Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
c18a19632eb24d26e6eba5c895852b9e_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c18a19632eb24d26e6eba5c895852b9e_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
c18a19632eb24d26e6eba5c895852b9e_JaffaCakes118
Size
409KB
MD5
c18a19632eb24d26e6eba5c895852b9e
SHA1
dd0b7b272f7a2609a38130e0fd2e31abfce2798c
SHA256
ab8f53b6de34c3dea5933239a940081bdafcf723b1b1eb5d8e1afb4aa80108a5
SHA512
5701892218155ca629bb693457ee3676a07e9d77e62e13c02ddfddaac8f748639322076861fa5e18940c2bb17980dbbef6fc0874937e16f21e70496f0799c286
SSDEEP
6144:b07QCKC1rLJzwhCfe2vo0zfNlChwiC7MPufvHzNWiWOA9uo99+sR:g7rKCJLJzwhCfe2vo0p0rRPuDo9+sR
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
e:\code\qqbuilder_QQ1.75_Intl_b6\Basic_Hummer3_VOB\Hummer2010\Output\BinFinal\PluginCommon.pdb
?IsEmpty@CTXBSTR@@QAEHXZ
??0CTXStringW@@QAE@XZ
?QueryPluginTpc@CoreCenter@Util@@YAHPA_WPAPAUITXDataRead@@@Z
?GetPluginNameList@CoreCenter@Util@@YAHPAPAUITXArrayRead@@@Z
?Format@CTXStringW@@QAAXPB_WZZ
??BCTXStringW@@QBEPB_WXZ
?TrimRight@CTXStringW@@QAEAAV1@XZ
?TrimLeft@CTXStringW@@QAEAAV1@XZ
?MakeUpper@CTXStringW@@QAEAAV1@XZ
?Replace@CTXStringW@@QAEH_W0@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
?Left@CTXStringW@@QBE?AV1@H@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
??0CTXStringW@@QAE@PA_W@Z
??0CTXStringW@@QAE@PB_W@Z
?IsEmpty@CTXStringW@@QBE_NXZ
??4CTXStringW@@QAEAAV0@PB_W@Z
?Right@CTXStringW@@QBE?AV1@H@Z
?GetLength@CTXStringW@@QBEHXZ
?Mid@CTXStringW@@QBE?AV1@HH@Z
?Find@CTXStringW@@QBEH_WH@Z
??0CTXStringW@@QAE@ABV0@@Z
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?SafeLoadLibrary@Sys@Util@@YAPAUHINSTANCE__@@PB_W@Z
?SafeLoadLibrary@Sys@Util@@YAPAUHINSTANCE__@@PBD@Z
??M@YA_NABVCTXStringW@@0@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
?Detach@CTXBSTR@@QAEPA_WXZ
ord26
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?Mid@CTXStringW@@QBE?AV1@H@Z
?Find@CTXStringW@@QBEHPB_WH@Z
?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z
?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z
??9CTXBSTR@@QBE_NABV0@@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
??4CTXBSTR@@QAEAAV0@ABV0@@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
??4CTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z
?GetBSTR@CTXStringW@@QBEPA_WXZ
??YCTXBSTR@@QAEAAV0@PB_W@Z
??8CTXBSTR@@QBE_NPB_W@Z
??1CTXHttpDownload@@UAE@XZ
?GuidFromString@Com@Util@@YAJPA_WAAU_GUID@@@Z
?SetUIInterface@CTXHttpDownload@@QAEXPAVCTXHttpDownloadSink@@@Z
??0CTXHttpDownload@@QAE@XZ
??0CTXHttpDownloadSink@@IAE@XZ
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@@Z
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnProgress@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnError@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@K@Z
?Download@CTXHttpDownload@@QAEHPB_WPAU_SYSTEMTIME@@0H@Z
?IsFileExist@FS@@YAHPB_W@Z
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?GetTimeOffsetUTC@NLS@@YAJXZ
?GetLCIDAsString@NLS@@YA?AVCTXStringW@@XZ
?AddInfo@CTXHttpDownload@@QAEHABVCTXStringW@@K@Z
?AddInfo@CTXHttpDownload@@QAEHABVCTXStringW@@0@Z
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z
?MoveDownloadFile@CTXHttpDownload@@QAEHPB_WH@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
?CancelDownload@CTXHttpDownload@@QAEXXZ
?QueryInfo@CTXHttpDownload@@QAEHABVCTXStringW@@AAK@Z
?ClearRequestHeader@CTXHttpDownload@@QAEXXZ
??8@YA_NABVCTXStringW@@0@Z
?DeleteFileW@FS@@YAHPB_W@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
??9@YA_NABVCTXStringW@@PB_W@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
?GetAt@CTXStringW@@QBE_WH@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
??8CTXBSTR@@QBE_NPA_W@Z
?Delete@CTXStringW@@QAEHHH@Z
?AppendBSTR@CTXStringW@@QAEXPA_W@Z
??1CFmtString@@QAE@XZ
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
?PropertyStr@CFmtString@@QAEHPB_W0@Z
??0CFmtString@@QAE@XZ
?ParseDateTime@Time@Util@@YAHAAVCTXStringW@@AAU_SYSTEMTIME@@@Z
ord33
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
??8@YA_NPB_WABVCTXBSTR@@@Z
??8CTXBSTR@@QBE_NABV0@@Z
?Encode16@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@@Z
??0CTXStringW@@QAE@ABUtagVARIANT@@@Z
?IsRunning@CTXHttpDownload@@QAEHXZ
??1CUnZipFile@@QAE@XZ
?UnZipFile@CUnZipFile@@QAE_NABVCTXStringW@@0@Z
??0CUnZipFile@@QAE@XZ
?GetFileHash@FS@Util@@YAHPB_WAAVCTXBuffer@@AAK@Z
?SetEventMask@CTXHttpDownload@@QAEXE@Z
?GetStatus@FS@@YAHPB_WAAUtagTXFileStatus@@@Z
?GetDownloadedFilePath@CTXHttpDownload@@QAEHAAVCTXStringW@@@Z
?PropertyDWord@CFmtString@@QAEHPB_WK0@Z
?Encode16@Encode@Util@@YA?AVCTXStringW@@PBXI@Z
?Run@CTXHttpDownload@@EAEIXZ
?SetAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z
??0CTXBSTR@@QAE@XZ
??ICTXBSTR@@QAEPAPA_WXZ
?ToLower@CTXBSTR@@QAEJXZ
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??MCTXBSTR@@QBE_NABV0@@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??0CTXBSTR@@QAE@PB_W@Z
??0CTXBSTR@@QAE@ABV0@@Z
?Random@Sys@Util@@YAHXZ
??BCTXBSTR@@QBEPA_WXZ
ord34
??1CTXBSTR@@QAE@XZ
??1CTXStringW@@QAE@XZ
??1CCmdCodecBase@@UAE@XZ
?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z
?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z
?Release@CCmdCodecBase@@MAGKXZ
?AddRef@CCmdCodecBase@@MAGKXZ
?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z
??0CCmdCodecBase@@QAE@XZ
?DecodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?GetDecodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
?CodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
??1CTXHttpDownloadSink@@UAE@XZ
?GetCodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?RegisterCodec@DataReport@Util@@YAJKKPAUITXDataReportCodecExt@@@Z
?GetMinorVer@Version@@YAEXZ
?GetMajorVer@Version@@YAEXZ
?GetVersionExW@Version@@YAXAAUtagVersionInfo@1@@Z
?IsAllowSendCCCmd@Contact@Util@@YAHK@Z
?GetSelfUin@Contact@Util@@YAKXZ
?IsServerControlBitOn@Misc@Util@@YAHK@Z
??1CTXDataReportCodecBase@@UAE@XZ
??0CTXDataReportCodecBase@@QAE@XZ
?CodecTLV@CTXDataReportCodecBase@@UAGJKPAUITXData@@PAPAUITXBuffer@@@Z
?CodeWord@CTXDataReportCodecBase@@IAEXEPB_W@Z
?IncHelper@DataReport@Util@@YAJKPB_WK@Z
?GetStatus@Contact@Util@@YAGK@Z
?Get32ByteValueAddedSign@Misc@Util@@YA?AVCTXStringW@@XZ
?GetPubNo@Version@@YAKXZ
?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@@Z
?ClearUpdateSuccessedFlag@TXUpdateCfg@@YAHXZ
?IsUpdateSuccessed@TXUpdateCfg@@YAHXZ
?IsServerControlBitOn@TXUpdateUtil@@YAHXZ
?GetAuTempPath@Dir@Util@@YA?AVCTXStringW@@XZ
?IsEnableYaHei@Misc@Util@@YAHXZ
?MessageBoxExByHwnd@Misc@Util@@YAHPAUHWND__@@PA_W1IPAUITXData@@PAPAU4@@Z
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
SetThreadLocale
GetThreadLocale
RaiseException
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetLastError
lstrlenW
lstrcmpiW
GetModuleHandleW
GetModuleFileNameW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
CloseHandle
WaitForSingleObject
OpenMutexW
GetVersionExW
IsBadWritePtr
IsBadReadPtr
EnterCriticalSection
lstrcpynW
FreeLibrary
GetProcAddress
OpenProcess
TerminateProcess
WritePrivateProfileStringW
GetPrivateProfileIntW
GetCurrentProcessId
GetLocaleInfoA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
Sleep
InterlockedCompareExchange
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetACP
InterlockedExchange
GetVersionExA
UnregisterClassA
CharNextW
SetActiveWindow
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW
RegQueryValueExW
SHGetSpecialFolderPathW
SHGetFileInfoW
ShellExecuteExW
CoTaskMemFree
StringFromCLSID
CoCreateInstance
VariantClear
SysAllocString
VariantInit
LoadTypeLi
LoadRegTypeLi
SysFreeString
VarUI4FromStr
SysStringLen
ord58
ord32
ord31
ord30
ord64
ord22
ord18
ord15
ord23
ord61
PathAppendW
PathRemoveFileSpecW
PathFileExistsW
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
_amsg_exit
_initterm_e
_initterm
_encoded_null
_adjust_fdiv
_malloc_crt
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_crt_debugger_hook
??_V@YAXPAX@Z
??3@YAXPAX@Z
_CxxThrowException
_recalloc
__CxxFrameHandler3
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
free
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
_byteswap_ulong
memcpy_s
malloc
wcscpy_s
wcsncpy_s
memmove_s
_purecall
memset
_time64
memcpy
_wtoi
_mktime64
wcsftime
_localtime64_s
wprintf
_except_handler4_common
_unlock
__dllonexit
_encode_pointer
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ