Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
a5024c4eafc670034b24d8d7defeff1a_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a5024c4eafc670034b24d8d7defeff1a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
a5024c4eafc670034b24d8d7defeff1a_JaffaCakes118
Size
1.0MB
MD5
a5024c4eafc670034b24d8d7defeff1a
SHA1
93356e0d0c510ba92a726cd230b5f8be62c06eb2
SHA256
345710e9a90d9abfc606677bf95a2fab922f780140451509fc9fa00d85e664e7
SHA512
1141a030a780a524c04dd11db646f9123b812bf04cecc17f1349be968f640ae4903fe90091783d054cd75143536c14349721016bf148c2c1bd68fcf69105eb70
SSDEEP
24576:tjHWorr83SXcrB85aKXxCNGWSVBOQPhhJdhBFd:hHjr83paUoOIBOsfJTjd
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
C:\DistributedAutoLink\Temp\CompileOutputDir\filemon.pdb
GrpMsgW
NetApiBufferFree
NetUserEnum
NetShareEnum
SfcIsFileProtected
CreateEventW
CloseHandle
ResetEvent
ResumeThread
WaitForSingleObject
TerminateThread
SetEvent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
WaitForMultipleObjects
FindClose
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
SetLastError
GetFullPathNameW
FindFirstFileW
lstrcpyW
lstrlenW
FindNextFileW
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
GetLocalTime
GetCurrentThreadId
GetLogicalDriveStringsW
GetDriveTypeW
InterlockedIncrement
InterlockedDecrement
CreateFileW
DeviceIoControl
GetFileAttributesW
lstrlenA
GetModuleHandleA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
WideCharToMultiByte
MultiByteToWideChar
lstrcatW
LoadLibraryW
FreeLibrary
GetFileSize
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetTickCount
WritePrivateProfileStringW
GetPrivateProfileStringW
OutputDebugStringW
OpenProcess
ReadProcessMemory
GetCurrentProcess
IsDebuggerPresent
CreateToolhelp32Snapshot
Module32FirstW
GetLongPathNameW
GetWindowsDirectoryW
OutputDebugStringA
GetEnvironmentVariableW
GetVersionExW
GetFileAttributesA
GetCurrentProcessId
ProcessIdToSessionId
CreateDirectoryW
CopyFileW
CreateProcessW
GetShortPathNameW
DeleteFileW
GetLastError
MoveFileExW
GetUserDefaultLangID
GetVersion
GetSystemDirectoryW
LocalAlloc
LocalFree
GetFileAttributesExW
ExpandEnvironmentStringsW
GetFullPathNameA
HeapReAlloc
CreateFileA
CreateMutexW
HeapCompact
SetFilePointer
SetEndOfFile
SystemTimeToFileTime
QueryPerformanceCounter
InterlockedCompareExchange
UnlockFile
LockFile
UnlockFileEx
GetProcessHeap
GetSystemTimeAsFileTime
FormatMessageA
WriteFile
Sleep
FormatMessageW
HeapValidate
ReadFile
FlushFileBuffers
GetTempPathW
HeapSize
LockFileEx
GetDiskFreeSpaceW
LoadLibraryA
CreateFileMappingA
GetDiskFreeSpaceA
GetSystemInfo
GetVersionExA
GetTempPathA
GetSystemTime
AreFileApisANSI
DeleteFileA
GetEnvironmentVariableA
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedExchange
QueryDosDeviceW
RaiseException
RegisterDeviceNotificationW
UnregisterDeviceNotification
RegQueryValueExW
RegCloseKey
RegSetValueExW
OpenProcessToken
RegOpenKeyExW
LookupAccountSidW
GetTokenInformation
SHGetSpecialFolderPathW
SHGetFolderPathW
SysFreeString
VariantTimeToSystemTime
VariantClear
VariantInit
SystemTimeToVariantTime
PathRemoveFileSpecW
PathAddBackslashW
PathAppendW
PathFileExistsW
wnsprintfW
WTSEnumerateSessionsW
WTSFreeMemory
?empty@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE_NXZ
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?data@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
??0?$allocator@D@std@@QAE@XZ
??0?$_String_val@DV?$allocator@D@std@@@std@@IAE@V?$allocator@D@1@@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z
??0?$allocator@_W@std@@QAE@XZ
??0?$_String_val@_WV?$allocator@_W@std@@@std@@IAE@V?$allocator@_W@1@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHPBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?push_back@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXD@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEPA_WXZ
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIPB_W@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@V?$_String_const_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@0@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
__clean_type_info_names_internal
__dllonexit
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_encode_pointer
_lock
_onexit
_decode_pointer
_CxxThrowException
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
_crt_debugger_hook
floor
memcpy
__CxxFrameHandler3
_itoa
_strlwr
??3@YAXPAX@Z
_beginthreadex
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBDH@Z
memcpy_s
memmove_s
??0exception@std@@QAE@XZ
wcsstr
wcsrchr
wcsnlen
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
?what@exception@std@@UBEPBDXZ
vswprintf_s
_vscwprintf
malloc
free
_wcsupr_s
_purecall
??_V@YAXPAX@Z
wcscpy_s
wcsncpy
wcsncpy_s
_wtoi
wcschr
swscanf_s
_wcsicmp
swprintf_s
_time64
ceil
_snwscanf_s
_itow_s
_vsnprintf
_vsnwprintf
wcscat_s
_wcslwr
swscanf
strcat_s
_wcsnicmp
_wcslwr_s
isalpha
_localtime64_s
wcsftime
_atoi64
wcsncat_s
iswspace
atoi
atof
sprintf
_wcsupr
memmove
strncmp
_msize
realloc
strcpy_s
rand
printf
calloc
_recalloc
strnlen
_itow
memset
_unlock
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
GetProcessImageFileNameW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ