Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Overview
overview
3Static
static
3忆缘心�...in.vbs
windows7-x64
1忆缘心�...in.vbs
windows10-2004-x64
1忆缘心�...sp.vbs
windows7-x64
1忆缘心�...sp.vbs
windows10-2004-x64
1忆缘心�...in.vbs
windows7-x64
1忆缘心�...in.vbs
windows10-2004-x64
1忆缘心�...sp.vbs
windows7-x64
1忆缘心�...sp.vbs
windows10-2004-x64
1忆缘心�...rt.vbs
windows7-x64
1忆缘心�...rt.vbs
windows10-2004-x64
1忆缘心�...sp.vbs
windows7-x64
1忆缘心�...sp.vbs
windows10-2004-x64
1忆缘心�...k.html
windows7-x64
1忆缘心�...k.html
windows10-2004-x64
1忆缘心�...p.html
windows7-x64
1忆缘心�...p.html
windows10-2004-x64
1忆缘心�...ta.vbs
windows7-x64
1忆缘心�...ta.vbs
windows10-2004-x64
1忆缘心�...sp.vbs
windows7-x64
1忆缘心�...sp.vbs
windows10-2004-x64
1忆缘心�...db.asp
windows7-x64
3忆缘心�...db.asp
windows10-2004-x64
3忆缘心�...dj.vbs
windows7-x64
1忆缘心�...dj.vbs
windows10-2004-x64
1忆缘心�...wn.vbs
windows7-x64
1忆缘心�...wn.vbs
windows10-2004-x64
1忆缘心�...sp.vbs
windows7-x64
1忆缘心�...sp.vbs
windows10-2004-x64
1忆缘心�...it.vbs
windows7-x64
1忆缘心�...it.vbs
windows10-2004-x64
1忆缘心�...sp.vbs
windows7-x64
1忆缘心�...sp.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
忆缘心宿整站 v1.0/admin.vbs
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
忆缘心宿整站 v1.0/admin.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
忆缘心宿整站 v1.0/admin.asp.vbs
Resource
win7-20240215-en
Behavioral task
behavioral4
Sample
忆缘心宿整站 v1.0/admin.asp.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
忆缘心宿整站 v1.0/admin_admin.vbs
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
忆缘心宿整站 v1.0/admin_admin.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
忆缘心宿整站 v1.0/admin_admin.asp.vbs
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
忆缘心宿整站 v1.0/admin_admin.asp.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral9
Sample
忆缘心宿整站 v1.0/admin_art.vbs
Resource
win7-20240215-en
Behavioral task
behavioral10
Sample
忆缘心宿整站 v1.0/admin_art.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral11
Sample
忆缘心宿整站 v1.0/admin_art.asp.vbs
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
忆缘心宿整站 v1.0/admin_art.asp.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral13
Sample
忆缘心宿整站 v1.0/admin_check.html
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
忆缘心宿整站 v1.0/admin_check.html
Resource
win10v2004-20240412-en
Behavioral task
behavioral15
Sample
忆缘心宿整站 v1.0/admin_check.asp.html
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
忆缘心宿整站 v1.0/admin_check.asp.html
Resource
win10v2004-20240412-en
Behavioral task
behavioral17
Sample
忆缘心宿整站 v1.0/admin_data.vbs
Resource
win7-20231129-en
Behavioral task
behavioral18
Sample
忆缘心宿整站 v1.0/admin_data.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral19
Sample
忆缘心宿整站 v1.0/admin_data.asp.vbs
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
忆缘心宿整站 v1.0/admin_data.asp.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral21
Sample
忆缘心宿整站 v1.0/admin_db.asp
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
忆缘心宿整站 v1.0/admin_db.asp
Resource
win10v2004-20240412-en
Behavioral task
behavioral23
Sample
忆缘心宿整站 v1.0/admin_dj.vbs
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
忆缘心宿整站 v1.0/admin_dj.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral25
Sample
忆缘心宿整站 v1.0/admin_down.vbs
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
忆缘心宿整站 v1.0/admin_down.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
忆缘心宿整站 v1.0/admin_down.asp.vbs
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
忆缘心宿整站 v1.0/admin_down.asp.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral29
Sample
忆缘心宿整站 v1.0/admin_edit.vbs
Resource
win7-20231129-en
Behavioral task
behavioral30
Sample
忆缘心宿整站 v1.0/admin_edit.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral31
Sample
忆缘心宿整站 v1.0/admin_edit.asp.vbs
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
忆缘心宿整站 v1.0/admin_edit.asp.vbs
Resource
win10v2004-20240412-en
Target
fe1b6041ed6fc633df40d24993074011_JaffaCakes118
Size
15.0MB
MD5
fe1b6041ed6fc633df40d24993074011
SHA1
204fb4f644d574670d82bfbdbf7b3a9b9ced0af6
SHA256
a83d60ebf3b4452b2aecf0197b898ba550c78148d0051004fab7619cba6d03b9
SHA512
0dce57b25c98b41c33fceb811a0a113f2ea98aba469dc302bdc99ffd48203165b517ee6102a9245be64ed36bd7eefdaf0dd5b8744a559d12f828a3f956dc0ddf
SSDEEP
393216:TWnEIKRATq+eWjN65DqaXMuEKZQohtv8FZzE+BSlm:TGEpDwNqD3MuEKZHhtkFZLam
Checks for missing Authenticode signature.
resource |
---|
unpack002/mumayiguanji/木蚂蚁一秒关机.exe |
unpack002/mumayiguanji/木蚂蚁快速重启动.exe |
unpack003/qqkjsrq/空间人气精灵/fz.exe |
unpack003/qqkjsrq/空间人气精灵/查询.exe |
unpack003/qqkjsrq/空间人气精灵/空间人气精灵 V2.2.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_CIcos
_adj_fptan
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
_adj_fdiv_m32
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
DllFunctionCall
_adj_fpatan
_CIsqrt
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
_allmul
_CItan
_CIexp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_CIcos
_adj_fptan
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
_adj_fdiv_m32
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
DllFunctionCall
_adj_fpatan
_CIsqrt
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
_adj_fdivr_m32
_adj_fdiv_r
ord100
_CIatan
_allmul
_CItan
_CIexp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
FtpSetCurrentDirectoryA
FtpCreateDirectoryA
InternetCrackUrlA
InternetSetOptionA
InternetCreateUrlA
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetCloseHandle
InternetFindNextFileA
FtpDeleteFileA
FtpGetFileA
FtpPutFileA
FtpRenameFileA
InternetReadFile
InternetConnectA
FtpGetCurrentDirectoryA
FtpRemoveDirectoryA
FtpFindFirstFileA
HttpQueryInfoA
HttpOpenRequestA
HttpSendRequestA
InternetOpenUrlA
LeaveCriticalSection
DeleteCriticalSection
FreeLibrary
HeapFree
WideCharToMultiByte
lstrlenW
HeapAlloc
InitializeCriticalSection
EnterCriticalSection
GetProcessHeap
CloseHandle
LocalFree
FormatMessageA
SetEvent
CreateEventA
GetLastError
MultiByteToWideChar
lstrcatA
lstrcpyA
lstrlenA
ResetEvent
SetLastError
lstrcpynA
WaitForSingleObject
WaitForMultipleObjects
GetTickCount
IsBadWritePtr
DisableThreadLibraryCalls
GetVersion
GetProcAddress
GetFileAttributesA
GetModuleFileNameA
GetWindowsDirectoryA
LoadLibraryA
GetLocaleInfoA
InterlockedIncrement
InterlockedDecrement
HeapReAlloc
lstrcmpiA
LockResource
LoadResource
FindResourceA
lstrcmpA
SetDlgItemInt
SendDlgItemMessageA
GetMessageA
PostQuitMessage
GetDlgItemInt
GetDlgItemTextA
SendMessageA
ReleaseDC
GetDC
CharNextA
SetDlgItemTextA
SetWindowPos
SetWindowLongA
SetParent
EndPaint
GetClientRect
BeginPaint
GetWindowLongA
SetFocus
GetDlgItem
MoveWindow
GetWindow
GetActiveWindow
IsWindowVisible
TranslateMessage
GetParent
OffsetRect
EqualRect
DispatchMessageA
GetWindowThreadProcessId
ShowWindow
PtInRect
WinHelpA
IsDialogMessageA
GetNextDlgTabItem
IsWindowEnabled
IsChild
GetKeyState
CreateDialogIndirectParamA
MessageBoxA
MessageBeep
SetTimer
PeekMessageA
MsgWaitForMultipleObjects
PostMessageA
ClientToScreen
GetWindowRect
CreateWindowExA
EndDialog
LoadIconA
DrawEdge
DrawIcon
LoadCursorA
RegisterClassA
DestroyIcon
KillTimer
DestroyWindow
GetSystemMetrics
LoadStringA
wsprintfA
DialogBoxParamA
IntersectRect
SetWindowRgn
DefWindowProcA
PostThreadMessageA
UnregisterClassA
CoUninitialize
CoTaskMemAlloc
CoInitialize
CoTaskMemFree
CoCreateInstance
CreateOleAdviseHolder
RegEnumKeyExA
RegQueryValueExA
RegQueryValueA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
OleCreatePropertyFrame
RegisterTypeLi
LoadTypeLi
UnRegisterTypeLi
LoadTypeLibEx
SafeArrayCreate
SetErrorInfo
CreateErrorInfo
GetErrorInfo
LoadRegTypeLi
SysStringLen
SysAllocStringLen
SysFreeString
VariantInit
VariantClear
VariantChangeType
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetDim
SafeArrayRedim
SafeArrayDestroy
VariantChangeTypeEx
SysAllocString
GetWindowExtEx
SetViewportOrgEx
LPtoDP
DeleteDC
SetWindowExtEx
SetMapMode
SetViewportExtEx
GetViewportExtEx
SetWindowOrgEx
CreateDCA
GetDeviceCaps
CreateRectRgnIndirect
DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
accept
listen
inet_ntoa
recv
WSAGetLastError
WSASetLastError
select
__WSAFDIsSet
shutdown
ntohs
sendto
recvfrom
connect
getsockopt
setsockopt
getsockname
getpeername
closesocket
WSACancelAsyncRequest
gethostbyaddr
bind
WSAAsyncSelect
socket
WSAStartup
WSACleanup
inet_addr
WSAAsyncGetHostByName
WSAAsyncGetHostByAddr
gethostbyname
htons
gethostname
ioctlsocket
send
WideCharToMultiByte
GetVersion
GetProcAddress
GetModuleFileNameA
InitializeCriticalSection
HeapFree
HeapAlloc
GetProcessHeap
lstrcpynA
lstrcpyA
lstrlenA
lstrcatA
IsBadWritePtr
DisableThreadLibraryCalls
lstrlenW
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
LocalFree
FormatMessageA
GetTickCount
MultiByteToWideChar
SetLastError
GetLocaleInfoA
DeleteCriticalSection
FreeLibrary
lstrcmpA
InterlockedDecrement
GetFileAttributesA
GetWindowsDirectoryA
LoadLibraryA
GetLastError
InterlockedIncrement
lstrcmpiA
FindResourceA
LockResource
LoadResource
HeapReAlloc
EndDialog
DrawEdge
DialogBoxParamA
LoadCursorA
MessageBoxA
GetActiveWindow
GetDC
CharNextA
ReleaseDC
SetParent
GetWindowRect
ShowWindow
WinHelpA
IsDialogMessageA
GetWindow
GetNextDlgTabItem
IsWindowEnabled
GetDlgItem
IsChild
GetKeyState
SetWindowPos
LoadBitmapA
IsWindowVisible
EndPaint
GetClientRect
BeginPaint
GetSystemMetrics
GetDlgItemTextA
ClientToScreen
OffsetRect
EqualRect
IntersectRect
SetWindowRgn
PtInRect
MessageBeep
LoadStringA
IsWindow
CreateDialogIndirectParamA
GetParent
SetDlgItemTextA
SendMessageA
DefWindowProcA
GetWindowLongA
DestroyWindow
SetWindowLongA
KillTimer
SetTimer
UnregisterClassA
RegisterClassA
PeekMessageA
PostMessageA
SendDlgItemMessageA
GetDlgItemInt
SetDlgItemInt
SetFocus
MoveWindow
CreateWindowExA
wsprintfA
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CreateOleAdviseHolder
RegDeleteValueA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
VariantChangeType
SysAllocStringLen
SysAllocString
SafeArrayRedim
SysStringLen
RegisterTypeLi
LoadTypeLi
UnRegisterTypeLi
LoadTypeLibEx
OleCreatePropertyFrame
LoadRegTypeLi
SetErrorInfo
SysFreeString
CreateErrorInfo
GetErrorInfo
SafeArrayUnaccessData
SafeArrayDestroy
VariantClear
SysAllocStringByteLen
SafeArrayCreate
SysStringByteLen
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
VariantInit
SafeArrayAccessData
SafeArrayGetDim
GetDeviceCaps
CreateCompatibleDC
CreateRectRgnIndirect
GetWindowExtEx
GetViewportExtEx
DeleteDC
DeleteObject
GetObjectA
LPtoDP
SetMapMode
SetViewportExtEx
SetWindowExtEx
SetViewportOrgEx
SetWindowOrgEx
CreateDCA
BitBlt
SelectObject
DLLGetDocumentation
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE