Extended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Overview
overview
3Static
static
1缘梦动�...ir.vbs
windows7-x64
1缘梦动�...ir.vbs
windows10-2004-x64
1缘梦动�...me.asp
windows7-x64
3缘梦动�...me.asp
windows10-2004-x64
3缘梦动�...in.asp
windows7-x64
3缘梦动�...in.asp
windows10-2004-x64
3缘梦动�...op.asp
windows7-x64
3缘梦动�...op.asp
windows10-2004-x64
3缘梦动�...tor.js
windows7-x64
3缘梦动�...tor.js
windows10-2004-x64
3缘梦动�...tor.js
windows7-x64
3缘梦动�...tor.js
windows10-2004-x64
3缘梦动�...Con.js
windows7-x64
3缘梦动�...Con.js
windows10-2004-x64
3缘梦动�...nn.asp
windows7-x64
3缘梦动�...nn.asp
windows10-2004-x64
3Flash.dll
windows7-x64
3Flash.dll
windows10-2004-x64
3GetFlash.exe
windows7-x64
3GetFlash.exe
windows10-2004-x64
3缘梦动�...dd.vbs
windows7-x64
1缘梦动�...dd.vbs
windows10-2004-x64
1缘梦动�...log.js
windows7-x64
3缘梦动�...log.js
windows10-2004-x64
3缘梦动�...og.asp
windows7-x64
3缘梦动�...og.asp
windows10-2004-x64
3缘梦动�...ut.asp
windows7-x64
3缘梦动�...ut.asp
windows10-2004-x64
3缘梦动�...te.vbs
windows7-x64
1缘梦动�...te.vbs
windows10-2004-x64
1缘梦动�...ook.js
windows7-x64
3缘梦动�...ook.js
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
缘梦动力清爽Blog v1.0/Frames/dir.vbs
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
缘梦动力清爽Blog v1.0/Frames/dir.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
缘梦动力清爽Blog v1.0/Frames/frame.asp
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
缘梦动力清爽Blog v1.0/Frames/frame.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
缘梦动力清爽Blog v1.0/Frames/main.asp
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
缘梦动力清爽Blog v1.0/Frames/main.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
缘梦动力清爽Blog v1.0/Frames/top.asp
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
缘梦动力清爽Blog v1.0/Frames/top.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
缘梦动力清爽Blog v1.0/Guestbook/AdminEditor.js
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
缘梦动力清爽Blog v1.0/Guestbook/AdminEditor.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
缘梦动力清爽Blog v1.0/Guestbook/Editor.js
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
缘梦动力清爽Blog v1.0/Guestbook/Editor.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
缘梦动力清爽Blog v1.0/Guestbook/EditorCon.js
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
缘梦动力清爽Blog v1.0/Guestbook/EditorCon.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
缘梦动力清爽Blog v1.0/Guestbook/Fgbconn.asp
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
缘梦动力清爽Blog v1.0/Guestbook/Fgbconn.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Flash.dll
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
Flash.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
GetFlash.exe
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
GetFlash.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
缘梦动力清爽Blog v1.0/Guestbook/add.vbs
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
缘梦动力清爽Blog v1.0/Guestbook/add.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
缘梦动力清爽Blog v1.0/Guestbook/adminlog.js
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
缘梦动力清爽Blog v1.0/Guestbook/adminlog.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
缘梦动力清爽Blog v1.0/Guestbook/adminlog.asp
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
缘梦动力清爽Blog v1.0/Guestbook/adminlog.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
缘梦动力清爽Blog v1.0/Guestbook/adminlogout.asp
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
缘梦动力清爽Blog v1.0/Guestbook/adminlogout.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
缘梦动力清爽Blog v1.0/Guestbook/delete.vbs
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
缘梦动力清爽Blog v1.0/Guestbook/delete.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
缘梦动力清爽Blog v1.0/Guestbook/gbook.js
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
缘梦动力清爽Blog v1.0/Guestbook/gbook.js
Resource
win10v2004-20240802-en
Target
eb3e8dfb6ccf82dc7e1ba2d97c4b7ffa_JaffaCakes118
Size
1.2MB
MD5
eb3e8dfb6ccf82dc7e1ba2d97c4b7ffa
SHA1
736eeab3102136a1e8735bbb778a29b2d5e90ecd
SHA256
1ca3f1c4f591c5a2f353451bdef1f001130ace1a7b62d1cc26bd21bd199b86db
SHA512
3077b3475864d60cb9f9781141be2b6e698b16ea5d58686ed405dfff76724cb1bfc706b2e1ad58872f0305fc1009b4b2303b3177172934ea4461ae5af82a8a82
SSDEEP
24576:kqFtbF8ko66sp8nMBfwJN6ytKvbX2u1wBaqayyHIj/LMKq/UaMe:/z8aBYJNlKj51w/ayIGQh/ee
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
waveInStop
waveInClose
waveInUnprepareHeader
waveInReset
timeSetEvent
waveInPrepareHeader
waveInOpen
waveInGetDevCapsA
waveOutOpen
waveOutClose
waveOutUnprepareHeader
waveOutReset
waveOutGetDevCapsA
timeKillEvent
timeGetTime
timeEndPeriod
timeBeginPeriod
timeGetDevCaps
waveInAddBuffer
waveInStart
waveInGetNumDevs
waveOutGetNumDevs
waveOutWrite
waveOutPrepareHeader
HeapAlloc
HeapReAlloc
HeapFree
GetUserDefaultLangID
GetSystemDefaultLangID
DeleteFileA
CreateFileA
GetSystemDirectoryA
GetTimeZoneInformation
GetSystemTime
SystemTimeToFileTime
GetFileAttributesA
MoveFileA
RemoveDirectoryA
CreateDirectoryA
ReadFile
WriteFile
GetTempFileNameA
GetTempPathA
SetFilePointer
GetFileSize
FindFirstFileA
FindNextFileA
FindClose
ReleaseMutex
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetTickCount
WaitForSingleObject
IsDBCSLeadByteEx
GetProcessTimes
SetThreadPriority
CreateThread
ExitThread
CreateEventA
SetEvent
ResetEvent
WaitForMultipleObjects
GetThreadPriority
GetCurrentThread
CreateProcessA
GetLocaleInfoA
SetErrorMode
GetCurrentProcess
FlushInstructionCache
GlobalLock
GlobalUnlock
GetCurrentThreadId
MulDiv
LockResource
Sleep
LoadLibraryA
GetProcAddress
lstrcatA
lstrcpyA
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
DebugBreak
InitializeCriticalSection
DeleteCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
GlobalAlloc
GlobalFree
GetVersionExA
MultiByteToWideChar
GetCPInfo
GetACP
IsDBCSLeadByte
GetLastError
lstrlenA
InterlockedIncrement
WideCharToMultiByte
lstrlenW
InterlockedDecrement
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
lstrcmpiA
lstrcpynA
CreateMutexA
DisableThreadLibraryCalls
HeapCreate
HeapDestroy
CloseHandle
MapVirtualKeyA
GetKeyState
UpdateWindow
SetCapture
ReleaseCapture
GetFocus
PtInRect
IsChild
GetParent
GetSystemMetrics
InsertMenuItemA
GetMenuItemInfoA
GetMenuItemCount
WaitForInputIdle
CloseClipboard
GetClipboardData
IsClipboardFormatAvailable
OpenClipboard
SetClipboardData
EmptyClipboard
GetDesktopWindow
PostThreadMessageA
GetQueueStatus
PeekMessageA
MsgWaitForMultipleObjects
RegisterWindowMessageA
DispatchMessageA
GetCapture
LoadMenuA
GetSubMenu
GetMenuItemID
DeleteMenu
ClientToScreen
TrackPopupMenu
DestroyMenu
SystemParametersInfoA
SetCursor
GetCursorPos
ScreenToClient
KillTimer
SetTimer
FillRect
MessageBoxA
CheckMenuItem
SetFocus
GetWindowRect
GetKeyboardLayout
CreateWindowExA
CallWindowProcA
GetWindowLongA
DefWindowProcA
SetWindowLongA
IntersectRect
EqualRect
OffsetRect
SetWindowRgn
SetWindowPos
UnionRect
InvalidateRect
LoadCursorA
wsprintfA
RegisterClassExA
BeginPaint
GetClientRect
EndPaint
CreateDialogParamA
LoadStringA
IsDialogMessageA
MoveWindow
ShowWindow
GetDialogBaseUnits
IsWindow
DestroyWindow
SendDlgItemMessageA
SetDlgItemTextW
CheckDlgButton
GetWindowTextLengthA
GetWindowTextA
IsDlgButtonChecked
GetDlgItem
GetClassInfoExA
UnregisterClassA
CharNextA
GetTopWindow
GetDoubleClickTime
GetDC
ReleaseDC
WindowFromPoint
WinHelpA
EnableMenuItem
GetCurrentObject
GetTextExtentPoint32W
GetTextExtentPoint32A
DPtoLP
GetTextColor
GetBkMode
GetTextAlign
CreateRectRgn
GetClipRgn
CreatePen
SetBkColor
GetBkColor
CreatePalette
StartDocA
EndDoc
StrokePath
ExtCreatePen
SetTextColor
ExtTextOutW
ExtTextOutA
SelectClipRgn
IntersectClipRect
SetTextAlign
SetBkMode
EnumFontFamiliesA
GetObjectType
GetClipBox
GetSystemPaletteEntries
FillPath
Rectangle
LPtoDP
SetViewportOrgEx
BitBlt
CreateSolidBrush
CreateMetaFileA
SetWindowOrgEx
SetWindowExtEx
CloseMetaFile
DeleteMetaFile
CreateRectRgnIndirect
CreateFontIndirectA
GetTextMetricsA
GetTextExtentPointA
SelectPalette
RealizePalette
CreateCompatibleDC
GetDeviceCaps
CreateDIBSection
DeleteDC
GetObjectA
SaveDC
RestoreDC
PolyBezierTo
BeginPath
SetPolyFillMode
MoveToEx
LineTo
EndPath
SelectClipPath
CreateCompatibleBitmap
GdiFlush
SetDIBitsToDevice
StretchDIBits
SelectObject
DeleteObject
StartPage
EndPage
GetStockObject
PrintDlgA
RegDeleteValueA
RegCreateKeyExA
RegDeleteKeyA
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegSetValueExA
RegQueryInfoKeyA
RegEnumValueA
RegQueryValueExA
RegCreateKeyA
CoFreeUnusedLibraries
CoUninitialize
CoInitialize
OleSaveToStream
WriteClassStm
OleLoadFromStream
CreateDataAdviseHolder
OleRegGetMiscStatus
CreateOleAdviseHolder
OleRegGetUserType
OleRegEnumVerbs
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CreateBindCtx
SysFreeString
SysAllocStringLen
VarUI4FromStr
RegisterTypeLi
SysAllocString
SysStringLen
LoadRegTypeLi
VariantClear
OleCreatePropertyFrame
VariantInit
SafeArrayUnlock
SafeArrayLock
SafeArrayCreateVector
VariantChangeType
SysAllocStringByteLen
SysStringByteLen
LoadTypeLi
setsockopt
gethostbyname
ioctlsocket
htons
htonl
InternetCloseHandle
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
InternetReadFile
RegisterBindStatusCallback
HlinkSimpleNavigateToMoniker
CreateURLMoniker
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
GetTempPathA
CreateProcessA
FormatMessageA
CreateThread
_lclose
_lread
CreateFileA
SetThreadLocale
GetVersionExA
GetSystemDefaultLangID
GetProcAddress
LoadLibraryA
DeleteFileA
OpenFile
WriteFile
GetLastError
CreateMutexA
CloseHandle
FreeLibrary
GetModuleHandleA
GetStartupInfoA
LoadCursorA
DefWindowProcA
RegisterClassExA
LoadStringA
LoadImageA
LoadBitmapA
GetMessageA
DispatchMessageA
IsDialogMessageA
DestroyIcon
PostMessageA
SetForegroundWindow
MessageBoxA
SetWindowLongA
GetWindowLongA
ShowWindow
KillTimer
PostQuitMessage
CreateDialogParamA
GetDlgItem
SendMessageA
GetWindowRect
ScreenToClient
CreateWindowExA
SetWindowPos
DestroyWindow
SetTimer
TranslateMessage
DeleteObject
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyA
Shell_NotifyIconA
InternetConnectA
InternetCloseHandle
InternetReadFile
InternetOpenA
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
ord42
strchr
atoi
??2@YAPAXI@Z
sprintf
__CxxFrameHandler
??3@YAXPAX@Z
strncpy
memmove
__dllonexit
_initterm
__setusermatherr
_adjust_fdiv
__getmainargs
__p__commode
__p__fmode
__set_app_type
_except_handler3
_exit
_XcptFilter
_controlfp
exit
_acmdln
strstr
_strnicmp
_onexit
_stricmp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ