Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Static task
static1
Behavioral task
behavioral1
Sample
4256e842974f4c0921de33dfdd61e3f3_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4256e842974f4c0921de33dfdd61e3f3_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
4256e842974f4c0921de33dfdd61e3f3_JaffaCakes118
Size
253KB
MD5
4256e842974f4c0921de33dfdd61e3f3
SHA1
14e885a46124068349507aa3488e5afd2f9636e5
SHA256
b595f81133cf8d0ff190a57f8407de79612f3fa6be0dea5331f3d081bfedc407
SHA512
ac99912f35148adc95019496ec34274e63178d03cdaa36035a0a7c1571ed443d7384ca69efc79a9b1f9925ab3b7fd7060ecde6776e104ff51d77331ee23a651d
SSDEEP
6144:HNInBNWRXkj52+RHaF+68wikSlzMb/nsLl8OADtoUy/:HNYuRO52+RHaV8u2/
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
j:\code\QQ1.71_FinalRelease_4105\Basic_Hummer3_VOB\Hummer2010\Output\Plugin\Com.Tencent.WenWen\Bin\WenWen.pdb
?IsEmpty@CTXBSTR@@QAEHXZ
??0CTXStringW@@QAE@ABVCTXBSTR@@@Z
??0CTXBSTR@@QAE@XZ
?LoadStringW@TXStringBundle@@YAPB_WPB_W@Z
??H@YA?AVCTXStringW@@ABV0@PB_W@Z
??H@YA?AVCTXStringW@@ABV0@0@Z
??4CTXStringW@@QAEAAV0@PB_W@Z
??4CTXStringW@@QAEAAV0@ABVCTXBSTR@@@Z
??4CTXStringW@@QAEAAV0@ABV0@@Z
??8@YA_NABVCTXStringW@@PB_W@Z
??YCTXStringW@@QAEAAV0@PB_W@Z
?Replace@CTXStringW@@QAEHPB_W0@Z
?CreateTXArray@Data@Util@@YAHPAPAUITXArray@@@Z
?Length@CTXBSTR@@QBEIXZ
?GetLength@CTXStringW@@QBEHXZ
??YCTXBSTR@@QAEAAV0@ABV0@@Z
??YCTXBSTR@@QAEAAV0@PB_W@Z
??0CCmdCodecBase@@QAE@XZ
?QueryInterface@CCmdCodecBase@@MAGJABU_GUID@@PAPAX@Z
?AddRef@CCmdCodecBase@@MAGKXZ
?Release@CCmdCodecBase@@MAGKXZ
?CodeTXData@CCmdCodecBase@@UAGJPAUITXData@@PAPAUITXBuffer@@@Z
?DecodeBuffer@CCmdCodecBase@@UAGJPAUITXBuffer@@PAPAUITXData@@PAU3@@Z
??1CCmdCodecBase@@UAE@XZ
??1CTXCommPack@@UAE@XZ
??0CTXStringW@@QAE@ABV0@@Z
?Left@CTXStringW@@QBE?AV1@H@Z
??ICTXBSTR@@QAEPAPA_WXZ
?Mid@CTXStringW@@QBE?AV1@H@Z
?Find@CTXStringW@@QBEHPB_WH@Z
?GetString@CTXCommPack@@QAEHAAVCTXStringW@@HHH@Z
?GetByte@CTXCommPack@@QAEHAAEH@Z
?GetDWord@CTXCommPack@@QAEHAAKHH@Z
?GetWord@CTXCommPack@@QAEHAAGHH@Z
?SetBufferIn@CTXCommPack@@QAEXAAVCTXBuffer@@H@Z
??0CTXCommPack@@QAE@XZ
?EncodeUrl@Encode@Util@@YA?AVCTXStringW@@ABV3@_N1@Z
?GetRegulatedTime@Time@Util@@YA_NAA_J@Z
?Trim@CTXStringW@@QAEAAV1@XZ
??4CTXBSTR@@QAEAAV0@ABV0@@Z
??4CTXBSTR@@QAEAAV0@PB_W@Z
?GetDecodeNumberUnsigned@CCmdCodecBase@@IAEKPB_W@Z
?DecodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?DecodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?EnableUnicodeString@CCmdCodecBase@@IAEXH@Z
?CodeEndArray@CCmdCodecBase@@IAEXXZ
?CodeArrayNumber@CCmdCodecBase@@IAEXW4TX_DATA_TYPE@@@Z
?CodeArrayLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@H@Z
?CodeNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?DecodeEndArray@CCmdCodecBase@@IAEXXZ
?DecodeArrayTXDataNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?DecodeArrayLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@H@Z
?CodeArrayTXDataNumber@CCmdCodecBase@@IAEXPB_WW4TX_DATA_TYPE@@@Z
?DecodeArrayTXDataBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?CodeStringLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?DecodeBufferLenHead@CCmdCodecBase@@IAEXPB_WW4CMDFIELDTYPE@@@Z
?TXLog_DoTXLogVW@@YAXPAUtagLogObj@@PB_W1PAD@Z
??0CFmtString@@QAE@XZ
?PropertyDWord@CFmtString@@QAEHPB_WK0@Z
??BCTXStringW@@QBEPB_WXZ
?PropertyStr@CFmtString@@QAEHPB_W0@Z
?DoFormat@CFmtString@@QAEPB_WPB_W@Z
??0CTXStringW@@QAE@PB_W@Z
??1CFmtString@@QAE@XZ
?Format@CTXStringW@@QAAXPB_WZZ
??0CTXBSTR@@QAE@ABVCTXStringW@@@Z
?CreateTXData@Data@Util@@YAHPAPAUITXData@@@Z
?ConvertTXDataStringBundle@Convert@Util@@YAHPAUITXData@@@Z
??0CTXStringW@@QAE@XZ
??BCTXBSTR@@QBEPA_WXZ
?GetTXDataStr@Data@Util@@YAHPAUITXDataRead@@PB_WAAVCTXStringW@@@Z
??1CTXBSTR@@QAE@XZ
?GetBSTR@CTXStringW@@QBEPA_WXZ
??1CTXStringW@@QAE@XZ
ord34
??0CTXBSTR@@QAE@PB_W@Z
?CreateObject@GF@Util@@YAJABU_GUID@@0PAPAX@Z
?RawInitGFElementByXtml@GF@Util@@YAJPA_WPAUIGFElement@@10H@Z
?RawCreateGFElementByXtml@GF@Util@@YAJPA_WPAPAUIGFElement@@PAU3@0H@Z
?IsOnline@Contact@Util@@YAHK@Z
?IsBuddy@Contact@Util@@YAHK@Z
?IsStranger@Contact@Util@@YAHK@Z
?GetPublicName@Contact@Util@@YA?AVCTXStringW@@K@Z
?IsMaskFlagValid@Contact@Util@@YAJKEKAAH@Z
?IsVASFlagValid@Contact@Util@@YAHKE@Z
?CheckUinValid@Misc@Util@@YAHPA_W@Z
?Get32ByteValueAddedSign@Misc@Util@@YA?AVCTXStringW@@XZ
?GetSelfUin@Contact@Util@@YAKXZ
?IsVASFlagValidEx@Contact@Util@@YAKKEI@Z
?GetNickname@Contact@Util@@YA?AVCTXStringW@@K@Z
?AddReport@URL@Util@@YA?AVCTXStringW@@ABV3@0@Z
?CreateMsgPack@Msg@Util@@YAHPAPAUITXMsgPack@@@Z
?OpenUrlInIM@URL@Util@@YAXABVCTXStringW@@W4URLMODIFYLEVEL@12@0@Z
?IsTimeStampValid@TimeStamp@Misc@Util@@YAHKE@Z
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
SetThreadLocale
GetThreadLocale
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetLastError
lstrlenW
lstrcmpiW
GetModuleHandleW
GetModuleFileNameW
QueryPerformanceCounter
GetTickCount
LeaveCriticalSection
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentProcessId
GetSystemTimeAsFileTime
EnterCriticalSection
RaiseException
HeapAlloc
GetCurrentThreadId
HeapDestroy
CharNextW
UnregisterClassA
RegDeleteKeyW
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
SHGetFileInfoW
StringFromCLSID
CoTaskMemFree
CoCreateInstance
VarUI4FromStr
LoadTypeLi
LoadRegTypeLi
SysStringLen
SysFreeString
ord32
ord31
ord30
ord58
ord61
ord23
ord64
ord22
ord18
ord15
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
__clean_type_info_names_internal
_crt_debugger_hook
??3@YAXPAX@Z
_CxxThrowException
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
__CxxFrameHandler3
free
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
??2@YAPAXI@Z
??_V@YAXPAX@Z
_recalloc
memcpy_s
malloc
wcscpy_s
wcsncpy_s
memmove_s
_purecall
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_time64
wcsftime
_localtime64_s
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_except_handler4_common
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
memset
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ