Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
28bfc80b6652ae0b1b5e4de75ff2247d_JaffaCakes118.dll
Resource
win7-20240903-en
Target
28bfc80b6652ae0b1b5e4de75ff2247d_JaffaCakes118
Size
729KB
MD5
28bfc80b6652ae0b1b5e4de75ff2247d
SHA1
98fa9a35cb389a92da91ff013dfb3136ec6615aa
SHA256
a51cd10224698a5c5f4b0f41837dffc2471248f2a7c428cd09a0cc23d3c6bbf1
SHA512
50db74df7ca4275d26bd1194ba5678410d923674ef16d1e72c0b13fd9b2651cf44f26b1abef938b9b68025138fed7fccc0f5e17acb794d66d1d1617d99b5d52c
SSDEEP
12288:YVotJvpBC81NYf8dncy8dec+DfOAGjHbbyE0G1GGJANibKuRP:YVM/YkcBYGPnTWibKIP
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PlaySoundW
PathFileExistsW
InternetReadFile
HttpQueryInfoW
InternetSetOptionW
InternetQueryOptionW
HttpSendRequestW
HttpOpenRequestW
InternetCloseHandle
InternetConnectW
InternetOpenW
InternetCrackUrlW
DeleteUrlCacheEntryW
FindCloseUrlCache
FindNextUrlCacheEntryW
FindFirstUrlCacheEntryW
SetupIterateCabinetW
InterlockedIncrement
MoveFileExW
lstrlenA
lstrlenW
Sleep
WideCharToMultiByte
GetModuleFileNameW
CloseHandle
WriteFile
CreateFileW
SetEvent
EnterCriticalSection
LeaveCriticalSection
DebugBreak
OutputDebugStringW
FreeLibrary
SetLastError
OutputDebugStringA
LoadLibraryW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
LoadLibraryA
FindFirstFileW
lstrcpyW
FindNextFileW
FindClose
GetCurrentThreadId
lstrcmpW
TerminateThread
ReleaseMutex
WaitForSingleObject
GlobalUnlock
GlobalLock
GetVolumeInformationW
GetDriveTypeW
GetLogicalDriveStringsW
GlobalAlloc
CopyFileW
MoveFileW
GetTempFileNameW
lstrcatW
ResetEvent
CreateEventW
InitializeCriticalSection
DeleteCriticalSection
FlushInstructionCache
GetCurrentProcess
GetCurrentProcessId
GetPrivateProfileStringW
GetCurrentThread
HeapFree
HeapAlloc
GetProcessHeap
GetTempPathW
SetCurrentDirectoryW
FileTimeToSystemTime
GetFileTime
WritePrivateProfileStringW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
OpenFileMappingW
CreateMutexW
LocalFree
GetEnvironmentVariableW
GetLongPathNameW
GetSystemDirectoryW
GetShortPathNameW
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
lstrcmpiW
lstrcpynW
HeapDestroy
InterlockedExchange
LocalAlloc
InterlockedDecrement
GetVersionExW
RemoveDirectoryW
DeleteFileW
GetLastError
RaiseException
MultiByteToWideChar
FindWindowW
DestroyCursor
InflateRect
EmptyClipboard
LoadCursorFromFileW
UnregisterClassW
TranslateMessage
DispatchMessageW
SetActiveWindow
MoveWindow
EnableMenuItem
CheckMenuItem
AppendMenuW
CreatePopupMenu
DialogBoxParamW
GetActiveWindow
CreateWindowExW
GetDlgItem
InvalidateRgn
SetCapture
ReleaseCapture
DestroyAcceleratorTable
CreateAcceleratorTableW
GetDesktopWindow
RedrawWindow
BeginPaint
EndPaint
IsChild
SetFocus
UpdateWindow
DrawTextW
wsprintfW
GetWindowDC
SystemParametersInfoW
CreateDialogParamW
CallWindowProcW
DrawEdge
DestroyWindow
EndMenu
OpenClipboard
GetClipboardData
CloseClipboard
SetWindowRgn
MessageBoxW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
DefWindowProcW
RegisterClassExW
RegisterWindowMessageW
LoadCursorW
ReleaseDC
GetDC
OffsetRect
GetMenuItemInfoW
CopyRect
GetSystemMetrics
GetWindow
ShowWindow
IsWindowVisible
GetAsyncKeyState
GetWindowRect
CharUpperW
LoadMenuW
GetSubMenu
InsertMenuW
TrackPopupMenu
DestroyMenu
KillTimer
UnhookWindowsHookEx
MapWindowPoints
GetMessagePos
GetCursorPos
GetFocus
GetWindowLongW
SetWindowLongW
SetWindowPos
SetWindowsHookExW
WindowFromPoint
SetTimer
SetCursor
ScreenToClient
PtInRect
GetKeyState
GetClassNameW
CallNextHookEx
InvalidateRect
LoadImageW
LoadStringW
CharNextW
wvsprintfW
GetClientRect
CharLowerW
PostMessageW
GetSysColor
FillRect
SendMessageW
IsWindow
GetParent
EndDialog
EnableWindow
GetClassInfoExW
DrawFocusRect
SetRectEmpty
ClientToScreen
TextOutW
GetBkColor
RestoreDC
SaveDC
GetTextExtentPoint32W
GetTextMetricsW
LineTo
MoveToEx
CreatePen
GetTextExtentPointW
GetStockObject
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
GetDeviceCaps
GetObjectW
CreateRectRgn
CreateFontW
DeleteDC
CreateFontIndirectW
ExtTextOutW
Rectangle
SetTextColor
SetBkMode
SetBkColor
SelectObject
CreateSolidBrush
DeleteObject
DPtoLP
DragQueryFileW
SHAddToRecentDocs
ShellExecuteW
CoInitialize
ReleaseStgMedium
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
CoCreateInstance
RegisterDragDrop
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
StringFromCLSID
CoTaskMemAlloc
CoUninitialize
CoCreateGuid
OleLockRunning
CoTaskMemRealloc
OleRun
OleCreateFontIndirect
SafeArrayCreateVector
SafeArrayAccessData
GetErrorInfo
SafeArrayUnaccessData
SafeArrayCreate
SafeArrayPutElement
RegisterTypeLi
VarUI4FromStr
DispCallFunc
SysAllocString
SysFreeString
SysAllocStringLen
SysAllocStringByteLen
SysStringLen
VariantClear
SysStringByteLen
VariantInit
VariantCopy
VariantChangeType
LoadTypeLi
SafeArrayDestroy
LoadRegTypeLi
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@IDABV?$allocator@D@1@@Z
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIGI@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEABGI@Z
?size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IIABV12@@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIABV12@I@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@IIABV?$allocator@G@1@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?data@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ
?empty@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE_NXZ
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
?find_last_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?find_first_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIABV12@I@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAGI@Z
??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIGI@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
?length@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
__CxxFrameHandler
memset
memcpy
rand
memmove
memcmp
fclose
strlen
fgets
fopen
wcstok
wcsstr
_CxxThrowException
free
_wmkdir
_beginthread
_purecall
wcscpy
wcslen
difftime
malloc
mktime
localtime
time
_wtoi
iswdigit
_except_handler3
_wfullpath
wcsrchr
_itow
_ftol
wcscmp
??2@YAPAXI@Z
strstr
fread
ftell
fseek
_wcsnicmp
wcsncpy
wcschr
sprintf
fflush
_wchdir
wcstod
fgetws
_wfopen
wcscat
wcstol
_wcslwr
_wsplitpath
_beginthreadex
fwrite
abs
__dllonexit
_onexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_initterm
_adjust_fdiv
srand
_wcsicmp
swprintf
realloc
_errno
wcsncmp
_wcsupr
_itoa
vfwprintf
fwprintf
_iob
_wstrtime
strncpy
_wstrdate
CanReload
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
TBStudioReg
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ