Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
71202ad2d034e7acecc6d69b23e09d96_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
71202ad2d034e7acecc6d69b23e09d96_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
71202ad2d034e7acecc6d69b23e09d96_JaffaCakes118
Size
153KB
MD5
71202ad2d034e7acecc6d69b23e09d96
SHA1
a98bd9e8b1c626b3e14f49a57de9f3ba64aee290
SHA256
1b710d689c2233c0ffaffbcb8189eed5280a54acb618d7da3cf96934234238d7
SHA512
84add36dd54eb58173d29226b2c1f4c7aa7b7f152a70093e102f7e995eea8023ca2f6ab14c3054ea8f258befad7825598ad2a92b8797df630155393f7dcacae3
SSDEEP
3072:MOENnrvxQdi0mllIe2KCw8vrVNA3xoXnl5MjTchDEAePtLfnBr9xb:aMdrm92k8GiocHgxfnBvb
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?gzload@@YAIPAXIPAEI@Z
ord5261
ord2446
ord2124
ord5277
ord3402
ord4627
ord3721
ord800
ord795
ord543
ord540
ord567
ord803
ord5631
ord4275
ord755
ord470
ord2864
ord413
ord823
ord2379
ord2393
ord860
ord5583
ord924
ord922
ord2818
ord537
ord6453
ord613
ord289
ord6283
ord6282
ord2381
ord2107
ord5450
ord5440
ord6383
ord6394
ord2841
ord5572
ord2915
ord861
ord5710
ord4204
ord4129
ord539
ord3701
ord500
ord5860
ord772
ord6142
ord2380
ord3517
ord1168
ord5821
ord3662
ord414
ord713
ord6141
ord3573
ord3626
ord2414
ord640
ord2450
ord1640
ord323
ord1641
ord3742
ord818
ord2859
ord2152
ord6307
ord4167
ord521
ord812
ord559
ord941
ord939
ord1727
ord801
ord6883
ord541
ord3702
ord501
ord773
ord5600
ord3825
ord1083
ord4317
ord2971
ord5759
ord6192
ord5756
ord6186
ord4330
ord6189
ord6021
ord6172
ord5873
ord5789
ord5794
ord5678
ord5736
ord5579
ord5571
ord6061
ord5864
ord3596
ord3571
ord5785
ord2405
ord665
ord6385
ord354
ord1200
ord2820
ord3811
ord1099
ord3693
ord5787
ord4133
ord4297
ord5788
ord6144
ord5862
ord926
ord5442
ord353
ord2764
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3953
ord2982
ord3147
ord3259
ord4465
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord6055
ord3584
ord3663
ord912
ord699
ord397
ord858
ord535
ord815
ord825
ord561
ord3738
ord4424
ord4622
ord4080
ord4202
ord3079
ord3136
ord1116
ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord6467
ord1578
ord600
ord826
ord269
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord5621
_adjust_fdiv
malloc
_initterm
free
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
_onexit
__dllonexit
atol
floor
_beginthreadex
getenv
_CxxThrowException
memmove
clock
_mbsicoll
_mbsicmp
strtok
_ftol
atoi
_purecall
__CxxFrameHandler
LocalAlloc
LocalFree
InterlockedIncrement
MultiByteToWideChar
lstrlenA
GetExitCodeThread
TerminateThread
WaitForSingleObject
SetThreadPriority
ResumeThread
CloseHandle
Sleep
GlobalFree
InterlockedDecrement
FindFirstFileA
FindNextFileA
FindClose
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FindResourceA
SizeofResource
LoadResource
LockResource
GlobalAlloc
GlobalLock
GlobalUnlock
GetLastError
PtInRect
SetClipboardData
EmptyClipboard
OpenClipboard
TabbedTextOutA
GrayStringA
SetCursor
LoadCursorA
DestroyCursor
GetCursor
SetRect
GetClientRect
PostMessageA
GetParent
InvalidateRect
CopyRect
InflateRect
SetFocus
ReleaseDC
GetDC
EnableWindow
OffsetRect
MessageBoxA
FillRect
DrawTextA
SendMessageA
GetCursorPos
IntersectRect
CloseClipboard
SetPixel
CreateCompatibleDC
CreateCompatibleBitmap
GetBkMode
SetTextColor
CreateFontA
GetTextExtentPoint32A
SetBkMode
GetDeviceCaps
CreateSolidBrush
FillRgn
CreatePen
SelectObject
MoveToEx
LineTo
CombineRgn
SetRectRgn
GetClipRgn
SelectClipRgn
BitBlt
DeleteObject
CreateRectRgn
StretchBlt
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
Rectangle
CreatePenIndirect
OleRun
CreateStreamOnHGlobal
CoCreateInstance
SysAllocString
VariantInit
VariantClear
VariantChangeType
SysStringByteLen
SysAllocStringByteLen
GetErrorInfo
SysFreeString
InternetCombineUrlA
InternetOpenA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetCrackUrlA
InternetConnectA
GdipCreateSolidFill
GdipCloneBrush
GdipFlush
GdipSetSmoothingMode
GdipSetPageScale
GdipGetDpiX
GdipGetImageThumbnail
GdipDeletePen
GdipCreatePen1
GdipGetImagePixelFormat
GdipDrawArcI
GdipFillEllipseI
GdipCloneBitmapAreaI
GdipBitmapSetPixel
GdipFillRectangleI
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipDrawImageRectRectI
GdipSetImagePalette
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateImageAttributes
GdipSetImageAttributesColorMatrix
GdipDrawImageRectI
GdipDrawImageRectRect
GdipDisposeImageAttributes
GdipDeleteGraphics
GdipDisposeImage
GdipDeleteBrush
GdipFree
GdipCloneImage
GdipGetImageGraphicsContext
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipCreateFromHDC
GdipGetImageWidth
GdipGetImageHeight
GdipBitmapGetPixel
GdipCreateBitmapFromScan0
GdipAlloc
??0HDBttPageMove@@QAE@XZ
??0HDDMBook3@@QAE@XZ
??0HDLinkMgr@@QAE@ABV0@@Z
??0HDLinkMgr@@QAE@XZ
??0HDMouseCursor@@QAE@ABV0@@Z
??0HDMouseCursor@@QAE@XZ
??0HDPrintMgr@@QAE@ABV0@@Z
??0HDPrintMgr@@QAE@XZ
??0HDSearch@@QAE@ABV0@@Z
??0HDSearch@@QAE@XZ
??1HDBttPageMove@@UAE@XZ
??1HDDMBook3@@UAE@XZ
??1HDLinkMgr@@UAE@XZ
??1HDMouseCursor@@UAE@XZ
??1HDPrintMgr@@UAE@XZ
??1HDSearch@@UAE@XZ
??4HDLinkMgr@@QAEAAV0@ABV0@@Z
??4HDMouseCursor@@QAEAAV0@ABV0@@Z
??4HDPrintMgr@@QAEAAV0@ABV0@@Z
??4HDSearch@@QAEAAV0@ABV0@@Z
??_7HDBttPageMove@@6B@
??_7HDDMBook3@@6B@
??_7HDLinkMgr@@6B@
??_7HDMouseCursor@@6B@
??_7HDPrintMgr@@6B@
??_7HDSearch@@6B@
?Draw@HDBttPageMove@@QAEXPAUHDC__@@VCRect@@H@Z
?DrawBook@HDDMBook3@@QAEXPAUHDC__@@PBUtagRECT@@@Z
?DrawBookEffect@HDDMBook3@@QAEXPAUHDC__@@PBUtagRECT@@@Z
?DrawBookInner@HDDMBook3@@IAEXPAVCDC@@VCRect@@@Z
?DrawBookPrint@HDDMBook3@@QAEXPAUHDC__@@PBUtagRECT@@H@Z
?DrawInvertRgn@HDDMBook3@@QAEXPAUHDC__@@VCRect@@@Z
?DrawPreprocess@HDDMBook3@@IAEXH@Z
?DrawPreprocess@HDDMBook3@@IAEXPAVHDPage@@@Z
?DrawTranparent@HDBttPageMove@@QAEXAAVGraphics@Gdiplus@@HHPAVBitmap@3@M@Z
?FreeLinkInfoArray@HDLinkMgr@@QAEXAAV?$CTypedPtrArray@VCPtrArray@@PAU_SDF_LINKINFO@@@@@Z
?GetBookRect@HDDMBook3@@QAE?AUtagRECT@@XZ
?GetBookSize@HDDMBook3@@QAE?AUtagSIZE@@XZ
?GetCurrPageNum@HDDMBook3@@QAEHXZ
?GetDevMode@HDPrintMgr@@QAEPAXXZ
?GetKDFHeader@HDDMBook3@@QAEPAVKDFHeader@hd@@XZ
?GetLinkData@HDLinkMgr@@QAEPAV?$CTypedPtrArray@VCPtrArray@@PAU_SDF_LINKINFO@@@@H@Z
?GetLinkInfo@HDLinkMgr@@QAEHV?$_com_ptr_t@V?$_com_IIID@UIXMLDOMNode@MSXML2@@$1?_GUID_2933bf80_7b36_11d2_b20e_00c04f983e60@@3U__s_GUID@@A@@@@AAU_SDF_LINKINFO@@@Z
?GetLinkInfo@HDLinkMgr@@QAEHV?$_com_ptr_t@V?$_com_IIID@UIXMLDOMNode@MSXML2@@$1?_GUID_2933bf80_7b36_11d2_b20e_00c04f983e60@@3U__s_GUID@@A@@@@AAU_SDF_LINKINFO@@AAVXml@hd@@@Z
?GetLogString@HDDMBook3@@QAE?AVCString@@XZ
?GetMargin@HDPrintMgr@@QAE?AUtagRECT@@XZ
?GetMarginX@HDBttPageMove@@QAEHXZ
?GetMarginY@HDBttPageMove@@QAEHXZ
?GetMessageMap@HDDMBook3@@MBEPBUAFX_MSGMAP@@XZ
?GetNextImage@HDBttPageMove@@QAEPAVBitmap@Gdiplus@@XZ
?GetOrientation@HDPrintMgr@@QAEFXZ
?GetPageCount@HDDMBook3@@QAEHXZ
?GetPageLayout@HDDMBook3@@QAEHXZ
?GetPaperRect@HDPrintMgr@@QAEHAAVCRect@@0@Z
?GetPaperRectFitToDc@HDPrintMgr@@QAEHPBUtagRECT@@AAVCRect@@1@Z
?GetPaperSize@HDPrintMgr@@QAEFXZ
?GetPosType@HDBttPageMove@@QAEHXZ
?GetPrevImage@HDBttPageMove@@QAEPAVBitmap@Gdiplus@@XZ
?GetViewPageCount@HDDMBook3@@QAEHXZ
?GetZoomRatio@HDDMBook3@@QAENXZ
?Init@HDBttPageMove@@QAEXPAUHINSTANCE__@@HH@Z
?Init@HDPrintMgr@@QAEHXZ
?IsChangeMouseOver@HDBttPageMove@@QAEHHH@Z
?IsMouseOverNext@HDBttPageMove@@QAEHHH@Z
?IsMouseOverPrev@HDBttPageMove@@QAEHHH@Z
?LButtonClickHandler@HDDMBook3@@IAEXIVCPoint@@@Z
?LoadBttImage@HDBttPageMove@@AAEXPAUHINSTANCE__@@HH@Z
?LoadData@HDLinkMgr@@QAEHPAVKDFHeader@hd@@@Z
?LoadData@HDSearch@@QAEHXZ
?LoadImageFromResource@HDBttPageMove@@AAEPAVBitmap@Gdiplus@@PAUHINSTANCE__@@H@Z
?LoadSDF@HDDMBook3@@QAEHPBDJ@Z
?MakeBackupDC@HDDMBook3@@IAEXAAVHDMemDC@@PBUtagRECT@@@Z
?MoveByOffset@HDDMBook3@@QAEXHH@Z
?MoveToEndPage@HDDMBook3@@QAEHXZ
?MoveToFirstPage@HDDMBook3@@QAEHXZ
?MoveToNextPage@HDDMBook3@@QAEXXZ
?MoveToPage@HDDMBook3@@QAEXH@Z
?MoveToPage@HDDMBook3@@QAEXHH@Z
?MoveToPrevPage@HDDMBook3@@QAEXXZ
?OnCreate@HDDMBook3@@IAEHPAUtagCREATESTRUCTA@@@Z
?OnDestroy@HDDMBook3@@IAEXXZ
?OnEndAsyncLoad@HDDMBook3@@IAEJIJ@Z
?OnEraseBkgnd@HDDMBook3@@IAEHPAVCDC@@@Z
?OnLButtonDown@HDDMBook3@@IAEXIVCPoint@@@Z
?OnLButtonUp@HDDMBook3@@IAEXIVCPoint@@@Z
?OnMouseMove@HDDMBook3@@IAEXIVCPoint@@@Z
?OnMouseWheel@HDDMBook3@@IAEHIFVCPoint@@@Z
?OnPaint@HDDMBook3@@IAEXXZ
?OnSize@HDDMBook3@@IAEXIHH@Z
?ParseStrType2Int@HDLinkMgr@@IAEHVCString@@@Z
?PrepareSlide@HDDMBook3@@QAEHH@Z
?RemoveTempImageFile@HDDMBook3@@AAEXXZ
?Search@HDSearch@@QAE?AV?$_com_ptr_t@V?$_com_IIID@UIXMLDOMNodeList@MSXML2@@$1?_GUID_2933bf82_7b36_11d2_b20e_00c04f983e60@@3U__s_GUID@@A@@@@PBD@Z
?SearchInPage@HDSearch@@QAE?AV?$_com_ptr_t@V?$_com_IIID@UIXMLDOMNodeList@MSXML2@@$1?_GUID_2933bf82_7b36_11d2_b20e_00c04f983e60@@3U__s_GUID@@A@@@@PBDH@Z
?SetBaseUrl@HDLinkMgr@@QAEXPBD@Z
?SetBookRect@HDDMBook3@@QAEXPBUtagRECT@@@Z
?SetBttPageMove@HDDMBook3@@QAEXPAVHDBttPageMove@@@Z
?SetCursorDefault@HDMouseCursor@@QAEXXZ
?SetCursorLink@HDMouseCursor@@QAEXXZ
?SetFlipSpeed@HDDMBook3@@QAEXH@Z
?SetHighlightRect@HDDMBook3@@QAEXHPBUtagRECT@@@Z
?SetLinkData@HDLinkMgr@@QAEXPAVKDFHeader@hd@@@Z
?SetMargin@HDPrintMgr@@QAEXPBUtagRECT@@@Z
?SetMouseCursor@HDDMBook3@@QAEXPAVHDMouseCursor@@@Z
?SetOrientation@HDPrintMgr@@QAEXF@Z
?SetPageLayout@HDDMBook3@@QAEXH@Z
?SetPageLinks@HDDMBook3@@IAEXXZ
?SetPageNumDisplay@HDDMBook3@@QAEXH@Z
?SetPaperSize@HDPrintMgr@@QAEXF@Z
?SetPrintMode@HDDMBook3@@QAEXHPAVHDPrintMgr@@@Z
?SetPrivilege@HDDMBook3@@QAEXAAVCPrivilege@@@Z
?SetProperty@HDBttPageMove@@QAEXHHH@Z
?SetSDFUrl@HDDMBook3@@QAEXPBDJ0@Z
?SetSearchData@HDSearch@@QAEXPAVKDFHeader@hd@@@Z
?SetSearchHighlightPage@HDDMBook3@@QAEXH@Z
?SetSearchResultList@HDDMBook3@@QAEXV?$_com_ptr_t@V?$_com_IIID@UIXMLDOMNodeList@MSXML2@@$1?_GUID_2933bf82_7b36_11d2_b20e_00c04f983e60@@3U__s_GUID@@A@@@@@Z
?SetSelectTextMode@HDDMBook3@@QAEHH@Z
?SetShowHighlight@HDDMBook3@@QAEXH@Z
?SetStartLayout@HDDMBook3@@QAEXH@Z
?SetStartLoadPage@HDDMBook3@@QAEXH@Z
?SetStartZoomRatio@HDDMBook3@@QAEXN@Z
?SetViewPageCount@HDDMBook3@@QAEXH@Z
?SetZoomDegree@HDDMBook3@@QAEXN@Z
?TranslateSearchRect@HDLinkMgr@@QAE?AUtagRECT@@PBD@Z
?TranslateSearchRect@HDSearch@@QAE?AUtagRECT@@PBD@Z
?UnloadBttImage@HDBttPageMove@@AAEXXZ
?Zoom@HDDMBook3@@QAEXH@Z
?Zoom@HDDMBook3@@QAEXNH@Z
?ZoomFitView@HDDMBook3@@QAEXXZ
?_GetBaseMessageMap@HDDMBook3@@KGPBUAFX_MSGMAP@@XZ
?_messageEntries@HDDMBook3@@0QBUAFX_MSGMAP_ENTRY@@B
?messageMap@HDDMBook3@@1UAFX_MSGMAP@@B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ