Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
b5665ad97faef496e09271b3109eb250_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b5665ad97faef496e09271b3109eb250_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
b5665ad97faef496e09271b3109eb250_JaffaCakes118
Size
133KB
MD5
b5665ad97faef496e09271b3109eb250
SHA1
b36dfaa06377e9ffd1c0e9130e24fc86378e0a5a
SHA256
165ad5433ba1c743b61cfb74b745305f79e7ff9c668a506deed0abf64ce1cb01
SHA512
0ae7d8fe9fcaad92e4a84879ec4af1296324873a937fdc824eaebaca0e08278d362d5cef41ff1181966db44c4e05bb0ac29504f8af6ad8db2797bb09f43c874a
SSDEEP
3072:z6NUPK5xnVuOR9T72wEOyz2QEewqMfNdant:zVSL9XWOyPmqMfgt
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
i:\Hummer\platform_ForQQ1.26Proj\Basic_HummerPlatform_VOB\Platform\Output\bin\bugreport.pdb
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
SymGetModuleInfo
SymCleanup
SymInitialize
SymSetOptions
SymLoadModule
InternetCloseHandle
HttpSendRequestA
InternetOpenA
HttpOpenRequestA
InternetConnectA
InternetReadFile
GetModuleFileNameExA
ImageList_Create
ImageList_ReplaceIcon
InitCommonControlsEx
LoadLibraryW
Sleep
GetCurrentThreadId
QueryPerformanceCounter
GetFileSize
FreeLibrary
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
InterlockedDecrement
InterlockedIncrement
HeapFree
GetTickCount
VirtualProtect
GetProcessHeap
OpenProcess
SetEvent
HeapAlloc
WriteFile
GetModuleHandleW
GetProcAddress
DeleteFileW
CreateDirectoryW
CreateProcessW
GetSystemTimeAsFileTime
GetThreadSelectorEntry
GetFileAttributesW
GetModuleFileNameW
GetTempPathW
GetCurrentProcessId
SetCurrentDirectoryW
CreateFileA
VirtualQueryEx
CloseHandle
SetFilePointer
ReadFile
CreateFileW
WriteProcessMemory
ReadProcessMemory
OpenThread
GetVersionExW
InterlockedExchange
InterlockedCompareExchange
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
GetWindowThreadProcessId
GetMenuItemCount
CreatePopupMenu
IsWindow
DestroyMenu
TrackPopupMenu
ClientToScreen
DrawIconEx
EnableWindow
CloseClipboard
SetWindowTextW
SetClipboardData
GetWindow
EmptyClipboard
SetDlgItemTextW
GetKeyState
OpenClipboard
SetWindowPos
RegisterClipboardFormatW
LoadImageW
SendMessageW
LoadIconW
InvalidateRect
GetClientRect
ShowWindow
SendDlgItemMessageW
MapDialogRect
GetWindowRect
MapWindowPoints
GetWindowTextW
GetWindowTextLengthW
GetDlgItem
SetWindowLongW
CallWindowProcW
MessageBoxW
DialogBoxParamW
EndDialog
GetStockObject
SetTextColor
DeleteObject
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
ShellExecuteW
SHGetDesktopFolder
ord155
SHBindToParent
SHGetFileInfoW
DoDragDrop
OleUninitialize
OleInitialize
ord10
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?GetBuffer@CTXStringW@@QAEPA_WH@Z
??0CTXStringW@@QAE@PA_W@Z
??1CTXStringW@@QAE@XZ
?AddBuffer@CZipBuffers@@QAE_NPBXIPBD@Z
??4CTXStringA@@QAEAAV0@ABV0@@Z
??0CTXStringW@@QAE@XZ
?GetLogByFilter@TXLog@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABVCTXStringW@@K0K@Z
?SetAt@CTXStringW@@QAEXH_W@Z
?Left@CTXStringA@@QBE?AV1@H@Z
??4CTXStringA@@QAEAAV0@PBD@Z
??0CTXStringW@@QAE@UtagEN@@PBDH@Z
??0CTXStringW@@QAE@ABV0@@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z
?Replace@CTXStringW@@QAEH_W0@Z
?Preallocate@CTXStringW@@QAEXH@Z
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?GetLength@CTXStringW@@QBEHXZ
?Empty@CTXStringW@@QAEXXZ
??M@YA_NABVCTXStringW@@0@Z
??YCTXStringW@@QAEAAV0@_W@Z
?Format@CTXStringW@@QAAXPB_WZZ
?AnsiToUnicode@Convert@Util@@YA_NAAVCTXStringW@@PBDH@Z
?FormatV@CTXStringW@@QAEXPB_WPAD@Z
??BCTXStringA@@QBEPBDXZ
??0CTXStringA@@QAE@UtagUTF8@@PB_WH@Z
?MatchWildcard@FS@Util@@YAHPBD0@Z
?GetZip@CZipBuffers@@QAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??0CTXStringW@@QAE@PB_W@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
??8@YA_NABVCTXStringW@@0@Z
?Mid@CTXStringW@@QBE?AV1@H@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
?Left@CTXStringW@@QBE?AV1@H@Z
wcslcpy
wcslcat
??4CTXStringW@@QAEAAV0@PA_W@Z
??0CTXStringA@@QAE@XZ
?Utf8FromWS@Convert@Util@@YA?AVCTXStringA@@PB_WH@Z
??1CTXStringA@@QAE@XZ
?GetLength@CTXStringA@@QBEHXZ
?Format@CTXStringA@@QAAXPBDZZ
?MakeLower@CTXStringA@@QAEAAV1@XZ
??BCTXStringW@@QBEPB_WXZ
??YCTXStringA@@QAEAAV0@ABV0@@Z
?GetBuffer@CTXStringA@@QAEPADH@Z
?Encode16@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
?SetConfigFile@TXI18N@@YAHPB_W0@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
??0CTXBSTR@@QAE@ABV0@@Z
??0CTXBSTR@@QAE@PB_W@Z
??1CTXBSTR@@QAE@XZ
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
?Length@CTXBSTR@@QBEIXZ
?Trim@CTXStringW@@QAEAAV1@XZ
??BCTXBSTR@@QBEPA_WXZ
??4CTXBSTR@@QAEAAV0@ABV0@@Z
?LoadStringW@CTXStringW@@QAEHPAUHINSTANCE__@@I@Z
??YCTXStringA@@QAEAAV0@D@Z
?GetBuffer@CTXStringA@@QAEPADXZ
?Utf8FromWSLimit@Convert@Util@@YA?AVCTXStringA@@HPB_WH@Z
??0CTXStringA@@QAE@UtagEN@@PB_WH@Z
??0CTXStringA@@QAE@PBD@Z
ord37
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z
??0CTXStringA@@QAE@ABV0@@Z
??M@YA_NABVCTXStringA@@0@Z
??0CTXStringA@@QAE@PBDH@Z
?FormatV@CTXStringA@@QAEXPBDPAD@Z
??YCTXStringA@@QAEAAV0@PBD@Z
_CxxThrowException
??3@YAXPAX@Z
strrchr
_snprintf
??2@YAPAXI@Z
_invalid_parameter_noinfo
_snwprintf
_wfopen
fread
fclose
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??_V@YAXPAX@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
_gmtime32
_purecall
__argc
__wargv
wcsncmp
swscanf
malloc
free
srand
wcsrchr
_wcsicmp
memmove_s
strchr
_time32
_time64
strncmp
atoi
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
_invoke_watson
_controlfp_s
memset
__CxxFrameHandler3
memcpy
??0exception@std@@QAE@ABQBD@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ