Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
c089f4542f0ae3ea592c884ace935a88_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c089f4542f0ae3ea592c884ace935a88_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c089f4542f0ae3ea592c884ace935a88_JaffaCakes118
Size
213KB
MD5
c089f4542f0ae3ea592c884ace935a88
SHA1
82c2c95a81ce4157fc2cf4f09bc25ec4b8f5d05a
SHA256
00aad78591625ae0dda4efaf2156e8f38ace48013acdff99f93e8b91f18e6276
SHA512
8866d86fd5a7e94fa9a71fabd91fafe24f6df7057b0f4343256885e166461da434a38248c7fa60a642076fbb8423d401ed30da2f74a98bc03cd56872a30f8627
SSDEEP
3072:6HtN9b6Yn6yvL0BGLx9xA3ujGF5DtZe2wCWOAHlDVP:WtN9b6Y6yv2GzxA3gGbtZvNWOAHlRP
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
F:\Hummer\QQ1.75_QD2.5.3\Basic_Hummer3_VOB\Hummer2010\Output\Bin\QInterLive.pdb
?ReverseFind@CTXStringW@@QBEH_W@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??0CCmdCodecBase@@QAE@XZ
?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z
?AddRef@CCmdCodecBase@@MAGKXZ
?Release@CCmdCodecBase@@MAGKXZ
?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z
?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z
??1CCmdCodecBase@@UAE@XZ
?AllocSysString@CTXStringW@@QBEPA_WXZ
??M@YA_NABVCTXStringW@@0@Z
?GetBSTR@CTXStringW@@QBEPA_WXZ
??0CTXBSTR@@QAE@PB_W@Z
??1CTXBSTR@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
?GetTXDataStr@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXStringW@@@Z
?ConvertXMLStrToTXData@Convert@Util@@YAHPA_WPAPA_WPAUITXData@@0@Z
??ICTXBSTR@@QAEPAPA_WXZ
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??0CTXBSTR@@QAE@XZ
?DeleteDirectory@FS@@YAHPB_W@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
?Format@CTXStringW@@QAAXPB_WZZ
?Download@CTXHttpDownload@@QAEHPB_WPAU_SYSTEMTIME@@0H@Z
ord34
ord33
?ParseTencentProtParam@Misc@Util@@YAHABVCTXStringW@@AAV?$map@VCTXStringW@@V1@U?$less@VCTXStringW@@@std@@V?$allocator@U?$pair@$$CBVCTXStringW@@V1@@std@@@3@@std@@@Z
??0CTXStringW@@QAE@ABUtagVARIANT@@@Z
??9@YA_NABVCTXStringW@@PB_W@Z
?Left@CTXStringW@@QBE?AV1@H@Z
?CodeEndArray@CCmdCodecBase@@IAEXXZ
?CodeArrayNumber@CCmdCodecBase@@IAEXW4TX_DATA_TYPE@@@Z
?CodeArrayToEnd@CCmdCodecBase@@IAEXPB_WH@Z
?GetCodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
?CodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?DecodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?DecodeEndArray@CCmdCodecBase@@IAEXXZ
?DecodeArrayTXDataStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?DecodeArrayTXDataNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?DecodeArrayLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@H@Z
?GetDecodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
?DecodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?EnableUnicodeString@CCmdCodecBase@@IAEXH@Z
?Empty@CTXStringW@@QAEXXZ
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
?Delete@CTXStringW@@QAEHHH@Z
?GetLength@CTXStringW@@QBEHXZ
?Find@CTXStringW@@QBEHPB_WH@Z
??8CTXBSTR@@QBE_NPB_W@Z
?IsEmpty@CTXBSTR@@QAEHXZ
?IsFileExist@FS@@YAHPB_W@Z
?OnError@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@K@Z
?OnProgress@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@@Z
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
??0CTXHttpDownloadSink@@IAE@XZ
??0CTXHttpDownload@@QAE@XZ
?SetUIInterface@CTXHttpDownload@@QAEXPAVCTXHttpDownloadSink@@@Z
??1CTXHttpDownloadSink@@UAE@XZ
??1CTXHttpDownload@@UAE@XZ
?CreateTypedExtensionAgentMatch@Extension@Util@@YAXABVCTXStringW@@PAPAUITXExtensionAgentMatch@@@Z
??0CTXStringW@@QAE@PB_W@Z
??0CTXStringW@@QAE@XZ
?CancelDownload@CTXHttpDownload@@QAEXXZ
??0CTXStringW@@QAE@PA_W@Z
?MoveDownloadFile@CTXHttpDownload@@QAEHPB_WH@Z
??BCTXStringW@@QBEPB_WXZ
?FormatV@CTXStringW@@QAEXPB_WPAD@Z
??0CTXStringW@@QAE@ABV0@@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?IsEmpty@CTXStringW@@QBE_NXZ
??1CTXStringW@@QAE@XZ
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@W4URLMODIFYLEVEL@12@0@Z
?Get32ByteValueAddedSign@Misc@Util@@YA?AVCTXStringW@@XZ
?CreateMsgPack@Msg@Util@@YAHPAPAUITXMsgPack@@@Z
?IsVASFlagValid@Contact@Util@@YAHKE@Z
?IsBuddy@Contact@Util@@YAHK@Z
?GetPublicName@Contact@Util@@YA?AVCTXStringW@@K@Z
?GetAccountName@Account@Util@@YA?AVCTXStringW@@K@Z
?GetSelfUin@Contact@Util@@YAKXZ
?ChatFrameEvent@AFChatSession@Util@@YAHPAUIAFChatFrameType@@W4CFEventType@ChatFrame@@PAUITXData@@@Z
?GetImageDir@QInterLive@Misc@Util@@YA?AVCTXStringW@@K@Z
?IsQInterLiveUser@QInterLive@Misc@Util@@YAHK@Z
SetThreadLocale
GetThreadLocale
RaiseException
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetLastError
lstrlenW
lstrcmpiW
GetModuleHandleW
GetModuleFileNameW
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
InterlockedDecrement
GetLocaleInfoA
GetACP
InterlockedExchange
InitializeCriticalSection
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
LeaveCriticalSection
EnterCriticalSection
Sleep
GetVersionExA
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedIncrement
HeapDestroy
DeleteCriticalSection
CharNextW
UnregisterClassA
RegDeleteKeyW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegEnumKeyExW
SHGetFileInfoW
StringFromCLSID
CoTaskMemFree
CoCreateInstance
SysFreeString
VariantInit
VariantClear
SysAllocString
VarUI4FromStr
SysStringLen
LoadTypeLi
LoadRegTypeLi
ord31
ord58
ord32
ord61
ord23
ord64
ord22
ord18
ord15
ord30
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__CppXcptFilter
__clean_type_info_names_internal
??3@YAXPAX@Z
_invalid_parameter_noinfo
_CxxThrowException
memmove_s
_time64
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
__CxxFrameHandler3
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
_recalloc
memcpy_s
malloc
free
wcscpy_s
wcsncpy_s
??_V@YAXPAX@Z
_purecall
_adjust_fdiv
_except_handler4_common
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
memset
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ