Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
8554e98da565e2ce863f81d92cd56f3d_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8554e98da565e2ce863f81d92cd56f3d_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8554e98da565e2ce863f81d92cd56f3d_JaffaCakes118
Size
453KB
MD5
8554e98da565e2ce863f81d92cd56f3d
SHA1
c78f1304ff250cbe0fb98c956303d9b65784e52b
SHA256
e75c95de42ae9cada605657ca02b5ae091013da15d198d8fc1c70f064f64b5c2
SHA512
e8037e596a1bc43a9b7d6b2d7c90c11855ae38fac6db2a8aabc616b6677c232cd3f4e6e89f89221fc2d8f7a6b8bf8adcae861740e1cd8f124b6df1436f12937b
SSDEEP
6144:g5s1yDuThoXSjoLWkKcBR7Q4u4FVrpTAzwFB9yOAF9TE0:g5ayCThGS1G04F2QBz0
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
R:\TempView\QQ1.83\Output\BinFinal\ContactMgr.pdb
?GetBSTR@CTXStringW@@QBEPA_WXZ
ord26
??8@YA_NABVCTXStringW@@0@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?DBCToSBC@Convert@Util@@YA_NAAVCTXStringW@@@Z
?SBCToDBC@Convert@Util@@YA_NAAVCTXStringW@@@Z
??0CTXStringW@@QAE@PA_W@Z
??1CFmtString@@QAE@XZ
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
?GetLCID@NLS@@YAKXZ
?PropertyStr@CFmtString@@QAEHPB_W0@Z
?PropertyDWord@CFmtString@@QAEHPB_WK0@Z
??0CFmtString@@QAE@XZ
??H@YA?AVCTXStringW@@PB_WABV0@@Z
??OCTXBSTR@@QBE_NABV0@@Z
??M@YA_NABVCTXStringW@@0@Z
?AllocSysString@CTXStringW@@QBEPA_WXZ
?FindOneOf@CTXStringW@@QBEHPB_W@Z
??YCTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z
??4CTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z
??9CTXBSTR@@QBE_NABV0@@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
??8CTXBSTR@@QBE_NPA_W@Z
?ConvertXMLStrToTXData@Convert@Util@@YAHPA_WPAPA_WPAUITXData@@0@Z
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z
?Format@CTXStringW@@QAAXPB_WZZ
?Copy@CTXBSTR@@QBEPA_WXZ
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
?IsEmpty@CTXBSTR@@QAEHXZ
?IsEmpty@CTXStringW@@QBE_NXZ
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??4CTXBSTR@@QAEAAV0@ABV0@@Z
??YCTXBSTR@@QAEAAV0@ABV0@@Z
??0CTXBSTR@@QAE@XZ
??0CTXBSTR@@QAE@PB_W@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
??0CTXStringW@@QAE@XZ
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??0CTXBSTR@@QAE@H@Z
??ICTXBSTR@@QAEPAPA_WXZ
?Length@CTXBSTR@@QBEIXZ
??8CTXBSTR@@QBE_NPB_W@Z
??BCTXBSTR@@QBEPA_WXZ
??1CTXBSTR@@QAE@XZ
??0CTXStringW@@QAE@ABV0@@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??1CTXStringW@@QAE@XZ
??BCTXStringW@@QBEPB_WXZ
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
??0CTXStringW@@QAE@PB_W@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??MCTXBSTR@@QBE_NABV0@@Z
?Colorize@GF@Util@@YA?ATtagARGB@@T3@@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?RawInitGFElementByXtml@GF@Util@@YAJPA_WPAUIGFElement@@10H@Z
?TransMd2GFElement@Metadata@Util@@YAJPAUITXData@@PAPAUIGFElement@@PA_W@Z
?Get@Metadata@Util@@YAJPAUITXData@@PA_WPAH@Z
?FreeData@Metadata@Util@@YAJAAPA_W@Z
?Get@Metadata@Util@@YAJPAUITXData@@PA_WPAPA_W@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
?IsOnline@Contact@Util@@YAHK@Z
?GetSelfUin@Contact@Util@@YAKXZ
?IsVASFlagValid@Contact@Util@@YAHKE@Z
?IsInBlackList@Contact@Util@@YAHK@Z
?Get32ByteValueAddedSign@Misc@Util@@YA?AVCTXStringW@@XZ
?IsInvisible@Contact@Util@@YAHK@Z
?IsVisible@Contact@Util@@YAHK@Z
?GetAccountName@Account@Util@@YA?AVCTXStringW@@K@Z
?GetNickname@Contact@Util@@YA?AVCTXStringW@@K@Z
?GetPublicHeadFile@Contact@Util@@YA?AVCTXStringW@@K@Z
?MessageBoxW@Misc@Util@@YAHPAUIGFFrame@@VCTXStringW@@1H@Z
?MessageBoxExW@Misc@Util@@YAHPAUIGFFrame@@PA_W1IPAUITXData@@PAPAU4@@Z
?OpenContactChatSession@ChatSession@Util@@YAXKPAUITXData@@@Z
?QueryTXChatSession@ChatSession@Util@@YAHKHPAPAUIAFChatSession@@@Z
?SetRegSubKeyDataBoolField@API@Registry@@YAHPA_W000HW4__MIDL___MIDL_itf_IRegistry_0000_0003@@W4__MIDL___MIDL_itf_IRegistry_0000_0004@@@Z
?GetRegSubKeyDataBoolField@API@Registry@@YAHPA_W000PAHW4__MIDL___MIDL_itf_IRegistry_0000_0003@@W4__MIDL___MIDL_itf_IRegistry_0000_0004@@@Z
LoadResource
FindResourceW
FindResourceExW
GetLastError
lstrlenW
lstrcmpiW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetModuleHandleW
GetModuleFileNameW
InterlockedIncrement
InterlockedDecrement
LockResource
GetThreadLocale
GetACP
InterlockedExchange
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
Sleep
InterlockedCompareExchange
TerminateProcess
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetVersionExA
SetThreadLocale
GetLocaleInfoA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
IsDebuggerPresent
GetCurrentProcess
UpdateWindow
GetCursorPos
CharNextW
PtInRect
CopyRect
UnregisterClassA
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW
RegEnumKeyExW
SHGetFileInfoW
CoCreateInstance
StringFromCLSID
CoTaskMemFree
CoCreateGuid
SysFreeString
SysStringLen
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
SysAllocString
ord23
ord64
ord61
ord15
ord31
ord22
ord32
ord58
ord18
ord30
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
_amsg_exit
_initterm_e
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
_adjust_fdiv
??3@YAXPAX@Z
memcpy_s
malloc
free
_CxxThrowException
wcscpy_s
wcsncpy_s
_purecall
_time64
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
__CxxFrameHandler3
_invalid_parameter_noinfo
??_V@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
memmove_s
??2@YAPAXI@Z
_recalloc
memset
_except_handler4_common
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ