Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
95c557bb82ac002423e8aec2ef8b2727_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
95c557bb82ac002423e8aec2ef8b2727_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
95c557bb82ac002423e8aec2ef8b2727_JaffaCakes118
Size
125KB
MD5
95c557bb82ac002423e8aec2ef8b2727
SHA1
6ad935f869690f0ba89a10a0d003fec07ff5a04a
SHA256
dd690035b77e4b584f54205b510f4d3f7c8d37cc04b4ce903e2b4672b5695345
SHA512
7fd0db1c0178debeeadad982fe7c8ce366ea8d2f994c4498b1472c45ec7f5a3da32f3b5dab11f6c7a7c63b63d30c8363fccf403d3a6b424884bcffd01019a764
SSDEEP
1536:d/ULbODm09G1kng2F6B2/ABhZoRkyuV77fdvK0rpxsg2Hmq0MYmBWbOAfBDaLa7A:9Jy0G4zIBh91vK0rpxsgQmM7WbOA5D/0
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
D:\QT_Client\branches\QQTalk2.0v2.2.6\QQTalk\Output\Bin\UpdateEx.pdb
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
??1CTXBSTR@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
??0CTXBSTR@@QAE@ABV0@@Z
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
??ICTXBSTR@@QAEPAPA_WXZ
??0CTXBSTR@@QAE@XZ
??1CTXHttpDownload@@UAE@XZ
?SetUIInterface@CTXHttpDownload@@QAEXPAVCTXHttpDownloadSink@@@Z
??0CTXHttpDownload@@QAE@XZ
?Download@CTXHttpDownload@@QAEHPB_WPAU_SYSTEMTIME@@0H@Z
??BCTXStringW@@QBEPB_WXZ
?SetEventMask@CTXHttpDownload@@QAEXE@Z
?ClearRequestHeader@CTXHttpDownload@@QAEXXZ
??0CTXStringW@@QAE@PB_W@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
?Empty@CTXStringW@@QAEXXZ
?FreeComLibrary@Com@Util@@YGJPB_W@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
?Record@Perf@Util@@YAJPB_WHH00@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
??1CTXHttpDownloadSink@@UAE@XZ
??0CTXStringW@@QAE@ABV0@@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
??0CTXBSTR@@QAE@PB_W@Z
?IsEmpty@CTXStringW@@QBE_NXZ
??0CTXStringW@@QAE@PA_W@Z
??0CTXHttpDownloadSink@@IAE@XZ
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@@Z
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnProgress@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnError@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@K@Z
?DeleteFileW@FS@@YAHPB_W@Z
?CombineQNC@FS@@YA?AVCTXStringW@@PB_W0@Z
?MoveDownloadFile@CTXHttpDownload@@QAEHPB_WH@Z
??8@YA_NPB_WABVCTXStringW@@@Z
?GetLength@CTXStringW@@QBEHXZ
?GetAt@CTXStringW@@QBE_WH@Z
?Left@CTXStringW@@QBE?AV1@H@Z
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z
?Right@CTXStringW@@QBE?AV1@H@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?Encode16@Encode@Util@@YA?AVCTXStringW@@PBXI@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
?GetFileHash@FS@Util@@YAHPB_WAAVCTXBuffer@@AAK@Z
??0CTXStringW@@QAE@XZ
??1CTXStringW@@QAE@XZ
??1CCmdCodecBase@@UAE@XZ
?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z
?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z
?Release@CCmdCodecBase@@MAGKXZ
?AddRef@CCmdCodecBase@@MAGKXZ
?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z
??0CCmdCodecBase@@QAE@XZ
?CodeBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?DecodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?GetDecodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
?DecodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?DecodeArrayLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@H@Z
?DecodeArrayTXDataNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?DecodeEndArray@CCmdCodecBase@@IAEXXZ
?DecodeBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?EnableUnicodeString@CCmdCodecBase@@IAEXH@Z
?CodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?GetCodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
?GetMinorVer@Version@@YAEXZ
?SendDataToDirServer@Network@Util@@YAJPAUITXData@@PAUITXCmdCodec@@PAUITXNetSendSink@@@Z
?GetVersionExW@Version@@YAXAAUtagVersionInfo@1@@Z
?RealTimeStartReport@Report@Util@@YAHK@Z
?RealTimeIncValue@Report@Util@@YAXKHK@Z
?GetMajorVer@Version@@YAEXZ
GetModuleFileNameW
SetThreadLocale
GetThreadLocale
GetPrivateProfileStringW
WritePrivateProfileStringW
CreateDirectoryW
Sleep
WideCharToMultiByte
MultiByteToWideChar
CreateEventW
TerminateThread
WaitForSingleObject
SetEvent
ResetEvent
CreateFileA
CreateFileW
ReadFile
WriteFile
SetFilePointer
SetCurrentDirectoryW
GetCurrentDirectoryW
GetModuleHandleW
GetProcessHeap
InterlockedCompareExchange
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
GetLocaleInfoA
GetACP
FindResourceW
LoadResource
LockResource
SizeofResource
InitializeCriticalSection
RaiseException
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
GetTickCount
InterlockedExchange
QueryPerformanceCounter
LeaveCriticalSection
EnterCriticalSection
lstrcmpiW
lstrlenW
CreateMutexW
GetSystemTimeAsFileTime
GetCurrentProcessId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
CloseHandle
GetLastError
SetFileAttributesW
FindResourceExW
DeleteCriticalSection
CharNextW
wsprintfW
UnregisterClassA
RegDeleteKeyW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
SHGetFileInfoW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHCreateDirectoryExW
SHFileOperationW
CoCreateInstance
StringFromCLSID
CoTaskMemFree
SysStringLen
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
SysFreeString
ord61
ord23
ord64
ord22
ord18
ord15
ord31
ord58
ord30
ord32
PathFindFileNameW
PathFileExistsW
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__clean_type_info_names_internal
__dllonexit
__CxxFrameHandler3
_encode_pointer
_lock
_onexit
_decode_pointer
_encoded_null
??3@YAXPAX@Z
_CxxThrowException
_recalloc
_unlock
_invalid_parameter_noinfo
memmove_s
_time64
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??2@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
_purecall
memcpy_s
malloc
free
wcscpy_s
wcsncpy_s
??_V@YAXPAX@Z
memset
memcpy
_snwprintf_s
_wtoi
_beginthreadex
_except_handler4_common
?terminate@@YAXXZ
_malloc_crt
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ