addnumber
calchmac
getMD5File
getMD5String
gethmac
Overview
overview
4Static
static
3键盘网�...is.vbs
windows7-x64
1键盘网�...is.vbs
windows10-2004-x64
1键盘网�...��.doc
windows7-x64
4键盘网�...��.doc
windows10-2004-x64
1键盘网�...nk.asp
windows7-x64
3键盘网�...nk.asp
windows10-2004-x64
3键盘网�...ck.vbs
windows7-x64
1键盘网�...ck.vbs
windows10-2004-x64
1键盘网�...nn.vbs
windows7-x64
1键盘网�...nn.vbs
windows10-2004-x64
1键盘网�...ta.asp
windows7-x64
3键盘网�...ta.asp
windows10-2004-x64
3键盘网�...22.asp
windows7-x64
3键盘网�...22.asp
windows10-2004-x64
3键盘网�...TO.vbs
windows7-x64
1键盘网�...TO.vbs
windows10-2004-x64
1键盘网�...45.asp
windows7-x64
3键盘网�...45.asp
windows10-2004-x64
3键盘网�...ve.vbs
windows7-x64
1键盘网�...ve.vbs
windows10-2004-x64
1键盘网�...AP.asp
windows7-x64
3键盘网�...AP.asp
windows10-2004-x64
3键盘网�...fy.vbs
windows7-x64
1键盘网�...fy.vbs
windows10-2004-x64
1键盘网�...bb.htm
windows7-x64
1键盘网�...bb.htm
windows10-2004-x64
1键盘网�...ex.htm
windows7-x64
1键盘网�...ex.htm
windows10-2004-x64
1键盘网�...n1.htm
windows7-x64
1键盘网�...n1.htm
windows10-2004-x64
1键盘网�...n2.htm
windows7-x64
1键盘网�...n2.htm
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/3721whois.vbs
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/3721whois.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/56DNS代理价.doc
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/56DNS代理价.doc
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/56dnslink.asp
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/56dnslink.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/Check.vbs
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/Check.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/Conn.vbs
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/Conn.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/Databackup/Data.asp
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/Databackup/Data.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/Databackup/Data2004722.asp
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/Databackup/Data2004722.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/Images/admin/ADD_HOSTO.vbs
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/Images/admin/ADD_HOSTO.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral17
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/Images/admin/Dm45.asp
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/Images/admin/Dm45.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/Images/basket1save.vbs
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/Images/basket1save.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/MAP.asp
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/MAP.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/MyModify.vbs
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/MyModify.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/Ubb.htm
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/Ubb.htm
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/ZP-domain/dns2/index.htm
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/ZP-domain/dns2/index.htm
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/ZP-domain/domain1.htm
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/ZP-domain/domain1.htm
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/ZP-domain/domain2.htm
Resource
win7-20240705-en
Behavioral task
behavioral32
Sample
键盘网络虚拟主机 v3.0 正式版/htdocs1/ZP-domain/domain2.htm
Resource
win10v2004-20240709-en
Target
5b5eec6e4bf7e633ec8acc939d12326e_JaffaCakes118
Size
11.5MB
MD5
5b5eec6e4bf7e633ec8acc939d12326e
SHA1
9d2826664e7efffca7db11868850b536b417617c
SHA256
b398bc7e55246bd153ab9a6f1b4b05299e49a5fa719d4b9ee4e2ec50bc167b3d
SHA512
2093889c4145ddc57e040d6f8786555519b9f348548f9eb6af6551c07f5ab1e9277fc2800d13adb24271d1a3d40c500005e55b5674b9ebff26ac9b670762d580
SSDEEP
196608:rUEss8GL5p9Nm9JhwcNR1Huj1a/dzY70K2RoG7jm8GT9wH+ZnWbpFZniHYmOVP:rPr7vy71v1ZhDeDH8LFi4me
Checks for missing Authenticode signature.
resource |
---|
unpack003/bbs-1/add-on/LB Modify For 51.exe |
unpack004/LB5000code v2.2/lb5000code.exe |
unpack001/键盘网络虚拟主机 v3.0 正式版/htdocs1/bbs-1/add-on/LB Modify For 51.exe |
unpack006/LB5000code v2.2/lb5000code.exe |
unpack001/键盘网络虚拟主机 v3.0 正式版/htdocs1/md5.dll |
unpack001/键盘网络虚拟主机 v3.0 正式版/htdocs1/md5_VB.dll |
unpack008/neww/crack.exe |
unpack008/neww/pop2004-121.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
__vbaVarSub
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaVarForInit
ord595
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
ord709
ord632
__vbaChkstk
__vbaFileClose
ord526
EVENT_SINK_AddRef
__vbaStrCmp
__vbaVarTstEq
DllFunctionCall
_adj_fpatan
ord567
__vbaR4Var
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
__vbaPrintFile
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
ord717
__vbaStrVarVal
__vbaVarCat
__vbaI2Var
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
ord570
__vbaInStr
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaVarDup
__vbaStrToAnsi
ord617
_CIatan
__vbaStrMove
ord619
_allmul
__vbaLateIdSt
_CItan
__vbaVarForNext
_CIexp
__vbaFreeObj
__vbaFreeStr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
__vbaVarSub
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
__vbaEnd
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaVarForInit
ord595
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
ord709
ord632
__vbaChkstk
__vbaFileClose
ord526
EVENT_SINK_AddRef
__vbaStrCmp
__vbaVarTstEq
DllFunctionCall
_adj_fpatan
ord567
__vbaR4Var
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
__vbaPrintFile
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
ord717
__vbaStrVarVal
__vbaVarCat
__vbaI2Var
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaNew2
ord570
__vbaInStr
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaVarDup
__vbaStrToAnsi
ord617
_CIatan
__vbaStrMove
ord619
_allmul
__vbaLateIdSt
_CItan
__vbaVarForNext
_CIexp
__vbaFreeObj
__vbaFreeStr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SysAllocStringLen
SetFilePointer
InterlockedDecrement
GetCommandLineA
GetVersion
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetLastError
CloseHandle
ReadFile
InitializeCriticalSection
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetEndOfFile
MultiByteToWideChar
InterlockedIncrement
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RtlUnwind
addnumber
calchmac
getMD5File
getMD5String
gethmac
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_CIcos
_adj_fptan
__vbaFreeVar
__vbaStrVarMove
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
_adj_fdiv_m32
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
ord526
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFPException
_CIlog
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord101
ord102
ord103
ord104
ord105
__vbaStrToAnsi
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
VirtualFree
VirtualAlloc
GetVersionExA
LoadLibraryA
GetProcAddress
ExitProcess
@@Make@Finalize
@@Make@Initialize
@@Unit1@Finalize
@@Unit1@Initialize
_Form_Make
_Reg_Form
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
VirtualFree
VirtualAlloc
GetVersionExA
LoadLibraryA
GetProcAddress
ExitProcess
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE