Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
820ff8a68acd145be8047372ad273a88_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
820ff8a68acd145be8047372ad273a88_JaffaCakes118.dll
Resource
win10v2004-20240730-en
Target
820ff8a68acd145be8047372ad273a88_JaffaCakes118
Size
221KB
MD5
820ff8a68acd145be8047372ad273a88
SHA1
90aae1b77903f5789fcd3080a85f90487ee813d0
SHA256
2f891479fe4b2e0743112b7116256401db6a98c189c7de72b380a201c1bbd62e
SHA512
72797c5a74f23dc53ceaf0294f133986bc8e8f55969e66a340cb09ce76f262136f5a455ad498b570bbace2b1c379e437cfda6077f7549fcec708acd58857f194
SSDEEP
3072:xG3Yp0+w1HhQc1gVl+UKRRS+Kh8MF7OX+k5XtM3UcpPiDfmzbkknWBI3Kd/feJXt:x/W9B87q9O+YWPdY9P94+DlT6q07w
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
GetAdaptersInfo
socket
WSAStartup
WSACleanup
closesocket
select
WSASocketA
sendto
htons
gethostbyname
inet_addr
recvfrom
_adjust_fdiv
_initterm
_onexit
__dllonexit
??1type_info@@UAE@XZ
_endthreadex
getenv
strncat
_getcwd
_mbsicmp
_mbscmp
_beginthreadex
_ftol
tolower
atoi
strncmp
isspace
fgetc
_get_osfhandle
_commit
_sopen
_access
_chdir
_utime
_splitpath
mktime
strncpy
qsort
strcoll
realloc
_vsnprintf
memchr
memmove
srand
rand
_purecall
time
_CxxThrowException
??0exception@@QAE@XZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
?what@exception@@UBEPBDXZ
??3@YAXPAX@Z
__CxxFrameHandler
calloc
fseek
fflush
free
fclose
fwrite
sprintf
malloc
_errno
fopen
ftell
??2@YAPAXI@Z
_close
_write
_tell
_read
_lseek
_chsize
_stricmp
_strlwr
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$ctype@D@std@@QAE@PBF_NI@Z
??0bad_cast@std@@QAE@PBD@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??1?$ctype@D@std@@UAE@XZ
?id@?$ctype@D@std@@2V0locale@2@A
?_Id_cnt@id@locale@std@@0HA
?_Getfacet@locale@std@@QBEPBVfacet@12@I_N@Z
?_Iscloc@locale@std@@QBE_NXZ
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
?do_tolower@?$ctype@D@std@@MBEPBDPADPBD@Z
?do_tolower@?$ctype@D@std@@MBEDD@Z
?do_toupper@?$ctype@D@std@@MBEPBDPADPBD@Z
?do_toupper@?$ctype@D@std@@MBEDD@Z
?_Init@locale@std@@CAPAV_Locimp@12@XZ
?_Global@_Locimp@locale@std@@0PAV123@A
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??1locale@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADPAD0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Xran@std@@YAXXZ
?_Xlen@std@@YAXXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
ord1949
ord6394
ord5450
ord6383
ord5440
ord2135
ord2514
ord2379
ord4710
ord5718
ord4234
ord2302
ord324
ord501
ord3702
ord3402
ord939
ord539
ord4224
ord2919
ord5572
ord2614
ord861
ord6282
ord6283
ord1083
ord941
ord4202
ord5356
ord5353
ord389
ord5207
ord3663
ord4278
ord5683
ord926
ord924
ord922
ord6877
ord4277
ord356
ord2770
ord668
ord5600
ord535
ord2764
ord5710
ord4129
ord773
ord818
ord641
ord3597
ord4425
ord5280
ord1775
ord6052
ord4998
ord4853
ord4376
ord5265
ord940
ord858
ord860
ord800
ord537
ord2915
ord2818
ord540
ord6215
ord4242
ord6055
ord1776
ord4407
ord2385
ord5163
ord6374
ord4353
ord3798
ord4837
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord755
ord6453
ord4078
ord5241
ord5290
ord4441
ord5261
ord4424
ord3721
ord567
ord795
ord4275
ord2393
ord665
ord1979
ord1567
ord5442
ord268
ord3318
ord5186
ord354
ord6197
ord470
WideCharToMultiByte
GetLogicalDrives
GetDiskFreeSpaceExA
GlobalMemoryStatusEx
CopyFileA
FindFirstFileA
FindClose
FindNextFileA
Sleep
GetCommandLineW
GetSystemDirectoryA
GetWindowsDirectoryA
CreateToolhelp32Snapshot
Process32First
Process32Next
OpenProcess
TerminateProcess
MultiByteToWideChar
lstrlenA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetLastError
QueryPerformanceFrequency
SetEvent
ResetEvent
WaitForSingleObject
GlobalAlloc
ResumeThread
GlobalLock
GlobalUnlock
MulDiv
GlobalFree
CreateEventA
GetVersionExA
GetModuleFileNameA
CreateDirectoryA
MoveFileA
DeleteFileA
SetVolumeLabelA
GetDriveTypeA
SetFileAttributesA
GetCurrentDirectoryA
GetTempPathA
GetDiskFreeSpaceA
GetLastError
LocalFree
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CreateFileA
ReadFile
CloseHandle
lstrcatA
lstrcpynA
PostMessageA
DrawIcon
GetSystemMetrics
SendMessageA
IsIconic
MoveWindow
SetWindowLongA
GetWindowLongA
MessageBoxA
ReleaseDC
SetRect
GetClientRect
DrawTextA
CharToOemBuffA
OemToCharBuffA
wsprintfA
EnableWindow
GetSysColor
FillRect
InvalidateRect
RemovePropA
GetDC
CreateSolidBrush
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteDC
DeleteObject
GetDeviceCaps
RegQueryInfoKeyA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
GetUserNameA
RegDeleteValueA
RegCreateKeyExA
RegEnumKeyExA
RegEnumValueA
RegCloseKey
CommandLineToArgvW
SHGetSpecialFolderPathA
SHChangeNotify
ShellExecuteA
CoCreateInstance
CoUninitialize
CreateStreamOnHGlobal
CoInitialize
ord251
DelMI
GetMI
setdebuglog
setoutputpath
setserverbase
settemppath
setverini
start
stop
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ