Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
395f3c267a33d473f8df7fac26f38cec_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
395f3c267a33d473f8df7fac26f38cec_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
395f3c267a33d473f8df7fac26f38cec_JaffaCakes118
Size
64KB
MD5
395f3c267a33d473f8df7fac26f38cec
SHA1
131928ece9b231eb9bbeae39bf9a988c5a86929a
SHA256
3fa231d3887c583fcc619ff43008ae2b6f9378fbc0bf6e516f3fcf2bb20d154b
SHA512
233c1a92b3a24d270d0dd9a8efcafde9ca07b8108f216eeb4ef6cac8bf893ccf6c72eef53ebc362a61af2802e707d98571d957a9863a77431e878cf29a747ec5
SSDEEP
768:gDxP7RMUAFM45QOBH6UL0uPvd79WOtesIr6/Q7odv9:s1635FH6k0uPvdQO8sI+IMdv9
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PathFindExtensionA
PathAppendA
PathFileExistsA
PathFindFileNameA
PathIsDirectoryA
PathRemoveExtensionA
SHGetValueA
PR_FindSymbolAndLibrary
PR_SetEnv
PR_Free
PR_LoadLibraryWithFlags
PR_FindSymbol
PR_UnloadLibrary
PR_smprintf
PR_smprintf_free
PR_GetEnv
PR_AtomicIncrement
PR_AtomicDecrement
PR_GetLibraryFilePathname
strlen
malloc
_vsnprintf
realloc
??0exception@@QAE@ABV0@@Z
strcat
free
__CxxFrameHandler
??2@YAPAXI@Z
_CxxThrowException
fclose
fread
_stat
rewind
ftell
fseek
fopen
fflush
fputc
_stricmp
strtok
strcmp
memcpy
strncat
time
atoi
localtime
_purecall
_EH_prolog
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
fgets
strncmp
_fullpath
strcpy
_mbsrchr
??3@YAXPAX@Z
memset
strncpy
sprintf
_fstat
_fileno
_adjust_fdiv
GetLastError
GetComputerNameA
LocalAlloc
CreateDirectoryA
GetEnvironmentVariableA
SetCurrentDirectoryA
GetModuleFileNameA
GetFileAttributesA
DeleteFileA
OutputDebugStringA
FormatMessageA
LocalFree
GetSystemTime
SetEnvironmentVariableA
GetTimeZoneInformation
SendMessageTimeoutA
FindWindowExA
EnumWindows
RegisterWindowMessageA
SetSecurityDescriptorDacl
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
InitializeSecurityDescriptor
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPBDH@Z
?is_open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QBE_NXZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?length@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAGI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0out_of_range@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1out_of_range@std@@UAE@XZ
??0out_of_range@std@@QAE@ABV01@@Z
??0logic_error@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
ord939
ord535
ord800
ord3181
ord1980
ord2818
ord858
ord540
ord269
ord826
ord600
ord1578
ord6467
ord1255
ord356
ord665
ord353
ord537
ord1187
ord1253
ord1570
ord1197
ord1243
ord342
ord1182
ord1577
ord1168
ord1575
ord1176
ord1116
ord3178
ord2781
ord668
ord2770
SHGetSpecialFolderPathA
NSGetModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ