Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
30dc49b568ce22054d6d773c514c5311_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
30dc49b568ce22054d6d773c514c5311_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
30dc49b568ce22054d6d773c514c5311_JaffaCakes118
Size
236KB
MD5
30dc49b568ce22054d6d773c514c5311
SHA1
833e037f24f69a48c902adc0d9a58c1b0988c197
SHA256
2ccc0e6747cbb25ad93d5781f3dad01326a183f671770d8798ee24e24b4bfde0
SHA512
789dba44f1245ce01b226ca5f949e38ea63cd076dd15028b1b03feae4aa57cfe76b1e624e68e6f7be898fd24c564300f40df9751fbee6d5b2e746d3e4c84e110
SSDEEP
3072:QAGn3loHpbcO+8WbUPem9mpURsNNqKINdQYtrz+RFhu+JzF8ZifPO33pTERUyVY:BUyHpbMgPemrbdQ6yRFVBhk3pA2yVY
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
h:\xmp\xmp5.2\app\StreamI\trunk\Release\StreamIModule.pdb
SHGetFolderPathW
ord680
GetLocaleInfoA
GetThreadLocale
GetVersionExW
InitializeCriticalSection
DeleteCriticalSection
VerifyVersionInfoW
VerSetConditionMask
FreeLibrary
GetProcAddress
LoadLibraryW
GetModuleHandleW
FlushInstructionCache
GetCurrentProcess
HeapFree
GetProcessHeap
HeapAlloc
OutputDebugStringW
GetCurrentThreadId
GlobalLock
GlobalAlloc
CloseHandle
FlushFileBuffers
WritePrivateProfileStringW
WriteFile
SetFilePointer
GetTempPathA
CreateFileW
InterlockedIncrement
InterlockedDecrement
WritePrivateProfileStringA
GetPrivateProfileIntW
GetPrivateProfileStringA
GetPrivateProfileStringW
CopyFileW
MoveFileW
FindFirstFileW
GetACP
ReleaseMutex
CreateFileMappingW
WaitForSingleObject
CreateMutexW
TerminateProcess
TlsSetValue
FindCloseChangeNotification
FindFirstChangeNotificationW
GetLocalTime
TlsGetValue
TlsAlloc
GetSystemInfo
UnmapViewOfFile
TlsFree
GetFileAttributesExW
GetEnvironmentVariableW
CreateEventW
Sleep
SetEnvironmentVariableW
SetFileAttributesW
lstrlenW
DisableThreadLibraryCalls
GetSystemDirectoryW
lstrcpyW
SetCurrentDirectoryW
TerminateThread
WaitForMultipleObjects
CreateThread
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
MapViewOfFile
InterlockedExchange
GetLastError
DeleteFileW
FindNextFileW
FindClose
GetCurrentProcessId
GetFileAttributesW
CreateDirectoryW
GetFileAttributesA
CreateDirectoryA
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
GlobalUnlock
GlobalFree
VirtualQuery
EnterCriticalSection
LeaveCriticalSection
InterlockedExchangeAdd
ExitProcess
SetWindowLongW
ShowWindow
CharUpperBuffW
CreateWindowExW
LoadStringW
DefWindowProcW
MessageBoxW
GetDesktopWindow
IsWindow
PostMessageW
GetWindowLongW
CallWindowProcW
DestroyWindow
wsprintfW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
StringFromGUID2
CoRegisterClassObject
CLSIDFromString
CoCreateInstance
CoTaskMemFree
CoInitialize
CoUninitialize
StringFromIID
CoRevokeClassObject
VarBstrCmp
LoadTypeLi
SysAllocString
SysFreeString
SysStringLen
SysAllocStringByteLen
SysStringByteLen
VariantInit
VariantClear
VariantCopy
LoadRegTypeLi
?_Nomemory@std@@YAXXZ
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AViterator@12@XZ
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AViterator@12@XZ
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
?length@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBD@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
ord61
ord23
ord32
ord30
ord44
ord43
ord15
ord65
ord45
ord58
ord31
ord18
ord22
ord64
ord66
PathFindExtensionW
PathAddBackslashW
PathAppendW
PathFindFileNameW
PathRemoveFileSpecW
PathFileExistsW
_wtol
wcscpy
_vsnwprintf
_wstat
_wcsicmp
wcstok
strncat
memcmp
strtok
malloc
realloc
??_V@YAXPAX@Z
_wcsnicmp
fopen
fseek
ftell
fclose
rand
srand
time
_callnewh
__security_error_handler
??1type_info@@UAE@XZ
?terminate@@YAXXZ
__dllonexit
_onexit
_initterm
_adjust_fdiv
__CppXcptFilter
_purecall
_wmakepath
tolower
wcsncat
wcscmp
_resetstkoflw
_ultow
??1exception@@UAE@XZ
??0exception@@QAE@XZ
__CxxFrameHandler
??3@YAXPAX@Z
_snwprintf
_except_handler3
_wsplitpath
wcsncpy
wcslen
memcpy
_wtoi
strncmp
strcmp
_CxxThrowException
memset
free
??0exception@@QAE@ABV0@@Z
strlen
strstr
strncpy
_snprintf
WTHelperProvDataFromStateData
WinVerifyTrust
WTHelperGetProvCertFromChain
WTHelperGetProvSignerFromChain
CertGetNameStringW
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RegisterServerDirect
UnregisterServerDirect
_init
_on_playing
_set_speed_limit
_startcomserver
_stopcomserver
_uninit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ