Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Overview
overview
7Static
static
33943845447...18.exe
windows7-x64
73943845447...18.exe
windows10-2004-x64
7$PLUGINSDI...ps.exe
windows7-x64
7$PLUGINSDI...ps.exe
windows10-2004-x64
7content/ebglobals.js
windows7-x64
3content/ebglobals.js
windows10-2004-x64
3content/ebio.js
windows7-x64
3content/ebio.js
windows10-2004-x64
3content/ebtoolbar.js
windows7-x64
3content/ebtoolbar.js
windows10-2004-x64
3content/em...ier.js
windows7-x64
3content/em...ier.js
windows10-2004-x64
3content/feed.js
windows7-x64
3content/feed.js
windows10-2004-x64
3content/generic.js
windows7-x64
3content/generic.js
windows10-2004-x64
3content/mu...ity.js
windows7-x64
3content/mu...ity.js
windows10-2004-x64
3content/options.js
windows7-x64
3content/options.js
windows10-2004-x64
3content/radio.js
windows7-x64
3content/radio.js
windows10-2004-x64
3content/toolbarapi.js
windows7-x64
3content/toolbarapi.js
windows10-2004-x64
3content/to...nts.js
windows7-x64
3content/to...nts.js
windows10-2004-x64
3content/weather.js
windows7-x64
3content/weather.js
windows10-2004-x64
3components...rch.js
windows7-x64
3components...rch.js
windows10-2004-x64
3components...rt.dll
windows7-x64
3components...rt.dll
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
3943845447ed5d649a97135cfb161bc6_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3943845447ed5d649a97135cfb161bc6_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/Best_Security_Tips.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/Best_Security_Tips.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
content/ebglobals.js
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
content/ebglobals.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
content/ebio.js
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
content/ebio.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
content/ebtoolbar.js
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
content/ebtoolbar.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
content/emailnotifier.js
Resource
win7-20241010-en
Behavioral task
behavioral12
Sample
content/emailnotifier.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
content/feed.js
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
content/feed.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
content/generic.js
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
content/generic.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
content/multicommunity.js
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
content/multicommunity.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
content/options.js
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
content/options.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral21
Sample
content/radio.js
Resource
win7-20241010-en
Behavioral task
behavioral22
Sample
content/radio.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral23
Sample
content/toolbarapi.js
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
content/toolbarapi.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral25
Sample
content/toolbarcomponents.js
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
content/toolbarcomponents.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral27
Sample
content/weather.js
Resource
win7-20241010-en
Behavioral task
behavioral28
Sample
content/weather.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral29
Sample
components/ConduitAutoCompleteSearch.js
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
components/ConduitAutoCompleteSearch.js
Resource
win10v2004-20241007-en
Behavioral task
behavioral31
Sample
components/FFAlert.dll
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
components/FFAlert.dll
Resource
win10v2004-20241007-en
Target
3943845447ed5d649a97135cfb161bc6_JaffaCakes118
Size
1.6MB
MD5
3943845447ed5d649a97135cfb161bc6
SHA1
06829b1d1922c7d59c0c4ef4687140f666e44e14
SHA256
77e27f6e33e2cfd2cc6a2d31761bb182612e009001be4a022f7a819a33fc5cbf
SHA512
2b0315b9511a8f509f17b374f4da259d125cd33fb59954b67743f7631b7a6b74e1ef36734f6887d3fc697881bedc7c6cc2ed99c9a7c1d83d3ca78c024248d992
SSDEEP
24576:GQvf+NW7b5/14pYQZdedovDX0MkWRAs/r7QjgFqzWeA+TgXGaYOxmev/:oW7b5t9QZdUmz3HT8jWleA+T6YVg/
Checks for missing Authenticode signature.
resource |
---|
3943845447ed5d649a97135cfb161bc6_JaffaCakes118 |
unpack002/components/FFAlert.dll |
unpack002/components/npmozax.dll |
unpack001/$PLUGINSDIR/InstallOptions.dll |
resource | yara_rule |
---|---|
sample | nsis_installer_1 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
CreateFileA
GetFileSize
GetModuleFileNameA
GetTickCount
GetCurrentProcess
CopyFileA
ExitProcess
SetFileTime
GetTempPathA
GetCommandLineA
SetErrorMode
LoadLibraryA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
GetVersion
CloseHandle
lstrcmpiA
lstrcmpA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetWindowsDirectoryA
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA
wsprintfA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IIDFromString
CLSIDFromString
CoCreateInstance
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_encoded_null
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
free
_malloc_crt
_encode_pointer
memcpy
strlen
strcpy
??2@YAPAXI@Z
??3@YAXPAX@Z
PR_AtomicIncrement
PR_AtomicDecrement
NS_Alloc
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
InterlockedExchange
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
Sleep
NSGetModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?AppendUTF16toUTF8@@YAXPBGAAVnsACString_internal@@@Z
NS_Alloc_P
?NS_NewByteArrayInputStream@@YAIPAPAVnsIByteArrayInputStream@@PADK@Z
NS_Free_P
?Assign@nsSubstring@@QAEXPBGI@Z
?assign_from_gs_cid_with_error@nsCOMPtr_base@@QAEXABVnsGetServiceByCIDWithError@@ABUnsID@@@Z
?AppendUTF16toUTF8@@YAXABVnsAString_internal@@AAVnsACString_internal@@@Z
??0nsGetInterface@@QAE@PAVnsISupports@@PAI@Z
??0nsCreateInstanceByContractID@@QAE@PBDPAVnsISupports@@PAI@Z
?assign_from_helper@nsCOMPtr_base@@QAEXABVnsCOMPtr_helper@@ABUnsID@@@Z
?sCanonicalVTable@nsObsoleteAString@@2PBXB
?sEmptyBuffer@?$nsCharTraits@D@@2PBDB
?Adopt@nsCSubstring@@QAEXPADI@Z
?AssignWithConversion@nsString@@QAEXABVnsACString_internal@@@Z
??1nsAString_internal@@QAE@XZ
?sEmptyBuffer@?$nsCharTraits@G@@2PBGB
?Adopt@nsSubstring@@QAEXPAGI@Z
?AssignWithConversion@nsString@@QAEXPBDH@Z
?CopyUTF8toUTF16@@YAXABVnsACString_internal@@AAVnsAString_internal@@@Z
?sCanonicalVTable@nsObsoleteACString@@2PBXB
?assign_from_qi@nsCOMPtr_base@@QAEXVnsQueryInterface@@ABUnsID@@@Z
?Equals@nsSubstring@@QBEHABV1@@Z
?ToNewUnicode@@YAPAGABVnsAString_internal@@@Z
??_7nsGetInterface@@6B@
?CallGetService@@YAIPBDABUnsID@@PAPAX@Z
?GetWeakReference@nsSupportsWeakReference@@UAGIPAPAVnsIWeakReference@@@Z
??1nsSupportsWeakReference@@IAE@XZ
??_7nsSupportsWeakReference@@6B@
?assign_from_qi_with_error@nsCOMPtr_base@@QAEXABVnsQueryInterfaceWithError@@ABUnsID@@@Z
??1nsACString_internal@@QAE@XZ
?assign_from_gs_contractid_with_error@nsCOMPtr_base@@QAEXABVnsGetServiceByContractIDWithError@@ABUnsID@@@Z
?assign_from_gs_contractid@nsCOMPtr_base@@QAEXVnsGetServiceByContractID@@ABUnsID@@@Z
?assign_with_AddRef@nsCOMPtr_base@@QAEXPAVnsISupports@@@Z
??1nsCOMPtr_base@@QAE@XZ
PL_strcmp
JS_GetGlobalObject
JS_CompileScriptForPrincipals
JS_DropPrincipals
LocalFree
DebugBreak
WideCharToMultiByte
lstrcpyA
lstrlenW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryA
GetProcAddress
FreeLibrary
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
DisableThreadLibraryCalls
CreateEventA
CloseHandle
lstrlenA
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
TranslateMessage
GetMessageA
MsgWaitForMultipleObjects
PeekMessageA
SetWindowLongA
GetWindowLongA
GetClientRect
LoadStringA
GetSysColor
FillRect
GetWindowDC
ReleaseDC
InvalidateRect
IntersectRect
GetDC
InvalidateRgn
DispatchMessageA
SetViewportOrgEx
SelectObject
CreateCompatibleBitmap
DeleteDC
BitBlt
CreateRectRgnIndirect
DPtoLP
LPtoDP
SetMapMode
SelectClipRgn
CreateSolidBrush
CreateCompatibleDC
CombineRgn
DeleteObject
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
ProgIDFromCLSID
CLSIDFromString
CoCreateInstance
StringFromCLSID
CreateBindCtx
CoTaskMemFree
VariantClear
SysStringLen
SysAllocString
SysFreeString
VariantCopy
VariantInit
LoadRegTypeLi
SetErrorInfo
CreateErrorInfo
SafeArrayUnlock
SafeArrayLock
VariantChangeType
SysAllocStringLen
CoGetClassObjectFromURL
CreateURLMoniker
RegisterBindStatusCallback
RevokeBindStatusCallback
CreateAsyncBindCtx
_ftol
wcsrchr
swscanf
memset
__CxxFrameHandler
free
??2@YAPAXI@Z
strncpy
_snprintf
strlen
wcscmp
strcmp
realloc
malloc
memcpy
memcmp
wcsncpy
wcslen
_purecall
_wcsicmp
_CxxThrowException
_except_handler3
?terminate@@YAXXZ
_initterm
_adjust_fdiv
__dllonexit
_onexit
_wcsnicmp
??1type_info@@UAE@XZ
sprintf
_strdup
_strnicmp
_stricmp
_wcsdup
PL_HashTableRemove
PL_NewHashTable
PL_HashTableLookup
PL_HashTableDestroy
PL_HashTableAdd
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetCurrentDirectoryA
GetCurrentDirectoryA
MultiByteToWideChar
GetPrivateProfileIntA
GlobalLock
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
GlobalUnlock
GlobalAlloc
MapWindowPoints
GetDlgCtrlID
CloseClipboard
GetClipboardData
OpenClipboard
PtInRect
SetWindowRgn
LoadIconA
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableMenuItem
GetSystemMenu
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
GetClientRect
SetTextColor
CreateCompatibleDC
GetObjectA
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
SelectObject
SHBrowseForFolderA
SHGetDesktopFolder
SHGetPathFromIDListA
ShellExecuteA
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
CoTaskMemFree
dialog
initDialog
show
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ