DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Overview
overview
3Static
static
3DX_Map/adm...min.js
windows7-x64
3DX_Map/adm...min.js
windows10-2004-x64
3DX_Map/adm...it.vbs
windows7-x64
1DX_Map/adm...it.vbs
windows10-2004-x64
1DX_Map/adm...t.html
windows7-x64
3DX_Map/adm...t.html
windows10-2004-x64
3DX_Map/admin/Fun.asp
windows7-x64
3DX_Map/admin/Fun.asp
windows10-2004-x64
3DX_Map/adm...min.js
windows7-x64
3DX_Map/adm...min.js
windows10-2004-x64
3DX_Map/adm...n.html
windows7-x64
3DX_Map/adm...n.html
windows10-2004-x64
3DX_Map/adm...map.js
windows7-x64
3DX_Map/adm...map.js
windows10-2004-x64
3DX_Map/adm...p.html
windows7-x64
3DX_Map/adm...p.html
windows10-2004-x64
3DX_Map/admin/Web.vbs
windows7-x64
1DX_Map/admin/Web.vbs
windows10-2004-x64
1DX_Map/adm...dit.js
windows7-x64
3DX_Map/adm...dit.js
windows10-2004-x64
3DX_Map/adm...o.html
windows7-x64
3DX_Map/adm...o.html
windows10-2004-x64
3DX_Map/adm...Add.js
windows7-x64
3DX_Map/adm...Add.js
windows10-2004-x64
3DX_Map/adm...ark.js
windows7-x64
3DX_Map/adm...ark.js
windows10-2004-x64
3DX_Map/adm...k.html
windows7-x64
3DX_Map/adm...k.html
windows10-2004-x64
3DX_Map/adm...dd.asp
windows7-x64
3DX_Map/adm...dd.asp
windows10-2004-x64
3DX_Map/adm...n.html
windows7-x64
3DX_Map/adm...n.html
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
DX_Map/admin/Admin_admin.js
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
DX_Map/admin/Admin_admin.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
DX_Map/admin/Admin_edit.vbs
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
DX_Map/admin/Admin_edit.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
DX_Map/admin/Admin_edit.html
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
DX_Map/admin/Admin_edit.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
DX_Map/admin/Fun.asp
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
DX_Map/admin/Fun.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
DX_Map/admin/User_admin.js
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
DX_Map/admin/User_admin.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
DX_Map/admin/User_admin.html
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
DX_Map/admin/User_admin.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
DX_Map/admin/User_map.js
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
DX_Map/admin/User_map.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
DX_Map/admin/User_map.html
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
DX_Map/admin/User_map.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
DX_Map/admin/Web.vbs
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
DX_Map/admin/Web.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
DX_Map/admin/WebMark_edit.js
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
DX_Map/admin/WebMark_edit.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
DX_Map/admin/Web_Info.html
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
DX_Map/admin/Web_Info.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
DX_Map/admin/Web_Mark_Add.js
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
DX_Map/admin/Web_Mark_Add.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
DX_Map/admin/Web_mark.js
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
DX_Map/admin/Web_mark.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
DX_Map/admin/Web_mark.html
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
DX_Map/admin/Web_mark.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
DX_Map/admin/admin_add.asp
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
DX_Map/admin/admin_add.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
DX_Map/admin/admin_admin.html
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
DX_Map/admin/admin_admin.html
Resource
win10v2004-20240802-en
Target
dd7cd893ba448791868edf0513ad4bfe_JaffaCakes118
Size
2.5MB
MD5
dd7cd893ba448791868edf0513ad4bfe
SHA1
ea731ad6bf7cc0e4158b7f1e006228dea61c4442
SHA256
753a09506c0f5d7fad038a97d22bb9f155bbbe0127cd7cc0cbfb0026c36d6d06
SHA512
91bc8ee3eaf90676cbfa327f2359a2fa678bb6a8f16c8f607f37b6f819a03266e075340fd9ec938c95dd427639ab745816707b6f2a1994b5590a61c317715f1c
SSDEEP
49152:jh5MgYbWQhDlC1nZ7ekbWjngz8T1EVdGc+qqVGXJ6ABPeQpd+Nz3vLyEm4:jh+g+WQhDlCJZ79MgwyAcaVGXJbWQ+NB
Checks for missing Authenticode signature.
resource |
---|
unpack002/unzip.exe |
unpack002/wbqinst.exe |
unpack004/eWebEditorClient.dll |
unpack001/DX_Map/inc/utf8-gb-big.exe |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetLocaleInfoA
GetStdHandle
GetFileAttributesA
GetFileTime
FileTimeToSystemTime
ReadFile
SetConsoleMode
GetConsoleMode
LeaveCriticalSection
HeapFree
GetProcessHeap
EnterCriticalSection
lstrcpynA
lstrcmpiA
lstrlenA
InitializeCriticalSection
ReleaseMutex
WaitForSingleObject
InterlockedExchange
CreateMutexA
HeapAlloc
GetCurrentProcess
SetConsoleCtrlHandler
MultiByteToWideChar
ExitProcess
TerminateProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapReAlloc
GetCommandLineA
WriteFile
UnhandledExceptionFilter
GetCPInfo
IsValidLocale
GetDriveTypeA
GetConsoleScreenBufferInfo
GetUserDefaultLCID
GetVersionExA
WideCharToMultiByte
GetVersion
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
SetHandleCount
GetFileType
GetStartupInfoA
FlushFileBuffers
SetFilePointer
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
GetProcAddress
LoadLibraryA
GetLocaleInfoW
SetEndOfFile
FindNextFileA
SetVolumeLabelA
FindClose
GetVolumeInformationA
FindFirstFileA
GetFullPathNameA
GetLastError
FileTimeToLocalFileTime
CreateFileA
CloseHandle
SetFileAttributesA
SetFileTime
IsValidCodePage
EnumSystemLocalesA
GetModuleHandleA
GetCurrentDirectoryA
SetEnvironmentVariableW
DeleteFileA
CreateDirectoryA
OpenProcessToken
LookupPrivilegeValueA
GetSecurityDescriptorControl
GetKernelObjectSecurity
AdjustTokenPrivileges
IsValidSecurityDescriptor
GetSecurityDescriptorDacl
SetKernelObjectSecurity
GetSecurityDescriptorSacl
GetSecurityDescriptorOwner
IsValidAcl
GetSecurityDescriptorGroup
GetSecurityDescriptorLength
IsValidSid
CharToOemA
OemToCharA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetWindowsDirectoryA
GetTempPathA
GetModuleFileNameA
DeleteFileA
CopyFileA
MoveFileA
GetFileSize
GetFileTime
GetFileAttributesA
SetFileAttributesA
SetFileTime
FindClose
FindNextFileA
FindFirstFileA
GetLastError
CreateDirectoryA
RemoveDirectoryA
GetDiskFreeSpaceA
GetTimeFormatA
LocalFileTimeToFileTime
SystemTimeToFileTime
GetDateFormatA
GetDriveTypeA
GetTickCount
MultiByteToWideChar
WideCharToMultiByte
FormatMessageA
ExitProcess
DebugBreak
OutputDebugStringA
LoadLibraryA
FreeLibrary
SizeofResource
LockResource
LoadResource
FindResourceA
CreateFileA
lstrcpyA
WriteFile
CloseHandle
CreateProcessA
SetThreadPriority
GetCurrentThread
GetCurrentProcess
FileTimeToSystemTime
FileTimeToLocalFileTime
ResumeThread
HeapFree
GetVersionExA
SetPriorityClass
UnhandledExceptionFilter
FreeEnvironmentStringsA
CompareStringW
CompareStringA
SetEnvironmentVariableA
GetStringTypeA
GetOEMCP
GetStringTypeW
GetCPInfo
IsBadCodePtr
GetACP
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
RaiseException
TerminateProcess
SetEndOfFile
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetStdHandle
InterlockedDecrement
GetProcAddress
InterlockedIncrement
VirtualFree
SetUnhandledExceptionFilter
SetConsoleCtrlHandler
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualAlloc
SetStdHandle
ReadFile
SetFilePointer
FlushFileBuffers
LCMapStringA
LCMapStringW
HeapAlloc
HeapReAlloc
KillTimer
MessageBoxA
wsprintfA
GetMessageA
DispatchMessageA
TranslateMessage
LoadStringA
SetTimer
PeekMessageA
DeleteObject
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA
RegCloseKey
RegQueryInfoKeyA
RegEnumKeyExA
RegEnumValueA
ShellExecuteA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
__vbaVarTstGt
__vbaVarSub
_CIcos
_adj_fptan
__vbaVarMove
__vbaVarVargNofree
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
__vbaNextEachVar
__vbaFreeObjList
_adj_fprem1
ord518
__vbaStrCat
__vbaVarCmpNe
ord660
__vbaSetSystemError
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
__vbaAryDestruct
__vbaVarForInit
ord593
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
_adj_fdivr_m16i
ord598
__vbaBoolVarNull
__vbaVargVar
_CIsin
ord709
ord632
__vbaVargVarMove
__vbaChkstk
ord526
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaStrCmp
ord529
__vbaVarTstEq
__vbaGet4
__vbaObjVar
DllFunctionCall
__vbaVarLateMemSt
__vbaRedimPreserve
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
_CIsqrt
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
ord716
ord531
__vbaFPException
__vbaInStrVar
ord532
__vbaStrVarVal
__vbaUbound
__vbaVarCat
__vbaI2Var
ord645
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaVarLateMemCallLdRf
ord570
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord685
__vbaVarTstNe
ord579
ord101
__vbaVarSetVar
ord102
__vbaI4Var
ord103
ord104
ord105
__vbaLateMemCall
__vbaVarAdd
__vbaAryLock
__vbaVarDup
__vbaStrToAnsi
__vbaVarCopy
__vbaVarLateMemCallLd
__vbaFpI4
__vbaVarSetObjAddref
ord617
_CIatan
__vbaStrMove
__vbaForEachVar
__vbaStrVarCopy
ord619
_allmul
_CItan
__vbaAryUnlock
__vbaVarForNext
_CIexp
__vbaFreeStr
__vbaFreeObj
ord580
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
__vbaVarSub
__vbaVarTstGt
ord690
__vbaStrI2
_CIcos
_adj_fptan
__vbaStrI4
__vbaVarMove
__vbaAryMove
__vbaFreeVar
__vbaLenBstr
__vbaStrVarMove
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
__vbaFreeObjList
_adj_fprem1
__vbaRecAnsiToUni
__vbaStrCat
__vbaLsetFixstr
__vbaSetSystemError
__vbaRecDestruct
__vbaHresultCheckObj
__vbaNameFile
__vbaLenVar
_adj_fdiv_m32
__vbaAryVar
__vbaAryDestruct
__vbaLateMemSt
__vbaVarIndexLoadRefLock
__vbaExitProc
__vbaObjSet
__vbaOnError
ord595
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
ord520
__vbaRefVarAry
__vbaBoolVarNull
_CIsin
ord632
__vbaChkstk
__vbaFileClose
ord526
EVENT_SINK_AddRef
ord528
ord529
__vbaStrCmp
__vbaPutOwner3
__vbaVarTstEq
__vbaVarLikeVar
DllFunctionCall
__vbaVarOr
__vbaRedimPreserve
_adj_fpatan
__vbaR4Var
__vbaFixstrConstruct
__vbaRedim
__vbaRecUniToAnsi
EVENT_SINK_Release
ord600
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
__vbaPrintFile
ord712
__vbaStrToUnicode
ord606
_adj_fprem
_adj_fdivr_m64
__vbaVarDiv
__vbaI2Str
ord608
__vbaFPException
ord717
__vbaStrVarVal
__vbaUbound
__vbaGetOwner3
__vbaGetOwner4
__vbaVarCat
__vbaI2Var
ord644
ord537
ord645
_CIlog
__vbaFileOpen
ord647
__vbaR8Str
__vbaNew2
ord648
ord570
__vbaInStr
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
ord681
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord685
ord100
__vbaVarTstNe
ord579
__vbaI4Var
ord689
__vbaAryLock
__vbaVarDup
__vbaStrToAnsi
__vbaFpI4
ord616
__vbaLateMemCallLd
ord617
__vbaRecDestructAnsi
_CIatan
__vbaStrMove
__vbaAryCopy
ord619
_allmul
__vbaLenVarB
_CItan
ord546
__vbaAryUnlock
_CIexp
__vbaFreeStr
__vbaFreeObj
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ