Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
3fb6c42057c2e141f56aa8b576b473ba_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3fb6c42057c2e141f56aa8b576b473ba_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
3fb6c42057c2e141f56aa8b576b473ba_JaffaCakes118
Size
395KB
MD5
3fb6c42057c2e141f56aa8b576b473ba
SHA1
f32ad03eaf22853261f195e1633c9a19e216dcee
SHA256
90afdc345c835919b3a5ed2e508eb08ce8f58120c3d216d6983a6140d32f21db
SHA512
fb2275e0df7be62a44b3ace76a21aee56d52c3afd1e5fa057d32d5ec7c3c2fb30043edc9e4b81012a6e058d8b95509b7316ef27e0d39a73216f6e084574f656c
SSDEEP
6144:1emjS+Q6DxA6qp8pC9Qep1VPga6n8vqqDLuDqqDLuXqqDLuOqqDLuRQ:TrQOG4qVga6Lqnueqnu6qnuLqnu+
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
c:\Documents and Settings\dortega\My Documents\svn\dortega_trabajo\mod\admin_v20\Module_Admin_dll\Release\CLIENT.pdb
gethostname
gethostbyname
ioctlsocket
inet_addr
WSAStartup
WSAGetLastError
SizeofResource
LockResource
LoadResource
FindResourceA
WriteFile
lstrcpynA
GetModuleFileNameA
GetModuleHandleA
CreateFileW
GetVersion
GetVersionExW
GetVolumeInformationA
lstrcpyA
lstrcatA
CreateDirectoryA
SetCurrentDirectoryA
GetComputerNameA
GetWindowsDirectoryA
GetCurrentProcess
LocalFree
LocalAlloc
GetCurrentThread
FormatMessageA
CreateProcessA
SetFilePointer
ReadFile
CreateMutexA
ReleaseMutex
SetStdHandle
GetLocaleInfoW
GetTimeZoneInformation
GetConsoleMode
GetConsoleCP
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
HeapSize
SetConsoleCtrlHandler
GetCurrentProcessId
SetLastError
Sleep
BeginUpdateResourceA
UpdateResourceA
EndUpdateResourceA
lstrlenW
WideCharToMultiByte
GetTempPathA
GetTempFileNameA
GetCurrentDirectoryA
CreateFileA
CopyFileA
SetFileAttributesA
LoadLibraryA
GetProcAddress
GetTickCount
SetEnvironmentVariableA
GetLastError
DeleteCriticalSection
InitializeCriticalSection
lstrlenA
MultiByteToWideChar
CreateThread
WaitForSingleObject
TerminateThread
EnterCriticalSection
FreeLibrary
DeleteFileA
CloseHandle
LeaveCriticalSection
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
CompareStringA
CompareStringW
GetExitCodeProcess
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
LCMapStringW
LCMapStringA
GetOEMCP
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
GetProcessHeap
FatalAppExitA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
RaiseException
GetCPInfo
AdjustWindowRectEx
wsprintfA
wsprintfW
SetWindowPos
LoadIconA
GetMenu
wvsprintfA
ExitWindowsEx
IsWindow
SendMessageA
GetClassLongA
GetWindowLongA
MessageBoxA
GetClientRect
GetDesktopWindow
RegDeleteKeyA
OpenThreadToken
DuplicateToken
AllocateAndInitializeSid
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
AccessCheck
FreeSid
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumValueW
RegEnumValueA
RegDeleteKeyW
RegCreateKeyW
RegCreateKeyA
RegCloseKey
RegDeleteValueW
RegDeleteValueA
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
DeleteService
SetServiceStatus
ShellExecuteA
CoTaskMemFree
SysAllocString
SysFreeString
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
Data
Event
Start
Stop
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ