DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Overview
overview
3Static
static
340229175/C...on.dll
windows7-x64
340229175/C...on.dll
windows10-2004-x64
340229175/C...on.dll
windows7-x64
340229175/C...on.dll
windows10-2004-x64
340229175/frmMain.vbs
windows7-x64
140229175/frmMain.vbs
windows10-2004-x64
140229175/modMain.vbs
windows7-x64
140229175/modMain.vbs
windows10-2004-x64
140229175/�...��.exe
windows7-x64
340229175/�...��.exe
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
40229175/CurtButton.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
40229175/CurtButton.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
40229175/CurtButton.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
40229175/CurtButton.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
40229175/frmMain.vbs
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
40229175/frmMain.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
40229175/modMain.vbs
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
40229175/modMain.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
40229175/凭证生成辅助工具.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
40229175/凭证生成辅助工具.exe
Resource
win10v2004-20240802-en
Target
d374d346899903ffc1743025d81f55d6_JaffaCakes118
Size
57KB
MD5
d374d346899903ffc1743025d81f55d6
SHA1
2e9899f2a5692e82ea31f88d60d5b989325eaa5b
SHA256
f1f1f1a29c8b31e4a4af23fdffd9d2ac5b63ea11bd09c28b92dd079ac928d91f
SHA512
7251ee813d175ed32c45b16564607aabdcacade29421ad6fb188c9436cca98453f168ead023d3911b8a9bff091d631b00c8b4fbd3c09091499c43d8ebeaebe0c
SSDEEP
1536:mAB3/Z3nSEHcboalmVW1WZOFO/PZLi3pCGj7Oi1YEIq/CO6tIgbW/1JR:ZhZcboalm9Z+pFCi1YEIIf6tl0R
Checks for missing Authenticode signature.
resource |
---|
unpack001/40229175/CurtButton.oca |
unpack001/40229175/CurtButton.ocx |
unpack001/40229175/凭证生成辅助工具.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
EVENT_SINK_GetIDsOfNames
ord582
__vbaVarSub
__vbaStrI2
_CIcos
_adj_fptan
__vbaFreeVar
__vbaAptOffset
ord588
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
EVENT_SINK_Invoke
__vbaRaiseEvent
__vbaFreeObjList
_adj_fprem1
ord518
__vbaStrCat
__vbaSetSystemError
__vbaLenBstrB
__vbaHresultCheckObj
_adj_fdiv_m32
Zombie_GetTypeInfo
ord595
__vbaObjSet
__vbaOnError
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaBoolVar
_CIsin
ord632
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaStrCmp
__vbaI2I4
DllFunctionCall
__vbaVarOr
__vbaCastObjVar
__vbaRedimPreserve
_adj_fpatan
__vbaLateIdCallLd
Zombie_GetTypeInfoCount
__vbaRedim
EVENT_SINK_Release
__vbaNew
_CIsqrt
__vbaObjIs
EVENT_SINK_QueryInterface
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
__vbaFailedFriend
__vbaVarDiv
__vbaFPException
ord717
ord319
__vbaUbound
__vbaStrVarVal
__vbaI2Var
ord644
_CIlog
__vbaErrorOverflow
__vbaNew2
__vbaInStr
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
ord681
__vbaFreeStrList
_adj_fdivr_m32
__vbaPowerR8
_adj_fdiv_r
__vbaVarTstNe
ord101
ord102
__vbaI4Var
ord103
ord104
ord105
__vbaVarAdd
ord320
__vbaStrToAnsi
__vbaVarDup
ord321
__vbaFpI4
_CIatan
__vbaCastObj
__vbaStrMove
__vbaR8IntI4
_allmul
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
__vbaStrI2
_CIcos
_adj_fptan
__vbaStrI4
__vbaFreeVar
__vbaLateIdCall
__vbaStrVarMove
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaResume
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaLateMemSt
__vbaExitProc
__vbaObjSet
ord595
__vbaOnError
ord596
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord520
__vbaBoolVarNull
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaVarTstEq
__vbaObjVar
__vbaI2I4
DllFunctionCall
__vbaCastObjVar
_adj_fpatan
__vbaLateIdCallLd
EVENT_SINK_Release
__vbaNew
_CIsqrt
__vbaObjIs
EVENT_SINK_QueryInterface
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord716
__vbaFPException
__vbaVarCat
_CIlog
__vbaErrorOverflow
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarTstNe
__vbaLateMemCall
__vbaVarDup
__vbaFreeVarg
__vbaStrToAnsi
__vbaLateMemCallLd
_CIatan
__vbaCastObj
__vbaStrMove
_allmul
__vbaLateIdSt
_CItan
_CIexp
__vbaFreeObj
__vbaFreeStr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ