Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
5e1bbe684063f32768246c151c0e5032_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5e1bbe684063f32768246c151c0e5032_JaffaCakes118.exe
Resource
win10v2004-20240709-en
Target
5e1bbe684063f32768246c151c0e5032_JaffaCakes118
Size
137KB
MD5
5e1bbe684063f32768246c151c0e5032
SHA1
60f5fa47f8a49a06c9b101a4cbeb592683f3e8b3
SHA256
ad19c1d3ad790396c31097740dbbd03d38f6b31f7ccb60c08e3ff91b7c187d89
SHA512
111d8624d1dadd3245e5fe5bc4f5bc7aa6b0332c0d5c143e31ffdbb60549e4e4f786963241afcd412095e4c79e92fcc7d71c0ccddbc3fde026cd0c1b6406cf05
SSDEEP
3072:vR6FXztsX5H1HP06+vF0op7HcxKOBqQJQ6pGWF0Y:UVKIuoJ80OBrJFgWF0Y
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
R:\TempView\QQ1.80\Output\BinFinal\QQ.pdb
InitCommonControlsEx
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?IsEmpty@CTXStringW@@QBE_NXZ
?ReleaseBuffer@CTXStringW@@QAEXH@Z
??ICTXBSTR@@QAEPAPA_WXZ
??BCTXStringW@@QBEPB_WXZ
?Left@CTXStringW@@QBE?AV1@H@Z
??0CFmtString@@QAE@XZ
?ReverseFind@CTXStringW@@QBEH_W@Z
??0CTXStringW@@QAE@PA_W@Z
??1CFmtString@@QAE@XZ
?SafeLoadLibrary@Sys@Util@@YAPAUHINSTANCE__@@PB_W@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
?PropertyStr@CFmtString@@QAEHPB_W0@Z
??0CTXBSTR@@QAE@PB_W@Z
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
?SetIdleCallback@TXTimer@@YAHPAUITXIdleCallback@@I@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
?GetLength@CTXStringW@@QBEHXZ
??H@YA?AVCTXStringW@@PB_WABV0@@Z
?AddIdleCallback@Window@Util@@YAJPAVVTXMsgLoopIdleCallback@@@Z
ord25
?RecordTransEnd@Perf@Util@@YAJ_JPB_WHH11H@Z
?Stop@TXBugMonitor@@YAHXZ
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
?OnExitCoreCenter@Misc@Util@@YAXXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?CheckVistaAndStartSelfMediumLevel@Sys@Util@@YAHXZ
?NotifyIdle@TXTimer@@YAXXZ
?NotifyIdle@Window@Util@@YAJXZ
??BCTXBSTR@@QBEPA_WXZ
??8@YA_NABVCTXStringW@@PB_W@Z
?Mid@CTXStringW@@QBE?AV1@H@Z
?Resolve@HostResolve@Util@@YAJPA_WPAUITXHostResolverSink@@PAK@Z
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?MinimzeMemory@Sys@Util@@YAXXZ
?AddFmtString@TXStringBundle@@YAXABVCFmtString@@@Z
?InitBugReport@TXBugReport@@YAXPB_W000GGKHHKKP6GHPAUtagBugReportInfo@1@PBD200PAPAXPAKPAX@Z@Z
?GetSession@TXLog@@YAKXZ
?GetLCID@NLS@@YAKXZ
?SetLogFileMd5Dir@TXBugReport@@YAHPB_W00@Z
?ValidateBugReport@TXBugReport@@YAXXZ
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?InitNetwork@Network@Util@@YAHXZ
?InitPlatform@CoreCenter@Util@@YAHPA_W@Z
?InitPlatformCoreConfig@Boot@Util@@YAHXZ
?InitPlatformGFConfig@Boot@Util@@YAHXZ
?InitPlatformFileSystem@Boot@Util@@YAHXZ
?InitPlatformI18NConfig@Boot@Util@@YAHXZ
?DelIdleCallback@Window@Util@@YAJPAVVTXMsgLoopIdleCallback@@@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
?OnUninitCom@Misc@Util@@YAXXZ
?GetBSTR@CTXStringW@@QBEPA_WXZ
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
??1CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@XZ
??4CTXStringW@@QAEAAV0@PB_W@Z
?Find@CTXStringW@@QBEH_WH@Z
??1CTXBSTR@@QAE@XZ
?Find@CTXStringW@@QBEHPB_WH@Z
??0CTXBSTR@@QAE@XZ
??0CTXStringW@@QAE@PB_W@Z
?TrimLeft@CTXStringW@@QAEAAV1@XZ
??0CTXStringW@@QAE@ABV0@@Z
?Format@CTXStringW@@QAAXPB_WZZ
?ClearDeadQueue@Misc@Util@@YAXXZ
?GetGlobalSysDir@Sys@Util@@YA?AVCTXStringW@@XZ
?Init@Version@@YAHXZ
?GetUserDataSaveSetting@Sys@Util@@YA?AVCTXStringW@@AAKAAV3@@Z
?GetProgramRootDir@Sys@Util@@YA?AVCTXStringW@@XZ
?GetMajorVer@Version@@YAEXZ
?GetMinorVer@Version@@YAEXZ
?GetVersionExW@Version@@YAXAAUtagVersionInfo@1@@Z
?GetPubNo@Version@@YAKXZ
?SetCustomObjectFactory@GF@Util@@YAXP6AHABU_GUID@@0PAPAX@Z@Z
?GetEnablePreload@Misc@Util@@YAHXZ
?SetPerfReportDataForWord@PerfDataReportUtil@@YAXPA_WKH@Z
?SetEnablePreload@Misc@Util@@YAXH@Z
?GetMultiLoginInfo@MultiLogin@Util@@YAHPAVCTXStringW@@PAK1@Z
?MarkFinishedLogin@MultiLogin@Util@@YAXH@Z
?SetPerfReportDataForBool@PerfDataReportUtil@@YAXPA_WH@Z
?SetFirstStartQQ@Misc@Util@@YAXH@Z
?GetSSOLoginInfo@SSOLogin@Util@@YAHPAVCTXStringW@@@Z
?DecodeSCBootParam@ShortcutUtil@@YAJVCTXStringW@@@Z
?IsNeedRestore@TXUpdateCfg@@YAHXZ
?GetInstallDir@Dir@Util@@YA?AVCTXStringW@@XZ
InterlockedExchange
InterlockedCompareExchange
InterlockedIncrement
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
CreateEventW
WriteProcessMemory
SetThreadPriority
GetCurrentThread
Sleep
InterlockedDecrement
GetDriveTypeW
GetModuleFileNameW
QueryPerformanceCounter
OpenMutexW
CreateMutexW
WaitForSingleObject
OpenProcess
InitializeCriticalSection
GetTickCount
GetProcessTimes
DeleteCriticalSection
GetSystemTimeAsFileTime
GetProcAddress
GetFileAttributesW
GetVersionExW
FreeLibrary
DeleteFileW
CreateProcessW
MoveFileExW
MoveFileW
CloseHandle
GetCommandLineW
OpenEventW
SetEvent
GetLastError
CreateThread
GetSystemInfo
QueryPerformanceFrequency
GetEnvironmentVariableW
GlobalMemoryStatus
SetEnvironmentVariableW
GetModuleHandleW
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
UnhandledExceptionFilter
MessageBoxW
PeekMessageW
TranslateMessage
DispatchMessageW
PostThreadMessageW
WaitMessage
RegQueryValueExW
RegOpenKeyExW
CoUninitialize
CoCreateInstance
OleInitialize
CoInitialize
OleUninitialize
ord64
ord30
ord32
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_invoke_watson
_controlfp_s
__CxxFrameHandler3
_except_handler4_common
??0exception@std@@QAE@XZ
??3@YAXPAX@Z
??_V@YAXPAX@Z
__argc
__wargv
wcsncmp
_time64
??0exception@std@@QAE@ABQBD@Z
_wtoi
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
_CxxThrowException
_invalid_parameter_noinfo
??2@YAPAXI@Z
memset
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ