Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
db6b66f399e314a10e7234dbd3a29342_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db6b66f399e314a10e7234dbd3a29342_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
db6b66f399e314a10e7234dbd3a29342_JaffaCakes118
Size
1.3MB
MD5
db6b66f399e314a10e7234dbd3a29342
SHA1
06b5dc0ea277978f461833d4fec59efd07bdc001
SHA256
317380b846c7b3f96b1bfc15b3c61918ca607b18e45b110cfe9fbe7769a1da6e
SHA512
da9d7bf3cb391c2d490b319862ec5b02c91329eaefa45148521705a7328c1fa9b408176a291903dfac2d301138ff56b44b1b6932a80057d76e84617ac1bf8297
SSDEEP
24576:bssaG7MquwIud/HSiuBtvlhYafw1ViYRGXjKLoz+aPGZ/VE0ktmaDsp95:Y+BuXuZhuBjgWBCaPG9VE0cmWsp95
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
E:\iku_dev\branches\20160405-ver7.0.0\tools\netrequest_openssl\Release\nrssl.pdb
FileTimeToSystemTime
GetLastError
SetLastError
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
VerSetConditionMask
SleepEx
VerifyVersionInfoA
FormatMessageA
FreeLibrary
WaitForMultipleObjects
GetFileType
GetStdHandle
ReadFile
PeekNamedPipe
GetFileTime
LoadLibraryA
GetSystemDirectoryA
WriteFile
GetCurrentThreadId
GetSystemTime
QueryPerformanceCounter
GetCurrentProcessId
GlobalMemoryStatus
FlushConsoleInputBuffer
ResetEvent
GetProcessHeap
HeapFree
SetWaitableTimer
CreateFileA
GetLocalTime
WaitForSingleObject
GetModuleFileNameW
WideCharToMultiByte
MultiByteToWideChar
SystemTimeToFileTime
SetEvent
CloseHandle
CreateEventA
GetModuleHandleA
GetProcAddress
GetTickCount
ExpandEnvironmentStringsA
GetSystemTimeAsFileTime
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateWaitableTimerA
LocalFree
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
OpenEventA
GetProcessWindowStation
MessageBoxA
GetUserObjectInformationW
RegisterEventSourceA
DeregisterEventSource
ReportEventA
SHGetSpecialFolderPathW
?id@?$codecvt@DDH@std@@2V0locale@2@A
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??Bid@locale@std@@QAEIXZ
?_BADOFF@std@@3_JB
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
InternetTimeToSystemTimeA
strpbrk
remove
realloc
calloc
memset
isxdigit
strtoul
memcpy
strrchr
strchr
fopen
fputs
qsort
strtoll
_errno
tolower
fread
fseek
ftell
isalpha
strncpy
strtol
isdigit
sprintf
isspace
isalnum
strerror
__sys_nerr
_beginthreadex
atoi
_lseeki64
_fstat64
_getpid
getenv
_stat64
abort
_open
_stat64i32
isupper
_mbspbrk
toupper
_exit
wcsstr
_vsnprintf
raise
strcmp
feof
ferror
_fileno
_wfopen
_setmode
_strnicmp
_stricmp
islower
isprint
isgraph
signal
_getch
_CxxThrowException
__CxxFrameHandler3
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__CppXcptFilter
_amsg_exit
_malloc_crt
_initterm
_initterm_e
_except1
_except_handler4_common
__clean_type_info_names_internal
malloc
free
fprintf
__iob_func
sscanf
fclose
fflush
setvbuf
fsetpos
fgetpos
_fseeki64
memcpy_s
fwrite
_unlock_file
_lock_file
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@ABV01@@Z
_wmkdir
_waccess
ungetc
fputc
fgetc
strstr
memchr
_time64
strncmp
_purecall
??0exception@std@@QAE@ABQBDH@Z
_gmtime64
memmove
??2@YAPAXI@Z
??3@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
fgets
_strdup
_read
_write
??0exception@std@@QAE@ABQBD@Z
_close
htons
getsockopt
getsockname
getpeername
connect
closesocket
bind
send
recv
WSASetLastError
select
__WSAFDIsSet
WSAGetLastError
WSACleanup
WSAStartup
WSAIoctl
setsockopt
socket
getaddrinfo
freeaddrinfo
recvfrom
sendto
accept
listen
ioctlsocket
gethostname
shutdown
ntohs
ord60
ord50
ord46
ord143
ord41
ord22
ord26
ord27
ord32
ord33
ord35
ord79
ord30
ord200
ord301
ord211
IKUStartup
get_openssl_caller
openssl_get
openssl_post
release_openssl_caller
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ