Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
12.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
12.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
honst.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
honst.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
xxx.vbs
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
xxx.vbs
Resource
win10v2004-20240802-en
Target
08198b508e575ea2d035610ad2e9d65f_JaffaCakes118
Size
88KB
MD5
08198b508e575ea2d035610ad2e9d65f
SHA1
141112612eade43641b4ca2911f04bb4033c75c4
SHA256
da339343b6578b3dac71c6936cb6ab35b22ad3bc3bee03b82e8a07f7b615834a
SHA512
28e1f4789e654937417b16f9cdd2df509b63b666d850c3ab9f522ae155c708e4e4bf62e30410bed26ccce0c104f37a5de50297be50d8d303c6bf481f35ac76ec
SSDEEP
1536:x6DgAzkKVYB+94KtGlrqqXsXNHg7ZxiJpUtHEmeXzTAdQ63Nbw2t8XBmoz7:YDgAzRHPGF3ENA7WJpUtOXzG3dxt8XN
Checks for missing Authenticode signature.
resource |
---|
unpack001/12.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
i:\Hummer\QQ1.55\Basic_Hummer3_VOB\Hummer2010\Output\Bin\QQ.pdb
InitCommonControlsEx
?OnExitWinMain@Misc@Util@@YAXXZ
?NotifyIdle@TXTimer@@YAXXZ
??YCTXStringW@@QAEAAV0@ABV0@@Z
??0CTXStringW@@QAE@PA_W@Z
?GetBSTR@CTXStringW@@QBEPA_WXZ
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
?CheckVistaAndStartSelfMediumLevel@Sys@Util@@YAHXZ
?TrimLeft@CTXStringW@@QAEAAV1@XZ
?OnUninitCom@Misc@Util@@YAXXZ
?Find@CTXStringW@@QBEHPB_WH@Z
?Find@CTXStringW@@QBEH_WH@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
?ReleaseBuffer@CTXStringW@@QAEXH@Z
?Left@CTXStringW@@QBE?AV1@H@Z
??BCTXBSTR@@QBEPA_WXZ
??ICTXBSTR@@QAEPAPA_WXZ
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??0CFmtString@@QAE@XZ
?NotifyIdle@Window@Util@@YAJXZ
?SafeLoadLibrary@Sys@Util@@YAPAUHINSTANCE__@@PB_W@Z
??1CFmtString@@QAE@XZ
?DelIdleCallback@Window@Util@@YAJPAVVTXMsgLoopIdleCallback@@@Z
?PropertyStr@CFmtString@@QAEHPB_W0@Z
??1CTXStringW@@QAE@XZ
??0CTXStringW@@QAE@XZ
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
?Format@CTXStringW@@QAAXPB_WZZ
?GetLength@CTXStringW@@QBEHXZ
??4CTXStringW@@QAEAAV0@PB_W@Z
??0CTXStringW@@QAE@ABV0@@Z
??0CTXBSTR@@QAE@XZ
??0CTXStringW@@QAE@PB_W@Z
??1CTXBSTR@@QAE@XZ
??8@YA_NABVCTXStringW@@PB_W@Z
?Mid@CTXStringW@@QBE?AV1@H@Z
?SetTimeout@TXTimer@@YAHIPAUITXTimerCallback@@I@Z
?MinimzeMemory@Sys@Util@@YAXXZ
?InitBugReport@TXBugReport@@YAXPB_W000GGKHHKKP6GHPAUtagBugReportInfo@1@PBD200PAPAXPAKPAX@Z@Z
?GetSession@TXLog@@YAKXZ
?GetLCID@NLS@@YAKXZ
?ValidateBugReport@TXBugReport@@YAXXZ
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?InitNetwork@Network@Util@@YAHXZ
?InitPlatform@CoreCenter@Util@@YAHPA_W@Z
?InitPlatformCoreConfig@Boot@Util@@YAHXZ
?InitPlatformGFConfig@Boot@Util@@YAHXZ
?InitPlatformFileSystem@Boot@Util@@YAHXZ
??YCTXStringW@@QAEAAV0@PB_W@Z
?InitPlatformI18NConfig@Boot@Util@@YAHXZ
?AddFmtString@TXStringBundle@@YAXABVCFmtString@@@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
?SetIdleCallback@TXTimer@@YAHPAUITXIdleCallback@@I@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
?AddIdleCallback@Window@Util@@YAJPAVVTXMsgLoopIdleCallback@@@Z
??BCTXStringW@@QBEPB_WXZ
?Append@CTXStringW@@QAEXPB_W@Z
?OnExitCoreCenter@Misc@Util@@YAXXZ
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
?IsEmpty@CTXStringW@@QBE_NXZ
??H@YA?AVCTXStringW@@PB_WABV0@@Z
?Stop@TXBugMonitor@@YAHXZ
?RecordTransEnd@Perf@Util@@YAJ_JPB_WHH11H@Z
??0CTXBSTR@@QAE@PB_W@Z
ord25
?GetUserDataSaveSetting@Sys@Util@@YA?AVCTXStringW@@AAKAAV3@@Z
?Init@Version@@YAHXZ
?GetProgramRootDir@Sys@Util@@YA?AVCTXStringW@@XZ
?GetMajorVer@Version@@YAEXZ
?GetMinorVer@Version@@YAEXZ
?GetVersionExW@Version@@YAXAAUtagVersionInfo@1@@Z
?GetProgramBinDir@Sys@Util@@YA?AVCTXStringW@@V3@@Z
?GetGlobalSysDir@Sys@Util@@YA?AVCTXStringW@@XZ
?GetBuildVer@Version@@YAKXZ
?SetCustomObjectFactory@GF@Util@@YAXP6AHABU_GUID@@0PAPAX@Z@Z
?SetEnablePreload@Misc@Util@@YAXH@Z
?SetPerfReportDataForWord@PerfDataReportUtil@@YAXPA_WKH@Z
?SetFirstStartQQ@Misc@Util@@YAXH@Z
?SetPerfReportDataForBool@PerfDataReportUtil@@YAXPA_WH@Z
?GetEnablePreload@Misc@Util@@YAHXZ
Sleep
WaitForSingleObject
OpenEventW
SetEvent
lstrlenW
CreateThread
GetModuleHandleW
GetCurrentThreadId
InterlockedIncrement
GetEnvironmentVariableW
GetSystemInfo
SetEnvironmentVariableW
QueryPerformanceFrequency
GlobalMemoryStatus
CloseHandle
InterlockedDecrement
GetModuleFileNameW
GetCurrentProcess
GetDriveTypeW
WriteProcessMemory
OpenMutexW
CreateMutexW
QueryPerformanceCounter
InitializeCriticalSection
GetCurrentProcessId
DeleteCriticalSection
GetProcAddress
CreateEventW
FreeLibrary
GetVersionExW
SetThreadPriority
CreateProcessW
GetCurrentThread
GetTickCount
GetProcessTimes
GetSystemTimeAsFileTime
InterlockedExchange
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedCompareExchange
WaitMessage
DispatchMessageW
MessageBoxW
PostThreadMessageW
PeekMessageW
TranslateMessage
RegSetValueExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
OleUninitialize
CoInitialize
CoCreateInstance
OleInitialize
CoUninitialize
ord32
ord64
ord30
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invoke_watson
_controlfp_s
__CxxFrameHandler3
__set_app_type
??0exception@std@@QAE@ABV01@@Z
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
_invalid_parameter_noinfo
??_V@YAXPAX@Z
??2@YAPAXI@Z
_time64
__argc
_CxxThrowException
__wargv
wcsncmp
_wtoi
memset
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ