Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
3db0e45ba86be1bd6e695b8b7fc23007_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3db0e45ba86be1bd6e695b8b7fc23007_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
3db0e45ba86be1bd6e695b8b7fc23007_JaffaCakes118
Size
308KB
MD5
3db0e45ba86be1bd6e695b8b7fc23007
SHA1
0cd96b7d387fb05ecfe55289ae51d6e58415bc26
SHA256
b2ae3dd1cd98e383d553d6c3a4c170add15ef0d2c0278f8f91f8db700b30d8b7
SHA512
5ef6318009b32f9078fa62b5313f40d0ced205b87c63d74eee17745131e5ee71e41d2648db82f091a4743550a51c73918e7b1af583b0a70ce6ea1a6a2f03831a
SSDEEP
6144:n6JhMMh5HBxStLKOrxFJCSGBC564ubYe5t0jMU7:6JhbQESGk8jkhwW
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageNetscapeServerGatedCrypto
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
R:\TempView\Output\BinFinal\maUpdat.pdb
InitCommonControlsEx
??0CTXHttpDownloadSink@@IAE@XZ
?OnConnecting@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnConnected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@@Z
?OnDownloadStart@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@KK@Z
?OnRedirected@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@PB_W@Z
?OnError@CTXHttpDownloadSink@@UAEXPAVCTXHttpDownload@@K@Z
?CancelDownload@CTXHttpDownload@@QAEXXZ
?Download@CTXHttpDownload@@QAEHPB_WPAU_SYSTEMTIME@@0HPA_J@Z
?ConvertToPureFile@FS@@YA?AVCTXStringW@@PB_W@Z
?GetDownloadedFilePath@CTXHttpDownload@@QAEHAAVCTXStringW@@@Z
?GetPlatformCore@Core@Util@@YAHPAPAUITXCore@@@Z
??1CTXBSTR@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
??ICTXBSTR@@QAEPAPA_WXZ
?IsEmpty@CTXBSTR@@QAEHXZ
??0CTXBSTR@@QAE@PB_W@Z
??0CTXBSTR@@QAE@XZ
?Format@CTXStringA@@QAAXPBDZZ
??0CTXStringA@@QAE@XZ
??M@YA_NABVCTXStringA@@0@Z
??1CUnZipFile@@QAE@XZ
?UnZipFile@CUnZipFile@@QAE_NABVCTXStringW@@0@Z
??0CUnZipFile@@QAE@XZ
??1CFmtString@@QAE@XZ
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
?PropertyDWord@CFmtString@@QAEHPB_WK0@Z
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
??0CFmtString@@QAE@XZ
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
??0CTXHttpDownload@@QAE@XZ
?GetMainThreadLoop@Misc@Util@@YAPAVMessageLoopForUI@AsyncTask@@XZ
?IsInitAsyncMsgLoop@Misc@Util@@YAHXZ
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??H@YA?AVCTXStringW@@_WABV0@@Z
?GetParentDir@FS@Util@@YA?AVCTXStringW@@V3@@Z
?InitPlatform@CoreCenter@Util@@YAHPA_W@Z
?GetExeDir@Sys@Util@@YA?AVCTXStringW@@XZ
?InitPlatformFileSystem@Boot@Util@@YAHXZ
?InitPlatformI18NConfig@Boot@Util@@YAHXZ
?InitPlatformCoreConfig@Boot@Util@@YAHXZ
?CreateObjectFromDllFile@Com@Util@@YGJPB_WABU_GUID@@1PAPAXPAUIUnknown@@@Z
?InitPlatformGFConfig@Boot@Util@@YAHXZ
?ClearDeadQueue@Misc@Util@@YAXXZ
?OnUninitCom@Misc@Util@@YAXXZ
?OnExitWinMain@Misc@Util@@YAXXZ
?OnExitCoreCenter@Misc@Util@@YAXXZ
?GetBuffer@CTXStringW@@QAEPA_WXZ
??YCTXStringW@@QAEAAV0@ABV0@@Z
?MakeUpper@CTXStringW@@QAEAAV1@XZ
?Empty@CTXStringW@@QAEXXZ
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??0CTXStringW@@QAE@XZ
?EnableQQNetworkSettings@CTXHttpDownload@@QAEHH@Z
?SetEventMask@CTXHttpDownload@@QAEXE@Z
??1CTXHttpDownloadSink@@UAE@XZ
??1CTXHttpDownload@@UAE@XZ
?Format@CTXStringW@@QAAXPB_WZZ
??0CTXStringA@@QAE@PBD@Z
?Replace@CTXStringA@@QAEHPBD0@Z
?Insert@CTXStringA@@QAEHHPBD@Z
??BCTXStringA@@QBEPBDXZ
??1CTXStringA@@QAE@XZ
??4CTXStringW@@QAEAAV0@PA_W@Z
?ReverseFind@CTXStringW@@QBEH_W@Z
?Right@CTXStringW@@QBE?AV1@H@Z
?Tokenize@CTXStringW@@QBE?AV1@PB_WAAH@Z
?IsEmpty@CTXStringW@@QBE_NXZ
?Compare@CTXStringW@@QBEHPB_W@Z
?GetBuffer@CTXStringW@@QAEPA_WH@Z
?ReleaseBuffer@CTXStringW@@QAEXH@Z
??1CTXStringW@@QAE@XZ
??4CTXStringW@@QAEAAV0@PB_W@Z
?CompareNoCase@CTXStringW@@QBEHPB_W@Z
??0CTXStringW@@QAE@ABV0@@Z
??0CTXStringW@@QAE@PB_W@Z
??BCTXStringW@@QBEPB_WXZ
??0CTXStringW@@QAE@PA_W@Z
?SetUIInterface@CTXHttpDownload@@QAEXPAVCTXHttpDownloadSink@@@Z
?SetMainAndLogicThreadId@Misc@Util@@YAXKK@Z
?SetMainAndLogicMsgLoop@Misc@Util@@YAXPAVMessageLoopForUI@AsyncTask@@PAVMessageLoop@4@@Z
?GetString@CTXStringW@@QBEPB_WXZ
?AppendFormat@CTXStringW@@QAAXPB_WZZ
??4CTXStringW@@QAEAAV0@ABV0@@Z
?Left@CTXStringW@@QBE?AV1@H@Z
?GetLength@CTXStringW@@QBEHXZ
?Trim@CTXStringW@@QAEAAV1@XZ
??ACTXStringW@@QBE_WH@Z
?FindOneOf@CTXStringW@@QBEHPB_W@Z
?Mid@CTXStringW@@QBE?AV1@HH@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
?SafeLoadLibrary@Sys@Util@@YAPAUHINSTANCE__@@PB_W@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?SetCustomObjectFactory@GF@Util@@YAXP6AHABU_GUID@@0PAPAX@Z@Z
?PostDelayedTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@_J@Z
?PostTask@MessageLoop@AsyncTask@@QAEXPAVTask@2@@Z
??1LockImpl@AsyncTask@@QAE@XZ
??0LockImpl@AsyncTask@@QAE@XZ
??0AtExitManager@AsyncTask@@QAE@XZ
??0Thread@AsyncTask@@QAE@PBD@Z
??0MessageLoop@AsyncTask@@QAE@W4Type@01@@Z
??_7MessageLoopForUI@AsyncTask@@6B@
?StartWithOptions@Thread@AsyncTask@@QAE_NABUOptions@12@@Z
??1MessageLoop@AsyncTask@@UAE@XZ
??1Thread@AsyncTask@@UAE@XZ
??1AtExitManager@AsyncTask@@QAE@XZ
?Run@MessageLoopForUI@AsyncTask@@QAEXXZ
??1MessageLoopForUI@AsyncTask@@UAE@XZ
?RegisterCallback@AtExitManager@AsyncTask@@SAXP6AXPAX@Z0@Z
?Unlock@LockImpl@AsyncTask@@QAEXXZ
?Lock@LockImpl@AsyncTask@@QAEXXZ
ord6
ord11
ord5
ord7
ord10
ord8
DeleteFileW
CopyFileW
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
GetSystemDirectoryW
WritePrivateProfileStringW
CreateMutexW
SetEnvironmentVariableW
GetEnvironmentVariableW
CreateDirectoryW
GetVolumeInformationW
GetLongPathNameW
GetTempPathW
SetFileAttributesW
GetFileAttributesW
IsBadReadPtr
FindClose
FindFirstFileW
LocalFree
RemoveDirectoryW
FindNextFileW
GetPrivateProfileIntW
TerminateProcess
FreeLibrary
lstrlenA
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
InitializeCriticalSectionAndSpinCount
lstrlenW
WaitForSingleObject
ResumeThread
CloseHandle
GetLastError
GetCommandLineW
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetModuleHandleW
GetProcAddress
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetStartupInfoW
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetCurrentProcessId
MultiByteToWideChar
HeapSetInformation
WideCharToMultiByte
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SystemParametersInfoW
AllowSetForegroundWindow
SetForegroundWindow
SendMessageTimeoutW
PostMessageW
GetDesktopWindow
GetPropW
IsWindow
GetWindow
RemovePropW
SetActiveWindow
PostQuitMessage
LoadIconW
SetPropW
IsIconic
ShowWindow
IsWindowVisible
GetUserNameW
BuildExplicitAccessWithNameW
SetEntriesInAclW
SetNamedSecurityInfoW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
CommandLineToArgvW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteExW
CoTaskMemFree
OleUninitialize
OleInitialize
SysStringLen
SysFreeString
LoadTypeLi
LoadRegTypeLi
ord58
ord31
ord32
ord30
PathGetArgsW
wnsprintfW
PathAddBackslashW
PathFileExistsW
PathRemoveBackslashW
PathFindFileNameW
PathAppendW
PathFindExtensionW
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
_itoa_s
_wfopen_s
_wtol
fclose
_amsg_exit
fread
_controlfp_s
_invoke_watson
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
__wgetmainargs
_cexit
??3@YAXPAX@Z
memcmp
_CxxThrowException
free
??_V@YAXPAX@Z
_recalloc
_time64
??2@YAPAXI@Z
__CxxFrameHandler3
memcpy_s
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
strlen
memcpy
memmove
_purecall
_wtoi
calloc
??0exception@std@@QAE@ABV01@@Z
memset
_beginthreadex
wcslen
wcscpy_s
_waccess
wcsncpy
malloc
wcsncat
wcscmp
atoi
isalpha
isdigit
strchr
isspace
strncmp
_exit
InternetOpenUrlW
InternetOpenW
InternetGetConnectedState
InternetCrackUrlW
InternetCanonicalizeUrlW
InternetCloseHandle
HttpSendRequestW
HttpOpenRequestW
InternetConnectW
InternetReadFile
HttpQueryInfoW
RpcStringFreeA
UuidToStringA
UuidCreateSequential
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE