Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
46a1aae35c0ab5cefe371f0b1cabfb8f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
46a1aae35c0ab5cefe371f0b1cabfb8f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
46a1aae35c0ab5cefe371f0b1cabfb8f_JaffaCakes118
Size
49KB
MD5
46a1aae35c0ab5cefe371f0b1cabfb8f
SHA1
cd69f684120793cd353386c61f9607283347ef47
SHA256
9773df52f58d2b6590d355a5e65187d458c22084254e964f14655f28a8845d38
SHA512
eecd01b9f33377c0fdddd66762e5b5e5b3c4c866188884ec606608dc72153fb172476fa180181ad3474253fc7fc71659c3cfeddc1474e61c0695a50ba8b6a64b
SSDEEP
768:+eTnV2qAu4Jiql6GP9gCkUOp9vc+BMLB:+eTV2qaJdl6GlggOp9vckM
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
D:\WFBSH_Agent_SP3\output\debug_symbol\release\svcGenericHost.pdb
SetEvent
WaitForSingleObject
CreateMutexW
ResetEvent
CreateEventW
CreateProcessW
GetCurrentProcessId
GetModuleFileNameW
InterlockedDecrement
SetCurrentDirectoryW
InterlockedIncrement
GetStartupInfoW
GetLastError
GetExitCodeProcess
CloseHandle
ReleaseMutex
SetEnvironmentVariableW
GetPrivateProfileIntW
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
OpenSCManagerW
OpenServiceW
CloseServiceHandle
RegisterServiceCtrlHandlerW
SetServiceStatus
StartServiceCtrlDispatcherW
ShellExecuteExW
?GetLastError@CSystemException@OS@@SAHXZ
??0CSystemException@OS@@QAE@ABV01@@Z
??0CException@OS@@QAE@ABV01@@Z
?IsOOBEDone@OS@@YAHXZ
?GetRegistryValue@OS@@YAJPAUHKEY__@@PB_W1KAAK@Z
??_Fx_wstring@OS@@QAEXXZ
??4x_wstring@OS@@QAEABV01@PA_W@Z
??0CException@OS@@QAE@HPB_WH@Z
?GetErrorCode@CException@OS@@UBEHXZ
?GetErrorMsg@CException@OS@@UBE?AVx_wstring@2@XZ
?GetErrorMsgEx@CException@OS@@UBE?AVx_wstring@2@XZ
??1CSystemException@OS@@UAE@XZ
?CompareNoCase@x_wstring@OS@@QBEHPB_W@Z
?GetRegistryValue@OS@@YAJPAUHKEY__@@PB_W11PA_WAAI@Z
??1CServiceManager@@UAE@XZ
?Install@CServiceManager@@QAEXPB_W000KKH0@Z
??4x_wstring@OS@@QAEABV01@ABV01@@Z
?getAppFullPathName@NS_FileUtils@@YA?AVx_wstring@OS@@PAUHINSTANCE__@@@Z
??0CServiceManager@@QAE@PB_W0@Z
??0CSystemException@OS@@QAE@HPB_WH@Z
?concatPath@NS_StringUtils@@YA?AVx_wstring@OS@@PB_W0@Z
??1x_wstring@OS@@QAE@XZ
?isFileExist@NS_FileUtils@@YA_NPB_W@Z
?I2W@@YA?AVx_wstring@OS@@H@Z
??1CException@OS@@UAE@XZ
??0x_wstring@OS@@QAE@PB_W@Z
??4x_wstring@OS@@QAEABV01@PB_W@Z
??Yx_wstring@OS@@QAEAAV01@ABV01@@Z
??Yx_wstring@OS@@QAEAAV01@PB_W@Z
?empty@x_wstring@OS@@QBE_NXZ
?Remove@CServiceManager@@QAEHHPAK@Z
?c_str@x_wstring@OS@@QBEPB_WXZ
?Format@x_wstring@OS@@QAAXPB_WZZ
?SetRegistryValue@OS@@YAJPAUHKEY__@@PB_W1K@Z
?getAppPath@NS_FileUtils@@YA?AVx_wstring@OS@@PAUHINSTANCE__@@@Z
??Bx_wstring@OS@@QBEPB_WXZ
?dprintfW@@YAXHPB_WH00ZZ
??1CProcess@OS@@UAE@XZ
?Wait@CProcess@OS@@QAEXH@Z
?SpawnProcess@CProcess@OS@@QAEXPB_W0H0@Z
??0CProcess@OS@@QAE@XZ
?wcerr@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?endl@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHPB_WH@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Unlock@_Mutex@std@@QAEXXZ
?_Lock@_Mutex@std@@QAEXXZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
memset
_invoke_watson
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__winitenv
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
wprintf_s
??2@YAPAXI@Z
wcscat_s
??3@YAXPAX@Z
_wcsnicmp
_wtoi
__CxxFrameHandler3
_controlfp_s
_CxxThrowException
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ