DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Overview
overview
3Static
static
3AdPlan/SK_SsendAd.vbs
windows7-x64
1AdPlan/SK_SsendAd.vbs
windows10-2004-x64
1AdPlan/新...��.url
windows7-x64
1AdPlan/新...��.url
windows10-2004-x64
1Client/SK_...nt.vbs
windows7-x64
1Client/SK_...nt.vbs
windows10-2004-x64
1Client/SK_...an.vbs
windows7-x64
1Client/SK_...an.vbs
windows10-2004-x64
1Client/SK_...it.vbs
windows7-x64
1Client/SK_...it.vbs
windows10-2004-x64
1Client/SK_...nt.vbs
windows7-x64
1Client/SK_...nt.vbs
windows10-2004-x64
1Client/SK_...nt.vbs
windows7-x64
1Client/SK_...nt.vbs
windows10-2004-x64
1Client/SK_...an.vbs
windows7-x64
1Client/SK_...an.vbs
windows10-2004-x64
1Client/SK_...it.vbs
windows7-x64
1Client/SK_...it.vbs
windows10-2004-x64
1Client/SK_...nt.vbs
windows7-x64
1Client/SK_...nt.vbs
windows10-2004-x64
1Client/SK_...an.vbs
windows7-x64
1Client/SK_...an.vbs
windows10-2004-x64
1Client/SK_...nt.vbs
windows7-x64
1Client/SK_...nt.vbs
windows10-2004-x64
1Client/SK_...an.vbs
windows7-x64
1Client/SK_...an.vbs
windows10-2004-x64
1Client/SK_MyVisit.vbs
windows7-x64
1Client/SK_MyVisit.vbs
windows10-2004-x64
1Client/SK_...nt.vbs
windows7-x64
1Client/SK_...nt.vbs
windows10-2004-x64
1Client/SK_...an.vbs
windows7-x64
1Client/SK_...an.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
AdPlan/SK_SsendAd.vbs
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
AdPlan/SK_SsendAd.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
AdPlan/新云软件.url
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
AdPlan/新云软件.url
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
Client/SK_AddClient.vbs
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
Client/SK_AddClient.vbs
Resource
win10v2004-20240729-en
Behavioral task
behavioral7
Sample
Client/SK_AddLinkman.vbs
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
Client/SK_AddLinkman.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
Client/SK_AddVisit.vbs
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
Client/SK_AddVisit.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
Client/SK_AjaxClient.vbs
Resource
win7-20240729-en
Behavioral task
behavioral12
Sample
Client/SK_AjaxClient.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
Client/SK_ModClient.vbs
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
Client/SK_ModClient.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral15
Sample
Client/SK_ModLinkman.vbs
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
Client/SK_ModLinkman.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
Client/SK_ModVisit.vbs
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
Client/SK_ModVisit.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
Client/SK_MyClient.vbs
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
Client/SK_MyClient.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
Client/SK_MyLinkman.vbs
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
Client/SK_MyLinkman.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
Client/SK_MyRecClient.vbs
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
Client/SK_MyRecClient.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
Client/SK_MyRecLinkman.vbs
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
Client/SK_MyRecLinkman.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral27
Sample
Client/SK_MyVisit.vbs
Resource
win7-20240729-en
Behavioral task
behavioral28
Sample
Client/SK_MyVisit.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
Client/SK_ReadClient.vbs
Resource
win7-20240729-en
Behavioral task
behavioral30
Sample
Client/SK_ReadClient.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
Client/SK_ReadLinkman.vbs
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
Client/SK_ReadLinkman.vbs
Resource
win10v2004-20240709-en
Target
776ff528468df3e9e61f0356c1585e61_JaffaCakes118
Size
823KB
MD5
776ff528468df3e9e61f0356c1585e61
SHA1
985954504cce773526bddb698e66dd6f25570438
SHA256
5a43afc768d9bb61da9a253b9f2ac7d50205bcd01138cad60f6327dddeae623a
SHA512
55515af8729fcea345beffae96295d9d6ca11e50170c46e7553b8b16de9b976ccf90ad77e25573027f988148afcf0d1a12ec654d82ad35010ce73c78c73256cf
SSDEEP
12288:vf7iaeDPbLuY54B/CmuX6hZEwdsZrFm+d/hbL6eF9hIsu2Yc4A128vutXce1/Bc2:vHeDT54gm/hZog+d/hH9X+jG4MpqDGqN
Checks for missing Authenticode signature.
resource |
---|
unpack001/系统组件/HaoErp2010.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
__vbaVarTstGt
__vbaVarSub
_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
__vbaVarVargNofree
__vbaFreeVar
__vbaLenBstr
__vbaAptOffset
ord696
__vbaVarIdiv
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
ord516
__vbaVarIndexLoadRef
__vbaStrErrVarCopy
_adj_fprem1
ord518
__vbaI2Abs
__vbaVarCmpNe
__vbaStrCat
ord553
ord661
ord662
__vbaHresultCheckObj
ord556
ord557
__vbaVargVarCopy
__vbaLenVar
_adj_fdiv_m32
__vbaVarTstLe
__vbaVarCmpGe
__vbaAryDestruct
__vbaVarIndexLoadRefLock
__vbaVarForInit
ord593
ord594
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord304
__vbaVarIndexLoad
ord520
__vbaFPFix
__vbaBoolVarNull
__vbaVarTstLt
__vbaVargVar
__vbaRefVarAry
_CIsin
__vbaErase
ord709
__vbaVargVarMove
ord632
__vbaVarCmpGt
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaStrCmp
__vbaVarTstEq
ord560
__vbaDateR8
__vbaObjVar
ord561
ord562
__vbaVarOr
__vbaVarLateMemSt
__vbaCastObjVar
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
__vbaNew
ord601
_CIsqrt
ord310
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaVarMul
__vbaExceptHandler
ord312
ord711
ord712
__vbaPrintFile
_adj_fprem
_adj_fdivr_m64
__vbaVarDiv
__vbaR8ErrVar
ord608
ord716
__vbaVarCmpLe
__vbaFPException
__vbaInStrVar
__vbaUbound
__vbaStrVarVal
__vbaVarCat
__vbaDateVar
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaVarLateMemCallLdRf
__vbaNew2
__vbaVarInt
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaVarSetObj
__vbaVarNot
__vbaVarCmpLt
__vbaFreeStrList
_adj_fdivr_m32
__vbaR8Var
_adj_fdiv_r
ord685
__vbaVarTstNe
ord101
__vbaVarSetVar
ord102
__vbaI4Var
ord103
__vbaVarCmpEq
ord104
ord610
ord105
__vbaLateMemCall
__vbaVarAdd
__vbaVarDup
__vbaVarMod
__vbaVarCopy
__vbaVarLateMemCallLd
__vbaVarTstGe
__vbaFpI4
__vbaVarSetObjAddref
ord617
_CIatan
__vbaStrMove
__vbaCastObj
ord619
ord542
ord543
_allmul
ord544
ord545
_CItan
ord546
__vbaAryUnlock
ord547
__vbaVarForNext
_CIexp
__vbaI4ErrVar
__vbaFreeObj
__vbaFreeStr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ