Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
69fe9177faadfc0d69047f99d7980ba2_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
69fe9177faadfc0d69047f99d7980ba2_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
69fe9177faadfc0d69047f99d7980ba2_JaffaCakes118
Size
1.0MB
MD5
69fe9177faadfc0d69047f99d7980ba2
SHA1
35fb7643e41153d9c0b25ac8f12998b565cef94b
SHA256
1f240cf1ca2b9bea7d7f01d7f99c544c8939c35bee01e2cfb00c78e8c59f16f2
SHA512
8d8f7cabda99520d001a642dab46b521b6ae59cafaae5e9029b97b85fa5e8583d706ef0ebdbd0f68218eeaba9cf9636e1790f8fb51d43b3ec022a401db0ab8e5
SSDEEP
24576:IhaHsTJXvHaVBqO5K+nHZPxpD0GWlPcKjecIBpAIk:Isi6BqOHHZPxpD0GWlPcKSNk
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LocalFree
FormatMessageW
GetTickCount
MoveFileW
GetSystemInfo
FlushInstructionCache
GetCurrentProcess
Module32NextW
Module32FirstW
GetCurrentProcessId
GetModuleFileNameA
DeviceIoControl
CreateFileA
GetVolumeInformationA
GlobalFree
GlobalAlloc
IsBadStringPtrW
DisableThreadLibraryCalls
TlsAlloc
TlsFree
Sleep
GlobalAddAtomW
GlobalDeleteAtom
CreateMutexW
OpenMutexW
lstrcpynW
TerminateThread
CreateThread
SetEvent
DeleteFileW
WaitForSingleObject
CreateEventW
lstrlenW
WideCharToMultiByte
CloseHandle
LoadLibraryA
ReadFile
LoadLibraryW
OutputDebugStringA
GetVersion
ResumeThread
GetProcAddress
GetModuleHandleW
IsBadCodePtr
MoveFileExW
lstrcmpW
VirtualProtect
GlobalLock
GlobalSize
GlobalUnlock
LoadLibraryExW
ReadProcessMemory
GetUserDefaultLangID
FindResourceW
LoadResource
LockResource
SizeofResource
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesW
RemoveDirectoryW
CreateDirectoryW
GetWindowsDirectoryA
GetShortPathNameA
WritePrivateProfileStructW
GetPrivateProfileStructW
GetLongPathNameW
LocalAlloc
WriteFile
GetFileTime
CreateProcessW
GetWindowsDirectoryW
GetTempPathW
GetTempFileNameW
GetPrivateProfileStringW
GetPrivateProfileIntW
CreateFileW
GetFileAttributesW
GetFileSize
UnmapViewOfFile
OpenFileMappingW
CreateFileMappingW
MapViewOfFile
FreeLibrary
GetACP
WritePrivateProfileStringW
lstrcmpiW
GetShortPathNameW
TlsGetValue
TlsSetValue
FindFirstFileW
FindNextFileW
FindClose
lstrcpynA
ResetEvent
MultiByteToWideChar
GetVersionExW
InterlockedIncrement
IsBadReadPtr
lstrcmpA
lstrcmpiA
lstrlenA
InterlockedDecrement
InterlockedCompareExchange
OpenEventW
InterlockedExchange
GetSystemDirectoryW
GetModuleFileNameW
GetModuleHandleA
GetLastError
SetLastError
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CopyFileW
InitializeCriticalSection
LoadMenuW
EnableWindow
SetForegroundWindow
InsertMenuItemW
TrackPopupMenu
IsMenu
CallWindowProcW
FrameRect
SetWindowRgn
GetWindowRgn
SetRect
CreatePopupMenu
SetCursor
IsChild
GetSubMenu
ClientToScreen
EndPaint
BeginPaint
CheckRadioButton
IsWindowEnabled
ReleaseCapture
RegisterClassExW
MoveWindow
SetScrollPos
GetScrollInfo
GetFocus
ShowScrollBar
SetScrollInfo
IsWindowUnicode
GetWindowLongA
GetClassInfoExW
DestroyMenu
EndMenu
GetWindowDC
GetSysColor
GetClassLongW
SetClassLongW
SendDlgItemMessageW
SetFocus
PeekMessageW
LoadBitmapW
DrawIconEx
LoadIconW
DrawFocusRect
IsWindowVisible
InvalidateRect
IsWindow
GetDlgItem
SetWindowPos
GetWindowLongW
GetClientRect
ScreenToClient
GetWindowRect
LockWindowUpdate
GetMenuState
GetWindowTextLengthW
GetKeyState
EnumChildWindows
TrackPopupMenuEx
FindWindowW
GetForegroundWindow
SendMessageTimeoutW
DrawEdge
PostThreadMessageW
keybd_event
SetWindowLongA
DeleteMenu
InsertMenuW
SetMenuItemInfoW
DestroyIcon
SetCapture
GetMessageW
TranslateMessage
DispatchMessageW
DialogBoxParamW
FindWindowExW
SendMessageW
SetPropW
GetSystemMetrics
RemovePropW
SetWindowLongW
MapWindowPoints
ShowCursor
mouse_event
PtInRect
IsDlgButtonChecked
UnhookWindowsHookEx
PostMessageW
GetPropW
GetParent
DrawFrameControl
GetDlgCtrlID
SetRectEmpty
LoadImageW
EndDialog
CheckDlgButton
RegisterClassW
GetMenuItemInfoW
UpdateWindow
KillTimer
SetTimer
FillRect
GetWindowTextW
InflateRect
GetDC
DrawTextW
ReleaseDC
WindowFromPoint
GetClassNameA
EnumWindows
GetMenuItemCount
GetMenuItemRect
OffsetRect
CopyRect
GetCursorPos
MenuItemFromPoint
GetMenuItemID
SetWindowTextW
GetClassInfoW
DefWindowProcW
LoadCursorW
GetSysColorBrush
SystemParametersInfoW
UnregisterHotKey
RegisterHotKey
GetWindow
CreateDialogParamW
IsRectEmpty
GetMenuStringW
SetMenuInfo
GetMenuInfo
RemoveMenu
RegisterWindowMessageA
GetComboBoxInfo
LoadStringW
MessageBoxW
RegisterWindowMessageW
CreateWindowExW
GetWindowThreadProcessId
CallNextHookEx
GetClassNameW
SetWindowsHookExW
DestroyWindow
ShowWindow
GetCurrentObject
PatBlt
FillRgn
CreatePolygonRgn
SetBkColor
SetTextColor
SetPixel
CreateFontIndirectW
DeleteObject
SelectObject
SetBkMode
DeleteDC
GetTextExtentPoint32W
GetStockObject
FrameRgn
CombineRgn
CreateRoundRectRgn
GetPixel
CreateRectRgn
CreateRectRgnIndirect
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetObjectW
LineTo
MoveToEx
CreatePen
CreateSolidBrush
RoundRect
StretchBlt
GetTextExtentPointW
SetTokenInformation
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegEnumValueW
RegDeleteValueW
RegCloseKey
OpenProcessToken
GetLengthSid
CreateProcessAsUserW
DuplicateTokenEx
GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
RegEnumKeyExW
ShellExecuteExW
SHGetSpecialFolderPathW
ShellExecuteW
ExtractIconExW
CoTaskMemFree
StringFromIID
OleInitialize
OleUninitialize
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
OleRun
CLSIDFromString
StringFromGUID2
CoInitialize
CoCreateGuid
RegisterDragDrop
RevokeDragDrop
ReleaseStgMedium
SysStringLen
SysAllocStringLen
SafeArrayAccessData
SafeArrayUnaccessData
SysFreeString
SysAllocString
VariantInit
VariantClear
DispInvoke
SafeArrayCreateVector
RegisterTypeLi
LoadTypeLi
SysAllocStringByteLen
SysStringByteLen
VariantChangeType
LoadRegTypeLi
DispGetIDsOfNames
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?find_first_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IIPBGI@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?resize@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
ImageList_Create
ImageList_ReplaceIcon
ImageList_Destroy
ImageList_Draw
StrStrIA
StrCpyNW
StrStrW
PathParseIconLocationW
StrRStrIW
PathIsDirectoryW
StrChrW
StrCmpW
StrStrA
StrChrA
SHGetValueW
PathIsUNCW
PathAppendA
PathRemoveBlanksW
PathRemoveBackslashW
PathStripToRootW
PathFindExtensionW
wnsprintfW
SHDeleteValueW
SHSetValueW
SHDeleteKeyW
StrStrIW
PathRemoveExtensionW
StrCmpIW
StrCmpNIW
PathRemoveFileSpecW
PathAddExtensionW
PathAppendW
PathFindFileNameW
PathFileExistsW
StrCmpNW
wnsprintfA
URLDownloadToCacheFileW
URLDownloadToFileW
IsValidURL
InternetGetCookieA
InternetCrackUrlA
InternetCrackUrlW
InternetSetCookieW
InternetSetCookieA
DeleteUrlCacheEntryW
InternetCloseHandle
InternetReadFile
InternetQueryDataAvailable
InternetOpenUrlW
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
HttpAddRequestHeadersW
_wcsnicmp
calloc
_iob
exit
_strlwr
_strnicmp
_strcmpi
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
?terminate@@YAXXZ
_onexit
__dllonexit
_CxxThrowException
_wcslwr
isspace
isalnum
isalpha
iswdigit
iswxdigit
bsearch
fputc
fprintf
wcsrchr
_lseek
_close
_write
_read
_open
malloc
tolower
ftell
fread
strrchr
fopen
rewind
fgets
strstr
fputs
fseek
strncmp
printf
abs
strchr
toupper
_itow
_snprintf
wcsncat
wcsncpy
wcscmp
wcsstr
wcscpy
srand
fgetc
wcschr
_wfopen
fwrite
fclose
_wtmpnam
wcstok
_wtoi
_wtol
strtok
atol
wcslen
_ftol
memcmp
strlen
atoi
rand
memcpy
strcmp
strncpy
_snwprintf
time
localtime
_purecall
free
memmove
realloc
_except_handler3
_wcsicmp
??2@YAPAXI@Z
memset
_EH_prolog
__CxxFrameHandler
TransparentBlt
AlphaBlend
ImmSetCompositionWindow
ImmGetContext
GetAdaptersInfo
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
htons
ntohl
EnumProcessModules
AccessibleObjectFromPoint
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VistaRegisterPrscrnActiveX
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ