Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
a8fa79bc0942b875991e894770da08b2_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a8fa79bc0942b875991e894770da08b2_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
a8fa79bc0942b875991e894770da08b2_JaffaCakes118
Size
1.8MB
MD5
a8fa79bc0942b875991e894770da08b2
SHA1
da56235623788211362c84330ab46cd5bb96bb54
SHA256
d2b71337e29541450d8ceef6b108f039d01e2907fdcd6f8ad1282ba525b7028c
SHA512
958565822b782bfa8e00d90cc075a53075d9b81390e35aa6725ae7d17a98fd2e6d7dcbaffb754b7fb27edb26e9dd6abc82b15e1658f7c038673083b865552dd7
SSDEEP
24576:nWBEbaVX114e8TZs6m5eVz1paE8mFf5xWqFrbvesqL9PkBnqQ+p/QznJaA+eA6v+:W7TAJaE8mBpHvZq52+p/Q7JAep+
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
d:\Jenkins\workspace\srf_develop\ShuRuFa\程序\Trunk\Bin\pdbmap\WanNengWB\Skinbox32.pdb
GetThreadLocale
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
SleepEx
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetCurrentDirectoryA
GetFileInformationByHandle
FlushFileBuffers
SetFilePointer
GetStartupInfoA
GetFileType
SetHandleCount
GetStringTypeW
GetStringTypeA
GetSystemDirectoryA
PeekNamedPipe
WaitForMultipleObjects
GetVersion
GlobalMemoryStatus
FlushConsoleInputBuffer
GetTempFileNameW
SetConsoleCtrlHandler
ExitThread
ReadConsoleInputA
SetConsoleMode
MapViewOfFile
CreateFileMappingW
OpenFileMappingW
UnmapViewOfFile
LoadLibraryA
IsBadReadPtr
VirtualProtect
VirtualFree
VirtualAlloc
Sleep
GetLongPathNameW
LockResource
ReleaseMutex
CreateMutexW
CreateFileA
OpenProcess
LocalFree
FormatMessageW
RemoveDirectoryW
MoveFileExW
CopyFileW
DeleteFileW
GlobalUnlock
GlobalLock
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
GetACP
HeapCreate
HeapDestroy
HeapSize
GetModuleFileNameA
SetLastError
TlsFree
GlobalAlloc
SetFileAttributesW
GetWindowsDirectoryW
GetTempPathW
GetTickCount
GetExitCodeProcess
WaitForSingleObject
FileTimeToSystemTime
ReadFile
ExpandEnvironmentStringsW
GetFileSize
LocalAlloc
GetModuleFileNameW
GetFileAttributesW
CreateToolhelp32Snapshot
QueryPerformanceCounter
QueryPerformanceFrequency
GetEnvironmentVariableW
GetVersionExW
Process32NextW
Process32FirstW
SetUnhandledExceptionFilter
SetErrorMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
CreateFileW
CreateDirectoryW
CloseHandle
CreateProcessW
GetPrivateProfileIntW
GetLocalTime
GetProcessHeap
HeapAlloc
HeapFree
GetProcAddress
GetStdHandle
WriteFile
WideCharToMultiByte
CreateThread
FindClose
FindNextFileW
FindFirstFileW
FindResourceW
SizeofResource
InterlockedDecrement
LoadResource
InterlockedIncrement
GetModuleHandleW
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
FreeLibrary
MultiByteToWideChar
LoadLibraryExW
LoadLibraryW
lstrcmpiW
GetLastError
RaiseException
GetPrivateProfileStringW
WritePrivateProfileStringW
GetFullPathNameA
TlsSetValue
TlsAlloc
TlsGetValue
ExitProcess
GetModuleHandleA
GetCPInfo
LCMapStringW
LCMapStringA
RtlUnwind
GetStartupInfoW
GetVersionExA
GetDriveTypeA
MoveFileW
GetSystemTimeAsFileTime
FindFirstFileA
FileTimeToLocalFileTime
HeapReAlloc
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
InterlockedExchange
FindWindowExW
GetWindowThreadProcessId
MessageBoxA
GetProcessWindowStation
GetUserObjectInformationW
UnregisterClassA
ShowWindow
FindWindowW
IsWindow
IsWindowVisible
CharNextW
DefWindowProcW
SendMessageW
PostThreadMessageW
PostMessageW
GetMessageW
GetWindowRect
GetWindowLongW
SetWindowLongW
GetDesktopWindow
GetMonitorInfoW
EnumDisplayMonitors
SystemParametersInfoW
CreateWindowExW
SetWindowPos
DestroyWindow
MoveWindow
LoadCursorW
RegisterClassExW
MessageBoxW
ClientToScreen
PostQuitMessage
SetBkMode
DeleteDC
DeleteObject
SelectObject
CreateCompatibleDC
CreateDIBSection
GetTextExtentPoint32W
ReportEventA
DeregisterEventSource
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
GetAce
EqualSid
AddAce
AddAccessAllowedAce
SetSecurityDescriptorDacl
GetSecurityDescriptorControl
InitializeSecurityDescriptor
LookupAccountNameW
GetSecurityDescriptorDacl
GetAclInformation
GetLengthSid
InitializeAcl
RegQueryValueExW
GetTokenInformation
LookupAccountSidW
OpenProcessToken
RegisterEventSourceA
ShellExecuteW
SHGetSpecialFolderPathW
CreateStreamOnHGlobal
CLSIDFromString
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
OleUninitialize
OleInitialize
CoUninitialize
CoInitialize
CoCreateInstance
VarUI4FromStr
?GetTextStyle@CLabelUI@DuiLib@@QBEIXZ
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PB_W@Z
?Close@CWindowWnd@DuiLib@@QAEXI@Z
?GetStyle@WindowImplBase@DuiLib@@UAEJXZ
??8CDuiString@DuiLib@@QBE_NPB_W@Z
?OnMouseMove@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonUp@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
??1CDuiString@DuiLib@@QAE@XZ
?OnLButtonDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
??0CDuiString@DuiLib@@QAE@PB_WH@Z
?OnSetFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKillFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?messageMap@CNotifyPump@DuiLib@@1UDUI_MSGMAP@2@B
?OnKeyDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnCreate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?Notify@WindowImplBase@DuiLib@@UAEXAAUtagTNotifyUI@2@@Z
?OnChar@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseHover@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseWheel@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnGetMinMaxInfo@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcHitTest@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcPaint@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcCalcSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?Term@CPaintManagerUI@DuiLib@@SAXXZ
?MessageLoop@CPaintManagerUI@DuiLib@@SAXXZ
?GetHWND@CWindowWnd@DuiLib@@QBEPAUHWND__@@XZ
?CenterWindow@CWindowWnd@DuiLib@@QAEXXZ
?Create@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@PB_WKKHHHHPAUHMENU__@@@Z
?SetInstance@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z
?SetTextStyle@CLabelUI@DuiLib@@QAEXI@Z
?MessageHandler@WindowImplBase@DuiLib@@UAEJIIJAA_N@Z
?GetSuperClassName@CWindowWnd@DuiLib@@MBEPB_WXZ
?CreateControl@WindowImplBase@DuiLib@@UAEPAVCControlUI@2@PB_W@Z
?GetClassStyle@WindowImplBase@DuiLib@@UBEIXZ
?HandleMessage@WindowImplBase@DuiLib@@UAEJIIJ@Z
?OnFinalMessage@WindowImplBase@DuiLib@@UAEXPAUHWND__@@@Z
?ResponseDefaultKeyEvent@WindowImplBase@DuiLib@@MAEJI@Z
?GetZIPFileName@WindowImplBase@DuiLib@@UBE?AVCDuiString@2@XZ
?OnClose@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnDestroy@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcActivate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
??0WindowImplBase@DuiLib@@QAE@XZ
??BCDuiString@DuiLib@@QBEPB_WXZ
??0CDialogBuilder@DuiLib@@QAE@XZ
?Create@CDialogBuilder@DuiLib@@QAEPAVCControlUI@2@VSTRINGorID@2@PB_WPAVIDialogBuilderCallback@2@PAVCPaintManagerUI@2@PAV32@@Z
?FindSubControl@CContainerUI@DuiLib@@QAEPAVCControlUI@2@PB_W@Z
?ShowWindow@CWindowWnd@DuiLib@@QAEX_N0@Z
?OnClick@WindowImplBase@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z
?GetResourceType@WindowImplBase@DuiLib@@UBE?AW4UILIB_RESOURCETYPE@2@XZ
??1CDialogBuilder@DuiLib@@QAE@XZ
?GetResourceID@WindowImplBase@DuiLib@@UBEPB_WXZ
?GetOptionGroup@CPaintManagerUI@DuiLib@@QAEPAVCStdPtrArray@2@PB_W@Z
?GetSize@CStdPtrArray@DuiLib@@QBEHXZ
?GetAt@CStdPtrArray@DuiLib@@QBEPAXH@Z
?GetFont@CLabelUI@DuiLib@@QBEHXZ
?GetPaintDC@CPaintManagerUI@DuiLib@@QBEPAUHDC__@@XZ
?GetFont@CPaintManagerUI@DuiLib@@QAEPAUHFONT__@@H@Z
?SetIcon@CWindowWnd@DuiLib@@QAEXI@Z
?ShowModal@CWindowWnd@DuiLib@@QAEIXZ
?GetLength@CDuiString@DuiLib@@QBEHXZ
?SendMessageW@CWindowWnd@DuiLib@@QAEJIIJ@Z
?GetFocus@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@XZ
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@UtagPOINT@@@Z
?IsSelected@COptionUI@DuiLib@@QBE_NXZ
?SetBkImage@CControlUI@DuiLib@@QAEXPB_W@Z
?OnSysCommand@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
??1WindowImplBase@DuiLib@@UAE@XZ
GdipDrawImageRectRectI
GdipGetImageHeight
GdipGetImageWidth
GdipDeleteGraphics
GdipCloneImage
GdipCreateFromHDC
GdipDisposeImage
GdipCreateBitmapFromStream
GdipFree
GdipAlloc
PathFileExistsW
sendto
recvfrom
getservbyport
gethostbyaddr
shutdown
htons
getsockopt
getpeername
WSACleanup
WSAStartup
WSAGetLastError
closesocket
socket
recv
send
getsockname
ntohs
accept
listen
__WSAFDIsSet
select
ioctlsocket
gethostname
setsockopt
connect
getservbyname
htonl
inet_addr
gethostbyname
inet_ntoa
WSASetLastError
bind
URLDownloadToFileW
GetModuleFileNameExW
HttpQueryInfoW
InternetCloseHandle
InternetOpenW
InternetSetOptionW
InternetOpenUrlW
InternetReadFile
curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_init
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_maprintf
curl_mfprintf
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ