Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
3a8fd4eba3d8f70ef914cd2dc90cea9e_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3a8fd4eba3d8f70ef914cd2dc90cea9e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3a8fd4eba3d8f70ef914cd2dc90cea9e_JaffaCakes118
Size
337KB
MD5
3a8fd4eba3d8f70ef914cd2dc90cea9e
SHA1
70a8a416044dbadc03459fb225ec024ec1cadd46
SHA256
40ffdd0a1902f5274a6612925f23c5121943d7b88a238179e90adf19db43b347
SHA512
61e47a0d0f9061cf80ecf5a73857dbaa77ff0702729fc15adce3667e1437b258dc3c0d5f0c5b3db4fad8b77e5eabb7bf3349862c6eb0d5c7730ce8da481aedc9
SSDEEP
6144:I+vBqyg4Abq6IoMS0nx9thcl7bvZ5yeOAvc4aS8S9g:5Jdg4Abq6Ioj0nCV4S9g
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
d:\view\Hummer1.71cht_Proj\Basic_Hummer3_VOB\Hummer2010\Output\Plugin\Com.Tencent.RemoteHelp\Bin\RemoteHelp.pdb
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
??0CTXStringW@@QAE@PB_W@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
?IsEmpty@CTXBSTR@@QAEHXZ
??H@YA?AVCTXStringW@@ABV0@0@Z
ord34
??8CTXBSTR@@QBE_NABV0@@Z
??8CTXBSTR@@QBE_NPB_W@Z
??0CTXStringW@@QAE@ABV0@@Z
??1CFmtString@@QAE@XZ
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
?PropertyStr@CFmtString@@QAEHPB_W0@Z
??0CFmtString@@QAE@XZ
??8CTXBSTR@@QBE_NPA_W@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
??0CTXBSTR@@QAE@XZ
ord26
?GetConfigFieldData@ModuleConfig@@YAJPB_W0PAPAUITXDataRead@@@Z
?IsEmpty@CTXStringW@@QBE_NXZ
??YCTXStringW@@QAEAAV0@ABV0@@Z
??YCTXBSTR@@QAEAAV0@PB_W@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z
?CodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
??1CTXBSTR@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
?DecodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
??ICTXBSTR@@QAEPAPA_WXZ
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?Format@CTXStringW@@QAAXPB_WZZ
?Utf8FromWS@Convert@Util@@YA?AVCTXStringA@@PB_WH@Z
??BCTXStringA@@QBEPBDXZ
??1CTXStringA@@QAE@XZ
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
??0CTXStringW@@QAE@PA_W@Z
?GetParentFolder@FS@Util@@YA?AVCTXStringW@@ABV3@@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??BCTXStringW@@QBEPB_WXZ
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
?GetTXDataStr@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXStringW@@@Z
?GetBSTR@CTXStringW@@QBEPA_WXZ
??1CTXStringW@@QAE@XZ
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??0CTXStringW@@QAE@XZ
??1CCmdCodecBase@@UAE@XZ
?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z
?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z
?Release@CCmdCodecBase@@MAGKXZ
?AddRef@CCmdCodecBase@@MAGKXZ
?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z
??0CCmdCodecBase@@QAE@XZ
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
?ConvertTXDataStringBundle@Convert@Util@@YAHPAUITXData@@@Z
?GetString@CTXStringW@@QBEPB_WXZ
??0CTXBSTR@@QAE@PB_W@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
?RawInitGFElementByXtml@GF@Util@@YAJPA_WPAUIGFElement@@10H@Z
?FramePoint2WindowPoint@GF@Util@@YAXPAUIGFFrame@@AAUtagPOINT@@@Z
?IsStranger@Contact@Util@@YAHK@Z
?GetCombineName@Contact@Util@@YA?AVCTXStringW@@K@Z
?IsOnline@Contact@Util@@YAHK@Z
?GetDataDWord@DataReport@Util@@YAJKPB_WAAK@Z
??1CTXDataReportCodecBase@@UAE@XZ
?AddToRecentCommList@Misc@Util@@YAXKE@Z
?IncHelper@DataReport@Util@@YAJKPB_WK@Z
?GetPublicName@Contact@Util@@YA?AVCTXStringW@@K@Z
??0CTXDataReportCodecBase@@QAE@XZ
?CodecTLV@CTXDataReportCodecBase@@UAGJKPAUITXData@@PAPAUITXBuffer@@@Z
?GetPublicHeadFile@Contact@Util@@YA?AVCTXStringW@@K@Z
?IsBuddy@Contact@Util@@YAHK@Z
?CodeWord@CTXDataReportCodecBase@@IAEXEPB_W@Z
?RegisterCodec@DataReport@Util@@YAJKKPAUITXDataReportCodecExt@@@Z
?SetDataDWord@DataReport@Util@@YAJKPB_WK@Z
?FlashChatFrameWnd@ChatSession@Util@@YAHKH@Z
?WriteTipInContactChatSession@ChatSession@Util@@YAHKPAUITXData@@@Z
?OpenContactChatSession@ChatSession@Util@@YAXKPAUITXData@@@Z
?IsContactChatSessionOpen@ChatSession@Util@@YAHK@Z
?QueryTXChatSession@ChatSession@Util@@YAHKHPAPAUIAFChatSession@@@Z
?GetChatSessionMainWnd@ChatSession@Util@@YAHKHPAPAUIGFFrame@@@Z
?SelSidebarTabInChatFrame@ChatSession@Util@@YAXKW4CFChatType@ChatFrame@@VCTXStringW@@@Z
?IsChatSessionOpen@ChatSession@Util@@YAHKH@Z
ImmAssociateContext
?MessageBoxW@Misc@Util@@YAHPAUIGFFrame@@VCTXStringW@@1H@Z
?MessageBoxExW@Misc@Util@@YAHPAUIGFFrame@@PA_W1IPAUITXData@@PAPAU4@@Z
?MessageBoxW@Misc@Util@@YAHPAUIGFFrame@@PAPAUIAFMessageBoxEx@@VCTXStringW@@2H@Z
InterlockedDecrement
SetThreadLocale
GetThreadLocale
RaiseException
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetLastError
lstrlenW
lstrcmpiW
GetModuleHandleW
GetModuleFileNameW
GetModuleHandleExW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
CloseHandle
CreateMutexW
FlushInstructionCache
GetCurrentProcess
SetLastError
InterlockedIncrement
QueryPerformanceFrequency
GetSystemTimeAsFileTime
GetCurrentProcessId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
Sleep
VirtualAlloc
VirtualFree
DeleteCriticalSection
IsProcessorFeaturePresent
LoadLibraryA
GetProcAddress
InterlockedCompareExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetSystemInfo
RegisterClassExW
GetClassInfoExW
UnregisterClassA
LoadCursorW
GetDesktopWindow
SetTimer
SetCursor
GetCursorPos
DestroyCursor
KillTimer
CallWindowProcW
GetScrollInfo
GetParent
SetFocus
LoadCursorFromFileW
CreateWindowExW
DestroyWindow
IsWindow
ShowWindow
UpdateWindow
GetClientRect
SetParent
SetWindowPos
keybd_event
IsZoomed
SendMessageW
GetSystemMetrics
GetWindowLongW
DefWindowProcW
SetWindowLongW
CharNextW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
RegQueryValueExW
RegDeleteKeyW
SHGetFileInfoW
StringFromCLSID
CoTaskMemFree
CoCreateInstance
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
SysStringLen
SysFreeString
ord64
ord44
ord43
ord32
ord31
ord30
ord15
ord58
ord22
ord18
ord23
ord61
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
_unlock
__dllonexit
memmove
_snprintf
_wcslwr
wcsstr
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
__clean_type_info_names_internal
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
_except_handler4_common
__CppXcptFilter
??3@YAXPAX@Z
_CxxThrowException
swprintf_s
__CxxFrameHandler3
_recalloc
memcpy_s
malloc
free
wcscpy_s
wcsncpy_s
??_V@YAXPAX@Z
memmove_s
_purecall
_invalid_parameter_noinfo
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
memset
_time64
_snwprintf
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ