Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
61eca392317858a0f857b1c7d4198fba_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
61eca392317858a0f857b1c7d4198fba_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
61eca392317858a0f857b1c7d4198fba_JaffaCakes118
Size
549KB
MD5
61eca392317858a0f857b1c7d4198fba
SHA1
3667ea6cec852d961a04894572cfa57d0a711a6b
SHA256
1d142955c02f41ba92ea90df086a5b1912c3e41660da25b5043816c9d1f62c39
SHA512
b1c2869d7a77de4a2f4a2d7b12f505397bc7a66889b3b8dddd4015098c2d14680eceb727339c19536390f6ade5411378c21827a2600507ef23c064b22445d179
SSDEEP
12288:/tD3Kwwcwnr9Q2hQK3rOXBkNRtW/AHiQiJSEPuem:srhbNRDHmS6rm
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
D:\Hummer\QQ1.70_QPlus_New\Basic_Hummer3_VOB\Hummer2010\Output\Bin\Contacts.pdb
??1CFmtString@@QAE@XZ
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
?PropertyStr@CFmtString@@QAEHPB_W0@Z
??0CTXStringW@@QAE@PA_W@Z
??0CFmtString@@QAE@XZ
??4CTXStringW@@QAEAAV0@ABV0@@Z
?Left@CTXStringW@@QBE?AV1@H@Z
?GetAt@CTXStringW@@QBE_WH@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
??0CTXStringW@@QAE@_WH@Z
??1CTXStringA@@QAE@XZ
??BCTXStringA@@QBEPBDXZ
?MakeSpellCode@Py@Util@@YA?AVCTXStringA@@ABV3@H@Z
?UnicodeToGBK@Convert@Util@@YA_NAAVCTXStringA@@PB_WH@Z
??4CTXStringW@@QAEAAV0@_W@Z
??0CTXStringA@@QAE@XZ
??ACTXStringW@@QBE_WH@Z
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
?Detach@CTXBSTR@@QAEPA_WXZ
??4CTXStringW@@QAEAAV0@PB_W@Z
??4CTXBSTR@@QAEAAV0@ABV0@@Z
??0CTXBSTR@@QAE@ABV0@@Z
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z
??4CTXStringA@@QAEAAV0@ABV0@@Z
?Left@CTXStringA@@QBE?AV1@H@Z
?GetLength@CTXStringA@@QBEHXZ
?Utf8FromWS@Convert@Util@@YA?AVCTXStringA@@PB_WH@Z
??9CTXBSTR@@QBE_NPB_W@Z
ord34
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
??8@YA_NPB_WABVCTXBSTR@@@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
?Empty@CTXStringW@@QAEXXZ
?GetLCID@NLS@@YAKXZ
?TranslateToId@TXTradeList@@YAHPB_WPAG@Z
??8CTXBSTR@@QBE_NPB_W@Z
??8@YA_NPB_WABVCTXStringW@@@Z
??4CTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z
?GetTrade@TXTradeList@@YAHHPAGPAVCTXStringW@@@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?TrimLeft@CTXStringW@@QAEAAV1@XZ
??H@YA?AVCTXStringW@@ABV0@0@Z
?Insert@CTXStringW@@QAEHHPB_W@Z
?Delete@CTXStringW@@QAEHHH@Z
?Find@CTXStringW@@QBEHPB_WH@Z
?Trim@CTXStringW@@QAEAAV1@XZ
??H@YA?AVCTXStringW@@PB_WABV0@@Z
?Mid@CTXStringW@@QBE?AV1@H@Z
??8@YA_NABVCTXStringW@@0@Z
?Mid@CTXStringW@@QBE?AV1@HH@Z
??MCTXBSTR@@QBE_NABV0@@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
?Format@CTXStringW@@QAAXPB_WZZ
?Search@QQSearch@Util@@YA_NPB_W0PAH1@Z
?MakeLower@CTXStringW@@QAEAAV1@XZ
??9@YA_NABVCTXStringW@@0@Z
??0CTXBSTR@@QAE@H@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
??M@YA_NABVCTXStringW@@0@Z
?PropertyDWord@CFmtString@@QAEHPB_WK0@Z
??9@YA_NABVCTXStringW@@PB_W@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
?Right@CTXStringW@@QBE?AV1@H@Z
?GuidToString@Com@Util@@YAJABU_GUID@@PAPA_WH@Z
??0CTXBSTR@@QAE@PB_W@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
??YCTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
?GetLength@CTXStringW@@QBEHXZ
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?IsEmpty@CTXStringW@@QBE_NXZ
ord36
??0CTXStringW@@QAE@ABV0@@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
??8CTXBSTR@@QBE_NABV0@@Z
??0CTXStringW@@QAE@XZ
?GetTXDataStr@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXStringW@@@Z
?TranslateToName@TXTradeList@@YAHGPAVCTXStringW@@@Z
??9CTXBSTR@@QBE_NABV0@@Z
??8@YA_NABVCTXStringW@@PB_W@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
?IsEmpty@CTXBSTR@@QAEHXZ
??0CTXBSTR@@QAE@XZ
??ICTXBSTR@@QAEPAPA_WXZ
??BCTXBSTR@@QBEPA_WXZ
??1CTXBSTR@@QAE@XZ
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??1CTXStringW@@QAE@XZ
??BCTXStringW@@QBEPB_WXZ
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
??0CTXStringW@@QAE@PB_W@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
ord26
?Get@Metadata@Util@@YAJPAUITXData@@PA_WPAPA_W@Z
?GetAnchorResult@CGFAnchor@@QAE?AVCRect@@PAVVCalcSizeSupporter@@PAUtagSIZE@@@Z
?FreeData@Metadata@Util@@YAJAAPA_W@Z
??0CGFAnchor@@QAE@XZ
?GetBOOL@Metadata@Util@@YAJPAUITXData@@PA_WPAH@Z
?PopupMenu@GF@Util@@YAXPAUIGFMenuEx@@PAUIGFFrame@@@Z
?RawInitGFElementByXtml@GF@Util@@YAJPA_WPAUIGFElement@@10H@Z
?AddAnchor@CGFAnchor@@QAEXEEVCRect@@VCPoint@@@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@W4URLMODIFYLEVEL@12@0@Z
?TrackPopupMenuForAppbar@Misc@Util@@YAXPAUIGFMenuEx@@PAUIGFFrame@@HHH@Z
?GetChineseDayName@Date@Util@@YA?AVCTXBSTR@@E@Z
?GlobalToChinese@Date@Util@@YAHGEEPAGPAE1@Z
?GetChineseShengxiaoYearName@Date@Util@@YA?AVCTXBSTR@@EG@Z
?PopupBubbleTip@BubbleTipMgr@@YAJPAUIGFControl@@PA_W11UtagPOINT@@KH@Z
?IsEnableYaHei@Misc@Util@@YAHXZ
?Show@MsgBox@Util@@YAHPAUIGFFrame@@VCTXStringW@@1H@Z
?MessageBoxExW@Misc@Util@@YAHPAUIGFFrame@@PA_W1IPAUITXData@@PAPAU4@@Z
?GetChineseMonthNameEx@Date@Util@@YA?AVCTXBSTR@@GE@Z
GlobalAlloc
FlushInstructionCache
GetCurrentProcess
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
lstrcmpA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
Sleep
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GlobalLock
InterlockedCompareExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
GlobalUnlock
GetModuleFileNameW
GetModuleHandleW
lstrcmpiW
lstrlenW
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcessId
GetSystemTimeAsFileTime
GetLastError
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
RaiseException
GetThreadLocale
SetThreadLocale
GetProcAddress
InterlockedDecrement
GetDC
ReleaseDC
GetSystemMetrics
CopyRect
CallWindowProcW
DefWindowProcW
GetWindowLongW
SetWindowLongW
GetKeyState
IsWindow
OpenClipboard
EmptyClipboard
CloseClipboard
SetClipboardData
GetCursorPos
CharNextW
UnregisterClassA
GetDeviceCaps
SelectObject
GetObjectW
GetTextCharset
RegEnumKeyExW
RegSetValueExW
RegDeleteKeyW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
SHGetFileInfoW
CoCreateInstance
CoCreateGuid
CoTaskMemFree
StringFromCLSID
SysAllocString
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
SysFreeString
SysStringLen
ord31
ord15
ord30
ord32
ord58
ord61
ord23
ord64
ord22
ord18
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
_lock
_onexit
__clean_type_info_names_internal
_decode_pointer
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_crt_debugger_hook
_time64
??3@YAXPAX@Z
_CxxThrowException
_recalloc
__CxxFrameHandler3
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
free
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
??_V@YAXPAX@Z
memcpy_s
malloc
wcscpy_s
wcsncpy_s
_purecall
memmove_s
memset
memcpy
_encode_pointer
wcsncpy
_wtoi
_except_handler4_common
_unlock
__dllonexit
_initterm
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ