Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
4a4bb097a693dd63574be6f2f7723a36_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4a4bb097a693dd63574be6f2f7723a36_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4a4bb097a693dd63574be6f2f7723a36_JaffaCakes118
Size
339KB
MD5
4a4bb097a693dd63574be6f2f7723a36
SHA1
8524fd7b44e7e1742b67f3f5c22c0ac8b16ef764
SHA256
b11bf3329d5c6c8e11ef336e44085d2edc45e89fcc45096b62462243c84012e4
SHA512
39e439690e8e73db47fb0bf2525818f121cb0d90154b5568ea8173e88e9de1636d0e1ee0b9f1d6bab6b45c63a48cfd369229d386d7c05a560bdd1bff7b9a2d49
SSDEEP
6144:vAivE/sreneDiyuDxlc5N9K195c8HR73NOg1Ag4R:IivEEreneDiyyxlqN9K195c8HlAJR
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
R:\Code\HummerSDK_QQ1.93\Output\PdbFinal\OPWebKitClient.pdb
InitCommonControlsEx
??H@YA?AVCTXStringW@@_WABV0@@Z
??M@YA_NABVCTXStringA@@0@Z
?Format@CTXStringA@@QAAXPBDZZ
??1CTXStringA@@QAE@XZ
??0CTXStringA@@QAE@XZ
??8CTXBSTR@@QBE_NABV0@@Z
??0CTXStringA@@QAE@ABV0@@Z
??ICTXBSTR@@QAEPAPA_WXZ
??BCTXBSTR@@QBEPA_WXZ
??1CTXBSTR@@QAE@XZ
??0CTXBSTR@@QAE@XZ
??0CTXBSTR@@QAE@PB_W@Z
??0CTXBSTR@@QAE@ABV0@@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
?Find@CTXStringW@@QBEHPB_WH@Z
?pfPreBugReport@TXBugReport@@3P6AXXZA
?Replace@CTXStringW@@QAEHPB_W0@Z
?SetExtInfo@TXBugReport@@YAHKKPB_W@Z
??ACTXStringW@@QBE_WH@Z
?GetLength@CTXStringW@@QBEHXZ
??YCTXStringW@@QAEAAV0@ABV0@@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??0CTXStringW@@QAE@PB_W@Z
??0CTXStringW@@QAE@ABV0@@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
?Left@CTXStringW@@QBE?AV1@H@Z
?Mid@CTXStringW@@QBE?AV1@H@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
?OnError@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@K@Z
?SetUseIEProxy@CTXHttpDownload@@QAEXH@Z
?CancelDownload@CTXHttpDownload@@QAEXXZ
??1CTXHttpDownloadSink@@UAE@XZ
?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?GetDownloadedFilePath@CTXHttpDownload@@QAEHAAVCTXStringW@@@Z
??0CTXHttpDownloadSink@@IAE@XZ
?OnProgress@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?Download@CTXHttpDownload@@QAEHPB_WPAU_SYSTEMTIME@@0H@Z
?SetUIInterface@CTXHttpDownload@@QAEXPAVCTXHttpDownloadSink@@@Z
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
??1CTXHttpDownload@@UAE@XZ
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@@Z
??0CTXHttpDownload@@QAE@XZ
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
??0CTXStringW@@QAE@XZ
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?CombineQNC@FS@@YA?AVCTXStringW@@PB_W0@Z
?GuidToString@Com@Util@@YAJABU_GUID@@PAPA_WH@Z
?DeleteDirectory@FS@@YAHPB_W@Z
?UnZipFile@CUnZipFile@@QAE_NABVCTXStringW@@0@Z
?FindFileWithWildcard@FS@Util@@YAXPB_W0AAV?$vector@VCTXStringW@@V?$allocator@VCTXStringW@@@std@@@std@@H@Z
?IsDirectoryExist@FS@@YAHPB_W@Z
??0CTXStringW@@QAE@PA_W@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
??1CUnZipFile@@QAE@XZ
??0CUnZipFile@@QAE@XZ
?IsEmpty@CTXStringW@@QBE_NXZ
??4CTXStringW@@QAEAAV0@PB_W@Z
??8@YA_NABVCTXStringW@@PB_W@Z
?Right@CTXStringW@@QBE?AV1@H@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
?MakeLower@CTXStringW@@QAEAAV1@XZ
?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
?Utf8FromWS@Convert@Util@@YA?AVCTXStringA@@PB_WH@Z
?ReleaseBuffer@CTXStringA@@QAEXH@Z
?GetBuffer@CTXStringA@@QAEPADXZ
?Empty@CTXStringW@@QAEXXZ
?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
?SafeLoadLibrary@Sys@Util@@YAPAUHINSTANCE__@@PB_W@Z
?Preallocate@CTXStringW@@QAEXH@Z
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
?GetBuffer@CTXStringW@@QAEPA_WXZ
??YCTXStringW@@QAEAAV0@PB_W@Z
?AddToDeadQueue@Misc@Util@@YAXHP6AXXZ@Z
??9@YA_NABVCTXStringW@@0@Z
??8@YA_NABVCTXStringW@@0@Z
?GetBSTR@CTXStringW@@QBEPA_WXZ
?MinimzeMemory@Sys@Util@@YAXXZ
?Mid@CTXStringW@@QBE?AV1@HH@Z
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
??BCTXStringA@@QBEPBDXZ
?Mid@CTXStringA@@QBE?AV1@H@Z
?Mid@CTXStringA@@QBE?AV1@HH@Z
?Trim@CTXStringA@@QAEAAV1@XZ
?Find@CTXStringA@@QBEHPBDH@Z
?IsEmpty@CTXStringA@@QBE_NXZ
?GetLength@CTXStringA@@QBEHXZ
??4CTXStringA@@QAEAAV0@ABV0@@Z
?Detach@CTXBSTR@@QAEPA_WXZ
??0CTXStringA@@QAE@PBD@Z
?Copy@CTXBSTR@@QBEPA_WXZ
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??4CTXBSTR@@QAEAAV0@ABV0@@Z
?OpenUrlWithDefBrowser@UrlBase@Util@@YAXABVCTXStringW@@@Z
ord33
?OnExitCoreCenter@Misc@Util@@YAXXZ
?SetMainAndLogicThreadId@Misc@Util@@YAXKK@Z
?OnUninitCom@Misc@Util@@YAXXZ
?OnExitWinMain@Misc@Util@@YAXXZ
??BCTXStringW@@QBEPB_WXZ
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??1CTXStringW@@QAE@XZ
?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z
?FreeData@Metadata@Util@@YAJAAPA_W@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
?ScreenPoint2ClientPoint@GF@Util@@YAXPAUIGFFrame@@AAUtagPOINT@@@Z
?Get@Metadata@Util@@YAJPAUITXData@@PA_WPAPA_W@Z
DrawTexture
GetTextureSize
LockTextureBits
SetTextureFilter
CreateTexture
DeleteTexture
UnlockTextureBits
ChannelWaitForEvent
DestroySharePacket
ShareMemoryGetData
ShareMemoryGetSize
ShareMemoryDisconnect
ShareMemoryCreate
ChannelSendResponse
ChannelSendRequestSync
ChannelSendRequest
ChannelDestroy
IPCGetName
IPCStartup
ChannelGetDisconnect
ChannelGetRecvPacket
IPCIsActive
ChannelCreate
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
IsDebuggerPresent
GetSystemTimeAsFileTime
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
FindResourceW
lstrcmpiW
InterlockedIncrement
EnterCriticalSection
SetThreadLocale
InitializeCriticalSection
DeleteCriticalSection
GetCommandLineW
LoadResource
RaiseException
SetEnvironmentVariableW
GetLastError
GetProcessHeap
InterlockedDecrement
LeaveCriticalSection
LockResource
GetCurrentThreadId
GetThreadLocale
SizeofResource
FindResourceExW
GetModuleHandleW
GetEnvironmentVariableW
SetUnhandledExceptionFilter
GetModuleFileNameW
QueryPerformanceCounter
GetTickCount
CloseHandle
CreateFileW
GetCurrentProcessId
CreateMutexA
WaitForSingleObject
ReleaseMutex
GetProcAddress
IsBadReadPtr
VirtualProtect
VirtualQuery
GetCurrentProcess
GetModuleHandleA
InitializeCriticalSectionAndSpinCount
Sleep
TerminateProcess
InterlockedCompareExchange
lstrlenW
UnhandledExceptionFilter
GetMessageW
UnregisterClassA
DispatchMessageW
TranslateMessage
PeekMessageW
SetWindowLongW
PostMessageW
DefWindowProcW
RegisterClassExW
ReleaseCapture
GetKeyState
GetCapture
SetCapture
DestroyWindow
IsWindow
SendMessageW
ClientToScreen
PostQuitMessage
SetCursor
UnionRect
CallNextHookEx
PostThreadMessageW
SetWindowsHookExW
CreateWindowExW
UnhookWindowsHookEx
CharNextW
SetFocus
GetSaveFileNameW
RegSetValueExW
RegCloseKey
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyExW
RegOpenKeyExW
RegDeleteKeyW
SHGetSpecialFolderPathW
SHGetFileInfoW
CoCreateGuid
StringFromGUID2
CoCreateInstance
CoTaskMemFree
StringFromCLSID
VariantInit
VariantClear
SysStringByteLen
LoadRegTypeLi
VarUI4FromStr
SysFreeString
SysStringLen
RegisterTypeLi
LoadTypeLi
UnRegisterTypeLi
SysAllocString
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?_Raise_handler@std@@3P6AXABVexception@stdext@@@ZA
?_Throw@std@@YAXABVexception@stdext@@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_WABV10@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?deallocate@?$allocator@D@std@@QAEXPADI@Z
?allocate@?$allocator@D@std@@QAEPADI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHPB_W@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?length@?$char_traits@D@std@@SAIPBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?uncaught_exception@std@@YA_NXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??3@YAXPAX@Z
memcpy_s
wcslen
_recalloc
malloc
memset
memcmp
free
wcscat_s
memmove_s
wcsncpy_s
wcscpy_s
??_V@YAXPAX@Z
_purecall
??2@YAPAXI@Z
?what@exception@std@@UBEPBDXZ
_invalid_parameter_noinfo
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
__CppXcptFilter
_adjust_fdiv
_amsg_exit
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
_initterm_e
_initterm
memcpy
_time64
fwrite
fclose
_wfopen
strtoul
isxdigit
strlen
_beginthreadex
__CxxFrameHandler3
_CxxThrowException
_stricmp
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
CryptCATAdminReleaseCatalogContext
WTHelperGetProvSignerFromChain
WTHelperProvDataFromStateData
WTHelperGetProvCertFromChain
CryptCATCatalogInfoFromContext
CryptCATAdminAcquireContext
CryptCATAdminEnumCatalogFromHash
WinVerifyTrust
CryptCATAdminCalcHashFromFileHandle
CryptCATAdminReleaseContext
CertGetNameStringW
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
GetClientCefBrowser
IPCServiceMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ