Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
dff3215594443f8c8a958293fb9cb868_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dff3215594443f8c8a958293fb9cb868_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
dff3215594443f8c8a958293fb9cb868_JaffaCakes118
Size
697KB
MD5
dff3215594443f8c8a958293fb9cb868
SHA1
8c4356f9c03bb2be91a50aba4f83da8ce09b5799
SHA256
6fcf456d46600a97e358ba4dce23099d1974145c55105eaf0670dc3e889f1687
SHA512
e53880c776f66c4e39bdf378c582e813e48ff2923184d45bcd2a16e574b5c5c4c8f0e95223d0cf1effede1d5f075f7bf437036c27ee362a307e6b729d3c7b19f
SSDEEP
12288:JMNQbojrC5lSot00HGhmHEwjUwwT12yH9j:WNYosXkRwwzdj
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
F:\Hummer\QQ1.75_QD2.5.3\Basic_Hummer3_VOB\Hummer2010\Output\Bin\SkinMgr.pdb
?Resample@CxImage@@QAE_NJJHPAV1@@Z
?Encode@CxImage@@QAE_NPAVCxFile@@K@Z
?Load@CxImage@@QAE_NPB_WK@Z
?Save@CxImage@@QAE_NPB_WK@Z
??0CxImage@@QAE@K@Z
?Decode@CxImage@@QAE_NPAVCxFile@@K@Z
?IsValid@CxImage@@QBE_NXZ
?GetType@CxImage@@QBEKXZ
?GetWidth@CxImage@@QBEKXZ
?GetHeight@CxImage@@QBEKXZ
?Destroy@CxImage@@QAE_NXZ
?Copy@CTXBSTR@@QBEPA_WXZ
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
?GetBSTR@CTXStringW@@QBEPA_WXZ
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
??BCTXStringW@@QBEPB_WXZ
??8CTXBSTR@@QBE_NPA_W@Z
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
?IsFileSystemFile@FS@@YAHPB_W@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??0CTXStringW@@QAE@XZ
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
??0CTXStringW@@QAE@PA_W@Z
?Length@CTXBSTR@@QBEIXZ
?CopyTXDataField@Data@Util@@YAHPAUITXDataRead@@PAUITXData@@PB_W2@Z
?Decode16@Encode@Util@@YAHABVCTXStringW@@AAVCTXBuffer@@@Z
ord34
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
?CombineQNC@FS@@YA?AVCTXStringW@@PB_W0@Z
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
?GetFileSuffix@FS@Util@@YA?AVCTXStringW@@ABV3@@Z
?Empty@CTXBSTR@@QAEXXZ
?IsEmpty@CTXStringW@@QBE_NXZ
?EnumDirectory@FS@@YAHPB_WPAPAUITXEnumDirectory@@@Z
?DeleteDirectory@FS@@YAHPB_W@Z
?IsFileExist@FS@@YAHPB_W@Z
?IsDirectoryExist@FS@@YAHPB_W@Z
??8@YA_NABVCTXStringW@@0@Z
??0CTXBSTR@@QAE@ABV0@@Z
??8CTXBSTR@@QBE_NABV0@@Z
?NotifyIdle@Window@Util@@YAJXZ
?Mid@CTXStringW@@QBE?AV1@HH@Z
ord33
?Left@CTXStringW@@QBE?AV1@H@Z
?ConvertXMLStrToTXData@Convert@Util@@YAHPA_WPAPA_WPAUITXData@@0@Z
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
??1CTXHttpDownloadSink@@UAE@XZ
??1CTXHttpDownload@@UAE@XZ
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@@Z
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnProgress@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnError@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@K@Z
?CancelDownload@CTXHttpDownload@@QAEXXZ
?EraseAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z
?Download@CTXHttpDownload@@QAEHPB_WPAU_SYSTEMTIME@@0H@Z
?DeleteFileW@FS@@YAHPB_W@Z
?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z
?Encode16@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@@Z
?GetFileHash@FS@Util@@YAHPB_WAAVCTXBuffer@@AAK@Z
?GetDownloadedFilePath@CTXHttpDownload@@QAEHAAVCTXStringW@@@Z
?SetAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
?MoveDownloadFile@CTXHttpDownload@@QAEHPB_WH@Z
?SetUIInterface@CTXHttpDownload@@QAEXPAVCTXHttpDownloadSink@@@Z
??0CTXHttpDownload@@QAE@XZ
??0CTXHttpDownloadSink@@IAE@XZ
??8@YA_NABVCTXStringW@@PB_W@Z
??1CFmtString@@QAE@XZ
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
?PropertyDWord@CFmtString@@QAEHPB_WK0@Z
??0CFmtString@@QAE@XZ
?Format@CTXStringW@@QAAXPB_WZZ
?CreateDirectoryW@FS@@YAHPB_W@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
??8CTXBSTR@@QBE_NPB_W@Z
?LoadXmlByName@FS@Util@@YAHPB_WPAPAUIXMLDOMDocument@@@Z
??ICTXBSTR@@QAEPAPA_WXZ
?Replace@CTXStringW@@QAEHPB_W0@Z
?Find@CTXStringW@@QBEHPB_WH@Z
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ
?AddFileSystem@FS@@YAJW4FILESYSTEM_TYPE@@PB_W1HHH@Z
?IsFileSystemExist@FS@@YAHPB_W@Z
??1CTXStringA@@QAE@XZ
?GetRegulatedTime@Time@Util@@YA_NAA_J@Z
?ReleaseBuffer@CTXStringA@@QAEXH@Z
?GetBuffer@CTXStringA@@QAEPADH@Z
?GetLength@CTXStringA@@QBEHXZ
??0CTXStringA@@QAE@UtagEN@@PB_WH@Z
??9CTXBSTR@@QBE_NPB_W@Z
?ConvertXMLToTXData@Convert@Util@@YAHPA_WPAPA_WPAUITXData@@0@Z
?ExtractCabEx@Zip@Util@@YAHPB_W0@Z
??4CTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z
?GetString@CTXStringW@@QBEPB_WXZ
??9CTXBSTR@@QBE_NPA_W@Z
?ConvertTXDataToXML@Convert@Util@@YAHPA_WPAUITXDataRead@@0@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
?GetFileName@FS@Util@@YA?AVCTXStringW@@ABV3@@Z
ord26
?GetTXDataStr@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXStringW@@@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
?PropertyLong@CFmtString@@QAEHPB_WJ0@Z
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
??0CTXStringW@@QAE@_WH@Z
?GetAt@CTXStringW@@QBE_WH@Z
?GetLength@CTXStringW@@QBEHXZ
?PropertyStr@CFmtString@@QAEHPB_W0@Z
??1CTXFileDialog@@QAE@XZ
?GetFileFullName@CTXFileDialog@@QBE?AVCTXStringW@@XZ
?DoModal@CTXFileDialog@@QAEHXZ
??0CTXFileDialog@@QAE@HPB_W00K0PAUHWND__@@HPAVVFileDialgCallback@@@Z
??0CTXBSTR@@QAE@H@Z
?Random@Sys@Util@@YAHXZ
??8@YA_NPA_WABVCTXBSTR@@@Z
?IsRunning@CTXHttpDownload@@QAEHXZ
??1CUnZipFile@@QAE@XZ
?UnZipFile@CUnZipFile@@QAE_NABVCTXStringW@@0@Z
??0CUnZipFile@@QAE@XZ
?SetEventMask@CTXHttpDownload@@QAEXE@Z
?GetStatus@FS@@YAHPB_WAAUtagTXFileStatus@@@Z
??BCTXBSTR@@QBEPA_WXZ
?AddByte@CTXCommPack@@QAEHE@Z
?AddDWord@CTXCommPack@@QAEHKH@Z
?CodeEndArray@CCmdCodecBase@@IAEXXZ
?CodeArrayNumber@CCmdCodecBase@@IAEXW4TX_DATA_TYPE@@@Z
?CodeArrayLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@H@Z
?GetCodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
?CodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?BrokenCodec@CCmdCodecBase@@IAEXPB_W@Z
?GetDecodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
?DecodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
??0CTXStringA@@QAE@PBDH@Z
??0CTXStringA@@QAE@PBD@Z
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z
?GetTLV@CTXCommPack@@QAEHAAEAAVCTXBuffer@@W4TXCommPackDataType@@H@Z
?DecodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?DecodeEndArray@CCmdCodecBase@@IAEXXZ
?DecodeArrayTXDataNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?DecodeArrayLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@H@Z
??0CCmdCodecBase@@QAE@XZ
?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z
?AddRef@CCmdCodecBase@@MAGKXZ
?Release@CCmdCodecBase@@MAGKXZ
?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z
?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z
??1CCmdCodecBase@@UAE@XZ
?UploadWithBufferResponse@CTXHttpDownload@@QAEHPB_W0@Z
?GetZipFile@CZipFiles@@QAE_NABVCTXStringW@@0@Z
??1CZipFiles@@QAE@XZ
?AddFile@CZipFiles@@QAE_NABVCTXStringW@@0@Z
??0CZipFiles@@QAE@XZ
ord30
?GetDownloadedBuffer@CTXHttpDownload@@QAEHPAPAEPAK@Z
?DownloadToBuffer@CTXHttpDownload@@QAEHPB_WPAU_SYSTEMTIME@@@Z
??M@YA_NABVCTXStringW@@0@Z
??9@YA_NABVCTXStringW@@PB_W@Z
?Right@CTXStringW@@QBE?AV1@H@Z
??4CTXStringW@@QAEAAV0@PA_W@Z
?GetTempFileNameW@FS@Util@@YA?AVCTXStringW@@ABV3@@Z
?MakeUpper@CTXStringW@@QAEAAV1@XZ
?CopyFileW@FS@@YAHPB_W0H@Z
?IsEmpty@CTXBSTR@@QAEHXZ
??1CTXBSTR@@QAE@XZ
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??1CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@PB_W@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
??0CTXBSTR@@QAE@PB_W@Z
??0CTXStringW@@QAE@ABV0@@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??BCTXStringA@@QBEPBDXZ
??0CTXBSTR@@QAE@XZ
?Detach@CTXBSTR@@QAEPA_WXZ
?CodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?Get@Metadata@Util@@YAJPAUITXData@@PA_WPAPA_W@Z
?PrintFrame@GF@Util@@YAPAUHGTEXTURE__@@PAUIGFFrame@@KH@Z
?SetColorizeInfo@GF@Util@@YAXNNN@Z
?GetService@GF@Util@@YAJABU_GUID@@PA_WPAPAX@Z
?GetTextColor@Text@GF@Util@@YA?ATtagARGB@@T4@@Z
?Get@Metadata@Util@@YAJPAUITXData@@PA_WPAH@Z
?FreeData@Metadata@Util@@YAJAAPA_W@Z
?ScreenPoint2ClientPoint@GF@Util@@YAXPAUIGFFrame@@AAUtagPOINT@@@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?RawInitGFElementByXtml@GF@Util@@YAJPA_WPAUIGFElement@@10H@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
?IsServerControlBitOn@Misc@Util@@YAHK@Z
?IsMaskFlagValid@Contact@Util@@YAJKEKAAH@Z
?IsFlagValid@Contact@Util@@YAHKK@Z
?GetSelfUin@Contact@Util@@YAKXZ
?GetIMVersion@Contact@Util@@YAGK@Z
?GetMinorVer@Version@@YAEXZ
?GetMajorVer@Version@@YAEXZ
?GetUserDataSaveSetting@Sys@Util@@YA?AVCTXStringW@@AAKAAV3@@Z
?CodecTLV@CTXDataReportCodecBase@@UAGJKPAUITXData@@PAPAUITXBuffer@@@Z
?SetDataDWord@DataReport@Util@@YAJKPB_WK@Z
?GetDataDWord@DataReport@Util@@YAJKPB_WAAK@Z
?IsVASFlagValid@Contact@Util@@YAHKE@Z
?GetSignFmt@URL@Util@@YAXAAVCFmtString@@@Z
?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@W4URLMODIFYLEVEL@12@0@Z
?IsOnline@Contact@Util@@YAHK@Z
??0CTXDataReportCodecBase@@QAE@XZ
??1CTXDataReportCodecBase@@UAE@XZ
?CodeWord@CTXDataReportCodecBase@@IAEXEPB_W@Z
?UnlockAutoHide@Misc@Util@@YAXH@Z
?GetChatSessionMainWnd@ChatSession@Util@@YAHKHPAPAUIGFFrame@@@Z
?LockAutoHide@Misc@Util@@YAXH@Z
?MessageBoxExW@Misc@Util@@YAHPAUIGFFrame@@PA_W1IPAUITXData@@PAPAU4@@Z
?IsAppLocked@Misc@Util@@YAHXZ
CopyTexture
GetCanvasHandle
FillSolidRect
CreateCanvas
SetCanvasFilter
DrawTexture
CanvasToTexture
GetTextureFilter
CreateTexture
LockTextureBits
UnlockTextureBits
SetTextureFilter
DeleteTexture
GetTextureMode
SetTextureMode
GetTextureSize
ARGBtoAHSL
AHSLtoARGB
HeapSize
GetProcessHeap
Sleep
HeapReAlloc
InterlockedCompareExchange
HeapAlloc
HeapDestroy
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
GetTimeZoneInformation
FreeLibrary
TerminateProcess
GetVersionExW
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
SetThreadLocale
GetThreadLocale
RaiseException
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetLastError
lstrlenW
lstrcmpiW
GetModuleHandleW
GetModuleFileNameW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
CloseHandle
WriteFile
CreateFileW
GetProcAddress
LoadLibraryW
LoadCursorW
RegisterClassExW
UnregisterClassA
CharNextW
ShowWindow
IsWindow
IsWindowVisible
DefWindowProcW
CreateWindowExW
DispatchMessageW
TranslateMessage
GetKeyState
SetRect
EqualRect
SetCursor
SetCapture
IntersectRect
ReleaseCapture
GetMessageW
PostQuitMessage
GetParent
GetWindowLongW
PostThreadMessageW
InvalidateRect
GetClientRect
GetCursorPos
PtInRect
GetDC
ReleaseDC
GetSystemMetrics
UpdateWindow
PeekMessageW
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
GetObjectW
GetDIBits
DeleteObject
GetStockObject
RegDeleteKeyW
RegSetValueExW
RegEnumKeyExW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
SHGetSpecialFolderPathW
SHGetFileInfoW
CLSIDFromString
CoCreateGuid
StringFromCLSID
CoTaskMemFree
CoCreateInstance
VarUI4FromStr
VariantClear
SysAllocString
LoadRegTypeLi
SysStringLen
SysFreeString
LoadTypeLi
ord32
ord64
ord22
ord18
ord15
ord23
ord61
ord30
ord31
ord58
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
_localtime64_s
wcsftime
_mktime64
_time64
memset
_purecall
memmove_s
wcsncpy_s
wcscpy_s
malloc
memcpy_s
??_V@YAXPAX@Z
memcpy
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
free
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBD@Z
__CxxFrameHandler3
_recalloc
_CxxThrowException
??3@YAXPAX@Z
_itow
wprintf
_except_handler4_common
??2@YAPAXI@Z
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_malloc_crt
__CppXcptFilter
_adjust_fdiv
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_initterm_e
_initterm
_encoded_null
_amsg_exit
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ