Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
fe30fc91f400686f1b011fef548df643_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe30fc91f400686f1b011fef548df643_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
fe30fc91f400686f1b011fef548df643_JaffaCakes118
Size
2.2MB
MD5
fe30fc91f400686f1b011fef548df643
SHA1
e6649a682bc88b72be763f3ba20243a2a25a7031
SHA256
7e0078fa03ddea07b97254554dbaecff900de3687142e0cc862021bac0a6f2c1
SHA512
bb944b90cd2e9c0b73751687352519b6591afdf8442e26af5725cb523b074b78dd0cdcd3c63f7f1e4bd68328ad884a6ac30196de106813928c9e7ed4bf9fa8e7
SSDEEP
49152:LfsEQWE5dlgPnVJjt1mT5cfOmaP26STTGPv15eVT1:LfAd+PnVJ51mTOf/rTz
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
F:\VIP\UserLogon\Bin\UserAndPayClient.pdb
DeleteFileW
WritePrivateProfileStringA
LoadResource
SizeofResource
GetPrivateProfileStringA
GetModuleFileNameA
WideCharToMultiByte
MultiByteToWideChar
SetFilePointer
GetTickCount
FindResourceW
ReadFile
InitializeCriticalSection
TerminateThread
LocalFree
GetProcAddress
GlobalLock
GlobalUnlock
lstrlenW
LoadLibraryW
GetModuleHandleW
GetCurrentDirectoryW
ExitProcess
GetACP
InterlockedIncrement
MulDiv
FreeResource
LockResource
GetFileSize
CreateFileW
FormatMessageW
VerSetConditionMask
GetCurrentProcessId
GetCurrentProcess
GetFileType
WriteFile
SetFileTime
DuplicateHandle
SystemTimeToFileTime
DosDateTimeToFileTime
CreateDirectoryW
GlobalAlloc
lstrcpyW
EnterCriticalSection
CreateSemaphoreW
SleepEx
ExpandEnvironmentStringsA
FreeLibrary
WaitForMultipleObjects
GetStdHandle
PeekNamedPipe
SetLastError
FormatMessageA
LoadLibraryA
GetModuleHandleA
GetSystemDirectoryA
VerifyVersionInfoA
FlushConsoleInputBuffer
GetCurrentThreadId
QueryPerformanceCounter
GlobalMemoryStatus
GetSystemTime
EncodePointer
RtlUnwind
InterlockedFlushSList
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetFilePointerEx
SetConsoleCtrlHandler
GetConsoleMode
ReadConsoleInputA
SetConsoleMode
ReadConsoleW
GetConsoleCP
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
GetStringTypeW
GetFullPathNameW
SetStdHandle
FlushFileBuffers
GetFileAttributesExW
SetEndOfFile
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
GetLocalTime
GetTempPathA
ReleaseSemaphore
FindClose
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetModuleFileNameW
WaitForSingleObject
FindFirstFileW
CloseHandle
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
DecodePointer
GetLastError
RaiseException
InterlockedDecrement
LeaveCriticalSection
Sleep
GetMonitorInfoW
SetCursor
InflateRect
LoadCursorW
DefWindowProcW
PostQuitMessage
CallWindowProcW
RegisterClassW
RegisterClassExW
GetClassInfoExW
EnableWindow
SetPropW
GetPropW
MoveWindow
CreateAcceleratorTableW
InvalidateRgn
ClientToScreen
FillRect
GetGUIThreadInfo
CharPrevW
DrawTextW
SetRect
UpdateLayeredWindow
GetWindowRgn
CreatePopupMenu
DestroyMenu
EnableMenuItem
AppendMenuW
TrackPopupMenu
MonitorFromWindow
ShowCaret
GetCaretPos
IsWindowEnabled
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
MessageBoxW
GetKeyboardLayout
GetKeyNameTextW
MapVirtualKeyExW
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxA
GetClientRect
InvalidateRect
GetUpdateRect
EndPaint
BeginPaint
ReleaseDC
ReleaseCapture
SetCapture
GetKeyState
GetFocus
GetActiveWindow
SetFocus
CharNextW
IsZoomed
IsIconic
IsWindowVisible
SetWindowPos
DestroyWindow
CreateWindowExW
DispatchMessageW
TranslateMessage
GetMessageW
HideCaret
OffsetRect
SetWindowRgn
LoadImageW
GetWindow
SetWindowLongW
PtInRect
IsRectEmpty
UnionRect
IntersectRect
GetSysColor
MapWindowPoints
ScreenToClient
SetCaretPos
GetCaretBlinkTime
CreateCaret
GetCursorPos
ShowWindow
IsWindow
GetParent
GetDC
PostMessageW
KillTimer
FindWindowW
SendMessageW
GetWindowLongW
SetTimer
SetForegroundWindow
GetWindowRect
ShellExecuteA
SHGetSpecialFolderPathA
ShellExecuteW
SHGetSpecialFolderPathW
DragQueryFileW
CoUninitialize
CoCreateGuid
RevokeDragDrop
DoDragDrop
OleDuplicateData
CoCreateInstance
CreateStreamOnHGlobal
ReleaseStgMedium
OleLockRunning
CLSIDFromProgID
CLSIDFromString
CoInitialize
RegisterDragDrop
SysStringLen
VariantCopy
VariantInit
SysAllocString
SysFreeString
VariantChangeType
VariantClear
WSAStartup
shutdown
htonl
gethostname
gethostbyname
ioctlsocket
sendto
recvfrom
listen
accept
freeaddrinfo
getaddrinfo
WSAIoctl
socket
setsockopt
ntohs
htons
getsockopt
getsockname
getpeername
connect
closesocket
bind
send
recv
WSASetLastError
select
getservbyname
__WSAFDIsSet
WSAGetLastError
WSACleanup
URLDownloadToFileW
URLDownloadToFileA
PathRemoveFileSpecA
GetStockObject
RestoreDC
SaveDC
SelectObject
CloseEnhMetaFile
CreateEnhMetaFileW
GetEnhMetaFileHeader
PlayEnhMetaFile
GetTextMetricsW
GetObjectW
SetWindowOrgEx
CreateRoundRectRgn
GetDeviceCaps
CreateCompatibleBitmap
CreatePenIndirect
CreateRectRgnIndirect
CreateSolidBrush
GetCharABCWidthsW
DeleteObject
GetClipBox
GetTextExtentPoint32W
LineTo
RoundRect
SelectClipRgn
ExtSelectClipRgn
SetBkColor
SetBkMode
DeleteDC
CreateFontIndirectW
CreatePen
CreateDIBitmap
CreateCompatibleDC
CombineRgn
BitBlt
SetBitmapBits
GetBitmapBits
PtInRegion
CreateRectRgn
GdiFlush
TextOutW
MoveToEx
GetObjectA
CreateDIBSection
SetTextColor
SetStretchBltMode
StretchBlt
DeregisterEventSource
ReportEventA
RegisterEventSourceA
ImmGetContext
ImmSetCompositionWindow
ImmReleaseContext
_TrackMouseEvent
ord17
InitCommonControlsEx
GdipLoadImageFromStreamICM
GdipCloneImage
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipImageSelectActiveFrame
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipDrawImageRectI
GdipLoadImageFromStream
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatFlags
GdipCloneStringFormat
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipMeasureString
GdipDrawString
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipFillRectangleI
GdipDrawRectangleI
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipSetPenMode
GdipDeletePen
GdipCreatePen1
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipFree
GdipAlloc
GdiplusShutdown
GdiplusStartup
GdipSetStringFormatAlign
ord50
ord46
ord211
ord60
ord301
ord200
ord30
ord79
ord35
ord33
ord32
ord27
ord41
ord22
ord26
ord143
??0CTalk2Svr@Talk2Svr@@QAE@ABV01@@Z
??0CTalk2Svr@Talk2Svr@@QAE@PAUHWND__@@@Z
??1CTalk2Svr@Talk2Svr@@QAE@XZ
??4CTalk2Svr@Talk2Svr@@QAEAAV01@ABV01@@Z
?AutoLogon@CTalk2Svr@Talk2Svr@@QAEXXZ
?AutoLogonData@CTalk2Svr@Talk2Svr@@SA?AUtag_Check_Vip_Info@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?CheckPayDown@CTalk2Svr@Talk2Svr@@QAEXXZ
?CheckUserIsVip@CTalk2Svr@Talk2Svr@@QAE_NXZ
?CopyTwoTag@CTalk2Svr@Talk2Svr@@SAXAAUtag_Check_Vip_Info@@0@Z
?GetCheckVip@CTalk2Svr@Talk2Svr@@SA?AUtag_Check_Vip_Info@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00PAH@Z
?GetMacCode@CTalk2Svr@Talk2Svr@@QAEPADXZ
?GetPayPlanList@CTalk2Svr@Talk2Svr@@SA?AV?$vector@Utag_Pay_plan_Info@@V?$allocator@Utag_Pay_plan_Info@@@std@@@std@@PAH@Z
?GetPlanIdIndex@CTalk2Svr@Talk2Svr@@SAHHAAV?$vector@Utag_Pay_plan_Info@@V?$allocator@Utag_Pay_plan_Info@@@std@@@std@@@Z
?GetPos@CTalk2Svr@Talk2Svr@@QAEPADXZ
?GetQrcoed@CTalk2Svr@Talk2Svr@@SA?AUtag_Qrcode_Info@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0000PAH@Z
?GetSetting@CTalk2Svr@Talk2Svr@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V34@PAH@Z
?GetSettingQQ@CTalk2Svr@Talk2Svr@@QAEPADXZ
?GetUserLogon@CTalk2Svr@Talk2Svr@@QAEXAAUtag_Check_Vip_Info@@@Z
?GetValueByIni@CTalk2Svr@Talk2Svr@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V34@0@Z
?GetVipMsg@CTalk2Svr@Talk2Svr@@QAEXAAUtag_Pay_plan_Info@@H@Z
?GotoQQ@CTalk2Svr@Talk2Svr@@QAEXXZ
?Init@CTalk2Svr@Talk2Svr@@QAEXXZ
?SendFeedBack@CTalk2Svr@Talk2Svr@@SAHAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00@Z
?SendReport@CTalk2Svr@Talk2Svr@@SAHAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V34@11@Z
?SendVerificationCode@CTalk2Svr@Talk2Svr@@SAHV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0AAV34@PAH@Z
?SetUserLogon@CTalk2Svr@Talk2Svr@@QAEXAAUtag_Check_Vip_Info@@@Z
?ShowLogonWnd@CTalk2Svr@Talk2Svr@@QAEHXZ
?ShowPayWnd@CTalk2Svr@Talk2Svr@@QAEHHPAD000@Z
?ShowRenewPayWnd@CTalk2Svr@Talk2Svr@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SignOut@CTalk2Svr@Talk2Svr@@QAE_NAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAH@Z
?Utf8toANSI@CTalk2Svr@Talk2Svr@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V34@@Z
?Utf8toUnicode@CTalk2Svr@Talk2Svr@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
?WriteUserMsgTpIni@CTalk2Svr@Talk2Svr@@QAEXXZ
?WriteValuetoIni@CTalk2Svr@Talk2Svr@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00@Z
?get_message@CTalk2Svr@Talk2Svr@@CA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V34@PAH0@Z
?login_phone@CTalk2Svr@Talk2Svr@@SA?AUtag_Check_Vip_Info@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@00PAH@Z
?post_message@CTalk2Svr@Talk2Svr@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V34@AAV34@PAH@Z
?signout@CTalk2Svr@Talk2Svr@@SAHV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0AAV34@PAH@Z
?urlencode_message@CTalk2Svr@Talk2Svr@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV34@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ