DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Overview
overview
3Static
static
3WAPURLSite...��.vbs
windows7-x64
1WAPURLSite...��.vbs
windows10-2004-x64
1WAPURLSite...AP.dll
windows7-x64
3WAPURLSite...AP.dll
windows10-2004-x64
3WAPURLSite...ce.vbs
windows7-x64
1WAPURLSite...ce.vbs
windows10-2004-x64
1WAPURLSite...AR.vbs
windows7-x64
1WAPURLSite...AR.vbs
windows10-2004-x64
1WAPURLSite...in.vbs
windows7-x64
1WAPURLSite...in.vbs
windows10-2004-x64
1WAPURLSite...in.vbs
windows7-x64
1WAPURLSite...in.vbs
windows10-2004-x64
1WAPURLSite...dd.vbs
windows7-x64
1WAPURLSite...dd.vbs
windows10-2004-x64
1WAPURLSite...it.vbs
windows7-x64
1WAPURLSite...it.vbs
windows10-2004-x64
1WAPURLSite...in.vbs
windows7-x64
1WAPURLSite...in.vbs
windows10-2004-x64
1WAPURLSite...le.vbs
windows7-x64
1WAPURLSite...le.vbs
windows10-2004-x64
1WAPURLSite...ig.asp
windows7-x64
3WAPURLSite...ig.asp
windows10-2004-x64
3WAPURLSite...nn.vbs
windows7-x64
1WAPURLSite...nn.vbs
windows10-2004-x64
1WAPURLSite...py.vbs
windows7-x64
1WAPURLSite...py.vbs
windows10-2004-x64
1WAPURLSite...db.asp
windows7-x64
3WAPURLSite...db.asp
windows10-2004-x64
3WAPURLSite...el.vbs
windows7-x64
1WAPURLSite...el.vbs
windows10-2004-x64
1WAPURLSite...ch.vbs
windows7-x64
1WAPURLSite...ch.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
WAPURLSiteV1.0/QuickWAP XML简介.vbs
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
WAPURLSiteV1.0/QuickWAP XML简介.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
WAPURLSiteV1.0/QuickWAP.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
WAPURLSiteV1.0/QuickWAP.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/Announce.vbs
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/Announce.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/CHAR.vbs
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/CHAR.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/ClassAdmin.vbs
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/ClassAdmin.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/FileEdit/admin.vbs
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/FileEdit/admin.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/FileEdit/adminadd.vbs
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/FileEdit/adminadd.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/FileEdit/adminedit.vbs
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/FileEdit/adminedit.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/FileEdit/checklogin.vbs
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/FileEdit/checklogin.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/FileEdit/downfile.vbs
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/FileEdit/downfile.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/FileEdit/fsoconfig.asp
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/FileEdit/fsoconfig.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/FileEdit/fsoconn.vbs
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/FileEdit/fsoconn.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/FileEdit/fsocopy.vbs
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/FileEdit/fsocopy.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/FileEdit/fsodb/fsodb.asp
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/FileEdit/fsodb/fsodb.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/FileEdit/fsodel.vbs
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/FileEdit/fsodel.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/FileEdit/fsodelbatch.vbs
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
WAPURLSiteV1.0/WAP2.0导航站源码/Admin/FileEdit/fsodelbatch.vbs
Resource
win10v2004-20240802-en
Target
b75015e14e427f20e53d95175688ace1_JaffaCakes118
Size
704KB
MD5
b75015e14e427f20e53d95175688ace1
SHA1
18fd9478345ea1de1d4e9febd3261f0ae575da80
SHA256
0aa245ee3abfa53b564040403ce9d579a807914bffc3d5bb6741033489c8f18b
SHA512
7a19ea755e4a5da99af949acdba3dcb5c343ce07e93abc1d8fcaee6c74e60444df1e24c67f27ea88c6352fede168d617d8a8c99796cf96b27c6f911e1173356b
SSDEEP
12288:CJsQN+xjHAznVJUWy2lefq8OuHJtLIUzK5Y6a+YD5mRamqWxJ6t7oaUtEbXf9qWC:CJyJHEnVJUr9fqpuf6Fa9qam9MtM5Ehq
Checks for missing Authenticode signature.
resource |
---|
unpack001/WAPURLSiteV1.0/QuickWAP.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
__vbaVarTstGt
__vbaVarSub
__vbaStrI2
_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaAryMove
__vbaFreeVar
__vbaAptOffset
__vbaStrVarMove
__vbaLenBstr
ord696
__vbaVarIdiv
__vbaFreeVarList
_adj_fdiv_m64
ord698
__vbaVarIndexStore
__vbaFreeObjList
ord516
__vbaR8Sgn
__vbaStrErrVarCopy
_adj_fprem1
ord518
__vbaI2Abs
__vbaStrCat
__vbaVarCmpNe
__vbaError
ord552
ord553
ord660
__vbaSetSystemError
__vbaHresultCheckObj
ord558
__vbaLenVar
_adj_fdiv_m32
__vbaVarTstLe
__vbaAryVar
__vbaAryDestruct
__vbaLateMemSt
__vbaVarIndexLoadRefLock
__vbaExitProc
__vbaBoolStr
__vbaVarForInit
ord593
ord300
ord594
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
ord303
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaVarIndexLoad
ord305
ord306
ord520
ord309
__vbaRefVarAry
__vbaBoolVarNull
__vbaVarTstLt
__vbaFpR8
_CIsin
__vbaErase
ord709
ord632
__vbaVarCmpGt
__vbaChkstk
__vbaFileClose
ord526
EVENT_SINK_AddRef
__vbaVarAbs
ord528
__vbaGenerateBoundsError
__vbaStrCmp
__vbaAryConstruct2
__vbaVarTstEq
ord560
ord561
__vbaI2I4
__vbaObjVar
DllFunctionCall
__vbaVarOr
__vbaVarLateMemSt
__vbaLbound
_adj_fpatan
ord569
__vbaLateIdCallLd
__vbaRedim
__vbaStrR8
EVENT_SINK_Release
__vbaNew
__vbaUI1I2
_CIsqrt
__vbaVarAnd
ord311
EVENT_SINK_QueryInterface
__vbaUI1I4
__vbaVarMul
__vbaExceptHandler
ord711
ord313
__vbaStrToUnicode
ord712
ord314
ord606
_adj_fprem
_adj_fdivr_m64
ord315
__vbaI2Str
ord607
__vbaVarDiv
ord316
ord608
__vbaVarCmpLe
ord716
__vbaFPException
__vbaInStrVar
ord717
__vbaGetOwner3
__vbaUbound
__vbaStrVarVal
__vbaVarCat
__vbaI2Var
ord537
_CIlog
__vbaErrorOverflow
__vbaFileOpen
ord570
__vbaNew2
__vbaInStr
__vbaR8Str
ord571
__vbaVarInt
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
ord573
__vbaVarSetObj
__vbaI4Str
__vbaVarCmpLt
__vbaFreeStrList
_adj_fdivr_m32
__vbaR8Var
__vbaPowerR8
_adj_fdiv_r
ord685
__vbaVarTstNe
ord101
__vbaVarSetVar
ord102
__vbaI4Var
ord103
__vbaVarCmpEq
ord104
ord610
ord105
__vbaVarAdd
__vbaLateMemCall
__vbaStrToAnsi
__vbaVarDup
__vbaFreeVarg
ord613
__vbaFpI2
__vbaVarMod
__vbaVarCopy
__vbaVarLateMemCallLd
__vbaFpI4
ord617
__vbaVarSetObjAddref
__vbaLateMemCallLd
__vbaR8IntI2
_CIatan
__vbaCastObj
__vbaStrMove
__vbaI2ErrVar
__vbaAryCopy
ord619
__vbaStrVarCopy
ord542
_allmul
__vbaLenVarB
ord545
_CItan
ord546
__vbaAryUnlock
__vbaVarForNext
_CIexp
__vbaMidStmtBstr
__vbaI4ErrVar
__vbaFreeStr
__vbaFreeObj
ord581
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ