DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Overview
overview
3Static
static
3tt1.2ys/da...dd.asp
windows7-x64
3tt1.2ys/da...dd.asp
windows10-2004-x64
3tt1.2ys/da...te.asp
windows7-x64
3tt1.2ys/da...te.asp
windows10-2004-x64
3tt1.2ys/da...it.asp
windows7-x64
3tt1.2ys/da...it.asp
windows10-2004-x64
3tt1.2ys/da...st.asp
windows7-x64
3tt1.2ys/da...st.asp
windows10-2004-x64
3tt1.2ys/da...ch.asp
windows7-x64
3tt1.2ys/da...ch.asp
windows10-2004-x64
3tt1.2ys/da...ew.asp
windows7-x64
3tt1.2ys/da...ew.asp
windows10-2004-x64
3tt1.2ys/da...ck.asp
windows7-x64
3tt1.2ys/da...ck.asp
windows10-2004-x64
3tt1.2ys/data/db.asp
windows7-x64
3tt1.2ys/data/db.asp
windows10-2004-x64
3tt1.2ys/da...lt.asp
windows7-x64
3tt1.2ys/da...lt.asp
windows10-2004-x64
3tt1.2ys/da...ate.js
windows7-x64
3tt1.2ys/da...ate.js
windows10-2004-x64
3tt1.2ys/da...ode.js
windows7-x64
3tt1.2ys/da...ode.js
windows10-2004-x64
3tt1.2ys/da...lt.asp
windows7-x64
3tt1.2ys/da...lt.asp
windows10-2004-x64
3tt1.2ys/da...in.vbs
windows7-x64
1tt1.2ys/da...in.vbs
windows10-2004-x64
1tt1.2ys/da...wd.vbs
windows7-x64
1tt1.2ys/da...wd.vbs
windows10-2004-x64
1tt1.2ys/da...te.vbs
windows7-x64
1tt1.2ys/da...te.vbs
windows10-2004-x64
1tt1.2ys/da...le.vbs
windows7-x64
1tt1.2ys/da...le.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
tt1.2ys/data/adminadd.asp
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
tt1.2ys/data/adminadd.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
tt1.2ys/data/admindelete.asp
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
tt1.2ys/data/admindelete.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
tt1.2ys/data/adminedit.asp
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
tt1.2ys/data/adminedit.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
tt1.2ys/data/adminlist.asp
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
tt1.2ys/data/adminlist.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
tt1.2ys/data/adminsrch.asp
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
tt1.2ys/data/adminsrch.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
tt1.2ys/data/adminview.asp
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
tt1.2ys/data/adminview.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
tt1.2ys/data/date_back.asp
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
tt1.2ys/data/date_back.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
tt1.2ys/data/db.asp
Resource
win7-20240729-en
Behavioral task
behavioral16
Sample
tt1.2ys/data/db.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
tt1.2ys/data/default.asp
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
tt1.2ys/data/default.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
tt1.2ys/data/eWebEditor/Admin/private.js
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
tt1.2ys/data/eWebEditor/Admin/private.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
tt1.2ys/data/eWebEditor/Admin_Decode.js
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
tt1.2ys/data/eWebEditor/Admin_Decode.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
tt1.2ys/data/eWebEditor/Admin_Default.asp
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
tt1.2ys/data/eWebEditor/Admin_Default.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
tt1.2ys/data/eWebEditor/Admin_Login.vbs
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
tt1.2ys/data/eWebEditor/Admin_Login.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
tt1.2ys/data/eWebEditor/Admin_ModiPwd.vbs
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
tt1.2ys/data/eWebEditor/Admin_ModiPwd.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
tt1.2ys/data/eWebEditor/Admin_Private.vbs
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
tt1.2ys/data/eWebEditor/Admin_Private.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
tt1.2ys/data/eWebEditor/Admin_Style.vbs
Resource
win7-20240729-en
Behavioral task
behavioral32
Sample
tt1.2ys/data/eWebEditor/Admin_Style.vbs
Resource
win10v2004-20240802-en
Target
a78a1bfa96f0d0433a55a338248f07a0_JaffaCakes118
Size
1.6MB
MD5
a78a1bfa96f0d0433a55a338248f07a0
SHA1
5dd7747650452fd30cd800e1bf86495922cf3de3
SHA256
89415475ee44ef3797751cc73d5ef31ba830e735cbd9cdfbfc115655a3f89968
SHA512
40357172490a3cfe5947b0fd752f3dd661fa29f210a6c180ea15eecf4a2284a50d88bc565a754d615151c46a4aad0fa10d022c3f0cb98f5d8866c02272a36cd5
SSDEEP
49152:Vw6RytPfhgG/hTmojRThf1ett7fDOo1F3MnNNN3yrn:RRytPpgGZXTh8fp1F3MnNNN+n
Checks for missing Authenticode signature.
resource |
---|
unpack001/tt1.2ys/data/fileup.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
__vbaVarTstGt
__vbaVarSub
_CIcos
_adj_fptan
__vbaVarMove
__vbaVarVargNofree
__vbaAryMove
__vbaFreeVar
__vbaLenBstr
__vbaAptOffset
__vbaStrVarMove
ord695
__vbaFreeVarList
_adj_fdiv_m64
__vbaFpCDblR8
ord513
__vbaFreeObjList
_adj_fprem1
ord518
__vbaVarSetVarAddref
__vbaStrCat
ord629
__vbaInStrVarB
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaAryDestruct
__vbaVarForInit
__vbaObjSet
__vbaOnError
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord305
__vbaBoolVarNull
_CIsin
__vbaChkstk
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaStrCmp
ord529
__vbaVarTstEq
__vbaPutOwner3
__vbaAryConstruct2
ord562
__vbaCastObjVar
_adj_fpatan
__vbaStrR8
EVENT_SINK_Release
__vbaNew
__vbaUI1I2
_CIsqrt
__vbaVarAnd
ord311
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord313
_adj_fprem
_adj_fdivr_m64
ord608
__vbaFPException
ord717
__vbaStrVarVal
__vbaVarCat
__vbaDateVar
__vbaI2Var
ord645
_CIlog
__vbaErrorOverflow
__vbaFileOpen
ord648
__vbaVar2Vec
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
__vbaVarNot
_adj_fdivr_m32
_adj_fdiv_r
ord685
__vbaVarTstNe
ord101
ord102
__vbaI4Var
ord103
__vbaVarCmpEq
ord104
ord105
__vbaVarAdd
__vbaVarDup
__vbaVerifyVarObj
__vbaVarCopy
ord617
_CIatan
__vbaStrMove
__vbaCastObj
_allmul
__vbaLenVarB
_CItan
ord546
__vbaVarForNext
_CIexp
__vbaFreeStr
__vbaFreeObj
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ