Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
bf69b5a714f72ca81eda1ccec4ece9e9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bf69b5a714f72ca81eda1ccec4ece9e9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
bf69b5a714f72ca81eda1ccec4ece9e9_JaffaCakes118
Size
77KB
MD5
bf69b5a714f72ca81eda1ccec4ece9e9
SHA1
b99de58badd8c1d63b94da652eaf4f1022fac0ff
SHA256
29dbbdfc4032879bcf9c7065cf9cfec4306a468523a3c7d8ec390092c3c035ad
SHA512
0f8b9856db78078f6559154ed87d1fc488ffc7a5a7f06cf4743b3da2cb43ce0b9d2dfe1a9c9bbeb2b63b731e8884938f9e2efe739273e2b246c2a48fe88868f5
SSDEEP
1536:spshnIwTGlSSoD/AT9v7TjWuOwRKz/6roR7Oba7Cg:sKdDm9/pOwsl
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
e:\code\qqbuilder_QQ1.75_Intl_b6\Basic_Hummer3_VOB\Hummer2010\Output\BinFinal\QQPI.pdb
?IsDirectoryExist@FS@@YAHPB_W@Z
??ICTXBSTR@@QAEPAPA_WXZ
?IsThreadRunning@CTXThreadModel@@IAEHXZ
?CombineQNC@FS@@YA?AVCTXStringW@@PB_W0@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
?IsEmpty@CTXBSTR@@QAEHXZ
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
?DeleteDirectory@FS@@YAHPB_W@Z
?CopyDirectory@FS@@YAHPB_W0PAUITXCopyDirProgress@@@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??0CTXStringW@@QAE@PA_W@Z
??BCTXBSTR@@QBEPA_WXZ
??0CTXStringW@@QAE@ABV0@@Z
?Trim@CTXStringW@@QAEAAV1@XZ
?StartThread@CTXThreadModel@@QAEHXZ
??1CTXBSTR@@QAE@XZ
??H@YA?AVCTXStringW@@ABV0@0@Z
?TrimLeft@CTXStringW@@QAEAAV1@XZ
?IsEmpty@CTXStringW@@QBE_NXZ
?ExtractCabEx@Zip@Util@@YAHPB_W0@Z
?Right@CTXStringW@@QBE?AV1@H@Z
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
??0CTXStringW@@QAE@PB_WH@Z
?Left@CTXStringW@@QBE?AV1@H@Z
??0CTXBSTR@@QAE@PB_W@Z
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
??0CTXThreadModel@@IAE@XZ
?StopThread@CTXThreadModel@@QAEXK@Z
?Format@CTXStringW@@QAAXPB_WZZ
??1CTXThreadModel@@MAE@XZ
??H@YA?AVCTXStringW@@PB_WABV0@@Z
??0CTXStringW@@QAE@PB_W@Z
?RemoveFileSystem@FS@@YAHPB_W@Z
?AddFileSystem@FS@@YAJW4FILESYSTEM_TYPE@@PB_W1HHH@Z
??BCTXStringW@@QBEPB_WXZ
??4CTXStringW@@QAEAAV0@ABV0@@Z
??0CTXBSTR@@QAE@XZ
?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
?GuidFromString@Com@Util@@YAJPA_WAAU_GUID@@@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
ord34
?GetAt@CTXStringW@@QBE_WH@Z
??8CTXBSTR@@QBE_NPB_W@Z
??8@YA_NABVCTXStringW@@PB_W@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
?IsFileExist@FS@@YAHPB_W@Z
?Find@CTXStringW@@QBEH_WH@Z
?GetFileHash@FS@Util@@YAHPB_WAAVCTXBuffer@@AAK@Z
?DeleteFileW@FS@@YAHPB_W@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
?GetLength@CTXStringW@@QBEHXZ
?Find@CTXStringW@@QBEHPB_WH@Z
?MakeLower@CTXStringW@@QAEAAV1@XZ
??1CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@XZ
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
ord566
ord3800
ord757
ord5579
ord2009
ord2054
ord4320
ord6274
ord3795
ord6272
ord4008
ord1007
ord4032
ord1079
ord1198
ord5096
ord6215
ord5378
ord3826
ord3677
ord1911
ord2925
ord4535
ord5220
ord5222
ord2239
ord3942
ord4562
ord5226
ord5209
ord5562
ord3327
ord762
ord590
ord331
ord807
ord2531
ord2725
ord2829
ord4301
ord2708
ord2832
ord2534
ord2640
ord1194
ord2527
ord2936
ord3712
ord3713
ord3703
ord2638
ord3943
ord4475
ord4255
ord3163
ord1178
ord266
ord265
ord764
ord3824
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_except_handler4_common
_exit
_cexit
__wgetmainargs
_amsg_exit
_wtoi
free
malloc
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
memset
__CxxFrameHandler3
_invoke_watson
_controlfp_s
_crt_debugger_hook
_XcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
??0exception@std@@QAE@XZ
_time64
_CxxThrowException
__argc
_wcsicmp
__wargv
_wtol
??0exception@std@@QAE@ABQBD@Z
InterlockedDecrement
LoadLibraryW
GetProcAddress
FreeLibrary
DeleteCriticalSection
WriteFile
GetFileSize
ReadFile
FindFirstFileW
FindNextFileW
FindClose
InterlockedIncrement
GetCurrentProcessId
InterlockedExchange
Sleep
InterlockedCompareExchange
GetStartupInfoW
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetDiskFreeSpaceExW
GetTickCount
GetCurrentThreadId
CreateDirectoryW
CloseHandle
CreateFileW
GetModuleHandleW
RegisterClassExW
IsWindow
SendMessageTimeoutW
DispatchMessageW
TranslateMessage
WaitMessage
PeekMessageW
DefWindowProcW
ShowWindow
CreateWindowExW
GetStockObject
InitCommonControlsEx
CoUninitialize
CoCreateGuid
CoCreateInstance
CoInitialize
VariantClear
SysAllocString
ord30
ord32
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
CryptCATCatalogInfoFromContext
WinVerifyTrust
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
CryptCATAdminReleaseCatalogContext
WTHelperGetProvCertFromChain
CryptCATAdminAcquireContext
CryptCATAdminReleaseContext
CryptCATAdminCalcHashFromFileHandle
CryptCATAdminEnumCatalogFromHash
CertGetNameStringW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ