Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
667330b791c857f7f63950d8792f6f1e_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
667330b791c857f7f63950d8792f6f1e_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
667330b791c857f7f63950d8792f6f1e_JaffaCakes118
Size
333KB
MD5
667330b791c857f7f63950d8792f6f1e
SHA1
5de89c8f72464ccac2319f0fa584ebbb31bd8496
SHA256
56edc2ed9e8120a07a244a0c44f353bedfce343c84369110df67039c2fb5bcf4
SHA512
0aab62b07a863cde1d34ec304b99ca36a0ec3e19d63772a3d122d8c6cde83d4fa64d42c6c328a52e834aa1adc3dbcee9f3266276d101865aa08daf0c5fb5030a
SSDEEP
6144:fCqjL4uwdQ8sD549x7CDcPEcZwWTBQeJYozsODcTNgAowiOxaOahqFP:f9L4uwdQNDKbCD3cZwWTOMqgAow6qFP
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
e:\temp\p2papp\Release\TenioDL_DLL.pdb
ImmAssociateContext
socket
WSACleanup
WSAStartup
ntohl
htons
recv
htonl
WSAGetLastError
inet_addr
gethostbyname
ioctlsocket
closesocket
select
__WSAFDIsSet
connect
ntohs
send
SearchPathW
GetACP
GetLocaleInfoA
GetProcAddress
MultiByteToWideChar
GetModuleFileNameA
lstrlenA
WideCharToMultiByte
GetCurrentThreadId
OutputDebugStringA
InitializeCriticalSectionAndSpinCount
GetLocalTime
GetLastError
GetModuleHandleA
GetCurrentProcessId
VirtualQuery
DeleteFileA
TerminateProcess
EnterCriticalSection
LeaveCriticalSection
GetLongPathNameA
CreateFileA
CreateDirectoryA
OpenProcess
WriteFile
SetFilePointer
FindClose
GetPrivateProfileStringA
FindFirstFileA
FindNextFileA
DeleteCriticalSection
WritePrivateProfileStringA
lstrlenW
InterlockedDecrement
GetVersionExA
CloseHandle
WaitForSingleObject
LoadLibraryExA
FreeLibrary
Sleep
SetEvent
ReadFile
WaitNamedPipeA
ResetEvent
CreateNamedPipeA
SetNamedPipeHandleState
GetOverlappedResult
CreateEventA
ConnectNamedPipe
CancelIo
WaitForSingleObjectEx
GetWindowsDirectoryA
LoadLibraryA
HeapFree
DuplicateHandle
WriteProcessMemory
CreateProcessW
HeapAlloc
SetUnhandledExceptionFilter
InitializeCriticalSection
GetThreadLocale
GetProcessHeap
GetModuleFileNameW
GetCurrentProcess
VirtualAllocEx
SetErrorMode
GetPrivateProfileIntA
GetFileAttributesA
InterlockedExchange
GetTickCount
CopyFileA
SleepEx
GetSystemTimeAsFileTime
GlobalAlloc
GlobalFree
InterlockedCompareExchange
UnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
TerminateThread
IsBadReadPtr
lstrcpynA
InterlockedIncrement
PeekMessageA
TranslateMessage
DispatchMessageA
CreateWindowExA
DestroyWindow
SendMessageA
GetWindowLongA
MsgWaitForMultipleObjects
CloseWindow
RegisterClassA
KillTimer
SetTimer
UnregisterClassA
DefWindowProcA
SetWindowLongA
wsprintfW
MessageBoxA
PostMessageA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
ShellExecuteA
SHGetSpecialFolderPathA
CoCreateInstance
CLSIDFromProgID
CoUninitialize
CoInitializeEx
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoFreeLibrary
CoLoadLibrary
CoInitialize
CoCreateGuid
StringFromGUID2
SysAllocStringByteLen
VariantClear
SysFreeString
SysStringLen
SysAllocStringLen
tolower
strftime
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
_mbsicmp
??0exception@std@@QAE@ABQBD@Z
_snprintf_s
??0exception@std@@QAE@ABV01@@Z
fprintf
__iob_func
wcsncpy
strncpy
_mbsnbcpy
_vsnwprintf_s
free
memmove_s
_beginthreadex
_endthreadex
_mbsnbcat
realloc
calloc
_recalloc
malloc
ceil
fclose
toupper
fopen
fwrite
_mbsnbcmp
memset
memcpy
_wassert
strstr
strnlen
memmove
fread
ferror
ftell
fseek
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_splitpath_s
sprintf_s
strchr
_strnicmp
_purecall
_vsnprintf_s
strcpy_s
_localtime64_s
_access
strcat_s
_invalid_parameter_noinfo
_mbsrchr
_time64
strncpy_s
??2@YAPAXI@Z
printf
??_V@YAXPAX@Z
??_U@YAPAXI@Z
??3@YAXPAX@Z
rand
srand
__CxxFrameHandler3
_CxxThrowException
_getpid
_mbsnbcat_s
strspn
atoi
memchr
_mbschr
_CIsqrt
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?rbegin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$reverse_iterator@V?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@XZ
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
WTHelperProvDataFromStateData
WTHelperGetProvCertFromChain
WinVerifyTrust
WTHelperGetProvSignerFromChain
CertGetNameStringA
wnsprintfA
TenioDL_CleanUp
TenioDL_StartUp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ