DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Overview
overview
3Static
static
3紫儿聊�...DD.vbs
windows7-x64
1紫儿聊�...DD.vbs
windows10-2004-x64
1紫儿聊�...EL.vbs
windows7-x64
1紫儿聊�...EL.vbs
windows10-2004-x64
1紫儿聊�...ON.vbs
windows7-x64
1紫儿聊�...ON.vbs
windows10-2004-x64
1紫儿聊�...OD.vbs
windows7-x64
1紫儿聊�...OD.vbs
windows10-2004-x64
1紫儿聊�...CT.vbs
windows7-x64
1紫儿聊�...CT.vbs
windows10-2004-x64
1紫儿聊�...CT.vbs
windows7-x64
1紫儿聊�...CT.vbs
windows10-2004-x64
1紫儿聊�...OD.vbs
windows7-x64
1紫儿聊�...OD.vbs
windows10-2004-x64
1紫儿聊�...AT.vbs
windows7-x64
1紫儿聊�...AT.vbs
windows10-2004-x64
1紫儿聊�...T.html
windows7-x64
1紫儿聊�...T.html
windows10-2004-x64
1紫儿聊�...OOR.js
windows7-x64
3紫儿聊�...OOR.js
windows10-2004-x64
3紫儿聊�...OR.htm
windows7-x64
1紫儿聊�...OR.htm
windows10-2004-x64
1紫儿聊�...CK.vbs
windows7-x64
1紫儿聊�...CK.vbs
windows10-2004-x64
1紫儿聊�...HF.vbs
windows7-x64
1紫儿聊�...HF.vbs
windows10-2004-x64
1紫儿聊�...ZT.vbs
windows7-x64
1紫儿聊�...ZT.vbs
windows10-2004-x64
1紫儿聊�...SE.vbs
windows7-x64
1紫儿聊�...SE.vbs
windows10-2004-x64
1紫儿聊�...IP.vbs
windows7-x64
1紫儿聊�...IP.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
紫儿聊天水吧/ACTADD.vbs
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
紫儿聊天水吧/ACTADD.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
紫儿聊天水吧/ACTDEL.vbs
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
紫儿聊天水吧/ACTDEL.vbs
Resource
win10v2004-20240708-en
Behavioral task
behavioral5
Sample
紫儿聊天水吧/ACTION.vbs
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
紫儿聊天水吧/ACTION.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
紫儿聊天水吧/ACTMOD.vbs
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
紫儿聊天水吧/ACTMOD.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral9
Sample
紫儿聊天水吧/ALLACT.vbs
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
紫儿聊天水吧/ALLACT.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral11
Sample
紫儿聊天水吧/AUTOACT.vbs
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
紫儿聊天水吧/AUTOACT.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral13
Sample
紫儿聊天水吧/AUTOMOD.vbs
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
紫儿聊天水吧/AUTOMOD.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral15
Sample
紫儿聊天水吧/CHAT.vbs
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
紫儿聊天水吧/CHAT.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral17
Sample
紫儿聊天水吧/CHAT.html
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
紫儿聊天水吧/CHAT.html
Resource
win10v2004-20240704-en
Behavioral task
behavioral19
Sample
紫儿聊天水吧/CHATDOOR.js
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
紫儿聊天水吧/CHATDOOR.js
Resource
win10v2004-20240704-en
Behavioral task
behavioral21
Sample
紫儿聊天水吧/CHATDOOR.htm
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
紫儿聊天水吧/CHATDOOR.htm
Resource
win10v2004-20240704-en
Behavioral task
behavioral23
Sample
紫儿聊天水吧/CHECK.vbs
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
紫儿聊天水吧/CHECK.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral25
Sample
紫儿聊天水吧/CHHF.vbs
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
紫儿聊天水吧/CHHF.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral27
Sample
紫儿聊天水吧/CHZT.vbs
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
紫儿聊天水吧/CHZT.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral29
Sample
紫儿聊天水吧/CLOSE.vbs
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
紫儿聊天水吧/CLOSE.vbs
Resource
win10v2004-20240708-en
Behavioral task
behavioral31
Sample
紫儿聊天水吧/COUNTIP.vbs
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
紫儿聊天水吧/COUNTIP.vbs
Resource
win10v2004-20240704-en
Target
2dc099e6510e3279dac91bd7d8f5b08b_JaffaCakes118
Size
16.3MB
MD5
2dc099e6510e3279dac91bd7d8f5b08b
SHA1
c320303b1cfd83a380d89b2b73d97ddddbf38bf3
SHA256
68bca5acb19908ac62da31ee1238ffa46a3a1fb60db14fb75be456cedcc00314
SHA512
ad1cc3596b1ca0db7460136742046e18a38ba691862744713a0b1702f8efda0f04518c0b875aed804c0d4d8bc73a23f339148e96cdc084bccf78ca9b6e2104a3
SSDEEP
393216:Hby0llOtLId9IS63h9oPmXbGw01pIOMI/:HGqloL6Kh/r5G/
Checks for missing Authenticode signature.
resource |
---|
unpack001/紫儿聊天水吧/dll专用文件/ffcschat31.dll |
unpack001/紫儿聊天水吧/game/flash/flashpla.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
__vbaVarSub
__vbaVarTstGt
__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaVarVargNofree
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaAptOffset
__vbaFreeVarList
__vbaVarIdiv
_adj_fdiv_m64
__vbaVarIndexStore
__vbaFreeObjList
ord516
__vbaStrErrVarCopy
_adj_fprem1
ord518
__vbaStrCat
__vbaVarCmpNe
ord553
__vbaHresultCheckObj
ord662
ord556
ord557
ord558
__vbaLenVar
_adj_fdiv_m32
__vbaVarTstLe
__vbaVarCmpGe
__vbaAryDestruct
__vbaVarIndexLoadRefLock
ord592
__vbaVarForInit
ord593
ord594
ord301
__vbaObjSet
_adj_fdiv_m16i
ord303
_adj_fdivr_m16i
__vbaVarIndexLoad
ord520
ord307
ord309
__vbaBoolVarNull
__vbaRefVarAry
__vbaVargVar
__vbaVarTstLt
_CIsin
__vbaErase
__vbaVarCmpGt
__vbaVargVarMove
ord632
__vbaChkstk
EVENT_SINK_AddRef
__vbaStrCmp
__vbaVarTstEq
__vbaDateR8
__vbaI2I4
ord561
__vbaObjVar
__vbaVarOr
_adj_fpatan
__vbaLateIdCallLd
__vbaRedim
EVENT_SINK_Release
ord601
_CIsqrt
__vbaVarAnd
__vbaRedimVar
EVENT_SINK_QueryInterface
ord710
__vbaVarMul
__vbaExceptHandler
ord711
ord712
_adj_fprem
_adj_fdivr_m64
__vbaVarDiv
ord608
__vbaFPException
__vbaInStrVar
__vbaStrVarVal
__vbaUbound
__vbaVarCat
__vbaDateVar
__vbaI2Var
_CIlog
__vbaErrorOverflow
__vbaNew2
__vbaInStr
__vbaR8Str
__vbaVarInt
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaVarSetObj
__vbaI4Str
__vbaFreeStrList
__vbaVarCmpLt
__vbaVarNot
_adj_fdivr_m32
_adj_fdiv_r
__vbaVarTstNe
ord101
ord102
__vbaI4Var
ord103
__vbaVarCmpEq
ord104
ord610
ord105
__vbaVarAdd
__vbaLateMemCall
__vbaVarDup
ord612
__vbaFreeVarg
__vbaVarMod
__vbaVarCopy
__vbaVarTstGe
__vbaVarLateMemCallLd
ord617
__vbaVarSetObjAddref
_CIatan
__vbaStrMove
__vbaI2ErrVar
__vbaCastObj
ord619
__vbaR8IntI4
ord542
__vbaVarNeg
ord543
_allmul
ord544
ord545
_CItan
ord546
__vbaAryUnlock
ord547
__vbaFPInt
__vbaVarForNext
_CIexp
__vbaI4ErrVar
__vbaFreeObj
__vbaFreeStr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetModuleFileNameA
SetErrorMode
LoadLibraryA
GetACP
IsDBCSLeadByte
GetCPInfo
Sleep
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
CreateProcessA
WaitForMultipleObjects
CreateThread
GetLastError
ExitThread
WinExec
CopyFileA
WriteFile
SetEndOfFile
DeleteFileA
GetVersionExA
CreateFileA
GetFileSize
SetFilePointer
ReadFile
CloseHandle
GetStartupInfoA
GetCommandLineA
GlobalUnlock
GlobalLock
lstrlenA
GetModuleHandleA
ExitProcess
GetProcAddress
GlobalAlloc
QueryPerformanceCounter
GlobalFree
ClientToScreen
DeleteMenu
LoadMenuA
ScreenToClient
TrackPopupMenu
WindowFromPoint
GetCursorPos
FillRect
SetTimer
KillTimer
SetCapture
ReleaseCapture
SetCursor
EndPaint
BeginPaint
MessageBoxA
PostMessageA
GetDlgItem
GetWindowTextLengthA
GetDlgItemTextA
EnableWindow
GetWindowLongA
GetClientRect
CheckMenuItem
DestroyMenu
SetMenu
InvalidateRect
MoveWindow
DialogBoxParamA
EndDialog
GetSubMenu
EnableMenuItem
DefWindowProcA
DestroyWindow
PostQuitMessage
LoadStringA
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
GetWindow
GetWindowRect
SetWindowPos
GetKeyState
GetClipboardData
GetMenu
SetWindowLongA
GetDesktopWindow
OpenClipboard
SetClipboardData
CloseClipboard
GetDC
ReleaseDC
SetFocus
SetDlgItemTextA
GetCapture
CreatePalette
SetTextAlign
SetDIBitsToDevice
GdiFlush
StretchDIBits
DeleteObject
CreateCompatibleBitmap
DeleteDC
CreateDIBSection
GetDeviceCaps
CreateCompatibleDC
BitBlt
EnumFontFamiliesA
LineTo
MoveToEx
SetBkColor
GetBkColor
SetBkMode
GetBkMode
ExtTextOutA
GetTextExtentPoint32A
CreatePen
Rectangle
GetStockObject
CreateSolidBrush
SetTextColor
GetTextMetricsA
CreateFontIndirectA
RealizePalette
SelectPalette
GetClipBox
SaveDC
SelectObject
RestoreDC
GetSystemPaletteEntries
IntersectClipRect
GetSaveFileNameA
GetOpenFileNameA
RegQueryValueA
RegOpenKeyExA
RegCreateKeyA
RegSetValueExA
RegSetValueA
RegCloseKey
RegQueryValueExA
DragAcceptFiles
DragQueryFileA
waveOutPrepareHeader
waveOutUnprepareHeader
timeKillEvent
timeEndPeriod
timeGetTime
timeBeginPeriod
timeGetDevCaps
waveOutWrite
waveOutReset
timeSetEvent
waveOutOpen
waveOutGetDevCapsA
waveOutClose
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ