Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
a4b1f0e715164fada3eab4b2543fa663_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a4b1f0e715164fada3eab4b2543fa663_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a4b1f0e715164fada3eab4b2543fa663_JaffaCakes118
Size
260KB
MD5
a4b1f0e715164fada3eab4b2543fa663
SHA1
a95ef44c8b41c8acc8ecb20ef827c34e8fed6c01
SHA256
f152278ee84909d9ed32ebfaef2e47380fbd3713c641cdbf916c452db1b403c4
SHA512
04784b83638ee8613607a67149fe37eb14eb61c38d07366763e52e93105d1a95331ac1ccdbf7849df628ebfeca3be63950a36191bc2bcb6c20a5cc94ab674a63
SSDEEP
3072:L4CI5mOyB61mh4wrCaNuf43ysxv6QSMzAcUxKFoJtQSMSIG45lxeOBT75JLyG0QM:LJsO4WC+uA3ZxvHdFFSQu4gOBT
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
R:\TempView\Output\Plugin\Com.Tencent.SNSApp\Bin\SNSApp.pdb
?Random@Sys@Util@@YAHXZ
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?Length@CTXBSTR@@QBEIXZ
?HasField@Data@Util@@YAHPAUITXDataRead@@PBD@Z
?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z
??0CTXStringW@@QAE@PB_W@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
??0CTXStringW@@QAE@XZ
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
??1CFmtString@@QAE@XZ
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
?TXLoadString@@YAPB_WPB_W0@Z
?PropertyStr@CFmtString@@QAEHPB_W0@Z
??0CFmtString@@QAE@XZ
??0CTXBSTR@@QAE@ABV0@@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
?CodeNumber@CCmdCodecBase@@IAEXPBDW4TX_DATA_TYPE@@@Z
?DecodeNumber@CCmdCodecBase@@IAEXPBDW4TX_DATA_TYPE@@@Z
??0CCmdCodecBase@@QAE@XZ
?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z
?AddRef@CCmdCodecBase@@MAGKXZ
?Release@CCmdCodecBase@@MAGKXZ
?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z
?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z
??1CCmdCodecBase@@UAE@XZ
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?GuidFromString@Com@Util@@YAJPA_WAAU_GUID@@@Z
??0CTXStringW@@QAE@ABV0@@Z
?GetTXDataBuf@Data@Util@@YAHPAUITXDataRead@@PBDAAVCTXBuffer@@@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?IsEmpty@CTXBSTR@@QAEHXZ
?Format@CTXStringW@@QAAXPB_WZZ
ord34
??9CTXBSTR@@QBE_NPB_W@Z
??8CTXBSTR@@QBE_NPB_W@Z
?PropertyLong@CFmtString@@QAEHPB_WJ0@Z
?GetAsSystemTime@CTXTime@@QBE_NAAU_SYSTEMTIME@@@Z
??0CTXTime@@QAE@_J@Z
??1CTXStringA@@QAE@XZ
?Format@CTXStringA@@QAAXPBDZZ
??0CTXStringA@@QAE@XZ
??M@YA_NABVCTXStringA@@0@Z
?Copy@CTXBSTR@@QBEPA_WXZ
?PropertyDWord@CFmtString@@QAEHPB_WK0@Z
?IsFileExist@FS@@YAHPB_W@Z
??8CTXBSTR@@QBE_NABV0@@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
?Left@CTXStringW@@QBE?AV1@H@Z
??YCTXBSTR@@QAEAAV0@PB_W@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
ord26
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?GetBSTR@CTXStringW@@QBEPA_WXZ
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
?ConvertTXDataStringBundle@Convert@Util@@YAHPAUITXData@@@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
?CodeStringLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@@Z
?EnableUnicodeString@CCmdCodecBase@@IAEXH@Z
?DecodeStringLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@@Z
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z
?Detach@CTXBSTR@@QAEPA_WXZ
?CommitChange@FS@@YAHPB_W@Z
?RenameFile@FS@@YAHPB_W0@Z
?DeleteFileW@FS@@YAHPB_W@Z
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
??9CTXBSTR@@QBE_NPA_W@Z
??8CTXBSTR@@QBE_NPA_W@Z
??4CTXBSTR@@QAEAAV0@ABV0@@Z
?Replace@CTXStringW@@QAEHPB_W0@Z
?MakeLower@CTXStringW@@QAEAAV1@XZ
?MakeUpper@CTXStringW@@QAEAAV1@XZ
ord33
??0CTXStringW@@QAE@ABUtagVARIANT@@@Z
??9@YA_NABVCTXStringW@@PB_W@Z
??MCTXBSTR@@QBE_NABV0@@Z
?CancelDownload@CTXHttpDownload@@QAEXXZ
??1CTXHttpDownloadSink@@UAE@XZ
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@@Z
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnProgress@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnError@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@K@Z
?Download@CTXHttpDownload@@QAEHPB_WPAU_SYSTEMTIME@@0HPA_J@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
?MoveDownloadFile@CTXHttpDownload@@QAEHPB_WH@Z
?GetDownloadedFilePath@CTXHttpDownload@@QAEHAAVCTXStringW@@@Z
??0CTXHttpDownloadSink@@IAE@XZ
?SetUIInterface@CTXHttpDownload@@QAEXPAVCTXHttpDownloadSink@@@Z
??0CTXHttpDownload@@QAE@XZ
?Run@CTXHttpDownload@@EAEIXZ
??1CTXHttpDownload@@UAE@XZ
?CancelUpload@CTXHttpUploadBuffer@@QAEXXZ
??YCTXStringA@@QAEAAV0@PBD@Z
??YCTXStringA@@QAEAAV0@ABV0@@Z
?UnicodeToGBK@Convert@Util@@YA_NAAVCTXStringA@@PB_WH@Z
?UploadFile@CTXHttpUploadBuffer@@QAEHABVCTXStringW@@ABVCTXStringA@@@Z
??0CTXHttpUploadBuffer@@QAE@XZ
??1CTXHttpUploadBuffer@@UAE@XZ
?BrokenCodec@CCmdCodecBase@@IAEXPBD@Z
?DecodeBufferLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@@Z
?DecodeEndArray@CCmdCodecBase@@IAEXXZ
?DecodeArrayTXDataNumber@CCmdCodecBase@@IAEXPBDW4TX_DATA_TYPE@@@Z
?DecodeArrayLenHead@CCmdCodecBase@@IAEXPBDW4CMDFIELDTYPE@@H@Z
??YCTXBSTR@@QAEAAV0@ABV0@@Z
?GuidToString@Com@Util@@YAJABU_GUID@@PAPA_WH@Z
?LoadXmlByName@FS@Util@@YAHPB_WPAPAUIXMLDOMDocument@@@Z
?Encode16@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??0CTXBSTR@@QAE@XZ
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
??1CTXBSTR@@QAE@XZ
??0CTXBSTR@@QAE@PB_W@Z
??BCTXBSTR@@QBEPA_WXZ
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??0CTXStringW@@QAE@PA_W@Z
?GetTXDataStr@Data@Util@@YAHPAUITXDataRead@@PBDAAVCTXStringW@@@Z
?CombineQNC@FS@@YA?AVCTXStringW@@PB_W0@Z
??ICTXBSTR@@QAEPAPA_WXZ
?GetLength@CTXStringW@@QBEHXZ
??BCTXStringW@@QBEPB_WXZ
?Find@CTXStringW@@QBEHPB_WH@Z
??ACTXStringW@@QBE_WH@Z
?Find@CTXStringW@@QBEH_WH@Z
?Mid@CTXStringW@@QBE?AV1@HH@Z
?Right@CTXStringW@@QBE?AV1@H@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??1CTXStringW@@QAE@XZ
?IsEmpty@CTXStringW@@QBE_NXZ
?GetRegulatedTime@Time@Util@@YA_NAA_J@Z
?AddInfo@CTXHttpDownload@@QAEHABVCTXStringW@@0@Z
?ScaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z
??0CDPIScaleIgnoreResetHelper@@QAE@XZ
?UnscaleLONG@DPI@GF@Util@@YAXPAJ@Z
?IsScaleIgnore@DPI@GF@Util@@YA_NXZ
??1CDPIScaleIgnoreResetHelper@@QAE@XZ
?UnscaleSIZE@DPI@GF@Util@@YAXPAUtagSIZE@@@Z
?HandleMessageScale@DPI@GF@Util@@YAXPAUtagBaseArg@@@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
?IsVASFlagValid@Contact@Util@@YAHKE@Z
?IsOnline@Contact@Util@@YAHK@Z
?GetSelfUin@Contact@Util@@YAKXZ
?IsBuddy@Contact@Util@@YAHK@Z
?SetMsgTime@Msg@Util@@YAXPAUITXMsgPack@@_J@Z
?ConvertCharFormatRichEditToMsgPack@Msg@Util@@YAHABU_charformatw@@PAPAUITXData@@@Z
?GetPublicName@Contact@Util@@YA?AVCTXStringW@@K@Z
?CreateMsgPack@Msg@Util@@YAHPAPAUITXMsgPack@@@Z
?AddContactToSessionList@Misc@Util@@YAXK@Z
?IsPrevented@Contact@Util@@YAHK@Z
?IsStranger@Contact@Util@@YAHK@Z
?GetStatus@Contact@Util@@YAGK@Z
?SaveMsg194@Msg@Util@@YAHPB_W000KKPAUITXMsgPack@@PAUITXData@@PAUITXCallback@@@Z
?GetCombineName@Contact@Util@@YA?AVCTXStringW@@K@Z
?GetNickname@Contact@Util@@YA?AVCTXStringW@@K@Z
?GetAccountName@Account@Util@@YA?AVCTXStringW@@K@Z
?IsInBlackList@Contact@Util@@YAHK@Z
?GetRawName@Contact@Util@@YA?AVCTXStringW@@K@Z
?IsInFullScreen@WinScreenStatus@Util@@YAHPAPAUHWND__@@PAH1PAKPAPA_W1@Z
?GetMsgTime@Msg@Util@@YA_JPAUITXMsgPack@@@Z
?Get32ByteValueAddedSign@Misc@Util@@YA?AVCTXStringW@@XZ
?GetPublicGender@Contact@Util@@YAEK@Z
?AddReport@URL@Util@@YA?AVCTXStringW@@ABV3@0@Z
?GetIMVersion@Contact@Util@@YAGK@Z
?GetIMProductEx@Contact@Util@@YAEK@Z
?SaveMsg194@Msg@Util@@YAHPB_WKKKPAUITXMsgPack@@PAUITXData@@PAUITXCallback@@@Z
?GetPublicHeadFile@Contact@Util@@YA?AVCTXStringW@@K@Z
?GetAccountValue@Account@Util@@YA?AVCTXStringW@@K@Z
?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@W4URLMODIFYLEVEL@12@0@Z
?QueryTXChatSession@ChatSession@Util@@YAHKHPAPAUIAFChatSession@@@Z
?SendAutoReplyMsgToBuddy@ChatSession@Util@@YAJK@Z
?ShowFrameInEdit@ChatRichEdit@Util@@YAHUtagTypeUin@@HHPAUITXData@@@Z
?OpenContactChatSession@ChatSession@Util@@YAXKPAUITXData@@@Z
?FlashChatView@ChatSession@Util@@YAXKH@Z
?WriteMsgInChatSession@ChatSession@Util@@YAXKHPAUITXMsgPack@@KPAUITXData@@@Z
?GetContactChatSessionMainHWnd@ChatSession@Util@@YAPAUHWND__@@K@Z
?WriteTipInContactChatSession@ChatSession@Util@@YAHKPAUITXData@@@Z
?WriteMsgTipInChatSession@ChatSession@Util@@YAXKHW4IconIndex@@VCTXStringW@@H@Z
?OpenChatSession@ChatSession@Util@@YAXKW4CFChatType@ChatFrame@@PAUITXData@@@Z
?GetChatSessionViewFrame@ChatSession@Util@@YAHKHPAPAUIGFFrame@@@Z
?IsChatSessionOpen@ChatSession@Util@@YAHKH@Z
?GetChatSessionMainHWnd@ChatSession@Util@@YAPAUHWND__@@KH@Z
?GetAsyncMainBtnStateByLogicalJudge@Misc@Util@@YAHXZ
?MessageBoxW@Misc@Util@@YAHPAUIGFFrame@@VCTXStringW@@1H@Z
?InitDefaultCharFormat@AFChatSession@Util@@YAHAAU_charformatw@@@Z
?MessageBoxExByHwnd@Misc@Util@@YAHPAUHWND__@@PA_W1IPAUITXData@@PAPAU4@@Z
?CreateMatch@ChatFrameExtMatch@@YAXW4MatchFlag@1@W4CFExtEvent@ChatFrame@@PAPAUIChatFrameExtMatch@@@Z
?CreateMsgTipPack@AFChatSession@Util@@YAHW4IconIndex@@VCTXStringW@@PAPAUITXMsgPack@@@Z
?Acquire@Lock@AsyncTask@@QAEXXZ
?AssertAcquired@Lock@AsyncTask@@QBEXXZ
??0Lock@AsyncTask@@QAE@XZ
??1Lock@AsyncTask@@QAE@XZ
?Release@Lock@AsyncTask@@QAEXXZ
EncodePointer
DecodePointer
Sleep
InterlockedCompareExchange
TerminateProcess
LocalFree
GetCurrentProcess
SetThreadLocale
GetModuleHandleW
GetProcAddress
lstrcmpiW
GetModuleFileNameW
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentProcessId
GetThreadLocale
InterlockedExchange
GetSystemTimeAsFileTime
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
MoveWindow
OffsetRect
GetCursorPos
WindowFromPoint
GetWindowRect
IsWindow
CharNextW
GetKeyState
GetSystemMetrics
PtInRect
CoCreateGuid
CoCreateInstance
SysFreeString
SysStringLen
LoadRegTypeLi
LoadTypeLi
VariantCopy
VariantInit
VariantChangeType
VariantClear
SysAllocString
RegisterTypeLi
UnRegisterTypeLi
ord58
ord68
ord31
ord15
ord49
ord56
ord23
ord61
ord32
ord64
?_Xlength_error@std@@YAXPBD@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Xout_of_range@std@@YAXPBD@Z
_malloc_crt
_onexit
_lock
__dllonexit
_unlock
memmove
__clean_type_info_names_internal
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
wcsncpy_s
_encoded_null
_time64
free
memset
memcmp
_purecall
__CxxFrameHandler3
??_V@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
??2@YAPAXI@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??3@YAXPAX@Z
_initterm
_initterm_e
_amsg_exit
_wcsicmp
??0exception@std@@QAE@ABQBD@Z
?terminate@@YAXXZ
_except_handler4_common
__CppXcptFilter
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ