Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
8d140a5efc1dc0e43a18adee313997f1_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8d140a5efc1dc0e43a18adee313997f1_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
8d140a5efc1dc0e43a18adee313997f1_JaffaCakes118
Size
38KB
MD5
8d140a5efc1dc0e43a18adee313997f1
SHA1
d3d2d43c3ad299fdfa5570b711860c4e4cd3b45c
SHA256
32834badbfab117d2b4abae2d3b77b48a6e5625cffdec63457e8a189a1664da1
SHA512
67d285c1cd0143149b0074c997d8fd0e88651a898c779ce7d079527d79b0bd5161de31f3e681c1633265ab85afb9cdcc075fe66e28690cb3b07b54190f23f177
SSDEEP
768:KjPY5SKewTqSfr9lafuO5h4cQiQGJ+7BIBhGnv/zMWxflWe6mgLkbCs55:/q6rfaG0NLJMYAn7l/scCs55
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
@System@initialization$qqrv
@System@Finalization$qqrv
@System@UnregisterModule$qqrp17System@TLibModule
@System@RegisterModule$qqrp17System@TLibModule
@System@@UStrCat$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@UStrToPWChar$qqrx20System@UnicodeString
@System@@UStrArrayClr$qqrpvi
@System@@WStrSetLength$qqrr17System@WideStringi
@System@@WStrEqual$qqrv
@System@@WStrToPWChar$qqrx17System@WideString
@System@@WStrAsg$qqrr17System@WideStringx17System@WideString
@System@@WStrClr$qqrpv
@System@@LStrSetLength$qqrv
@System@UniqueString$qqrr17System@WideString
@System@UniqueString$qqrr27System@%AnsiStringT$us$i0$%
@System@@LStrToPChar$qqrx27System@%AnsiStringT$us$i0$%
@System@@LStrFromPWChar$qqrr27System@%AnsiStringT$us$i0$%pbus
@System@@LStrAsg$qqrpvpxv
@System@@LStrClr$qqrpv
@System@@RunError$qqruc
@System@@PackageUnload$qqrpx23System@PackageInfoTablep17System@TLibModule
@System@@PackageLoad$qqrpx23System@PackageInfoTablep17System@TLibModule
@System@@DoneExcept$qqrv
@System@@HandleFinally$qqrv
@System@@HandleOnException$qqrv
@System@@BeforeDestruction$qqrp14System@TObjectzc
@System@@AfterConstruction$qqrp14System@TObject
@System@@ClassDestroy$qqrp14System@TObject
@System@@ClassCreate$qqrp17System@TMetaClasso
@System@TObject@Dispatch$qqrpv
@System@TObject@BeforeDestruction$qqrv
@System@TObject@AfterConstruction$qqrv
@System@TObject@DefaultHandler$qqrpv
@System@TObject@ToString$qqrv
@System@TObject@SafeCallException$qqrp14System@TObjectpv
@System@@IsClass$qqrp14System@TObjectp17System@TMetaClass
@System@TObject@GetHashCode$qqrv
@System@TObject@Equals$qqrp14System@TObject
@System@TObject@Free$qqrv
@System@TObject@$bdtr$qqrv
@System@TObject@$bctr$qqrv
@System@TObject@FreeInstance$qqrv
@System@TObject@NewInstance$qqrv
@System@@FillChar$qqrpvib
@System@@ROUND$qqrv
@System@ParamStr$qqri
@$xp$14System@TObject
@System@TObject@
@$xp$7Boolean
@Sysutils@initialization$qqrv
@Sysutils@Finalization$qqrv
@Sysutils@AnsiPos$qqrx20System@UnicodeStringt1
@Sysutils@ExtractFileName$qqrx20System@UnicodeString
@Sysutils@ExtractFilePath$qqrx20System@UnicodeString
@Sysutils@AnsiLowerCase$qqrx20System@UnicodeString
@Sysutils@Win32MinorVersion
@Sysutils@Win32MajorVersion
@Sysutils@Win32Platform
@Sysutils@EExternal@
@Sysutils@Exception@
@Math@Max$qqrxfxf
@Math@Min$qqrxgxg
@Math@Min$qqrxfxf
@Math@Floor$qqrxg
@Classes@initialization$qqrv
@Classes@Finalization$qqrv
@Classes@TStream@SetPosition$qqrxj
@Classes@TStringList@$bctr$qqrv
@Classes@TThreadList@UnlockList$qqrv
@Classes@TThreadList@LockList$qqrv
@Classes@TThreadList@$bctr$qqrv
@Classes@TList@Remove$qqrpv
@Classes@TList@Get$qqri
@Classes@TList@Add$qqrpv
@Classes@TStringList@
@Classes@TThreadList@
@Typinfo@initialization$qqrv
@Typinfo@Finalization$qqrv
@Variants@initialization$qqrv
@Variants@Finalization$qqrv
@Varutils@initialization$qqrv
@Varutils@Finalization$qqrv
@Registry@initialization$qqrv
@Registry@Finalization$qqrv
@Inifiles@initialization$qqrv
@Inifiles@Finalization$qqrv
@Inifiles@TMemIniFile@WriteString$qqrx20System@UnicodeStringt1t1
@Inifiles@TMemIniFile@UpdateFile$qqrv
@Inifiles@TMemIniFile@SetStrings$qqrp16Classes@TStrings
@Inifiles@TMemIniFile@ReadString$qqrx20System@UnicodeStringt1t1
@Inifiles@TMemIniFile@ReadSectionValues$qqrx20System@UnicodeStringp16Classes@TStrings
@Inifiles@TMemIniFile@ReadSections$qqrp16Classes@TStrings
@Inifiles@TMemIniFile@ReadSection$qqrx20System@UnicodeStringp16Classes@TStrings
@Inifiles@TMemIniFile@GetStrings$qqrp16Classes@TStrings
@Inifiles@TMemIniFile@EraseSection$qqrx20System@UnicodeString
@Inifiles@TMemIniFile@DeleteKey$qqrx20System@UnicodeStringt1
@Inifiles@TMemIniFile@Clear$qqrv
@Inifiles@TMemIniFile@$bdtr$qqrv
@Inifiles@TMemIniFile@$bctr$qqrx20System@UnicodeString
@Inifiles@TCustomIniFile@ReadSections$qqrx20System@UnicodeStringp16Classes@TStrings
@Inifiles@TCustomIniFile@WriteBinaryStream$qqrx20System@UnicodeStringt1p15Classes@TStream
@Inifiles@TCustomIniFile@ReadBinaryStream$qqrx20System@UnicodeStringt1p15Classes@TStream
@Inifiles@TCustomIniFile@ValueExists$qqrx20System@UnicodeStringt1
@Inifiles@TCustomIniFile@WriteBool$qqrx20System@UnicodeStringt1o
@Inifiles@TCustomIniFile@WriteTime$qqrx20System@UnicodeStringt116System@TDateTime
@Inifiles@TCustomIniFile@WriteFloat$qqrx20System@UnicodeStringt1d
@Inifiles@TCustomIniFile@WriteDateTime$qqrx20System@UnicodeStringt116System@TDateTime
@Inifiles@TCustomIniFile@WriteDate$qqrx20System@UnicodeStringt116System@TDateTime
@Inifiles@TCustomIniFile@ReadTime$qqrx20System@UnicodeStringt116System@TDateTime
@Inifiles@TCustomIniFile@ReadFloat$qqrx20System@UnicodeStringt1d
@Inifiles@TCustomIniFile@ReadDateTime$qqrx20System@UnicodeStringt116System@TDateTime
@Inifiles@TCustomIniFile@ReadDate$qqrx20System@UnicodeStringt116System@TDateTime
@Inifiles@TCustomIniFile@ReadBool$qqrx20System@UnicodeStringt1o
@Inifiles@TCustomIniFile@WriteInteger$qqrx20System@UnicodeStringt1i
@Inifiles@TCustomIniFile@ReadInteger$qqrx20System@UnicodeStringt1i
@$xp$20Inifiles@TMemIniFile
@Inifiles@TMemIniFile@
@Syncobjs@initialization$qqrv
@Syncobjs@Finalization$qqrv
@Uxtheme@initialization$qqrv
@Uxtheme@Finalization$qqrv
@Multimon@initialization$qqrv
@Multimon@Finalization$qqrv
@Dwmapi@initialization$qqrv
@Dwmapi@Finalization$qqrv
@Helpintfs@initialization$qqrv
@Helpintfs@Finalization$qqrv
@Flatsb@initialization$qqrv
@Flatsb@Finalization$qqrv
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
FreeLibrary
SetLastError
RaiseException
OpenProcess
LoadLibraryW
GetTickCount
GetSystemInfo
GetSystemDirectoryA
GetSystemDirectoryW
GetProcAddress
GetModuleHandleW
GetCurrentProcess
FreeLibrary
CloseHandle
GetSysColor
@Graphics@initialization$qqrv
@Graphics@Finalization$qqrv
@$xp$15Graphics@TColor
@Themes@initialization$qqrv
@Themes@Finalization$qqrv
@Themes@TThemeServices@UpdateThemes$qqrv
@Themes@TThemeServices@GetThemesEnabled$qqrv
@Themes@ThemeServices$qqrv
@Controls@initialization$qqrv
@Controls@Finalization$qqrv
@Actnlist@initialization$qqrv
@Actnlist@Finalization$qqrv
@Menus@initialization$qqrv
@Menus@Finalization$qqrv
@Forms@initialization$qqrv
@Forms@Finalization$qqrv
@Dialogs@initialization$qqrv
@Dialogs@Finalization$qqrv
@Comctrls@initialization$qqrv
@Comctrls@Finalization$qqrv
@Graphutil@initialization$qqrv
@Graphutil@Finalization$qqrv
@Extctrls@initialization$qqrv
@Extctrls@Finalization$qqrv
@Printers@initialization$qqrv
@Printers@Finalization$qqrv
@Clipbrd@initialization$qqrv
@Clipbrd@Finalization$qqrv
@$xp$24Tucolormixer@TColorMixer
@$xp$28Tuneupwow64@TTUFsRedirection
@$xp$31Tucolormixer@TAppInterfaceStyle
@$xp$32Tustreaminifile@TTUStreamIniFile
@$xp$40Tuneupwow64@TTUInitialWow64FsRedirection
@GetPackageInfoTable
@Tubase@@GetPackageInfoTable$qqrv
@Tubase@@PackageLoad$qqrv
@Tubase@@PackageUnload$qqrv
@Tubase@initialization$qqrv
@Tucolormixer@ColorMixer
@Tucolormixer@Finalization$qqrv
@Tucolormixer@TColorMixer@
@Tucolormixer@TColorMixer@$bctr$qqrv
@Tucolormixer@TColorMixer@$bdtr$qqrv
@Tucolormixer@TColorMixer@CalculateColors$qqrv
@Tucolormixer@TColorMixer@EnsureContrast$qqr15Graphics@TColort1
@Tucolormixer@TColorMixer@ForceRemix$qqrv
@Tucolormixer@TColorMixer@GetColor_App_Box_Border$qqrv
@Tucolormixer@TColorMixer@GetColor_App_Box_Header_Br$qqrv
@Tucolormixer@TColorMixer@GetColor_App_Box_Header_Dk$qqrv
@Tucolormixer@TColorMixer@GetColor_App_Box_Header_Text$qqrv
@Tucolormixer@TColorMixer@GetColor_Light_Box_Border$qqrv
@Tucolormixer@TColorMixer@GetColor_Light_Box_Header_Br$qqrv
@Tucolormixer@TColorMixer@GetColor_Light_Box_Header_Dk$qqrv
@Tucolormixer@TColorMixer@GetColor_Light_Box_Header_Text$qqrv
@Tucolormixer@TColorMixer@GetColor_Lists_GridLines$qqrv
@Tucolormixer@TColorMixer@GetColor_Lists_Interlace$qqrv
@Tucolormixer@TColorMixer@GetColor_PseudoOffice11_Box_Border$qqrv
@Tucolormixer@TColorMixer@GetColor_PseudoOffice11_Box_Header_Br$qqrv
@Tucolormixer@TColorMixer@GetColor_PseudoOffice11_Box_Header_Dk$qqrv
@Tucolormixer@TColorMixer@GetColor_PseudoOffice11_Box_Header_Text$qqrv
@Tucolormixer@TColorMixer@GetColor_PseudoOffice2007_Box_Border$qqrv
@Tucolormixer@TColorMixer@GetColor_PseudoOffice2007_Box_Header_Br$qqrv
@Tucolormixer@TColorMixer@GetColor_PseudoOffice2007_Box_Header_Dk$qqrv
@Tucolormixer@TColorMixer@GetColor_PseudoOffice2007_Box_Header_Text$qqrv
@Tucolormixer@TColorMixer@GetColor_Web_Box_Border$qqrv
@Tucolormixer@TColorMixer@GetColor_Web_Box_Header_Br$qqrv
@Tucolormixer@TColorMixer@GetColor_Web_Box_Header_Dk$qqrv
@Tucolormixer@TColorMixer@GetColor_Web_Box_Header_Text$qqrv
@Tucolormixer@TColorMixer@GetColorsFromBaseColor$qqr15Graphics@TColorfffffr15Graphics@TColort7t7t7
@Tucolormixer@TColorMixer@GetContrast$qqr15Graphics@TColort1
@Tucolormixer@TColorMixer@GetListColorsFromBaseColor$qqr15Graphics@TColorr15Graphics@TColort2
@Tucolormixer@TColorMixer@HSLtoRGB$qqrfff
@Tucolormixer@TColorMixer@Mix$qqr15Graphics@TColort1i
@Tucolormixer@TColorMixer@RGBtoHSL$qqr15Graphics@TColorrft2t2
@Tucolormixer@initialization$qqrv
@Tuneupwow64@Finalization$qqrv
@Tuneupwow64@GetNativeSystemInfo
@Tuneupwow64@GetRedirectedSystemDirectory$qqrv
@Tuneupwow64@GetRedirectedSystemDirectoryA$qqrv
@Tuneupwow64@GetRedirectedSystemDirectoryW$qqrv
@Tuneupwow64@GetSystemWow64DirectoryA
@Tuneupwow64@GetSystemWow64DirectoryW
@Tuneupwow64@IsCurrentProcessWow64$qqrv
@Tuneupwow64@IsProcessWow64$qqrui
@Tuneupwow64@IsWow64Process
@Tuneupwow64@Probe_GetNativeSystemInfo$qqsr12_SYSTEM_INFO
@Tuneupwow64@Probe_GetSystemWow64DirectoryA$qqspcui
@Tuneupwow64@Probe_GetSystemWow64DirectoryW$qqspbui
@Tuneupwow64@Probe_IsWow64Process$qqsuiri
@Tuneupwow64@Probe_Wow64DisableWow64FsRedirection$qqsrpv
@Tuneupwow64@Probe_Wow64EnableWow64FsRedirection$qqso
@Tuneupwow64@Probe_Wow64RevertWow64FsRedirection$qqspv
@Tuneupwow64@TTUFsRedirection@
@Tuneupwow64@TTUFsRedirection@$bctr$qqrv
@Tuneupwow64@TTUFsRedirection@$bdtr$qqrv
@Tuneupwow64@TTUFsRedirection@Disable$qqrrpv
@Tuneupwow64@TTUFsRedirection@GetGlobalInitState$qqrv
@Tuneupwow64@TTUFsRedirection@GetInstance$qqrv
@Tuneupwow64@TTUFsRedirection@ReleaseInstance$qqrv
@Tuneupwow64@TTUFsRedirection@Revert$qqrpv
@Tuneupwow64@TTUFsRedirection@SetEnabled$qqro
@Tuneupwow64@TTUFsRedirection@SetGlobalInitState$qqr40Tuneupwow64@TTUInitialWow64FsRedirection
@Tuneupwow64@Wow64DisableWow64FsRedirection
@Tuneupwow64@Wow64EnableWow64FsRedirection
@Tuneupwow64@Wow64RevertWow64FsRedirection
@Tuneupwow64@initialization$qqrv
@Tustreaminifile@Finalization$qqrv
@Tustreaminifile@TTUStreamIniFile@
@Tustreaminifile@TTUStreamIniFile@$bctr$qqrpx15Classes@TStream
@Tustreaminifile@TTUStreamIniFile@LoadFromStream$qqrp15Classes@TStream
@Tustreaminifile@TTUStreamIniFile@SaveToStream$qqrp15Classes@TStream
@Tustreaminifile@initialization$qqrv
@Tuwindowslogoutils@ApplicationExceptionForwarder$qqrp14System@TObjectp18Sysutils@Exception
@Tuwindowslogoutils@Finalization$qqrv
@Tuwindowslogoutils@initialization$qqrv
@Windows_fragment@Finalization$qqrv
@Windows_fragment@GetNativeSystemInfoEx$qqrv
@Windows_fragment@initialization$qqrv
Finalize
Initialize
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ