Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
d57b6046c515c8b32d2abfab586f2de2_JaffaCakes118.dll
Resource
win7-20240729-en
Target
d57b6046c515c8b32d2abfab586f2de2_JaffaCakes118
Size
183KB
MD5
d57b6046c515c8b32d2abfab586f2de2
SHA1
63fd53a69c15f6fc0a4e4dbc9b658cfdf6591705
SHA256
f8ffd17c6cac5072cc3222eb3c7460804d427e024acfdef336b1f832163c0d5e
SHA512
435f2a32646843d079e1c73bf65c83be06a6aa21345805f5663706189654019ae5e86d72c404881bb589ef6b816e2ad6a513d1af13a0b5f607e730b76ef74962
SSDEEP
3072:iT0wF5VKkDtWTG2irjt7u1LAAKIuezt+/M8Q2StTjynJAo:iTT3Ss/k8Q2SljqAo
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
d:\Source\PWPEV2010\branches\ProtoType\branches\ProtoType\srcs\XGrab\XGrab\bin\release\SelectForIE.pdb
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
GetLastError
lstrcmpiW
GetModuleFileNameW
InterlockedIncrement
InterlockedDecrement
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
SetThreadLocale
GetThreadLocale
GetVersion
LockResource
FindResourceExW
GetCurrentProcessId
GetTickCount
GetCurrentThreadId
GetProcAddress
LoadLibraryW
WideCharToMultiByte
GetStringTypeW
GetStringTypeA
DeleteCriticalSection
LCMapStringA
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetCPInfo
Sleep
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleA
HeapCreate
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
LCMapStringW
GetCommandLineA
HeapFree
GetVersionExA
GetLocaleInfoA
GetACP
IsDebuggerPresent
InterlockedExchange
HeapAlloc
LoadLibraryA
VirtualFree
VirtualAlloc
HeapDestroy
HeapReAlloc
HeapSize
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
GetProcessHeap
GetWindowInfo
SetWindowsHookExW
GetAsyncKeyState
CallNextHookEx
GetFocus
GetCaretPos
UnregisterClassA
GetWindowLongW
SetWindowLongW
DefWindowProcW
UnhookWindowsHookEx
CharLowerBuffW
CreatePopupMenu
GetCursorPos
WindowFromPoint
ScreenToClient
SendMessageW
ClientToScreen
SystemParametersInfoW
FindWindowW
SendMessageTimeoutW
AppendMenuW
GetWindowRect
TrackPopupMenu
GetClassNameW
GetWindow
FindWindowExW
IsWindowVisible
CharNextW
CallWindowProcW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
ShellExecuteW
CoTaskMemAlloc
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
DispCallFunc
SysStringByteLen
SysAllocStringByteLen
VariantClear
VariantInit
VarBstrCmp
LoadRegTypeLi
VarUI4FromStr
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
SysStringLen
RegisterTypeLi
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrCStdStubBuffer2_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
NdrOleAllocate
NdrOleFree
NdrStubForwardingFunction
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ