Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
c0c7ec0c99b05a2cc18f965e69c89f60_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c0c7ec0c99b05a2cc18f965e69c89f60_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c0c7ec0c99b05a2cc18f965e69c89f60_JaffaCakes118
Size
597KB
MD5
c0c7ec0c99b05a2cc18f965e69c89f60
SHA1
eb9fd60d9852ff23b5a8953da7d67a6ee6675201
SHA256
e96ddfd8aba8dde17e143a5e74b2051c205cf6d123d9df529604532b9b45b6a8
SHA512
22a311e5dd640f8f7aa389af3a4c776de604f1b25ce8dab15bebd1b1a11c03f9b6560132aa6cfceeda8cf0e1e1ec1c6ffa705119be4d36b593cfb965812c0d1b
SSDEEP
12288:N/8ciIOULVjhz1xASwqr//hQAoDqjd6FcEfv1Xjz227JuIFLwvW:58c7Jp6dc49Tz37JzUW
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
I:\Hummer\QQ1.61\Basic_Hummer3_VOB\Hummer2010\Output\Plugin\Com.Tencent.QQVip\Bin\QQVip.pdb
?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z
??1CCmdCodecBase@@UAE@XZ
?GetRegulatedTime@Time@Util@@YA_NAA_J@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
??ICTXBSTR@@QAEPAPA_WXZ
?IsEmpty@CTXBSTR@@QAEHXZ
??0CTXBSTR@@QAE@XZ
?Empty@CTXStringW@@QAEXXZ
??4CTXStringW@@QAEAAV0@ABV0@@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
??BCTXStringW@@QBEPB_WXZ
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?GetTimeOffsetUTC@NLS@@YAJXZ
??H@YA?AVCTXStringW@@ABV0@0@Z
?Find@CTXStringW@@QBEHPB_WH@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??0CTXStringW@@QAE@ABV0@@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
??0CTXStringW@@QAE@PB_W@Z
?Replace@CTXStringW@@QAEHPB_W0@Z
?SetIdleCallback@TXTimer@@YAHPAUITXIdleCallback@@I@Z
??0CTXBSTR@@QAE@ABV0@@Z
?Format@CTXStringW@@QAAXPB_WZZ
??1CFmtString@@QAE@XZ
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
?PropertyDWord@CFmtString@@QAEHPB_WK0@Z
??0CFmtString@@QAE@XZ
?IsEmpty@CTXStringW@@QBE_NXZ
??8CTXBSTR@@QBE_NPB_W@Z
??4CTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z
?IsFileExist@FS@@YAHPB_W@Z
ord34
?ConvertXMLToTXData@Convert@Util@@YAHPA_WPAPA_WPAUITXData@@0@Z
?Copy@CTXBSTR@@QBEPA_WXZ
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?CodeArrayNumber@CCmdCodecBase@@IAEXW4TX_DATA_TYPE@@@Z
?CodeEndArray@CCmdCodecBase@@IAEXXZ
?CodeArrayTXDataNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?CodeArrayLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@H@Z
?DecodeArrayLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@H@Z
?BrokenCodec@CCmdCodecBase@@IAEXPB_W@Z
??1CUnZipFile@@QAE@XZ
?UnZipFile@CUnZipFile@@QAE_NABVCTXStringW@@0@Z
??0CUnZipFile@@QAE@XZ
?Left@CTXStringW@@QBE?AV1@H@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z
??8@YA_NABVCTXStringW@@0@Z
??0CTXStringW@@QAE@PA_W@Z
?CancelDownload@CTXHttpDownload@@QAEXXZ
??1CTXHttpDownloadSink@@UAE@XZ
??0CTXHttpDownloadSink@@IAE@XZ
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@@Z
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnProgress@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnError@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@K@Z
?DecodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?SetEventMask@CTXHttpDownload@@QAEXE@Z
?SetUIInterface@CTXHttpDownload@@QAEXPAVCTXHttpDownloadSink@@@Z
?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z
?Run@CTXHttpDownload@@EAEIXZ
??1CTXHttpDownload@@UAE@XZ
?DeleteFileW@FS@@YAHPB_W@Z
?GetDownloadedFilePath@CTXHttpDownload@@QAEHAAVCTXStringW@@@Z
??9CTXBSTR@@QBE_NABV0@@Z
ord26
?SetAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z
?EraseAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
ord33
??0CTXStringA@@QAE@PBDH@Z
??0CTXStringA@@QAE@PBD@Z
?PropertyStr@CFmtString@@QAEHPB_W0@Z
?ConvertXMLStrToTXData@Convert@Util@@YAHPA_WPAPA_WPAUITXData@@0@Z
??1CTXStringA@@QAE@XZ
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z
??BCTXStringA@@QBEPBDXZ
?GetDownloadedBuffer@CTXHttpDownload@@QAEHPAPAEPAK@Z
?DownloadToBuffer@CTXHttpDownload@@QAEHPB_WPAU_SYSTEMTIME@@@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?CopyFileW@FS@@YAHPB_W0H@Z
?Encode16@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@@Z
?GetFileHash@FS@Util@@YAHPB_WAAVCTXBuffer@@AAK@Z
?CopyDirectory@FS@@YAHPB_W0PAUITXCopyDirProgress@@@Z
?DeleteDirectory@FS@@YAHPB_W@Z
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
?GuidToString@Com@Util@@YAJABU_GUID@@PAPA_WH@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?GetLength@CTXStringW@@QBEHXZ
?Mid@CTXStringW@@QBE?AV1@HH@Z
??M@YA_NABVCTXStringW@@0@Z
?ReleaseBuffer@CTXStringW@@QAEXH@Z
??9CTXBSTR@@QBE_NPB_W@Z
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
??8@YA_NABVCTXStringW@@PB_W@Z
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
??4CTXStringW@@QAEAAV0@_W@Z
?GetAt@CTXStringW@@QBE_WH@Z
??9@YA_NABVCTXStringW@@PB_W@Z
??4CTXStringA@@QAEAAV0@ABV0@@Z
?Utf8FromWS@Convert@Util@@YA?AVCTXStringA@@PB_WH@Z
??0CTXStringA@@QAE@XZ
??1CTXCommPack@@UAE@XZ
?GetDWord@CTXCommPack@@QAEHAAKHH@Z
?SetBufferIn@CTXCommPack@@QAEXAAVCTXBuffer@@H@Z
??0CTXCommPack@@QAE@XZ
?GetBufferOut@CTXCommPack@@QAEHAAVCTXBuffer@@@Z
?AddDWord@CTXCommPack@@QAEHKH@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
?MoveDownloadFile@CTXHttpDownload@@QAEHPB_WH@Z
?CodeBuffer@CCmdCodecBase@@IAEXPB_W@Z
?DecodeBuffer@CCmdCodecBase@@IAEXPB_WI@Z
?Length@CTXBSTR@@QBEIXZ
??4CTXBSTR@@QAEAAV0@ABV0@@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
?GetLoginServerTime@Time@Util@@YAKXZ
?GetBuffer@CTXStringA@@QAEPADH@Z
?Mid@CTXStringA@@QBE?AV1@HH@Z
?GetDecodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
?GetBufferByteLeft@CTXCommPack@@QBEHXZ
?DecodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?DecodeArrayToEnd@CCmdCodecBase@@IAEXPB_WH@Z
?DecodeArrayTXDataNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?DecodeArrayTXDataStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?Release@CCmdCodecBase@@MAGKXZ
?AddRef@CCmdCodecBase@@MAGKXZ
?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z
??0CCmdCodecBase@@QAE@XZ
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
?ConvertTXDataStringBundle@Convert@Util@@YAHPAUITXData@@@Z
??0CTXStringW@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
?GetTXDataStr@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXStringW@@@Z
??1CTXBSTR@@QAE@XZ
?GetBSTR@CTXStringW@@QBEPA_WXZ
??1CTXStringW@@QAE@XZ
??0CTXBSTR@@QAE@PB_W@Z
??0CTXHttpDownload@@QAE@XZ
?EnableUnicodeString@CCmdCodecBase@@IAEXH@Z
?DecodeEndArray@CCmdCodecBase@@IAEXXZ
?CodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?GetCodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
?Download@CTXHttpDownload@@QAEHPB_WPAU_SYSTEMTIME@@0H@Z
?CodeBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?GetService@GF@Util@@YAJABU_GUID@@PA_WPAPAX@Z
?RawInitGFElementByXtml@GF@Util@@YAJPA_WPAUIGFElement@@10H@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?ScreenPoint2ClientPoint@GF@Util@@YAXPAUIGFFrame@@AAUtagPOINT@@@Z
?GetMinorVer@Version@@YAEXZ
?IsVASFlagValid@Contact@Util@@YAHKE@Z
?IsServerControlBitOn@Misc@Util@@YAHK@Z
?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@W4URLMODIFYLEVEL@12@0@Z
?GetSignFmt@URL@Util@@YAXAAVCFmtString@@@Z
?GetPublicName@Contact@Util@@YA?AVCTXStringW@@K@Z
?CreateMsgPack@Msg@Util@@YAHPAPAUITXMsgPack@@@Z
?SetMsgTime@Msg@Util@@YAXPAUITXMsgPack@@_J@Z
?SaveMsg@Msg@Util@@YAHPB_W000KKPAUITXMsgPack@@PAUITXData@@@Z
?GetSelfUin@Contact@Util@@YAKXZ
?IsFlagValid@Contact@Util@@YAHKK@Z
?GetMajorVer@Version@@YAEXZ
?Get32ByteValueAddedSign@Misc@Util@@YA?AVCTXStringW@@XZ
?IsMaskFlagValid@Contact@Util@@YAJKEKAAH@Z
?GetIMVersion@Contact@Util@@YAGK@Z
?AddReport@URL@Util@@YA?AVCTXStringW@@ABV3@0@Z
?TransformMsg@Msg@Util@@YAXPAUITXMsgPack@@PAPAU3@K@Z
?ConvertCharFormatRichEditToMsgPack@Msg@Util@@YAHABU_charformatw@@PAPAUITXData@@@Z
?GetMsgTime@Msg@Util@@YA_JPAUITXMsgPack@@@Z
?MessageBoxExW@Misc@Util@@YAHPAUIGFFrame@@PA_W1IPAUITXData@@PAPAU4@@Z
?GetMsgPackFirstElemByType@Misc@Util@@YAHPAUITXMsgPack@@EPAPAX@Z
?OpenUrlWithWnd@URL@Util@@YAPAUHWND__@@ABVCTXStringW@@W4URLMODIFYLEVEL@12@0HHPB_WPAPAUIGFStandardWin@@HV4@HPAUIIEHost@@@Z
?QueryChatSession@ChatSession@Util@@YAXPAUIAFChatFrameType@@PAPAUIAFChatSession@@@Z
?GetChatSessionMainWnd@ChatSession@Util@@YAHKHPAPAUIGFFrame@@@Z
?WriteTipInChatSession@ChatSession@Util@@YAHKHPAUITXData@@@Z
GetCanvasHandle
SetTextureFilter
DeleteTexture
TranslateTexture
CreateCanvas
SetCanvasFilter
DrawTexture
CanvasToTexture
DeleteCanvas
AlphaBlend
GetSystemTimeAsFileTime
GetCurrentProcessId
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
GetProcessHeap
HeapSize
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
SetThreadLocale
GetThreadLocale
RaiseException
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetLastError
lstrlenW
lstrcmpiW
GetModuleHandleW
GetModuleFileNameW
GetVersionExW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
HeapFree
HeapAlloc
HeapDestroy
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
SetRectEmpty
IntersectRect
IsWindow
ReleaseDC
GetCursorPos
PtInRect
CopyRect
GetActiveWindow
CharNextW
EqualRect
GetDC
InvalidateRect
UnregisterClassA
GetDeviceCaps
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW
RegEnumKeyExW
RegOpenKeyExW
SHGetFileInfoW
CoCreateGuid
OleRegGetMiscStatus
StringFromCLSID
CoTaskMemFree
CoCreateInstance
SysFreeString
SysStringLen
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
ord58
ord18
ord22
ord30
ord31
ord32
ord15
ord61
ord23
ord64
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
?terminate@@YAXXZ
_decode_pointer
__CppXcptFilter
_lock
_encode_pointer
__dllonexit
_unlock
_except_handler4_common
wcstoul
wcsncpy
_localtime64_s
wcsftime
_time64
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_onexit
??1exception@std@@UAE@XZ
??3@YAXPAX@Z
_CxxThrowException
_recalloc
__CxxFrameHandler3
memcpy_s
malloc
free
wcscpy_s
wcsncpy_s
??_V@YAXPAX@Z
memmove_s
??2@YAPAXI@Z
_purecall
_invalid_parameter_noinfo
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
memset
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
__clean_type_info_names_internal
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ