Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
31aa6aabb3c2295ccf6f9dab2f52c772_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
31aa6aabb3c2295ccf6f9dab2f52c772_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
31aa6aabb3c2295ccf6f9dab2f52c772_JaffaCakes118
Size
441KB
MD5
31aa6aabb3c2295ccf6f9dab2f52c772
SHA1
dd3a809209c1c14b635eea7f3c93d558f6b15378
SHA256
44a2dde1efa247f3c67f7abd287d411b5d9bd6a0e4b9b454cc515e3ac571d663
SHA512
3eb808f62bbd00c05c0bbdb0015169b3ac89c40a246a606e5f51cd52ef689b99d7e06311b46f732623f99fda9dffcd94164e04a42825a0420933d6aeafa70e7d
SSDEEP
6144:2WjXA0UCB5uRAgcIKmQSWCqROhkCoLKWuAEiU7Y1GvrNCfCq2xOA4O8U2U:TDAxCT3FoqwhkvKvgU7YmHqzU2U
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
e:\temp\p2papp\Release\p2pcore.pdb
sendto
inet_addr
send
select
htons
setsockopt
bind
gethostbyname
gethostname
inet_ntoa
ioctlsocket
closesocket
WSAStartup
ntohl
ntohs
recv
socket
WSAGetLastError
WSACleanup
recvfrom
connect
__WSAFDIsSet
htonl
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
GetSystemTimeAsFileTime
UnhandledExceptionFilter
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetCurrentProcessId
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
lstrlenA
GetLastError
GetModuleHandleA
GetProcAddress
InterlockedExchange
GetModuleFileNameA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
WaitForSingleObject
CreateEventA
CloseHandle
SetEvent
ResetEvent
WritePrivateProfileStringA
GetPrivateProfileStringA
GetTickCount
GetCurrentThreadId
FreeLibrary
GetLocalTime
LoadLibraryA
Sleep
WaitForMultipleObjects
GlobalFree
CreateDirectoryA
GlobalAlloc
GetFileAttributesA
CreateFileMappingA
TryEnterCriticalSection
GetLastInputInfo
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyA
RegOpenKeyA
SHGetFolderPathA
CoLoadLibrary
CoFreeLibrary
CoUninitialize
CoCreateGuid
CoInitialize
?allocate@?$allocator@D@std@@QAEPADI@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?deallocate@?$allocator@D@std@@QAEXPADI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?clog@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?uncaught_exception@std@@YA_NXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
?setbase@std@@YA?AU?$_Smanip@H@1@H@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
_CxxThrowException
strchr
clock
memmove
realloc
memcpy_s
_localtime32
strstr
strncmp
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
memset
__CxxFrameHandler3
memcpy
_onexit
??3@YAXPAX@Z
__RTDynamicCast
??_V@YAXPAX@Z
_purecall
??2@YAPAXI@Z
??1exception@std@@UAE@XZ
srand
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
_time32
rand
memmove_s
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
_invalid_parameter_noinfo
strncat
_snprintf
free
strncpy
malloc
_beginthreadex
_stat32
_mbsnbcpy_s
sprintf_s
_snprintf_s
_vsnprintf_s
_mbsrchr
_beginthread
_atoi64
strtol
isdigit
??0IP2PCore@@QAE@ABV0@@Z
??0IP2PCore@@QAE@XZ
??1IP2PCore@@UAE@XZ
??4IP2PCore@@QAEAAV0@ABV0@@Z
??_7IP2PCore@@6B@
CreateP2PCore
DeleteCore
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ