___CPPdebugHook
Overview
overview
3Static
static
3暂时放�...in.dll
windows7-x64
3暂时放�...in.dll
windows10-2004-x64
3暂时放�...nu.vbs
windows7-x64
1暂时放�...nu.vbs
windows10-2004-x64
1暂时放�...td.vbs
windows7-x64
1暂时放�...td.vbs
windows10-2004-x64
1暂时放�...ar.vbs
windows7-x64
1暂时放�...ar.vbs
windows10-2004-x64
1暂时放�...ls.vbs
windows7-x64
1暂时放�...ls.vbs
windows10-2004-x64
1暂时放�...uo.vbs
windows7-x64
1暂时放�...uo.vbs
windows10-2004-x64
1暂时放�...in.vbs
windows7-x64
1暂时放�...in.vbs
windows10-2004-x64
1暂时放�...��.url
windows7-x64
1暂时放�...��.url
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
暂时放弃的漂亮基类/ButtonSkin.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
暂时放弃的漂亮基类/ButtonSkin.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
暂时放弃的漂亮基类/Com/com_menu.vbs
Resource
win7-20240319-en
Behavioral task
behavioral4
Sample
暂时放弃的漂亮基类/Com/com_menu.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
暂时放弃的漂亮基类/Com/com_std.vbs
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
暂时放弃的漂亮基类/Com/com_std.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
暂时放弃的漂亮基类/Com/com_toolbar.vbs
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
暂时放弃的漂亮基类/Com/com_toolbar.vbs
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
暂时放弃的漂亮基类/Com/com_tools.vbs
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
暂时放弃的漂亮基类/Com/com_tools.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
暂时放弃的漂亮基类/Com/com_uo.vbs
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
暂时放弃的漂亮基类/Com/com_uo.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
暂时放弃的漂亮基类/Com/com_win.vbs
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
暂时放弃的漂亮基类/Com/com_win.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
暂时放弃的漂亮基类/新云软件.url
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
暂时放弃的漂亮基类/新云软件.url
Resource
win10v2004-20240319-en
General
-
Target
ec695add54d750b60df086825f3788f1_JaffaCakes118
-
Size
304KB
-
MD5
ec695add54d750b60df086825f3788f1
-
SHA1
f5bf1b11e3a662faa367a116fc54be2d473738c8
-
SHA256
196ddcfad6a96a476d66afbf3532f73e94f2336f378027a026b53d21d48b485c
-
SHA512
b6457a58536aabdb42739e4c929270ceb8db89766b798cbc80427c5c2e29ece93931a330670463712240880b4de4b96b4064362c69009dc2141751fb397b7b54
-
SSDEEP
6144:1RVmkDMv8DEwXqIUglJjt6kMKYOxk/wqzGho/w8ky9thHL9olyh37gnBmaqv:JmkgUDE1MnXMZ9Y6N9th+QRsvs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/暂时放弃的漂亮基类/ButtonSkin.dll
Files
-
ec695add54d750b60df086825f3788f1_JaffaCakes118.rar
-
暂时放弃的漂亮基类/ButtonSkin.dll.dll windows:4 windows x86 arch:x86
a760606a533af4814ef9283c1ca3b322
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
Imports
kernel32
CloseHandle
CreateFileA
ExitProcess
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCurrentThreadId
GetEnvironmentStrings
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
LoadLibraryA
RaiseException
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WriteFile
user32
EnumThreadWindows
MessageBoxA
wsprintfA
Exports
Exports
Sections
.text Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
暂时放弃的漂亮基类/Com/com_fu.pbl
-
暂时放弃的漂亮基类/Com/com_menu.pbl.vbs
-
暂时放弃的漂亮基类/Com/com_std.pbl.vbs
-
暂时放弃的漂亮基类/Com/com_toolbar.pbl.vbs
-
暂时放弃的漂亮基类/Com/com_tools.pbl.vbs
-
暂时放弃的漂亮基类/Com/com_uo.pbl.vbs
-
暂时放弃的漂亮基类/Com/com_win.pbl.vbs
-
暂时放弃的漂亮基类/InterFace.ini
-
暂时放弃的漂亮基类/Rsc/9.bmp
-
暂时放弃的漂亮基类/Rsc_Com/Add.bmp
-
暂时放弃的漂亮基类/Rsc_Com/Bottom.jpg.jpg
-
暂时放弃的漂亮基类/Rsc_Com/BtnBack.bmp
-
暂时放弃的漂亮基类/Rsc_Com/BtnBack.jpg.jpg
-
暂时放弃的漂亮基类/Rsc_Com/CloseDown.bmp
-
暂时放弃的漂亮基类/Rsc_Com/CloseUp.bmp
-
暂时放弃的漂亮基类/Rsc_Com/Del.bmp
-
暂时放弃的漂亮基类/Rsc_Com/Filter.bmp
-
暂时放弃的漂亮基类/Rsc_Com/First.bmp
-
暂时放弃的漂亮基类/Rsc_Com/LT.jpg.jpg
-
暂时放弃的漂亮基类/Rsc_Com/Last.bmp
-
暂时放弃的漂亮基类/Rsc_Com/Left.jpg.jpg
-
暂时放弃的漂亮基类/Rsc_Com/MaxDown.bmp
-
暂时放弃的漂亮基类/Rsc_Com/MaxUp.bmp
-
暂时放弃的漂亮基类/Rsc_Com/MenuBtnBack.bmp
-
暂时放弃的漂亮基类/Rsc_Com/MenuBtnBack.psd
-
暂时放弃的漂亮基类/Rsc_Com/MenuDown.bmp
-
暂时放弃的漂亮基类/Rsc_Com/MenuItem.bmp
-
暂时放弃的漂亮基类/Rsc_Com/MenuItem.psd
-
暂时放弃的漂亮基类/Rsc_Com/MenuUp.bmp
-
暂时放弃的漂亮基类/Rsc_Com/MinDown.bmp
-
暂时放弃的漂亮基类/Rsc_Com/MinUp.bmp
-
暂时放弃的漂亮基类/Rsc_Com/Next.bmp
-
暂时放弃的漂亮基类/Rsc_Com/OutLookArrow.psd
-
暂时放弃的漂亮基类/Rsc_Com/OutLookArrowBack.bmp
-
暂时放弃的漂亮基类/Rsc_Com/OutLookArrowDown.bmp
-
暂时放弃的漂亮基类/Rsc_Com/OutLookArrowDownN.bmp
-
暂时放弃的漂亮基类/Rsc_Com/OutLookArrowUp.bmp
-
暂时放弃的漂亮基类/Rsc_Com/OutLookArrowUpN.bmp
-
暂时放弃的漂亮基类/Rsc_Com/OutLookBack.bmp
-
暂时放弃的漂亮基类/Rsc_Com/OutLookBack.psd
-
暂时放弃的漂亮基类/Rsc_Com/Print.bmp
-
暂时放弃的漂亮基类/Rsc_Com/Prior.bmp
-
暂时放弃的漂亮基类/Rsc_Com/RB.jpg.jpg
-
暂时放弃的漂亮基类/Rsc_Com/RT.jpg.jpg
-
暂时放弃的漂亮基类/Rsc_Com/Retrieve.bmp
-
暂时放弃的漂亮基类/Rsc_Com/Return.bmp
-
暂时放弃的漂亮基类/Rsc_Com/Right.jpg.jpg
-
暂时放弃的漂亮基类/Rsc_Com/Title.bmp
-
暂时放弃的漂亮基类/Rsc_Com/Title.psd
-
暂时放弃的漂亮基类/Rsc_Com/Title1.bmp
-
暂时放弃的漂亮基类/Rsc_Com/Title2.bmp
-
暂时放弃的漂亮基类/Rsc_Com/TitleC.bmp
-
暂时放弃的漂亮基类/Rsc_Com/TitleL.bmp
-
暂时放弃的漂亮基类/Rsc_Com/TitleNew.psd
-
暂时放弃的漂亮基类/Rsc_Com/TitleR.bmp
-
暂时放弃的漂亮基类/Rsc_Com/Top.jpg.jpg
-
暂时放弃的漂亮基类/Rsc_Com/WinBack.jpg.jpg
-
暂时放弃的漂亮基类/Rsc_Com/WinBack.psd
-
暂时放弃的漂亮基类/Rsc_Com/WinBackNoBorder.bmp
-
暂时放弃的漂亮基类/Rsc_Com/WinBackNoBorder.jpg.jpg
-
暂时放弃的漂亮基类/Rsc_Com/edit.bmp
-
暂时放弃的漂亮基类/Rsc_Com/lb.jpg.jpg
-
暂时放弃的漂亮基类/Rsc_Com/save.bmp
-
暂时放弃的漂亮基类/Rsc_Com/sort.bmp
-
暂时放弃的漂亮基类/Rsc_Com/toolbar.bmp
-
暂时放弃的漂亮基类/Rsc_Com/toolbar.psd
-
暂时放弃的漂亮基类/SqClassTestNew.pbw
-
暂时放弃的漂亮基类/classtestnew.pbl
-
暂时放弃的漂亮基类/classtestnew.pbt
-
暂时放弃的漂亮基类/下载说明.htm.html .js polyglot
-
暂时放弃的漂亮基类/新云软件.url.url