Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
074a8c39a0e433f589aacfdda2ce6a30_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
074a8c39a0e433f589aacfdda2ce6a30_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
074a8c39a0e433f589aacfdda2ce6a30_JaffaCakes118
Size
1.3MB
MD5
074a8c39a0e433f589aacfdda2ce6a30
SHA1
a77ccf0cc0626ede715e9aa05f4a43329c02e9c5
SHA256
ce2cb6a2c0b010b58b493b38c1fdfe7e6835559b4f7536f8ecbdd1a38d80be7c
SHA512
765f22b3ec1933a101678c715d3f2c950f1420824eb4ab45170bcac3cc9354e267061f3ab817a1982a3399714e9abfa277df2b951d91053bd34f7a2092c1a9d7
SSDEEP
24576:7HCdwjIxWMtrTWeDEySnMDkS8lk6xRaVxX7Bbi8wBnUcZ0oisCkBVKwg4NDG8:S1ntyVnM8wX7BbDnoiRkB4wg4NDG8
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
e:\Code\ssosmp_pr\trunk\SmpSSOProj\SSOPlatform\TXSSO\Output\Bin\SSOPlatform.pdb
inet_addr
?GetIEProxySetting@Network@Util@@YAHPAUITXData@@AAE@Z
?Utf8ToWS@Convert@Util@@YA?AVCTXStringW@@PBDH@Z
?GetIEProxyUserName@Network@Util@@YAHAAVCTXStringW@@0@Z
?TrimLeft@CTXStringW@@QAEAAV1@XZ
?TrimRight@CTXStringW@@QAEAAV1@XZ
??ACTXStringW@@QBE_WH@Z
??8@YA_NPA_WABVCTXBSTR@@@Z
?Encode16@Encode@Util@@YA?AVCTXStringW@@ABVCTXBuffer@@@Z
?Tokenize@CTXStringW@@QBE?AV1@PB_WAAH@Z
?Trim@CTXStringW@@QAEAAV1@XZ
?GetAt@CTXStringW@@QBE_WH@Z
??YCTXStringW@@QAEAAV0@_W@Z
??0CTXStringW@@QAE@XZ
??1CTXStringW@@QAE@XZ
?Attach@CTXBSTR@@QAEXPA_W@Z
?IsFileExist@FS@@YAHPB_W@Z
?GetBinDir@Dir@Util@@YA?AVCTXStringW@@XZ
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
?LoadXmlByName@FS@Util@@YAHPB_WPAPAUIXMLDOMDocument@@@Z
?CancelResolve@HostResolve@Util@@YAJK@Z
?StringToIP@Network@Util@@YAKPB_W@Z
?Resolve@HostResolve@Util@@YAJPA_WPAUITXHostResolverSink@@PAK@Z
?GetHostByName@HostResolve@Util@@YAJPA_WPAPA_W@Z
?Decode16@Encode@Util@@YAHABVCTXStringW@@AAVCTXBuffer@@@Z
?OnProgress@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?QueryInfo@CTXHttpDownload@@QAEHABVCTXStringW@@AAV2@H@Z
?OnError@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@K@Z
?GetDownloadedBuffer@CTXHttpDownload@@QAEHPAPAEPAK@Z
??0CTXStringW@@QAE@PB_WH@Z
??1CTXHttpDownload@@UAE@XZ
?Run@CTXHttpDownload@@EAEIXZ
?DownloadToBuffer@CTXHttpDownload@@QAEHPB_WPAU_SYSTEMTIME@@@Z
?SetUIInterface@CTXHttpDownload@@QAEXPAVCTXHttpDownloadSink@@@Z
??0CTXHttpDownload@@QAE@XZ
?GetBSTRPtr@CTXStringW@@QAEPAPA_WXZ
?GetTXDataBuf@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXBuffer@@@Z
?CancelDownload@CTXHttpDownload@@QAEXXZ
??1CTXHttpDownloadSink@@UAE@XZ
??0CTXHttpDownloadSink@@IAE@XZ
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@@Z
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?EraseAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z
?CreateFileW@FS@@YAHPB_WKPAPAUITXFile@@@Z
??H@YA?AVCTXStringW@@PB_WABV0@@Z
?Replace@CTXStringW@@QAEHPB_W0@Z
??YCTXStringW@@QAEAAV0@ABV0@@Z
wcslcat
?GenerateG1@CComputerIDGenerator@@QAEKPAE@Z
?GetBSTR@CTXStringW@@QBEPA_WXZ
?Mid@CTXStringW@@QBE?AV1@H@Z
?Left@CTXStringW@@QBE?AV1@H@Z
?Find@CTXStringW@@QBEH_WH@Z
??BCTXStringA@@QBEPBDXZ
??0CTXStringW@@QAE@UtagUTF8@@PBDH@Z
??0CTXStringA@@QAE@PBDH@Z
?GetDecodeNumberSigned@CCmdCodecBase@@IAEHPB_W@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
?GenerateEx@CComputerIDGenerator@@QAEHPAE@Z
?AddPack@CTXCommPack@@QAEHABV1@@Z
?Generate@CComputerIDGenerator@@QAEKPAE@Z
?IPToString@Network@Util@@YA?AVCTXStringW@@K@Z
?AddBuf@CTXCommPack@@QAEHPBEI@Z
?AddUInt64@CTXCommPack@@QAEH_KH@Z
?CRC32@Encode@Util@@YAKKPBEH@Z
??1CTXStringA@@QAE@XZ
?Random@Sys@Util@@YAHXZ
?AddBuf@CTXCommPack@@QAEHABVCTXBuffer@@@Z
?JumpBuf@CTXCommPack@@QAEHH@Z
?AddStrALenWord@CTXCommPack@@QAEHABVCTXStringA@@H@Z
?Find@CTXStringW@@QBEHPB_WH@Z
?GetLength@CTXStringW@@QBEHXZ
?CreateTXData@SSOData@Util@@YAHPAPAUITXSSOData@@@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??0CTXBSTR@@QAE@PB_W@Z
?SetInterval@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?CopyTXDataField@SSOData@Util@@YAHPAUITXSSODataRead@@PAUITXSSOData@@PB_W2@Z
?CreateTXArray@SSOData@Util@@YAHPAPAUITXSSOArray@@@Z
??8CTXBSTR@@QBE_NPA_W@Z
?CreateTXBuffer@SSOData@Util@@YAHPAPAUITXSSOBuffer@@@Z
?Format@CTXStringW@@QAAXPB_WZZ
??ICTXBSTR@@QAEPAPA_WXZ
??0CTXBSTR@@QAE@XZ
?Length@CTXBSTR@@QBEIXZ
?EraseTimerCallback@TXTimer@@YAHPAUITXTimerCallback@@I@Z
??0CTXStringA@@QAE@UtagUTF8@@PB_WH@Z
?GetTimeOffsetUTC@NLS@@YAJXZ
??1CCmdCodecBase@@UAE@XZ
?GetLCID@NLS@@YAKXZ
??0CCmdCodecBase@@QAE@XZ
?GetDWord@CTXCommPack@@QAEHAAKHH@Z
?AddByte@CTXCommPack@@QAEHE@Z
?GetWord@CTXCommPack@@QAEHAAGHH@Z
?AddDWord@CTXCommPack@@QAEHKH@Z
?GetBufferByteLeft@CTXCommPack@@QBEHXZ
?GetBufferOut@CTXCommPack@@QAEHAAVCTXBuffer@@@Z
?AddBufLenWord@CTXCommPack@@QAEHABVCTXBuffer@@H@Z
?AddWord@CTXCommPack@@QAEHGH@Z
?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z
??1CTXCommPack@@UAE@XZ
?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z
??0CTXCommPack@@QAE@XZ
?GetLCID@TXI18N@@YAKXZ
?Right@CTXStringW@@QBE?AV1@H@Z
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
??BCTXBSTR@@QBEPA_WXZ
??BCTXStringW@@QBEPB_WXZ
??0CTXBSTR@@QAE@ABU_GUID@@@Z
??1CTXBSTR@@QAE@XZ
??4CTXStringW@@QAEAAV0@PA_W@Z
?IsCSSubSendData@Misc@Util@@YAHPAUITXData@@@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
?CreateChannel@Connection@Util@@YAJHPAPAUITXChannel@@@Z
?Encode16@Encode@Util@@YA?AVCTXStringW@@PBXI@Z
?GetClientType@ClientType@ProductConfig@Util@@YAJPAK@Z
?GetBuffer@CTXStringA@@QAEPADH@Z
??0CTXBSTR@@QAE@HPB_W@Z
?GetString@CTXStringA@@QBEPBDXZ
?GetLength@CTXStringA@@QBEHXZ
??0CTXStringA@@QAE@UtagGBK@@PB_WH@Z
?Preallocate@CTXStringW@@QAEXH@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
??0CTXStringW@@QAE@PB_W@Z
?SetConfigFile@TXI18N@@YAHPB_W0@Z
??0CTXStringW@@QAE@ABV0@@Z
?OnExitCoreCenter@Misc@Util@@YAXXZ
?OnUninitCom@Misc@Util@@YAXXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?FlushLog@TXLog@@YAXXZ
??H@YA?AVCTXStringW@@ABV0@0@Z
?GetSSOTempDir@Dir@Util@@YA?AVCTXStringW@@XZ
?InitDownloadTempDirectory@CTXHttpDownload@@SAXPB_W@Z
?InitNetwork@Network@Util@@YAHXZ
?Release@CCmdCodecBase@@MAGKXZ
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?GetBuf@CTXCommPack@@QAEHPAPBEHH@Z
?AddRef@CCmdCodecBase@@MAGKXZ
?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z
?GetByte@CTXCommPack@@QAEHAAEH@Z
?CodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?BrokenCodec@CCmdCodecBase@@IAEXPB_W@Z
?DecodeString@CCmdCodecBase@@IAEXPB_WI@Z
?SetBufferIn@CTXCommPack@@QAEXAAVCTXBuffer@@H@Z
?DecodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?GetDecodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
?DecodeBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?DecodeBuffer@CCmdCodecBase@@IAEXPB_WI@Z
?DecodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?EnableUnicodeString@CCmdCodecBase@@IAEXH@Z
?CodeBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?CodeBuffer@CCmdCodecBase@@IAEXPB_W@Z
?CodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
??4CTXBSTR@@QAEAAV0@ABV0@@Z
?IsEmpty@CTXStringW@@QBE_NXZ
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
?ConvertTXSSOBufferToTXBuffer@SSOConvert@Util@@YAJPAUITXSSOBuffer@@PAPAUITXBuffer@@@Z
?StringToDWordW@Convert@Util@@YA_NPB_WAAK@Z
?CopyTXDataField@Data@Util@@YAHPAUITXDataRead@@PAUITXData@@PB_W2@Z
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
?ConvertTXSSODataToTXData@SSOConvert@Util@@YAJPAUITXSSOData@@PAPAUITXData@@@Z
?PropertyStr@CFmtString@@QAEHPB_W0@Z
??1CFmtString@@QAE@XZ
??0CTXStringW@@QAE@PA_W@Z
??0CFmtString@@QAE@XZ
??M@YA_NABVCTXStringW@@0@Z
??4CTXBSTR@@QAEAAV0@ABVCTXStringW@@@Z
??0CTXBSTR@@QAE@ABV0@@Z
?CreateTXBuffer@Data@Util@@YAHPAPAUITXBuffer@@@Z
?SetAsyncCallback@TXTimer@@YAHPAUITXAsyncCallback@@I@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
?ConvertTXDataToTXSSOData@SSOConvert@Util@@YAJPAUITXData@@PAPAUITXSSOData@@@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
??8CTXBSTR@@QBE_NABV0@@Z
?Empty@CTXStringW@@QAEXXZ
?GetProcessName@SystemHelp@Util@@YA?AVCTXStringW@@K@Z
?Empty@CTXBSTR@@QAEXXZ
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
?GetRootDir@Dir@Util@@YA?AVCTXStringW@@XZ
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
?SetUserLCID@TXI18N@@YAXK@Z
?NotifyIdle@TXTimer@@YAXXZ
?GetUserDefaultLCID@NLS@@YAKXZ
?SetLCID@NLS@@YAHK@Z
?GetString@CTXStringW@@QBEPB_WXZ
?IsEmpty@CTXBSTR@@QAEHXZ
?Detach@CTXBSTR@@QAEPA_WXZ
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
GetConsoleCP
SetFilePointer
GetLocaleInfoW
LCMapStringW
LCMapStringA
SetConsoleCtrlHandler
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
IsValidCodePage
GetOEMCP
GetConsoleMode
GetCPInfo
GetStdHandle
WriteFile
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
HeapSize
Sleep
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
RtlUnwind
GetProcessHeap
GetCommandLineA
ExitThread
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapFree
HeapAlloc
HeapReAlloc
GetVersionExA
GetLocaleInfoA
GetACP
InterlockedExchange
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetVersion
GlobalMemoryStatus
FlushConsoleInputBuffer
ReadConsoleInputA
SetConsoleMode
ReadFile
DeleteCriticalSection
GetModuleFileNameA
LocalAlloc
LoadLibraryA
GetProcAddress
GetSystemDirectoryA
GetWindowsDirectoryA
CreateThread
GetDiskFreeSpaceExW
GetVolumeInformationW
GetSystemDirectoryW
CreateDirectoryW
GetCommandLineW
TerminateThread
GlobalFree
GlobalAlloc
GetFileAttributesW
GetVersionExW
GetSystemInfo
ReleaseMutex
WaitForSingleObject
OpenMutexW
CreateMutexW
LocalFree
VirtualQuery
UnmapViewOfFile
VirtualProtect
MapViewOfFile
CreateFileMappingW
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
CreateFileW
CloseHandle
InterlockedDecrement
LeaveCriticalSection
InterlockedIncrement
LoadLibraryExW
FindResourceW
RaiseException
OutputDebugStringA
LoadResource
SizeofResource
SetEndOfFile
SetThreadLocale
GetThreadLocale
GetModuleHandleW
MultiByteToWideChar
GetModuleFileNameW
GetLastError
InitializeCriticalSection
lstrlenW
FreeLibrary
EnterCriticalSection
lstrcmpiW
CharNextW
IsWindow
GetWindowThreadProcessId
PostMessageW
SendMessageW
GetDesktopWindow
SendMessageTimeoutW
DestroyWindow
DefWindowProcW
GetWindowLongW
GetClassInfoExW
MessageBoxA
SetWindowLongW
ShowWindow
CreateWindowExW
RegisterClassExW
UnregisterClassA
GetUserObjectInformationW
GetProcessWindowStation
GetStockObject
RegQueryValueExW
RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyW
RegCloseKey
RegQueryInfoKeyW
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegOpenKeyExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetSecurityDescriptorSacl
GetSecurityDescriptorSacl
RegCreateKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegSetValueExW
SHGetSpecialFolderPathW
CoCreateGuid
CoTaskMemRealloc
StringFromGUID2
CoTaskMemFree
CoCreateInstance
CoTaskMemAlloc
VariantInit
VariantClear
LoadRegTypeLi
SysStringLen
SysFreeString
RegisterTypeLi
VarUI4FromStr
LoadTypeLi
SysAllocString
UnRegisterTypeLi
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ