Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
3a81a9979ccf1c2c9224845d5d502daf_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3a81a9979ccf1c2c9224845d5d502daf_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3a81a9979ccf1c2c9224845d5d502daf_JaffaCakes118
Size
1.1MB
MD5
3a81a9979ccf1c2c9224845d5d502daf
SHA1
44f916476fd7e349d2c440ff31366b02e490cafe
SHA256
f5f653b362d80ecd42701ba41c09dfd7ed39fc75fba1099401cd63a7107579a6
SHA512
b55864b724e1531462a197c42caab14712322ddc48877aab02237e25f34e8a3478112c4959bd444ee5787461556585e83b14eab771d937b4c09bacf6869c987a
SSDEEP
12288:ZcgDsSSTaSErIMF7sdTCGf+6aUj4Kv0dOjd:ZcggSrbIMWdZ+/9Sd
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateFileW
GetSystemDirectoryW
Sleep
CopyFileW
InterlockedDecrement
InterlockedExchange
CreateEventW
ResetEvent
SetEvent
CreateFileA
GetFileSize
ReadFile
GetTickCount
DisableThreadLibraryCalls
DeleteFileW
IsBadReadPtr
MultiByteToWideChar
lstrcmpW
GetPrivateProfileIntA
GetPrivateProfileStringA
lstrlenA
WritePrivateProfileStringA
IsBadCodePtr
LoadLibraryA
WritePrivateProfileStringW
LoadLibraryExW
ReadProcessMemory
GetUserDefaultLangID
GlobalDeleteAtom
GlobalAddAtomW
IsBadStringPtrW
CreateDirectoryW
GlobalFree
LocalFree
FreeLibrary
GetCurrentProcess
OpenFileMappingW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetTempPathW
lstrcpynA
WriteFile
GetPrivateProfileIntW
DeleteCriticalSection
WaitForSingleObject
TerminateThread
InitializeCriticalSection
FindFirstFileW
lstrcmpiW
GetPrivateProfileStringW
FindNextFileW
FindClose
GetCurrentProcessId
CreateThread
CloseHandle
GetACP
WideCharToMultiByte
GetCurrentThreadId
lstrlenW
lstrcpynW
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
LoadLibraryW
OutputDebugStringA
GetVersion
GetFileAttributesW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetLastError
SetLastError
GetVersionExW
PostMessageW
CreatePopupMenu
CheckMenuRadioItem
SystemParametersInfoW
WindowFromPoint
GetMenuItemCount
DialogBoxParamW
GetScrollInfo
SetClassLongW
GetCapture
GetAsyncKeyState
LoadImageW
DrawIconEx
IsWindowEnabled
GetMenuStringW
ModifyMenuW
CreateDialogParamW
InflateRect
GetWindowThreadProcessId
TrackPopupMenuEx
RemoveMenu
SetWindowsHookExW
UnhookWindowsHookEx
CopyRect
CallNextHookEx
EndMenu
MessageBoxW
GetFocus
SetWindowRgn
GetWindowRgn
GetClassNameA
DispatchMessageW
TranslateMessage
PeekMessageW
EnableMenuItem
GetSystemMenu
EnableWindow
GetCaretPos
ScreenToClient
GetComboBoxInfo
RemovePropW
SetFocus
IsDlgButtonChecked
InsertMenuW
GetDlgCtrlID
LoadIconW
GetWindowTextLengthW
CheckRadioButton
CheckDlgButton
GetClassInfoExW
SetPropW
GetWindow
SetCursor
PtInRect
GetWindowTextW
FillRect
ReleaseCapture
SetCapture
GetClassLongW
GetPropW
GetSysColor
DestroyIcon
EndDialog
GetDlgItem
SetWindowTextW
LoadStringW
SendDlgItemMessageW
EnumChildWindows
GetClassNameW
GetParent
GetWindowRect
GetCursorPos
CallWindowProcW
LoadMenuW
GetSubMenu
TrackPopupMenu
SetTimer
IsRectEmpty
IsMenu
GetMenuItemInfoW
SetMenuItemInfoW
SetMenuInfo
GetMenuInfo
MapWindowPoints
DrawFocusRect
IsWindowUnicode
GetWindowLongA
RegisterClassW
GetWindowDC
DestroyMenu
FindWindowExW
CreateWindowExW
RegisterClassExW
LoadCursorW
DefWindowProcW
GetWindowLongW
GetDC
ReleaseDC
DestroyWindow
IsWindowVisible
BeginPaint
GetClientRect
GetSysColorBrush
FrameRect
SendMessageW
DrawTextW
EndPaint
ShowWindow
KillTimer
IsWindow
GetClassInfoW
SetWindowLongW
ClientToScreen
GetSystemMetrics
SetWindowPos
InvalidateRect
SetWindowLongA
SetPixel
FillRgn
CreateRoundRectRgn
CreatePolygonRgn
FrameRgn
StretchBlt
GetRgnBox
CreateRectRgn
CombineRgn
TextOutW
Polygon
MoveToEx
LineTo
CreateCompatibleDC
CreateCompatibleBitmap
CreatePen
Rectangle
BitBlt
DeleteDC
GetCurrentObject
GetTextExtentPoint32W
SetTextColor
CreateSolidBrush
GetObjectW
CreateFontIndirectW
DeleteObject
GetStockObject
SelectObject
CreateFontW
SetBkMode
ShellExecuteExW
SHGetFileInfoW
ExtractIconW
SHGetSpecialFolderPathW
CoTaskMemAlloc
OleUninitialize
CoCreateGuid
OleRun
OleInitialize
CoCreateInstance
CoUninitialize
CoInitialize
SysFreeString
SysAllocString
VariantClear
VariantInit
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector
SysStringByteLen
SysAllocStringByteLen
??8std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?find_first_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Mstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@DABV10@@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IABV12@II@Z
??Ostd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PAD0PBD1@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?resize@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
??1_Lockit@std@@QAE@XZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
_TrackMouseEvent
fgetc
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
_onexit
__dllonexit
_CxxThrowException
calloc
_iob
exit
fputc
_stricmp
_itoa
malloc
strcmp
_ultow
_wtoi
wcscmp
memcpy
wcsncpy
memcmp
strlen
_except_handler3
wcslen
__CxxFrameHandler
_EH_prolog
??2@YAPAXI@Z
_wcsicmp
atoi
memset
_purecall
abs
time
_ltow
_snprintf
_ftol
realloc
memmove
free
_snwprintf
_itow
_wtol
wcstok
strncpy
InternetCrackUrlW
InternetCloseHandle
InternetQueryDataAvailable
InternetReadFile
HttpAddRequestHeadersW
HttpSendRequestW
HttpOpenRequestW
InternetConnectW
DeleteUrlCacheEntryW
InternetSetCookieW
InternetOpenW
URLDownloadToFileW
AlphaBlend
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
PathRemoveBlanksW
PathStripToRootW
StrChrW
StrCmpNIW
SHSetValueW
StrStrIW
StrStrW
wnsprintfA
PathAddExtensionW
PathIsDirectoryW
PathFileExistsW
SHGetValueW
PathParseIconLocationW
PathAppendW
PathRemoveExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathRemoveBackslashW
wnsprintfW
StrChrA
ntohl
htons
OnButtonMessage
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ