Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
5ba731f04de310542d0eaf3dd4750edd_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5ba731f04de310542d0eaf3dd4750edd_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
5ba731f04de310542d0eaf3dd4750edd_JaffaCakes118
Size
377KB
MD5
5ba731f04de310542d0eaf3dd4750edd
SHA1
86d878f3388fbdae45e8ba6097744882030fe2f1
SHA256
5b58b23203578500d03e82a21a47d194c551aab4e35e27e2d623999ca4f91b5f
SHA512
d19c3d1d2d17e417d067c338660dd970933e7c9de020a1c9e79ce2152c0cf6f96a7b9ca1a558cb59a195a84fa6100b1a5a4486a9d3a2c4edf134cae68dba6825
SSDEEP
6144:IMc/DujQ0lNdUCciqIkIby5Ad03mDtX3SryikpkXva2EMMdKvPRO0de3BrWa7sJj:IH/DujQ0lNdUCcpIb4Q0Wikpk/aRoPdz
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
d:\view\Hummer1.71cht_Proj\Basic_Hummer3_VOB\Hummer2010\Output\Bin\TaskTray.pdb
?FindFormat@CxImageHelper@@YAKPAVCxFile@@PAH@Z
?LoadGif@CxImageHelper@@YAPAVCxImage@@PAVCxFile@@AAH@Z
?MakeBitmap@CxImage@@QAEPAUHBITMAP__@@PAUHDC__@@@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
??9CTXBSTR@@QBE_NABV0@@Z
??MCTXBSTR@@QBE_NABV0@@Z
?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z
?IsFileSystemFile@FS@@YAHPB_W@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z
??M@YA_NABVCTXStringW@@0@Z
??8@YA_NABVCTXStringW@@PB_W@Z
?Right@CTXStringW@@QBE?AV1@H@Z
?MakeLower@CTXStringW@@QAEAAV1@XZ
??1CFmtString@@QAE@XZ
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
?PropertyDWord@CFmtString@@QAEHPB_WK0@Z
??0CFmtString@@QAE@XZ
?GetBSTR@CTXStringW@@QBEPA_WXZ
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?Replace@CTXStringW@@QAEHPB_W0@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
?IsNetConnectionOK@Network@Util@@YAHPAHPAKPAPA_W@Z
ord25
ord26
?Empty@CTXStringW@@QAEXXZ
??0CTXStringW@@QAE@PA_W@Z
?GuidToString@Com@Util@@YAJABU_GUID@@PAPA_WH@Z
?SafeLoadLibrary@Sys@Util@@YAPAUHINSTANCE__@@PB_W@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
?SetAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z
??9CTXBSTR@@QBE_NPA_W@Z
?DecodeSkipAll@CCmdCodecBase@@IAEXXZ
?DecodeEndArray@CCmdCodecBase@@IAEXXZ
?DecodeArrayBuffer@CCmdCodecBase@@IAEXI@Z
?DecodeArrayLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@H@Z
?GetBuf@CTXCommPack@@QAEHPAEHH@Z
?GetWord@CTXCommPack@@QAEHAAGHH@Z
?GetDecodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
?DecodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?JumpDWord@CTXCommPack@@QAEHXZ
?EnableUnicodeString@CCmdCodecBase@@IAEXH@Z
?AddDWord@CTXCommPack@@QAEHKH@Z
?CRC32@Encode@Util@@YAKKPBEH@Z
?CodeBuffer@CCmdCodecBase@@IAEXPB_W@Z
?CodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?CodeEndArray@CCmdCodecBase@@IAEXXZ
?CodeArrayTXDataNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?CodeArrayTXDataBuffer@CCmdCodecBase@@IAEXPB_W@Z
?CodeArrayLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@H@Z
?AddWord@CTXCommPack@@QAEHGH@Z
??0CCmdCodecBase@@QAE@XZ
?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z
?AddRef@CCmdCodecBase@@MAGKXZ
?Release@CCmdCodecBase@@MAGKXZ
?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z
?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z
??1CCmdCodecBase@@UAE@XZ
??1CTXStringA@@QAE@XZ
?GetBuffer@CTXStringA@@QAEPADH@Z
?GetLength@CTXStringA@@QBEHXZ
?Utf8FromWS@Convert@Util@@YA?AVCTXStringA@@PB_WH@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
ord34
?GenerateGUID2@CComputerIDGenerator@@QAEHPAE@Z
?Generate@CComputerIDGenerator@@QAEKPAE@Z
?DecodeBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?DecodeBuffer@CCmdCodecBase@@IAEXPB_WI@Z
?DecodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?CodeBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
ord9
?StartThread@CTXThreadModel@@QAEHXZ
??1CTXThreadModel@@MAE@XZ
?StopThread@CTXThreadModel@@QAEXK@Z
?Random@Sys@Util@@YAHXZ
?SetAsyncCallback@TXTimer@@YAHP6GXPAX@Z0@Z
?GetString@CTXStringA@@QBEPBDXZ
??0CTXStringA@@QAE@UtagGBK@@PB_WH@Z
??0CTXThreadModel@@IAE@XZ
??8CTXBSTR@@QBE_NPA_W@Z
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z
ord30
??BCTXStringA@@QBEPBDXZ
?Format@CTXStringA@@QAAXPBDZZ
??0CTXStringA@@QAE@XZ
?Left@CTXStringW@@QBE?AV1@H@Z
?Find@CTXStringW@@QBEHPB_WH@Z
?Trim@CTXStringW@@QAEAAV1@XZ
?Mid@CTXStringW@@QBE?AV1@HH@Z
?GetLength@CTXStringW@@QBEHXZ
?Find@CTXStringW@@QBEH_WH@Z
?GetAt@CTXStringW@@QBE_WH@Z
?MakeUpper@CTXStringW@@QAEAAV1@XZ
?CombinePath@FS@Util@@YA?AVCTXStringW@@ABV3@0@Z
?Empty@CTXStringA@@QAEXXZ
strlcpy
??ACTXStringA@@QBEDH@Z
??0CTXStringA@@QAE@UtagUTF8@@PB_WH@Z
??0CTXStringA@@QAE@PBD@Z
??4CTXStringA@@QAEAAV0@ABV0@@Z
?IsEmpty@CTXStringA@@QBE_NXZ
?GetFileSystemType@FS@@YA?AW4FILESYSTEM_TYPE@@PB_W@Z
?GetFileName@FS@Util@@YA?AVCTXStringW@@ABV3@@Z
?GBKToUnicode@Convert@Util@@YA_NAAVCTXStringW@@PBDH@Z
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
??H@YA?AVCTXStringA@@ABV0@0@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
?QueryExitEvent@CTXThreadModel@@IAEHXZ
?ReleaseBuffer@CTXStringA@@QAEXH@Z
?GetTempFileNameW@FS@Util@@YA?AVCTXStringW@@ABV3@@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
??ACTXStringW@@QBE_WH@Z
?Replace@CTXStringW@@QAEH_W0@Z
?GetHostListByName@HostResolve@Util@@YAJPA_WPAPAUITXArray@@@Z
?CreateConnectTCP@Network@Util@@YAHHPAPAUITXConnectTCP@@@Z
??8CTXBSTR@@QBE_NABV0@@Z
??9CTXBSTR@@QBE_NPB_W@Z
??1CTXBSTR@@QAE@XZ
??8CTXBSTR@@QBE_NPB_W@Z
??8@YA_NPB_WABVCTXBSTR@@@Z
??4CTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z
??YCTXBSTR@@QAEAAV0@ABV0@@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
?Length@CTXBSTR@@QBEIXZ
??0CTXBSTR@@QAE@H@Z
?GetRegulatedTime@Time@Util@@YA_NAA_J@Z
??4CTXBSTR@@QAEAAV0@ABV0@@Z
??0CTXStringW@@QAE@ABV0@@Z
?GenerateEx@CComputerIDGenerator@@QAEHPAE@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
?GetTXDataStr@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXStringW@@@Z
??8@YA_NABVCTXStringW@@0@Z
?IsEmpty@CTXStringW@@QBE_NXZ
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??BCTXBSTR@@QBEPA_WXZ
??0CTXBSTR@@QAE@XZ
??ICTXBSTR@@QAEPAPA_WXZ
??0CTXBSTR@@QAE@PB_W@Z
??8@YA_NPA_WABVCTXBSTR@@@Z
??1CTXStringW@@QAE@XZ
??0CTXBSTR@@QAE@ABV0@@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
??0CTXStringW@@QAE@PB_W@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
??BCTXStringW@@QBEPB_WXZ
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?Format@CTXStringW@@QAAXPB_WZZ
??0CTXStringW@@QAE@XZ
??4CTXStringW@@QAEAAV0@ABV0@@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
?IsEmpty@CTXBSTR@@QAEHXZ
?GetTXDataBuf@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXBuffer@@@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?LoadImageW@GF@Util@@YAPAXPB_WIHHI@Z
?GetPublicName@Contact@Util@@YA?AVCTXStringW@@K@Z
?GetStatus@Contact@Util@@YAGK@Z
?GetSelfUin@Contact@Util@@YAKXZ
?SetDataReportBit@DataReport@Util@@YAJKPB_WE@Z
?GetStatus@Contact@Util@@YAXKAAGAAVCTXStringW@@@Z
?GetDiscussHeadFile@Group@Util@@YA?AVCTXStringW@@XZ
?GetDiscussName@Group@Util@@YA?AVCTXStringW@@K@Z
?GetPublicHeadFile@Contact@Util@@YA?AVCTXStringW@@K@Z
?GetCombineName@Contact@Util@@YA?AVCTXStringW@@K@Z
?IncHelper@DataReport@Util@@YAJKPB_WK@Z
?GetHeadFile16@Misc@Util@@YA?AVCTXStringW@@G@Z
?GetCombineName@Contact@Util@@YA?AVCTXStringW@@KV3@@Z
?GetProgramBinDir@Sys@Util@@YA?AVCTXStringW@@V3@@Z
??0CDRStrCodecBase@@QAE@XZ
?QueryInterface@CDRStrCodecBase@@MAGJABU_GUID@@PAPAX@Z
?AddRef@CDRStrCodecBase@@MAGKXZ
?Release@CDRStrCodecBase@@MAGKXZ
?DRCodecStr@CDRStrCodecBase@@UAGJEPAUITXData@@PAPA_W@Z
??1CDRStrCodecBase@@UAE@XZ
?CodeEnd@CDRStrCodecBase@@IAEXXZ
?CodeByte@CDRStrCodecBase@@IAEXEPB_W@Z
?CodeBuf@CDRStrCodecBase@@IAEXEPB_W@Z
?CodeDWord@CDRStrCodecBase@@IAEXEPB_W@Z
?CodeStr@CDRStrCodecBase@@IAEXEPB_W@Z
?GetMinorVer@Version@@YAEXZ
?GetMajorVer@Version@@YAEXZ
?GetVersionExW@Version@@YAXAAUtagVersionInfo@1@@Z
?GetAccountName@Account@Util@@YA?AVCTXStringW@@K@Z
GdipDisposeImage
GdipSaveImageToStream
GdipLoadImageFromFile
GdipDrawImageRectI
GdipSetInterpolationMode
GdipGetImageGraphicsContext
GdiplusStartup
GdipAlloc
GdipFree
GdiplusShutdown
GdipGetImageDecoders
GdipGetImageDecodersSize
GdipCreateHICONFromBitmap
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipCloneImage
GdipGetImagePixelFormat
?GetMsgListInfo@Misc@Util@@YAHPA_W00PAPA_W1PAH@Z
??0CGroupObj@Group@Util@@QAE@K@Z
?GetInterface@CGroupObj@Group@Util@@QAEPAUITXGroup@@XZ
??0CBasicInfo@Group@Util@@QAE@PAUITXGroup@@@Z
??0CHead@Group@Util@@QAE@PAUITXGroup@@@Z
?GetHeadFile@CHead@Group@Util@@QAEXAAVCTXStringW@@H@Z
??1CBasicInfo@Group@Util@@UAE@XZ
?SetPerfReportDataForWord@PerfDataReportUtil@@YAXPA_WKH@Z
??1CHead@Group@Util@@UAE@XZ
?IsAppLocked@Misc@Util@@YAHXZ
?GetPngFile@Status@Contact@Util@@YAHGAAVCTXStringW@@0@Z
?GetDefaultShowText@Status@Contact@Util@@YA?AVCTXStringW@@G@Z
?GetStatusMenuToopTip@Status@Contact@Util@@YA?AVCTXStringW@@G@Z
?GetLogoIconWithStatus@Status@Contact@Util@@YA?AVCTXStringW@@GHH@Z
?IsAllowPlaySound@Misc@Util@@YAHXZ
?GetSysHeadIcon16FileByIndex@CHead@Group@Util@@QAEXGAAVCTXStringW@@@Z
?GetSysHeadIndex@CHead@Group@Util@@QAEGXZ
?GetCustomHeadFile@CHead@Group@Util@@QAEHAAVCTXStringW@@@Z
?IsUseCustomHead@CHead@Group@Util@@QAEHXZ
??0CHead@Group@Util@@QAE@K@Z
?LoginErrorStringAndReport@ErrorCodeReport@Util@@YA?AVCTXStringW@@KPB_WGG@Z
??1CGroupObj@Group@Util@@UAE@XZ
?GetNameWithCode@CBasicInfo@Group@Util@@QAE?AVCTXStringW@@W4NAME_TYPE@123@@Z
GetModuleHandleA
GetProcessHeap
InterlockedCompareExchange
VirtualProtect
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
DeleteFileW
CreateDirectoryW
GetFileAttributesW
GetVersionExA
LoadLibraryA
InterlockedExchange
GetACP
GetLocaleInfoA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
TerminateProcess
IsDebuggerPresent
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
FreeLibrary
GetCurrentProcess
OpenProcess
CloseHandle
LoadLibraryW
GetProcAddress
GetVersionExW
RaiseException
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
SetThreadLocale
GetThreadLocale
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetLastError
lstrlenW
lstrcmpiW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetModuleHandleW
GetModuleFileNameW
MoveWindow
DefWindowProcW
DestroyWindow
GetSystemMetrics
IsWindow
UpdateWindow
DestroyIcon
CreateIconIndirect
GetDC
CreateWindowExW
GetForegroundWindow
WindowFromPoint
SetForegroundWindow
PostMessageW
GetCursorPos
SystemParametersInfoW
FindWindowW
GetWindowRect
EqualRect
IntersectRect
OffsetRect
PtInRect
RegisterClassExW
GetClassInfoExW
CharNextW
UnregisterClassA
ReleaseDC
GetPixel
SetPixel
SelectObject
DeleteObject
GetObjectW
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW
RegQueryValueExW
SHGetFileInfoW
CoTaskMemFree
StringFromCLSID
CreateStreamOnHGlobal
PropVariantClear
CoCreateGuid
CoCreateInstance
SysAllocString
VariantClear
VariantInit
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
SysStringLen
SysFreeString
ord15
ord22
ord64
ord23
ord61
ord30
ord58
ord31
ord32
ord18
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
wcscpy_s
malloc
memcpy_s
_recalloc
??_V@YAXPAX@Z
??2@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
free
__CxxFrameHandler3
??0exception@std@@QAE@XZ
_wtoi
?what@exception@std@@UBEPBDXZ
wcsrchr
memcpy
_stricmp
strstr
strchr
strrchr
_strdup
wcsncpy_s
fclose
fread
fseek
ftell
_wfopen
__clean_type_info_names_internal
_crt_debugger_hook
??0exception@std@@QAE@ABQBD@Z
_except_handler4_common
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_CxxThrowException
??3@YAXPAX@Z
_time64
memmove_s
_purecall
sscanf
memset
?_type_info_dtor_internal_method@type_info@@QAEXXZ
fwrite
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
??1exception@std@@UAE@XZ
_malloc_crt
?terminate@@YAXXZ
GetModuleFileNameExW
InternetGetCookieW
InternetSetCookieW
ioctlsocket
closesocket
send
select
recv
__WSAFDIsSet
inet_addr
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ