Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
e0c3fd238e16bf5a655d54c605843bac_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e0c3fd238e16bf5a655d54c605843bac_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
e0c3fd238e16bf5a655d54c605843bac_JaffaCakes118
Size
218KB
MD5
e0c3fd238e16bf5a655d54c605843bac
SHA1
ed22e16a2f803deb19e72e5a0e60fa956b846884
SHA256
e65cbda5df38f32267e0c4d03db29d9b364c7a452fe85e0dfff156e6b1088465
SHA512
83e012e75f7796e3c800136d94867cf2f7cac78ed0edd8216d98ce2d75785e8ca73a14ca53fe76546de7e31d79a47fcd17d37bb0a7f29345e4cb3aad03cef1ce
SSDEEP
3072:8swkIv3j3oAqp7TZ9J9dkXwchxEbCJFgNhE53Pq60y+Wh2M2/5/bZTBfDBFpm4QF:vw1/Nqp7TysCEsfp2F/bZTBLRm4QFy2
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
E:\build\isafe\branches\RFHost6.9RemoveSafeScan\bin\iSafenpf.pdb
memcpy
memcmp
__CxxFrameHandler3
_CxxThrowException
??3@YAXPAX@Z
__clean_type_info_names_internal
_except_handler4_common
?terminate@@YAXXZ
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_initterm_e
_strnicmp
_malloc_crt
_amsg_exit
__CppXcptFilter
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
??1type_info@@UAE@XZ
_purecall
atol
strcpy_s
_stricmp
strncmp
malloc
strchr
tolower
swprintf_s
sprintf_s
??_V@YAXPAX@Z
??2@YAPAXI@Z
??_U@YAPAXI@Z
memchr
memmove
free
_initterm
_beginthreadex
strncpy
_snprintf
realloc
_vswprintf_c_l
isdigit
atoi
strstr
strtol
memset
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
??0id@locale@std@@QAE@I@Z
ntohs
WSAAddressToStringA
WSACleanup
inet_addr
WSAStartup
htons
ntohl
SetEndOfFile
GetFileSize
SetFilePointer
GetTempFileNameW
GetTempPathW
CreateDirectoryW
CreateFileW
FreeLibrary
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
CreateFileA
GetModuleHandleA
GetProcAddress
DeviceIoControl
ReadFile
GetOverlappedResult
CancelIo
GetLastError
WriteFile
GetTickCount
WaitForMultipleObjects
WaitForSingleObject
SetEvent
CreateEventA
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
ResetEvent
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
OpenServiceA
CloseServiceHandle
StartServiceA
CreateServiceA
OpenSCManagerA
?NPF_AddHeaderField@@YAHPAPAX0PBD1H@Z
?NPF_CopyHttpObject@@YAHPAPAX0@Z
?NPF_CopyHttpObject@@YAHPAPAX0W4_ePF_HttpStream@ProtocolFilters@@@Z
?NPF_CopyHttpObjectContent@@YAHPAPAX0@Z
?NPF_CopyHttpObjectHeader@@YAHPAPAX0@Z
?NPF_CopyHttpObjectStatus@@YAHPAPAX0@Z
?NPF_CreateHttpHeader@@YAHPAPAX0@Z
?NPF_CreateHttpObject@@YAHPAPAXHK@Z
?NPF_End@@YAHXZ
?NPF_FreeHttpHeader@@YAHPAPAX0@Z
?NPF_FreeHttpObject@@YAHPAPAX@Z
?NPF_FreeHttpObject@@YAHPAPAXPAPAD@Z
?NPF_FreeHttpObjectContent@@YAHPAPAXPAPAD@Z
?NPF_FreeHttpObjectHeader@@YAHPAPAXPAPAD@Z
?NPF_FreeHttpObjectHeaderField@@YAHPAPAXPAPAD@Z
?NPF_FreeHttpObjectStatus@@YAHPAPAXPAPAD@Z
?NPF_FreeSMTPData@@YAHPAD@Z
?NPF_ModHttpObjectContentLength@@YAHPAPAXH@Z
?NPF_ReadHttpObject@@YAHPAPAXPAPADPAKW4_ePF_HttpStream@ProtocolFilters@@@Z
?NPF_ReadHttpObjectContent@@YAHPAPAXPAPADPAK@Z
?NPF_ReadHttpObjectHeader@@YAHPAPAXPAPADPAK@Z
?NPF_ReadHttpObjectHeaderField@@YAHPAPAXPBDPAPADPAK@Z
?NPF_ReadHttpObjectStatus@@YAHPAPAXPAPADPAK@Z
?NPF_ReadSMTPData@@YAHPAPAXPAPADPAK@Z
?NPF_ReplaceSMTPData@@YAHPAPAXPADK@Z
?NPF_SendHttpPacket@@YAH_KPAPAX@Z
?NPF_SetHttpObjectContent@@YAHPAPAXPAXK@Z
?NPF_SetHttpObjectHeader@@YAHPAPAX0@Z
?NPF_SetHttpObjectStatus@@YAHPAPAXPBD@Z
?NPF_SetLogFunc@@YAHP6GXKPB_W@Z@Z
?NPF_Start@@YAHPAUtagNPF_PARAM@@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ