Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Key Usages
KeyUsageDigitalSignature
Overview
overview
6Static
static
3Downloads.vbs
windows7-x64
1Downloads.vbs
windows10-2004-x64
1IIS�...��.exe
windows7-x64
6IIS�...��.exe
windows10-2004-x64
6Include/Function.vbs
windows7-x64
1Include/Function.vbs
windows10-2004-x64
1Include/SQL.vbs
windows7-x64
1Include/SQL.vbs
windows10-2004-x64
1Include/as...te.vbs
windows7-x64
1Include/as...te.vbs
windows10-2004-x64
1Include/code.asp
windows7-x64
3Include/code.asp
windows10-2004-x64
3Include/conn.vbs
windows7-x64
1Include/conn.vbs
windows10-2004-x64
1Include/la...an.asp
windows7-x64
3Include/la...an.asp
windows10-2004-x64
3Include/template.asp
windows7-x64
3Include/template.asp
windows10-2004-x64
3Include/vars.asp
windows7-x64
3Include/vars.asp
windows10-2004-x64
3Include/vars_bak.asp
windows7-x64
3Include/vars_bak.asp
windows10-2004-x64
3News.vbs
windows7-x64
1News.vbs
windows10-2004-x64
1Page.vbs
windows7-x64
1Page.vbs
windows10-2004-x64
1adfile/ad1.js
windows7-x64
3adfile/ad1.js
windows10-2004-x64
3adfile/ad2.js
windows7-x64
3adfile/ad2.js
windows10-2004-x64
3adfile/ad3.js
windows7-x64
3adfile/ad3.js
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Downloads.vbs
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
Downloads.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
IIS.exe
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
IIS.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Include/Function.vbs
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
Include/Function.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Include/SQL.vbs
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
Include/SQL.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Include/asptemplate.vbs
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
Include/asptemplate.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Include/code.asp
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
Include/code.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Include/conn.vbs
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
Include/conn.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Include/lanmutupian.asp
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
Include/lanmutupian.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Include/template.asp
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
Include/template.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Include/vars.asp
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
Include/vars.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Include/vars_bak.asp
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
Include/vars_bak.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
News.vbs
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
News.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Page.vbs
Resource
win7-20240729-en
Behavioral task
behavioral26
Sample
Page.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
adfile/ad1.js
Resource
win7-20240729-en
Behavioral task
behavioral28
Sample
adfile/ad1.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
adfile/ad2.js
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
adfile/ad2.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
adfile/ad3.js
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
adfile/ad3.js
Resource
win10v2004-20240802-en
Target
a8680444e3e3168113cdb55876dd5d6f_JaffaCakes118
Size
3.2MB
MD5
a8680444e3e3168113cdb55876dd5d6f
SHA1
a285edc63854465bf73dccd74b3dbf00fc3fe792
SHA256
33593cb564f95d90f2de4fa8a1b5bf7022524c4af7cad6def4da4a9622cd4d09
SHA512
49301bc237b56c823cd845ccf30450df08298b87f679a6b0fced0057ca65ea321ca73cf32b57e34a806cb81fab95bffeb05353dddfd5d72ce8ca6468bef02459
SSDEEP
49152:MPj0PtTj0eMKH5bn0fLuor24wDtG7i370OpUVGSHnkFvLwiyqyT:bo/y5b0O4wDtG7iL08gGSHyv1yqyT
Checks for missing Authenticode signature.
resource |
---|
unpack001/IIS.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
__vbaVarTstGt
__vbaVarSub
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaAptOffset
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
__vbaNextEachVar
__vbaFreeObjList
ord516
_adj_fprem1
ord518
__vbaForEachCollAd
__vbaStrCat
__vbaVarCmpNe
ord660
__vbaSetSystemError
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
__vbaAryDestruct
__vbaLateMemSt
ord593
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
__vbaBoolVarNull
_CIsin
ord631
ord709
__vbaErase
ord632
__vbaChkstk
ord526
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaStrCmp
ord529
__vbaVarTstEq
__vbaGet4
__vbaI2I4
__vbaObjVar
DllFunctionCall
__vbaVarLateMemSt
__vbaLbound
__vbaRedimPreserve
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
__vbaNew
__vbaUI1I2
_CIsqrt
__vbaObjIs
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
__vbaStrToUnicode
ord606
_adj_fprem
_adj_fdivr_m64
ord716
ord531
__vbaFPException
__vbaInStrVar
ord532
__vbaUbound
__vbaStrVarVal
__vbaVarCat
__vbaI2Var
ord537
ord645
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaInStr
__vbaVarLateMemCallLdRf
__vbaNew2
ord570
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord685
__vbaVarTstNe
ord579
ord101
__vbaVarSetVar
ord102
__vbaI4Var
ord103
ord104
ord105
__vbaAryLock
__vbaLateMemCall
__vbaVarAdd
__vbaVarDup
__vbaStrToAnsi
ord616
__vbaFpI4
__vbaVarLateMemCallLd
__vbaVarCopy
__vbaVarSetObjAddref
ord617
__vbaLateMemCallLd
_CIatan
__vbaStrMove
__vbaCastObj
__vbaForEachVar
__vbaStrVarCopy
ord619
_allmul
_CItan
__vbaNextEachCollAd
__vbaAryUnlock
_CIexp
__vbaFreeStr
__vbaFreeObj
ord580
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ