?Find@CTXStringW@@QBEHPB_WH@Z
?Find@CTXStringW@@QBEH_WH@Z
?GuidToString@Com@Util@@YAJABU_GUID@@PAPA_WH@Z
?Left@CTXStringW@@QBE?AV1@H@Z
?IsEmpty@CTXBSTR@@QAEHXZ
??M@YA_NABVCTXStringW@@0@Z
??9CTXBSTR@@QBE_NPB_W@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
?Download@CTXHttpDownload@@QAEHPB_WPAU_SYSTEMTIME@@0H@Z
?ClearRequestHeader@CTXHttpDownload@@QAEXXZ
?IsRunning@CTXHttpDownload@@QAEHXZ
?SetUIInterface@CTXHttpDownload@@QAEXPAVCTXHttpDownloadSink@@@Z
??0CTXHttpDownload@@QAE@XZ
?Run@CTXHttpDownload@@EAEIXZ
??1CTXHttpDownload@@UAE@XZ
?DeleteFileW@FS@@YAHPB_W@Z
?CopyFileW@FS@@YAHPB_W0H@Z
?CombinePath@FS@Util@@YA?AVCTXStringW@@ABV3@0@Z
?EncodeHash@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@@Z
?ByteLength@CTXBSTR@@QBEIXZ
??1CTXHttpDownloadSink@@UAE@XZ
??0CTXHttpDownloadSink@@IAE@XZ
?CancelDownload@CTXHttpDownload@@QAEXXZ
??8@YA_NABVCTXStringW@@0@Z
?IsEmpty@CTXStringW@@QBE_NXZ
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@@Z
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnProgress@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnError@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@K@Z
??8@YA_NABVCTXStringW@@PB_W@Z
?LoadXmlByName@FS@Util@@YAHPB_WPAPAUIXMLDOMDocument@@@Z
?GetDownloadedFilePath@CTXHttpDownload@@QAEHAAVCTXStringW@@@Z
?GuidFromString@Com@Util@@YAJPA_WAAU_GUID@@@Z
??0CTXBSTR@@QAE@ABV0@@Z
??8@YA_NPB_WABVCTXStringW@@@Z
?Append@CTXBSTR@@QAEJABV1@@Z
?Append@CTXBSTR@@QAEJPB_W@Z
?Replace@CTXStringW@@QAEHPB_W0@Z
?DecodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?GetDecodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
?EnableUnicodeString@CCmdCodecBase@@IAEXH@Z
?GetCodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
?GBKToUnicode@Convert@Util@@YA_NAAVCTXStringW@@PBDH@Z
??ACTXStringA@@QBEDH@Z
?GetLength@CTXStringA@@QBEHXZ
??1CTXStringA@@QAE@XZ
??0CTXStringA@@QAE@ABV0@@Z
??0CTXStringA@@QAE@UtagGBK@@PB_WH@Z
??0CTXStringA@@QAE@UtagUTF8@@PB_WH@Z
ord26
?Random@Sys@Util@@YAHXZ
?Mid@CTXStringW@@QBE?AV1@H@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
??9@YA_NABVCTXStringW@@0@Z
??0CTXStringW@@QAE@_WH@Z
??ACTXStringW@@QBE_WH@Z
?Mid@CTXStringW@@QBE?AV1@HH@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?DownloadToBuffer@CTXHttpDownload@@QAEHPB_WPAU_SYSTEMTIME@@@Z
?SetCustomData@CTXHttpDownload@@QAEHPAUIUnknown@@@Z
??4CTXBSTR@@QAEAAV0@ABV0@@Z
??0CTXStringW@@QAE@UtagGBK@@PBDH@Z
??BCTXStringA@@QBEPBDXZ
??0CTXStringA@@QAE@PBDH@Z
?GetDownloadedBuffer@CTXHttpDownload@@QAEHPAPAEPAK@Z
??9CTXBSTR@@QBE_NABV0@@Z
?GetCustomData@CTXHttpDownload@@QAEHPAPAUIUnknown@@@Z
?PropertyLong@CFmtString@@QAEHPB_WJ0@Z
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
?DecodeBuffer@CCmdCodecBase@@IAEXPB_WI@Z
?IsFileExist@FS@@YAHPB_W@Z
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z
?Encode16@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@@Z
?GetFileHash@FS@Util@@YAHPB_WAAVCTXBuffer@@AAK@Z
?MoveDownloadFile@CTXHttpDownload@@QAEHPB_WH@Z
?AllocSysString@CTXStringW@@QBEPA_WXZ
??4CTXStringW@@QAEAAV0@PA_W@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
??0CTXStringW@@QAE@PA_W@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
?IsDirectoryExist@FS@@YAHPB_W@Z
?DeleteDirectory@FS@@YAHPB_W@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??BCTXStringW@@QBEPB_WXZ
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
??0CTXBSTR@@QAE@XZ
??ICTXBSTR@@QAEPAPA_WXZ
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
??1CTXStringW@@QAE@XZ
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??BCTXBSTR@@QBEPA_WXZ
??1CTXBSTR@@QAE@XZ
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??0CTXBSTR@@QAE@PB_W@Z
?Empty@CTXBSTR@@QAEXXZ
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?GetRegulatedTime@Time@Util@@YA_NAA_J@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?RawInitGFElementByXtml@GF@Util@@YAJPA_WPAUIGFElement@@10H@Z
?RawCreateGFElementByMetadata@GF@Util@@YAJPAUITXData@@PAPAUIGFElement@@PAU4@PA_W@Z
?GetAnchorResult@CGFAnchor@@QAE?AVCRect@@PAVVCalcSizeSupporter@@PAUtagSIZE@@@Z
?AddAnchor@CGFAnchor@@QAEXEEVCRect@@VCPoint@@@Z
??0CGFAnchor@@QAE@XZ
?SetDataReportBit@DataReport@Util@@YAJKPB_WE@Z
?CreateMsgPack@Msg@Util@@YAHPAPAUITXMsgPack@@@Z
?IsServerControlBitOn@Misc@Util@@YAHK@Z
?GetSelfUin@Contact@Util@@YAKXZ
?AddReport@URL@Util@@YA?AVCTXStringW@@ABV3@0@Z
?GetNickname@Contact@Util@@YA?AVCTXStringW@@K@Z
?GetMinorVer@Version@@YAEXZ
?GetMajorVer@Version@@YAEXZ
?Get32ByteValueAddedSign@Misc@Util@@YA?AVCTXStringW@@XZ
?GetSignFmt@URL@Util@@YAXAAVCFmtString@@@Z
?SetDataDWord@DataReport@Util@@YAJKPB_WK@Z
?GetPublicName@Contact@Util@@YA?AVCTXStringW@@K@Z
?CodecTLV@CTXDataReportCodecBase@@UAGJKPAUITXData@@PAPAUITXBuffer@@@Z
??0CTXDataReportCodecBase@@QAE@XZ
??1CTXDataReportCodecBase@@UAE@XZ
?CodeWord@CTXDataReportCodecBase@@IAEXEPB_W@Z
?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@W4URLMODIFYLEVEL@12@0@Z
?GetDataDWord@DataReport@Util@@YAJKPB_WAAK@Z
?IsAppLocked@Misc@Util@@YAHXZ
?MessageBoxW@Misc@Util@@YAHPAUIGFFrame@@PAPAUIAFMessageBoxEx@@VCTXStringW@@2H@Z
?UrlEscapeW@URL@Util@@YA?AVCTXStringW@@ABV3@@Z
InterlockedExchange
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetLastError
lstrlenW
lstrcmpiW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetModuleHandleW
GetModuleFileNameW
InterlockedIncrement
InterlockedDecrement
SetThreadLocale
GetThreadLocale
MapViewOfFile
CreateFileMappingW
OpenFileMappingW
GetSystemTimeAsFileTime
GetCurrentProcessId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
GetProcessHeap
GetACP
GetLocaleInfoA
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
UnregisterClassA
CharNextW
MessageBoxW
RegCloseKey
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyExW
SHGetFileInfoW
CoTaskMemFree
StringFromCLSID
CoCreateInstance
CoCreateGuid
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
VariantInit
SysStringLen
SysFreeString
ord61
ord23
ord64
ord22
ord58
ord32
ord30
ord31
ord15
ord18
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_except_handler4_common
??3@YAXPAX@Z
memcpy_s
malloc
free
_CxxThrowException
wcscpy_s
wcsncpy_s
memset
_invalid_parameter_noinfo
memmove_s
_time64
_localtime64_s
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
__CxxFrameHandler3
??_V@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
_purecall
_recalloc
wcsncmp
_wcsnicmp
wcstol
iswdigit
_wcslwr_s
calloc
memcpy
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ