Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
ab0a305ff013c56d275c1b9573c1365a_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ab0a305ff013c56d275c1b9573c1365a_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
ab0a305ff013c56d275c1b9573c1365a_JaffaCakes118
Size
120KB
MD5
ab0a305ff013c56d275c1b9573c1365a
SHA1
9f68414458ade3c3170409247767e4bca32b11e9
SHA256
46b8e31d91935a95a8f0b5ba043ff3f9ff1a3247ddb26aeba42f57b1536af29d
SHA512
3bbb205ceaa25bf93d7508681149a980103fa758cb2465527b6727ff0984f53ab53177c266e36e925b0353c11b880c852310c1053f08b565f224d19f19d6e5e7
SSDEEP
3072:ctJN9PLNAIhvMbZYnQE0329yOgcw74+JP5atJ:S9zZEmnQEE0yOgcwDvGJ
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NS_StringContainerFinish
NS_CStringContainerFinish
NS_StringContainerInit
NS_Free
NS_StringGetData
NS_CStringGetData
NS_Alloc
NS_GetServiceManager
NS_CStringContainerInit
NS_GetComponentManager
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
fwprintf_s
_wfopen_s
_vsnwprintf_s
free
malloc
isalnum
wcsncmp
wcstok_s
wcscpy_s
strcpy_s
wcsnlen
_wcsnicmp
wcstod
wcstoul
fclose
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABV01@@Z
_snwprintf_s
towlower
??0exception@std@@QAE@ABQBD@Z
_invalid_parameter_noinfo
??2@YAPAXI@Z
_purecall
wcsncpy_s
??3@YAXPAX@Z
memmove_s
rand_s
_stricmp
??0exception@std@@QAE@XZ
??_V@YAXPAX@Z
calloc
strcpy
strlen
memset
memcpy
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_except_handler4_common
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_onexit
_lock
__dllonexit
_unlock
_amsg_exit
__CppXcptFilter
_wcsicmp
_adjust_fdiv
_CxxThrowException
?terminate@@YAXXZ
__CxxFrameHandler3
EnumChildWindows
IsWindowVisible
GetPropW
EnumWindows
CoInitialize
CoCreateInstance
CoUninitialize
VariantInit
SysFreeString
SysAllocString
InternetCrackUrlW
PathRemoveFileSpecW
UrlUnescapeW
URLDownloadToCacheFileW
URLDownloadToFileW
GetAdaptersAddresses
UuidToStringW
RpcStringFreeW
UuidCreate
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
OpenProcessToken
GetTokenInformation
ConvertSidToStringSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorSacl
SetNamedSecurityInfoW
RegSetValueExW
CreateFileW
FindFirstFileW
FindNextFileW
OpenEventW
CreateMutexW
OpenFileMappingW
WaitForMultipleObjects
MapViewOfFile
WaitForSingleObject
SetEvent
ReleaseMutex
MultiByteToWideChar
GetCurrentThreadId
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
HeapFree
GetProcessHeap
DisableThreadLibraryCalls
GetFileTime
DeleteFileW
FindClose
GetCurrentProcess
GetTickCount
Sleep
OutputDebugStringW
LocalFree
GetTempPathW
CreateDirectoryW
GetTempFileNameW
FreeLibrary
GetVersionExW
LoadLibraryW
GetProcAddress
CreateWaitableTimerW
GetLastError
GetSystemTimeAsFileTime
SetWaitableTimer
CreateThread
CloseHandle
UnmapViewOfFile
CreateEventW
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
InterlockedDecrement
SetLastError
InterlockedExchange
InterlockedCompareExchange
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
PR_AtomicIncrement
PR_AtomicDecrement
NSGetModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ