Extended Key Usages
ExtKeyUsageCodeSigning
Static task
static1
Behavioral task
behavioral1
Sample
297f4b74323ef8320a3e07aac3c69b4b_JaffaCakes118.dll
Resource
win7-20240903-en
Target
297f4b74323ef8320a3e07aac3c69b4b_JaffaCakes118
Size
226KB
MD5
297f4b74323ef8320a3e07aac3c69b4b
SHA1
3da0fd7e08f321518e7d1e226dab582b14630d3c
SHA256
dae0ba2da3be34eb2417f2af130c0e7a2caa56479d776764f820f35bed77d017
SHA512
f4732aa04719faaf0daf453549c38ef0c4e0fd3e31b564ef5129f999ceb86919fd2c26ed8ffac32b31989293514e8191fcfc66fedbadc26b089d77f480a74fca
SSDEEP
3072:lqPytETYKgfrWJYmpm1RU8JtJJnjGKTy+oHZHLTgf9MmFky3NJjMQnyr5CDo9h2l:KytEkKgjWJAbJJ9GKTKty3NuQnyMcK
ExtKeyUsageCodeSigning
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateDirectoryW
CreateEventA
CreateFiber
CreateFileMappingA
CreateFileMappingW
CreateHardLinkA
CreateHardLinkW
CreateMailslotA
CreateMutexA
CreateNamedPipeA
CreateNamedPipeW
CreateProcessA
CreateProcessW
CreateRemoteThread
CreateSemaphoreW
CreateTapePartition
CreateTimerQueue
CreateTimerQueueTimer
CreateWaitableTimerW
DefineDosDeviceA
DefineDosDeviceW
DeleteCriticalSection
DeleteFiber
DeleteTimerQueue
DeleteVolumeMountPointW
DisconnectNamedPipe
DnsHostnameToComputerNameA
DnsHostnameToComputerNameW
DosDateTimeToFileTime
EndUpdateResourceW
EnterCriticalSection
EnumCalendarInfoW
EnumDateFormatsA
EnumResourceLanguagesW
EnumResourceNamesA
EnumSystemCodePagesW
EnumSystemLanguageGroupsA
EnumSystemLocalesW
EnumTimeFormatsA
EnumUILanguagesA
EnumUILanguagesW
ExpandEnvironmentStringsW
FatalAppExitA
FileTimeToDosDateTime
FileTimeToSystemTime
FillConsoleOutputAttribute
FillConsoleOutputCharacterW
FindAtomW
FindCloseChangeNotification
FindFirstChangeNotificationA
FindFirstChangeNotificationW
FindFirstVolumeMountPointA
FindNextChangeNotification
FindNextVolumeMountPointW
FindNextVolumeW
FindResourceA
FindResourceW
FindVolumeClose
FindVolumeMountPointClose
FoldStringA
FormatMessageA
FormatMessageW
FreeConsole
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetACP
GetAtomNameA
GetBinaryType
GetBinaryTypeW
GetCPInfo
GetCPInfoExA
GetCalendarInfoA
GetCalendarInfoW
GetCommConfig
GetCommMask
GetCommState
GetCommTimeouts
GetCompressedFileSizeA
GetComputerNameExA
GetComputerNameExW
GetConsoleAliasExesA
GetConsoleAliasW
GetConsoleAliasesA
GetConsoleAliasesLengthW
GetConsoleFontSize
GetConsoleOutputCP
GetConsoleWindow
GetCurrencyFormatA
GetCurrencyFormatW
GetCurrentProcess
GetCurrentThread
GetDateFormatW
GetDefaultCommConfigA
GetDevicePowerState
GetDiskFreeSpaceA
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileAttributesExA
GetFileInformationByHandle
GetFileSize
GetFileSizeEx
GetFullPathNameA
GetLargestConsoleWindowSize
GetLocalTime
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleA
GetNumberFormatA
GetOEMCP
GetPrivateProfileIntA
GetPrivateProfileIntW
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionNamesW
GetPrivateProfileSectionW
GetPrivateProfileStringA
GetPrivateProfileStringW
GetPrivateProfileStructA
GetProcessAffinityMask
GetProcessHeap
GetProcessIoCounters
GetProcessPriorityBoost
GetProcessTimes
GetProcessVersion
GetProcessWorkingSetSize
GetProfileIntW
GetProfileSectionW
GetProfileStringA
GetProfileStringW
GetShortPathNameA
GetShortPathNameW
GetStartupInfoW
GetStringTypeExW
GetSystemDefaultLCID
GetSystemDefaultUILanguage
GetSystemDirectoryW
GetSystemInfo
GetSystemPowerStatus
GetSystemTimeAsFileTime
GetTapePosition
GetTempFileNameW
GetTempPathW
GetThreadPriority
GetThreadPriorityBoost
GetThreadSelectorEntry
GetTimeFormatA
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultLangID
GetUserDefaultUILanguage
GetVersion
GetVolumeInformationA
GetVolumeInformationW
GetVolumeNameForVolumeMountPointA
GetVolumePathNameA
GetVolumePathNameW
GlobalAddAtomA
GlobalAlloc
GlobalCompact
GlobalDeleteAtom
GlobalFindAtomA
GlobalFindAtomW
GlobalFix
GlobalFlags
CreateDirectoryExA
GlobalReAlloc
GlobalSize
GlobalUnfix
GlobalWire
Heap32First
Heap32ListNext
HeapAlloc
HeapCompact
HeapFree
HeapLock
HeapSize
InitAtomTable
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchangeAdd
InterlockedIncrement
IsBadHugeReadPtr
IsBadStringPtrW
IsDBCSLeadByte
IsDBCSLeadByteEx
IsDebuggerPresent
IsProcessorFeaturePresent
IsSystemResumeAutomatic
IsValidCodePage
LeaveCriticalSection
LoadLibraryExA
LoadLibraryW
LocalAlloc
LocalCompact
LocalFlags
LocalLock
LocalReAlloc
LocalShrink
LocalSize
LockFile
LockResource
MapViewOfFile
MapViewOfFileEx
Module32NextW
MoveFileExW
MoveFileW
MulDiv
MultiByteToWideChar
OpenEventA
OpenFile
OpenFileMappingA
OpenFileMappingW
OpenThread
PeekConsoleInputA
PostQueuedCompletionStatus
Process32First
Process32FirstW
QueryDosDeviceA
QueryDosDeviceW
QueryInformationJobObject
QueueUserAPC
RaiseException
ReadConsoleA
ReadConsoleInputW
ReadConsoleOutputAttribute
ReadConsoleOutputCharacterA
ReadConsoleW
ReadDirectoryChangesW
ReadFile
RemoveDirectoryW
ReplaceFileW
RequestDeviceWakeup
ResetEvent
ResetWriteWatch
RtlMoveMemory
RtlUnwind
ScrollConsoleScreenBufferA
ScrollConsoleScreenBufferW
SearchPathW
SetCalendarInfoA
SetCommMask
SetCommState
SetComputerNameA
SetComputerNameW
SetConsoleCP
SetConsoleCtrlHandler
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleScreenBufferSize
SetConsoleTitleW
SetConsoleWindowInfo
SetCriticalSectionSpinCount
SetCurrentDirectoryW
SetDefaultCommConfigW
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFileApisToOEM
SetFileAttributesA
SetFilePointerEx
SetHandleCount
SetInformationJobObject
SetLastError
SetLocalTime
SetLocaleInfoW
SetProcessPriorityBoost
SetProcessShutdownParameters
SetStdHandle
SetSystemTime
SetThreadAffinityMask
SetThreadContext
SetThreadIdealProcessor
SetThreadLocale
SetThreadPriority
SetTimerQueueTimer
SetVolumeLabelW
SetVolumeMountPointA
SetWaitableTimer
SetupComm
Sleep
SwitchToFiber
TerminateJobObject
Thread32First
TlsAlloc
TlsFree
TlsGetValue
Toolhelp32ReadProcessMemory
TransmitCommChar
UnmapViewOfFile
UnregisterWait
UpdateResourceA
VerLanguageNameW
VerifyVersionInfoA
VerifyVersionInfoW
VirtualAlloc
VirtualProtectEx
WaitCommEvent
WaitForSingleObject
WaitForSingleObjectEx
WaitNamedPipeA
WideCharToMultiByte
WriteConsoleInputA
WriteConsoleOutputAttribute
WriteConsoleOutputW
WriteFile
WriteFileEx
WriteFileGather
WritePrivateProfileStructW
WriteProcessMemory
WriteProfileSectionA
WriteProfileStringA
_hread
_lclose
_lcreat
_lopen
lstrcat
lstrcatA
lstrcatW
lstrcmp
lstrcmpi
lstrcmpiA
lstrcpy
lstrcpyA
lstrcpynA
lstrlenA
lstrlenW
CreateFileA
GetWindowsDirectoryA
VirtualAllocEx
CopyFileExW
CopyFileExA
CopyFileA
ConvertThreadToFiber
ConvertDefaultLocale
ContinueDebugEvent
ConnectNamedPipe
CompareStringA
CompareFileTime
AddAtomA
CommConfigDialogW
CloseHandle
ClearCommError
CancelTimerQueueTimer
CancelIo
BuildCommDCBAndTimeoutsA
BeginUpdateResourceA
BackupWrite
BackupSeek
AreFileApisANSI
AllocConsole
AddConsoleAliasA
AddAtomW
GlobalHandle
CheckDlgButton
CheckMenuItem
ChildWindowFromPoint
ClientToScreen
ClipCursor
CloseWindowStation
CopyAcceleratorTableA
CopyImage
CopyRect
CreateAcceleratorTableW
CreateCursor
CreateDesktopW
CreateDialogIndirectParamW
CreateDialogParamW
CreateIcon
CreateIconFromResource
CreateMDIWindowA
CreateMenu
CreateWindowExA
CreateWindowStationA
CreateWindowStationW
DdeAbandonTransaction
DdeClientTransaction
DdeConnect
DdeCreateStringHandleA
DdeDisconnectList
DdeFreeDataHandle
DdeFreeStringHandle
DdeInitializeA
DdeKeepStringHandle
DdeQueryStringW
DdeReconnect
DdeSetQualityOfService
DdeUninitialize
DefDlgProcW
DefFrameProcA
DefMDIChildProcA
DefMDIChildProcW
DeferWindowPos
DeregisterShellHookWindow
DestroyCaret
DestroyMenu
DialogBoxParamA
DispatchMessageW
DlgDirListA
DlgDirListComboBoxW
DlgDirListW
DlgDirSelectComboBoxExA
DlgDirSelectComboBoxExW
DlgDirSelectExW
DrawEdge
DrawFocusRect
DrawFrame
DrawFrameControl
DrawIcon
DrawIconEx
DrawTextA
DrawTextExW
DrawTextW
EmptyClipboard
EndDeferWindowPos
EndDialog
EndPaint
EndTask
EnumChildWindows
EnumClipboardFormats
EnumDesktopWindows
EnumDesktopsA
EnumDesktopsW
EnumDisplayDevicesW
EnumDisplaySettingsA
EnumDisplaySettingsExA
EnumDisplaySettingsExW
EnumDisplaySettingsW
EnumPropsA
EnumPropsExW
EnumPropsW
EnumWindowStationsW
ExcludeUpdateRgn
ExitWindowsEx
FindWindowExA
FindWindowExW
FlashWindow
FrameRect
GetAltTabInfo
GetAsyncKeyState
GetCaretBlinkTime
GetCaretPos
GetClassInfoA
GetClassInfoExA
GetClassNameA
GetClassNameW
GetClassWord
GetClientRect
GetClipboardData
GetClipboardFormatNameA
GetClipboardOwner
GetCursor
GetCursorPos
GetDesktopWindow
GetDialogBaseUnits
GetDlgItemInt
GetDoubleClickTime
GetFocus
GetForegroundWindow
GetIconInfo
GetInputState
GetKeyNameTextA
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardLayoutNameA
GetKeyboardType
GetLastActivePopup
GetLastInputInfo
GetListBoxInfo
GetMenuCheckMarkDimensions
GetMenuContextHelpId
GetMenuDefaultItem
GetMenuInfo
GetMenuItemInfoA
GetMenuItemRect
GetMenuStringW
GetMessageTime
GetMonitorInfoW
GetNextDlgGroupItem
GetNextDlgTabItem
GetOpenClipboardWindow
GetParent
GetPriorityClipboardFormat
GetPropA
GetPropW
GetQueueStatus
GetScrollBarInfo
GetScrollInfo
GetScrollPos
GetShellWindow
GetSubMenu
GetSysColor
GetTabbedTextExtentW
GetThreadDesktop
GetTitleBarInfo
GetTopWindow
GetUserObjectInformationA
GetUserObjectInformationW
GetWindow
GetWindowInfo
GetWindowLongA
GetWindowLongW
GetWindowModuleFileName
GetWindowPlacement
GetWindowTextA
GetWindowTextLengthA
GetWindowTextLengthW
GetWindowTextW
HideCaret
IMPGetIMEA
IMPGetIMEW
IMPQueryIMEW
IMPSetIMEA
IMPSetIMEW
ImpersonateDdeClientWindow
InSendMessage
InSendMessageEx
InflateRect
InsertMenuItemW
IntersectRect
InvalidateRect
InvalidateRgn
InvertRect
IsCharAlphaNumericA
IsCharAlphaNumericW
IsCharAlphaW
IsCharLowerA
IsCharUpperA
IsCharUpperW
IsChild
IsDialogMessage
IsDialogMessageA
IsDialogMessageW
IsDlgButtonChecked
IsHungAppWindow
IsIconic
IsMenu
IsWindowEnabled
IsWindowUnicode
LoadAcceleratorsA
LoadImageW
LoadMenuA
LoadMenuIndirectW
LockSetForegroundWindow
LockWorkStation
LookupIconIdFromDirectoryEx
MapDialogRect
MapVirtualKeyA
MapVirtualKeyExA
MapVirtualKeyExW
MapVirtualKeyW
MapWindowPoints
MessageBeep
MessageBoxA
MessageBoxExA
MessageBoxIndirectW
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
MoveWindow
MsgWaitForMultipleObjectsEx
NotifyWinEvent
OemKeyScan
OemToCharBuffA
OemToCharBuffW
OffsetRect
OpenClipboard
OpenDesktopW
OpenIcon
OpenWindowStationA
OpenWindowStationW
PaintDesktop
PostMessageW
PostQuitMessage
RealChildWindowFromPoint
RealGetWindowClass
RealGetWindowClassW
RedrawWindow
RegisterClassExW
RegisterClassW
RegisterClipboardFormatA
RegisterDeviceNotificationA
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropA
ReuseDDElParam
ScreenToClient
ScrollDC
ScrollWindow
SendDlgItemMessageA
SendDlgItemMessageW
SendIMEMessageExW
SendInput
SendMessageCallbackA
SendMessageCallbackW
SendMessageTimeoutA
SendMessageTimeoutW
SendNotifyMessageA
SetActiveWindow
SetCapture
SetCaretBlinkTime
SetClassWord
SetCursor
SetCursorPos
SetDeskWallpaper
SetDoubleClickTime
SetForegroundWindow
SetKeyboardState
SetLastErrorEx
SetMenu
SetMenuContextHelpId
SetMenuDefaultItem
SetMenuInfo
SetMenuItemBitmaps
SetMenuItemInfoA
SetMenuItemInfoW
SetMessageExtraInfo
SetMessageQueue
SetParent
SetProcessDefaultLayout
SetProcessWindowStation
SetPropA
SetPropW
SetRect
SetRectEmpty
SetScrollInfo
SetSysColors
SetUserObjectInformationA
SetUserObjectInformationW
SetUserObjectSecurity
SetWindowLongA
SetWindowPos
SetWindowTextA
SetWindowWord
SetWindowsHookA
SetWindowsHookExA
SetWindowsHookExW
ShowCursor
ShowOwnedPopups
ShowScrollBar
ShowWindow
ShowWindowAsync
SubtractRect
SwitchDesktop
SwitchToThisWindow
SystemParametersInfoA
SystemParametersInfoW
TabbedTextOutA
TileChildWindows
TileWindows
ToAscii
ToAsciiEx
ToUnicode
TrackMouseEvent
TrackPopupMenuEx
TranslateAccelerator
TranslateAcceleratorA
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHook
UnhookWindowsHookEx
UnionRect
UnloadKeyboardLayout
UnpackDDElParam
UnregisterClassW
UnregisterDeviceNotification
UserHandleGrantAccess
ValidateRect
ValidateRgn
VkKeyScanA
VkKeyScanW
WINNLSEnableIME
WINNLSGetEnableStatus
WaitMessage
WinHelpA
WinHelpW
mouse_event
wsprintfA
wvsprintfW
CharUpperW
CharUpperBuffW
CharUpperBuffA
CharToOemBuffA
CharToOemA
CharNextW
CharLowerW
CharLowerBuffA
ChangeDisplaySettingsW
ChangeDisplaySettingsA
ChangeClipboardChain
CascadeChildWindows
CallWindowProcW
CallNextHookEx
BroadcastSystemMessageW
BringWindowToTop
BlockInput
BeginDeferWindowPos
AttachThreadInput
ArrangeIconicWindows
AnimateWindow
AdjustWindowRect
ActivateKeyboardLayout
CallMsgFilterA
ChooseFontA
ChooseFontW
CommDlgExtendedError
FindTextA
FindTextW
GetFileTitleA
GetFileTitleW
GetOpenFileNameA
GetOpenFileNameW
ChooseColorW
GetSaveFileNameW
PageSetupDlgA
PageSetupDlgW
PrintDlgA
PrintDlgExA
PrintDlgExW
PrintDlgW
ReplaceTextA
ReplaceTextW
GetSaveFileNameA
ChooseColorA
RegOpenKeyExW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ