Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
789b79bc401b34a1d4998af5a209bffe_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
789b79bc401b34a1d4998af5a209bffe_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
789b79bc401b34a1d4998af5a209bffe_JaffaCakes118
Size
385KB
MD5
789b79bc401b34a1d4998af5a209bffe
SHA1
e5a11e4249f03721ebd644e28a9f9417f5e945bf
SHA256
4ad63fa56ec3a5a345d53c040a6669f99874b6fefd2bf66bfaac103975f7b924
SHA512
717151e024761f8d9aec8a9cccb6eb231693011ed3a229102680e26e4bbd547b7e84f17da83abc6822191cc4ebd43166ee2ad5559642f2ec95d86ae2c731a436
SSDEEP
12288:eCOtBtMk8tZ92LOBAzp4SN8OFbtVq0Ew9neOBW+X9lj:ydLO6zp4/OdBj
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
e:\code\qqbuilder_QQ1.75_Intl_b6\Basic_Hummer3_VOB\Hummer2010\Output\Plugin\Com.Tencent.SNSApp\Bin\SNSApp.pdb
?Length@CTXBSTR@@QBEIXZ
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z
??0CTXStringW@@QAE@PB_W@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
??0CTXStringW@@QAE@XZ
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
??1CFmtString@@QAE@XZ
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
?PropertyStr@CFmtString@@QAEHPB_W0@Z
??0CFmtString@@QAE@XZ
??0CTXBSTR@@QAE@ABV0@@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
?CodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?DecodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
??0CCmdCodecBase@@QAE@XZ
?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z
?AddRef@CCmdCodecBase@@MAGKXZ
?Release@CCmdCodecBase@@MAGKXZ
?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z
?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z
??1CCmdCodecBase@@UAE@XZ
?GuidFromString@Com@Util@@YAJPA_WAAU_GUID@@@Z
??0CTXStringW@@QAE@ABV0@@Z
?GetTXDataBuf@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXBuffer@@@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?IsEmpty@CTXBSTR@@QAEHXZ
ord34
??9CTXBSTR@@QBE_NPB_W@Z
?Format@CTXStringW@@QAAXPB_WZZ
??8CTXBSTR@@QBE_NPB_W@Z
?IsInFullScreen@WinScreenStatus@Util@@YAHPAPAUHWND__@@PAH1PAKPAPA_W1@Z
?PropertyLong@CFmtString@@QAEHPB_WJ0@Z
?Copy@CTXBSTR@@QBEPA_WXZ
?PropertyDWord@CFmtString@@QAEHPB_WK0@Z
??YCTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
?Left@CTXStringW@@QBE?AV1@H@Z
??8CTXBSTR@@QBE_NABV0@@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
??4CTXBSTR@@QAEAAV0@ABV0@@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
??YCTXBSTR@@QAEAAV0@PB_W@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
?MakeLower@CTXStringW@@QAEAAV1@XZ
ord26
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?GetBSTR@CTXStringW@@QBEPA_WXZ
?GetTXDataStr@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXStringW@@@Z
?ConvertTXDataStringBundle@Convert@Util@@YAHPAUITXData@@@Z
?CodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?EnableUnicodeString@CCmdCodecBase@@IAEXH@Z
?DecodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?Detach@CTXBSTR@@QAEPA_WXZ
?CommitChange@FS@@YAHPB_W@Z
?RenameFile@FS@@YAHPB_W0@Z
?DeleteFileW@FS@@YAHPB_W@Z
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
??8CTXBSTR@@QBE_NPA_W@Z
??4CTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z
?CodeEndArray@CCmdCodecBase@@IAEXXZ
?CodeArrayStringLenHead@CCmdCodecBase@@IAEXW4CMDFIELDTYPE@@@Z
?CodeArrayLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@H@Z
?GetDecodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
?GetLength@CTXStringW@@QBEHXZ
?Find@CTXStringW@@QBEHPB_WH@Z
??BCTXStringW@@QBEPB_WXZ
??0CTXBSTR@@QAE@PB_W@Z
??1CTXBSTR@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
??ICTXBSTR@@QAEPAPA_WXZ
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
??0CTXBSTR@@QAE@XZ
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
?IsFileExist@FS@@YAHPB_W@Z
?CombineQNC@FS@@YA?AVCTXStringW@@PB_W0@Z
?GetRegulatedTime@Time@Util@@YA_NAA_J@Z
??1CTXStringW@@QAE@XZ
?Right@CTXStringW@@QBE?AV1@H@Z
??0CTXStringW@@QAE@PA_W@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
?RawInitGFElementByXtml@GF@Util@@YAJPA_WPAUIGFElement@@10H@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?CreateMsgPack@Msg@Util@@YAHPAPAUITXMsgPack@@@Z
?GetAccountValue@Account@Util@@YA?AVCTXStringW@@K@Z
?GetRawName@Contact@Util@@YA?AVCTXStringW@@K@Z
?GetPublicHeadFile@Contact@Util@@YA?AVCTXStringW@@K@Z
?SaveMsg@Msg@Util@@YAHPB_WKKKPAUITXMsgPack@@PAUITXData@@@Z
?GetSelfUin@Contact@Util@@YAKXZ
?SetMsgTime@Msg@Util@@YAXPAUITXMsgPack@@_J@Z
?ConvertCharFormatRichEditToMsgPack@Msg@Util@@YAHABU_charformatw@@PAPAUITXData@@@Z
?GetPublicName@Contact@Util@@YA?AVCTXStringW@@K@Z
?AddToRecentCommList@Misc@Util@@YAXKE@Z
?GetIMProductEx@Contact@Util@@YAEK@Z
?GetIMVersion@Contact@Util@@YAGK@Z
?IsStranger@Contact@Util@@YAHK@Z
?IsBuddy@Contact@Util@@YAHK@Z
?GetStatus@Contact@Util@@YAGK@Z
?GetCombineName@Contact@Util@@YA?AVCTXStringW@@K@Z
?IsInBlackList@Contact@Util@@YAHK@Z
?IsPrevented@Contact@Util@@YAHK@Z
?GetMsgTime@Msg@Util@@YA_JPAUITXMsgPack@@@Z
?Get32ByteValueAddedSign@Misc@Util@@YA?AVCTXStringW@@XZ
?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@W4URLMODIFYLEVEL@12@0@Z
?QueryTXChatSession@ChatSession@Util@@YAHKHPAPAUIAFChatSession@@@Z
?SendAutoReplyMsgToBuddy@ChatSession@Util@@YAJK@Z
?ShowFrameInEdit@ChatSession@Util@@YAHKHPAUITXData@@@Z
?GetTXChatSession@ChatSession@Util@@YAHKHPAUITXData@@PAPAUIAFChatSession@@@Z
?GetChatSessionMainHWnd@ChatSession@Util@@YAPAUHWND__@@KH@Z
?OpenChatSession@ChatSession@Util@@YAXKW4CFChatType@ChatFrame@@PAUITXData@@@Z
?FlashContactChatFrameWnd@ChatSession@Util@@YAXK@Z
?IsChatSessionOpen@ChatSession@Util@@YAHKH@Z
?OpenContactChatSession@ChatSession@Util@@YAXKPAUITXData@@@Z
?WriteMsgInChatSession@ChatSession@Util@@YAXKHPAUITXMsgPack@@KPAUITXData@@@Z
?FlashChatFrameWnd@ChatSession@Util@@YAHKH@Z
?GetContactChatSessionMainHWnd@ChatSession@Util@@YAPAUHWND__@@K@Z
?WriteMsgTipInChatSession@ChatSession@Util@@YAXKHW4IconIndex@@VCTXStringW@@H@Z
?WriteTipInContactChatSession@ChatSession@Util@@YAHKPAUITXData@@@Z
?GetChatSessionViewFrame@ChatSession@Util@@YAHKHPAPAUIGFFrame@@@Z
?IsWebQQUser@WebQQ@Contact@Util@@YAHK@Z
?InitDefaultCharFormat@AFChatSession@Util@@YAHAAU_charformatw@@@Z
?MessageBoxW@Misc@Util@@YAHPAUIGFFrame@@VCTXStringW@@1H@Z
?CreateMsgTipPack@AFChatSession@Util@@YAHW4IconIndex@@VCTXStringW@@PAPAUITXMsgPack@@@Z
?GetAsyncMainBtnStateByLogicalJudge@Misc@Util@@YAHXZ
GetACP
InterlockedExchange
HeapReAlloc
HeapSize
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentProcessId
GetLocaleInfoA
EnterCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetVersionExA
InitializeCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetLastError
lstrlenW
lstrcmpiW
GetModuleHandleW
GetModuleFileNameW
InterlockedIncrement
InterlockedDecrement
SetThreadLocale
GetThreadLocale
HeapFree
GetProcessHeap
HeapAlloc
RaiseException
HeapDestroy
GetSystemTimeAsFileTime
UnregisterClassA
PtInRect
GetKeyState
GetSystemMetrics
FlashWindow
IsWindow
GetWindowRect
MoveWindow
OffsetRect
CharNextW
GetCursorPos
WindowFromPoint
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW
RegEnumKeyExW
SHGetFileInfoW
CoCreateInstance
StringFromCLSID
CoTaskMemFree
VariantClear
VariantChangeType
VariantInit
VariantCopy
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
SysStringLen
SysFreeString
ord58
ord32
ord31
ord15
ord18
ord22
ord64
ord23
ord61
ord30
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
memmove_s
memset
_localtime64_s
wcsncpy_s
?terminate@@YAXXZ
_except_handler4_common
_unlock
__dllonexit
free
malloc
memcpy_s
_time64
_purecall
_recalloc
??_V@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
_encode_pointer
_lock
_onexit
_decode_pointer
__clean_type_info_names_internal
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
wcscpy_s
??3@YAXPAX@Z
__CxxFrameHandler3
_CxxThrowException
_invalid_parameter_noinfo
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ