Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
d1ddb6c83702b26251a20fec5dee7d46_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d1ddb6c83702b26251a20fec5dee7d46_JaffaCakes118
Size
217KB
MD5
d1ddb6c83702b26251a20fec5dee7d46
SHA1
57c12536326fd871f2563342f5542d3cb28fa697
SHA256
82e56d8bacf14ef2ae083570a2493cfdf55f5763be0bdd9dcde9eb32639886dd
SHA512
dc2887c934c5db47b5afab7695060cb007639b65c93067a3dff07638b0e207a554828b116ff7ed3ef6258584fda5c180925d7eb4de2a279ee191b94be357a3b6
SSDEEP
3072:e+3QR72a/FHs6FAM2f9irM1Xd5YaiReijmPF3q3Wquy0M1BTLeJsf/E0W8iSht:eR/Fef9AM1X+/yPdqmquq1BeJK1r
ExtKeyUsageCodeSigning
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualAlloc
GetProcAddress
LoadLibraryA
CreateFileA
lstrlenA
lstrcpyA
GetWindowsDirectoryA
BackupSeek
BackupWrite
Beep
BeginUpdateResourceA
BeginUpdateResourceW
BindIoCompletionCallback
CallNamedPipeA
CallNamedPipeW
CancelDeviceWakeupRequest
CommConfigDialogA
CommConfigDialogW
CompareStringW
CopyFileA
CopyFileExA
CopyFileExW
CreateDirectoryA
CreateEventW
CreateFileMappingA
CreateJobObjectA
CreateMutexW
CreateNamedPipeA
CreatePipe
CreateRemoteThread
CreateSemaphoreA
CreateThread
CreateWaitableTimerA
DebugBreak
DeleteAtom
DeleteFiber
DeleteTimerQueueTimer
DeleteVolumeMountPointW
DuplicateHandle
EnumCalendarInfoExA
EnumDateFormatsExA
EnumDateFormatsExW
EnumResourceLanguagesA
EnumSystemCodePagesA
EnumSystemCodePagesW
EnumSystemLocalesA
EnumSystemLocalesW
EnumTimeFormatsA
EnumTimeFormatsW
EnumUILanguagesW
ExitThread
ExpandEnvironmentStringsA
FatalAppExitA
FatalAppExitW
FileTimeToLocalFileTime
FileTimeToSystemTime
FillConsoleOutputCharacterA
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FindResourceExA
FindVolumeMountPointClose
FlushViewOfFile
FormatMessageA
FreeEnvironmentStringsW
FreeUserPhysicalPages
GetBinaryTypeW
GetCPInfo
GetCPInfoExW
GetCommConfig
GetCompressedFileSizeA
GetConsoleAliasExesLengthA
GetConsoleAliasExesW
GetConsoleAliasW
GetConsoleAliasesW
GetConsoleMode
GetConsoleWindow
GetCurrencyFormatA
GetCurrentConsoleFont
GetCurrentDirectoryA
GetCurrentDirectoryW
GetCurrentProcessId
GetDateFormatW
GetDefaultCommConfigW
GetEnvironmentVariableA
GetFileAttributesA
GetFileAttributesExA
GetFileInformationByHandle
GetLargestConsoleWindowSize
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetLogicalDriveStringsA
GetNamedPipeHandleStateA
GetNamedPipeHandleStateW
GetNamedPipeInfo
GetNumberFormatW
GetPrivateProfileIntA
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesW
GetPrivateProfileStringW
GetProcessAffinityMask
GetProcessVersion
GetProcessWorkingSetSize
GetProfileSectionW
GetProfileStringA
GetProfileStringW
GetShortPathNameA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeExW
GetStringTypeW
GetSystemDefaultLangID
GetSystemDefaultUILanguage
GetSystemPowerStatus
GetSystemTime
GetSystemWindowsDirectoryA
GetSystemWindowsDirectoryW
GetTapeParameters
GetTapeStatus
GetTempPathW
GetThreadContext
GetThreadPriorityBoost
GetThreadTimes
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultLangID
GetUserDefaultUILanguage
GetVolumeInformationW
GetWindowsDirectoryW
GetWriteWatch
GlobalAddAtomA
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFix
GlobalReAlloc
Heap32ListFirst
HeapSize
InterlockedCompareExchange
InterlockedDecrement
IsBadReadPtr
IsBadStringPtrW
IsBadWritePtr
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryExA
LoadLibraryW
LoadModule
LoadResource
LocalCompact
LocalFlags
LocalShrink
LocalSize
Module32FirstW
Module32Next
MultiByteToWideChar
OpenEventA
OpenEventW
OpenFile
OpenFileMappingA
OpenJobObjectA
OpenMutexA
OutputDebugStringA
OutputDebugStringW
PeekNamedPipe
Process32First
Process32FirstW
PulseEvent
QueryDosDeviceW
QueryInformationJobObject
ReadConsoleA
ReadConsoleInputW
ReadConsoleOutputAttribute
ReadConsoleOutputCharacterA
ReadConsoleOutputCharacterW
ReadConsoleW
ReadFile
ReadProcessMemory
ReleaseSemaphore
ReplaceFileA
ReplaceFileW
RequestDeviceWakeup
RtlFillMemory
RtlZeroMemory
ScrollConsoleScreenBufferA
ScrollConsoleScreenBufferW
SearchPathA
SetCommTimeouts
SetComputerNameExA
SetConsoleCP
SetConsoleCtrlHandler
SetConsoleCursorInfo
SetConsoleMode
SetConsoleOutputCP
SetConsoleTitleA
SetConsoleTitleW
SetCurrentDirectoryW
SetFileApisToOEM
SetFileTime
SetHandleCount
SetHandleInformation
SetInformationJobObject
SetLastError
SetLocaleInfoA
SetMailslotInfo
SetMessageWaitingIndicator
SetProcessAffinityMask
SetProcessPriorityBoost
SetProcessWorkingSetSize
SetStdHandle
SetSystemTime
SetSystemTimeAdjustment
SetTapeParameters
SetTapePosition
SetThreadContext
SetThreadIdealProcessor
SetThreadPriority
SetThreadPriorityBoost
SetUnhandledExceptionFilter
SystemTimeToTzSpecificLocalTime
Toolhelp32ReadProcessMemory
TransmitCommChar
UnregisterWaitEx
UpdateResourceA
VirtualFreeEx
VirtualLock
VirtualQuery
WaitForDebugEvent
WaitForSingleObjectEx
WriteConsoleInputA
WriteConsoleOutputAttribute
WriteConsoleOutputCharacterW
WritePrivateProfileStringA
WritePrivateProfileStringW
WritePrivateProfileStructA
WriteProcessMemory
WriteProfileSectionW
WriteTapemark
_hread
_hwrite
_llseek
_lread
lstrcat
lstrcatA
lstrcatW
lstrcmpW
lstrcmpi
lstrcpy
lstrcpyW
lstrcpynW
TileWindows
ToAscii
ToAsciiEx
TrackPopupMenuEx
TranslateAcceleratorA
TranslateMessage
UnionRect
UnregisterClassW
UnregisterHotKey
UpdateWindow
UserHandleGrantAccess
ValidateRect
WINNLSGetEnableStatus
WinHelpA
WinHelpW
WindowFromDC
wsprintfW
AdjustWindowRect
AllowSetForegroundWindow
ArrangeIconicWindows
BeginPaint
CallMsgFilterA
CallWindowProcA
CallWindowProcW
ChangeDisplaySettingsW
CharLowerBuffA
CharLowerBuffW
CharNextW
CharPrevA
CharPrevExA
CharToOemA
CharToOemBuffA
CharUpperBuffA
CheckDlgButton
CheckMenuRadioItem
ChildWindowFromPointEx
ClipCursor
CloseDesktop
CloseWindow
CloseWindowStation
CopyAcceleratorTableW
CopyRect
CreateAcceleratorTableA
CreateDialogParamA
CreateIcon
CreateMDIWindowW
CreateMenu
CreateWindowExA
CreateWindowStationW
DdeClientTransaction
DdeCmpStringHandles
DdeCreateDataHandle
DdeDisconnectList
DdeFreeStringHandle
DdeGetData
DdeGetLastError
DdeImpersonateClient
DdeInitializeA
DdeInitializeW
DdeQueryStringA
DdeQueryStringW
DdeSetUserHandle
DefMDIChildProcA
DeferWindowPos
DestroyAcceleratorTable
DialogBoxParamA
DispatchMessageW
DlgDirListA
DlgDirListComboBoxA
DragObject
DrawAnimatedRects
DrawEdge
DrawFocusRect
DrawFrame
DrawFrameControl
DrawIconEx
DrawMenuBar
DrawTextA
DrawTextW
EmptyClipboard
EnableMenuItem
EndDialog
EndMenu
EndTask
EnumDesktopWindows
EnumDesktopsW
EnumDisplayDevicesW
EnumDisplayMonitors
EnumDisplaySettingsExA
EnumDisplaySettingsExW
EnumDisplaySettingsW
EnumPropsW
EnumWindowStationsW
ExcludeUpdateRgn
FindWindowExA
GetAltTabInfoA
GetAncestor
GetCaretPos
GetClassInfoA
GetClassInfoExA
GetClassLongA
GetClassNameA
GetClassWord
GetCursor
GetDlgItemTextW
GetGUIThreadInfo
GetGuiResources
GetKeyNameTextW
GetKeyState
GetLastActivePopup
GetMenuContextHelpId
GetMenuInfo
GetMenuItemCount
GetMenuItemInfoA
GetMenuStringA
GetMessageExtraInfo
GetMessageTime
GetMonitorInfoW
GetOpenClipboardWindow
GetPriorityClipboardFormat
GetProcessDefaultLayout
GetPropW
GetScrollBarInfo
GetScrollInfo
GetScrollPos
GetSubMenu
GetSystemMenu
GetSystemMetrics
GetTopWindow
GetUserObjectInformationW
GetUserObjectSecurity
GetWindowLongA
GetWindowModuleFileName
GetWindowPlacement
GetWindowRgn
GetWindowTextA
GetWindowTextLengthA
GetWindowTextW
IMPQueryIMEA
IMPQueryIMEW
IMPSetIMEA
ImpersonateDdeClientWindow
InSendMessage
InflateRect
InsertMenuA
InsertMenuItemA
InsertMenuW
InternalGetWindowText
IntersectRect
InvalidateRect
IsCharAlphaA
IsCharAlphaNumericW
IsCharLowerA
IsCharLowerW
IsClipboardFormatAvailable
IsDialogMessageA
IsHungAppWindow
IsMenu
IsWindowEnabled
LoadCursorFromFileA
LoadCursorW
LoadImageW
LoadKeyboardLayoutA
LoadKeyboardLayoutW
LoadStringW
LockSetForegroundWindow
LockWindowUpdate
LockWorkStation
MapVirtualKeyExW
MenuItemFromPoint
MessageBoxExA
MessageBoxExW
MoveWindow
OemKeyScan
OemToCharBuffA
OffsetRect
OpenInputDesktop
OpenWindowStationA
PostQuitMessage
PostThreadMessageW
PtInRect
RealGetWindowClassA
RegisterClassExA
RegisterShellHookWindow
ReleaseCapture
RemoveMenu
RemovePropW
ReplyMessage
ScrollDC
ScrollWindow
SendDlgItemMessageW
SendIMEMessageExW
SendMessageA
SendMessageCallbackW
SendMessageW
SendNotifyMessageA
SendNotifyMessageW
SetCapture
SetCursorPos
SetDebugErrorLevel
SetDlgItemInt
SetDlgItemTextA
SetDlgItemTextW
SetDoubleClickTime
SetForegroundWindow
SetMenuItemInfoW
SetMessageQueue
SetParent
SetProcessDefaultLayout
SetPropA
SetLastErrorEx
SetScrollRange
SetShellWindow
SystemParametersInfoA
SubtractRect
ShowWindowAsync
ShowOwnedPopups
ShowCursor
SetWindowsHookA
SetWindowWord
SetWindowTextA
SetWindowPos
SetWindowLongW
SetUserObjectSecurity
SetThreadDesktop
SetSysColors
WriteOleStg
WriteClassStm
WdtpInterfacePointer_UserSize
WdtpInterfacePointer_UserMarshal
WdtpInterfacePointer_UserFree
UtGetDvtd32Info
UtConvertDvtd32toDvtd16
UpdateDCOMSettings
StringFromGUID2
StgSetTimes
StgOpenStorageOnILockBytes
StgOpenStorageEx
StgOpenPropStg
StgGetIFillLockBytesOnFile
StgCreateStorageEx
StgCreateDocfileOnILockBytes
StgConvertVariantToProperty
StgConvertPropertyToVariant
SetConvertStg
STGMEDIUM_UserUnmarshal
STGMEDIUM_UserSize
STGMEDIUM_UserMarshal
STGMEDIUM_UserFree
SNB_UserUnmarshal
SNB_UserSize
SNB_UserMarshal
SNB_UserFree
RevokeDragDrop
RegisterDragDrop
ReadStringStream
ReadOleStg
ReadFmtUserTypeStg
ReadClassStm
PropVariantCopy
ProgIDFromCLSID
OleUninitialize
OleTranslateAccelerator
OleSetMenuDescriptor
OleSetContainedObject
OleSetAutoConvert
OleSaveToStream
OleSave
OleRegGetMiscStatus
OleRegEnumVerbs
OleRegEnumFormatEtc
OleQueryLinkFromData
OleQueryCreateFromData
OleNoteObjectVisible
OleLockRunning
OleLoadFromStream
OleLoad
OleIsCurrentClipboard
OleInitialize
OleGetIconOfFile
OleGetIconOfClass
OleGetClipboard
OleFlushClipboard
OleDuplicateData
OleDraw
OleDoAutoConvert
OleCreateLinkToFile
OleCreateLinkFromDataEx
OleCreateLinkEx
OleCreateFromFileEx
OleCreateFromFile
OleCreateFromDataEx
OleCreateFromData
OleCreateEx
OleConvertIStorageToOLESTREAMEx
OleBuildVersion
MonikerRelativePathTo
MonikerCommonPrefixWith
MkParseDisplayName
IsEqualGUID
IsAccelerator
IIDFromString
HkOleRegisterObject
HWND_UserUnmarshal
HWND_UserSize
HWND_UserMarshal
HWND_UserFree
HPALETTE_UserSize
HPALETTE_UserMarshal
HPALETTE_UserFree
HMETAFILE_UserUnmarshal
HMETAFILE_UserSize
HMETAFILEPICT_UserUnmarshal
HMETAFILEPICT_UserSize
HMENU_UserSize
HMENU_UserMarshal
HMENU_UserFree
HICON_UserSize
HICON_UserMarshal
HGLOBAL_UserMarshal
HGLOBAL_UserFree
HENHMETAFILE_UserUnmarshal
HENHMETAFILE_UserSize
HDC_UserUnmarshal
HDC_UserSize
HDC_UserMarshal
HBRUSH_UserFree
HBITMAP_UserUnmarshal
HBITMAP_UserFree
HACCEL_UserUnmarshal
HACCEL_UserSize
HACCEL_UserFree
GetRunningObjectTable
GetHGlobalFromILockBytes
GetDocumentBitStg
GetConvertStg
GetClassFile
FreePropVariantArray
EnableHookObject
DoDragDrop
DllDebugObjectRPCHook
DcomChannelSetHResult
CreateStreamOnHGlobal
CreateStdProgressIndicator
CreatePointerMoniker
CreateOleAdviseHolder
CreateObjrefMoniker
CreateILockBytesOnHGlobal
CreateGenericComposite
CreateFileMoniker
CreateDataCache
CreateDataAdviseHolder
CreateClassMoniker
CreateBindCtx
CreateAntiMoniker
CoWaitForMultipleHandles
CoUnmarshalInterface
CoTreatAsClass
CoTestCancel
CoTaskMemRealloc
CoTaskMemAlloc
CoSwitchCallContext
CoSetProxyBlanket
CoSetCancelObject
CoRevokeMallocSpy
CoRevokeClassObject
CoRegisterSurrogateEx
CoRegisterPSClsid
CoRegisterClassObject
CoRegisterChannelHook
CoReactivateObject
CoQueryReleaseObject
CoQueryProxyBlanket
CoQueryClientBlanket
CoQueryAuthenticationServices
CoMarshalInterThreadInterfaceInStream
CoMarshalHresult
CoLoadLibrary
CoIsOle1Class
CoIsHandlerConnected
CoInstall
CoInitializeWOW
CoInitializeSecurity
CoInitializeEx
CoInitialize
CoImpersonateClient
CoGetStdMarshalEx
CoGetStandardMarshal
CoGetPSClsid
CoGetObjectContext
CoGetObject
CoGetMarshalSizeMax
CoGetMalloc
CoGetInstanceFromIStorage
CoGetInstanceFromFile
CoGetCurrentLogicalThreadId
CoGetClassVersion
CoGetClassObject
CoGetCancelObject
CoGetCallerTID
CoGetApartmentID
CoFreeUnusedLibraries
CoFreeLibrary
CoFreeAllLibraries
CoEnableCallCancellation
CoDisableCallCancellation
CoDeactivateObject
CoCreateObjectInContext
CoCreateGuid
CoCreateFreeThreadedMarshaler
CoCopyProxy
CoBuildVersion
CoAddRefServerProcess
CLSIDFromString
CLSIDFromProgIDEx
CLSIDFromProgID
CLIPFORMAT_UserUnmarshal
CLIPFORMAT_UserSize
CLIPFORMAT_UserFree
BindMoniker
WriteFmtUserTypeStg
VectorFromBstr
VariantTimeToSystemTime
VariantInit
VariantCopyInd
VariantCopy
VariantClear
VariantChangeTypeEx
VariantChangeType
VarXor
VarUI4FromUI2
VarUI4FromUI1
VarUI4FromStr
VarUI4FromR4
VarUI4FromI4
VarUI4FromI1
VarUI4FromDisp
VarUI4FromDec
VarUI4FromDate
VarUI4FromCy
VarUI2FromUI4
VarUI2FromUI1
VarUI2FromStr
VarUI2FromI2
VarUI2FromI1
VarUI2FromDec
VarUI2FromCy
VarUI2FromBool
VarUI1FromUI2
VarUI1FromR4
VarUI1FromI2
VarUI1FromI1
VarUI1FromDec
VarUI1FromCy
VarUI1FromBool
VarTokenizeFormatString
VarR8Pow
VarR8FromUI4
VarR8FromUI1
VarR8FromStr
VarR8FromR4
VarR8FromI4
VarR8FromI2
VarR8FromI1
VarR8FromDisp
VarR8FromDec
VarR8FromDate
VarR8FromCy
VarR8FromBool
VarR4FromUI4
VarR4FromUI2
VarR4FromUI1
VarR4FromStr
VarR4FromR8
VarR4FromI4
VarR4FromI2
VarR4FromCy
VarR4FromBool
VarR4CmpR8
VarParseNumFromStr
VarOr
VarNumFromParseNum
VarNot
VarMod
VarInt
VarImp
VarIdiv
VarI4FromStr
VarI4FromI2
VarI4FromI1
VarI4FromDisp
VarI4FromDec
VarI4FromDate
VarI4FromCy
VarI4FromBool
VarI2FromUI4
VarI2FromUI2
VarI2FromUI1
VarI2FromR4
VarI2FromI4
VarI2FromI1
VarI2FromDec
VarI2FromCy
VarI2FromBool
VarI1FromUI4
VarI1FromUI1
VarI1FromStr
VarI1FromI4
VarI1FromI2
VarI1FromDec
VarI1FromDate
VarI1FromCy
VarI1FromBool
VarFormatCurrency
VarFormat
VarFix
VarEqv
VarDiv
VarDecNeg
VarDecMul
VarDecInt
VarDecFromUI2
VarDecFromUI1
VarDecFromStr
VarDecFromR8
VarDecFromR4
VarDecFromI4
VarDecFromI2
VarDecFromI1
VarDecFromDisp
VarDecFromDate
VarDecFromCy
VarDecFix
VarDecDiv
VarDecAdd
VarDecAbs
VarDateFromUdateEx
VarDateFromUdate
VarDateFromUI1
VarDateFromStr
VarDateFromR4
VarDateFromI2
VarDateFromDec
VarDateFromBool
VarCySu
VarCyMulI4
VarCyMul
VarCyInt
VarCyFromUI4
VarCyFromUI1
VarCyFromR8
VarCyFromR4
VarCyFromI4
VarCyFromI1
VarCyFromDisp
VarCyCmp
VarCyAdd
VarCmp
VarBstrFromUI4
VarBstrFromUI1
VarBstrFromR8
VarBstrFromI4
VarBstrFromI1
VarBstrFromDate
VarBstrFromCy
VarBstrFromBool
VarBstrCmp
VarBstrCat
VarBoolFromUI4
VarBoolFromStr
VarBoolFromR8
VarBoolFromR4
VarBoolFromI4
VarBoolFromI1
VarBoolFromDec
VarBoolFromCy
VarAnd
VarAdd
VARIANT_UserMarshal
VARIANT_UserFree
UnRegisterTypeLi
SystemTimeToVariantTime
SysStringLen
SysFreeString
SysAllocStringLen
SysAllocString
SetErrorInfo
SafeArrayUnlock
SafeArrayUnaccessData
SafeArraySetRecordInfo
SafeArrayPutElement
SafeArrayLock
SafeArrayGetRecordInfo
SafeArrayGetIID
SafeArrayGetElemsize
SafeArrayGetElement
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayCreateVectorEx
SafeArrayCreateVector
SafeArrayCopy
SafeArrayAllocDescriptor
RevokeActiveObject
RegisterTypeLi
RegisterActiveObject
OleTranslateColor
OleLoadPicture
OleIconToCursor
OleCreatePropertyFrameIndirect
OleCreatePictureIndirect
OleCreateFontIndirect
OACreateTypeLib2
LoadTypeLibEx
LoadTypeLi
LoadRegTypeLi
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserFree
LPSAFEARRAY_Unmarshal
LPSAFEARRAY_Size
LHashValOfNameSysA
LHashValOfNameSys
GetRecordInfoFromTypeInfo
GetAltMonthNames
DispGetIDsOfNames
CreateTypeLib2
CreateStdDispatch
CreateDispTypeInfo
ClearCustData
BSTR_UserUnmarshal
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ