DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Overview
overview
3Static
static
3CooSel v2....�.html
windows7-x64
1CooSel v2....�.html
windows10-2004-x64
1CooSel v2....et.vbs
windows7-x64
1CooSel v2....et.vbs
windows10-2004-x64
1CooSel v2....e.html
windows7-x64
1CooSel v2....e.html
windows10-2004-x64
1CooSel v2....er.asp
windows7-x64
3CooSel v2....er.asp
windows10-2004-x64
3CooSel v2....av.asp
windows7-x64
3CooSel v2....av.asp
windows10-2004-x64
3CooSel v2....ok.vbs
windows7-x64
1CooSel v2....ok.vbs
windows10-2004-x64
1CooSel v2....st.vbs
windows7-x64
1CooSel v2....st.vbs
windows10-2004-x64
1CooSel v2....eft.js
windows7-x64
1CooSel v2....eft.js
windows10-2004-x64
1CooSel v2....er.vbs
windows7-x64
1CooSel v2....er.vbs
windows10-2004-x64
1CooSel v2....lp.vbs
windows7-x64
1CooSel v2....lp.vbs
windows10-2004-x64
1CooSel v2....ad.vbs
windows7-x64
1CooSel v2....ad.vbs
windows10-2004-x64
1CooSel v2....ss.vbs
windows7-x64
1CooSel v2....ss.vbs
windows10-2004-x64
1CooSel v2....er.vbs
windows7-x64
1CooSel v2....er.vbs
windows10-2004-x64
1CooSel v2....ST.vbs
windows7-x64
1CooSel v2....ST.vbs
windows10-2004-x64
1CooSel v2....st.asp
windows7-x64
3CooSel v2....st.asp
windows10-2004-x64
3CooSel v2....t.html
windows7-x64
1CooSel v2....t.html
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
CooSel v2.0 Final 简体中文版/CooSelV2.0Final完整版安装升级说明.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
CooSel v2.0 Final 简体中文版/CooSelV2.0Final完整版安装升级说明.html
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
CooSel v2.0 Final 简体中文版/coosel/ADO_recordset.vbs
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
CooSel v2.0 Final 简体中文版/coosel/ADO_recordset.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
CooSel v2.0 Final 简体中文版/coosel/Aboutme.html
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
CooSel v2.0 Final 简体中文版/coosel/Aboutme.html
Resource
win10v2004-20240412-en
Behavioral task
behavioral7
Sample
CooSel v2.0 Final 简体中文版/coosel/Admin_Brower.asp
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
CooSel v2.0 Final 简体中文版/coosel/Admin_Brower.asp
Resource
win10v2004-20240412-en
Behavioral task
behavioral9
Sample
CooSel v2.0 Final 简体中文版/coosel/Admin_BrowerNav.asp
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
CooSel v2.0 Final 简体中文版/coosel/Admin_BrowerNav.asp
Resource
win10v2004-20240412-en
Behavioral task
behavioral11
Sample
CooSel v2.0 Final 简体中文版/coosel/Admin_GBbook.vbs
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
CooSel v2.0 Final 简体中文版/coosel/Admin_GBbook.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral13
Sample
CooSel v2.0 Final 简体中文版/coosel/Admin_GUlist.vbs
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
CooSel v2.0 Final 简体中文版/coosel/Admin_GUlist.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
CooSel v2.0 Final 简体中文版/coosel/Admin_Left.js
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
CooSel v2.0 Final 简体中文版/coosel/Admin_Left.js
Resource
win10v2004-20240412-en
Behavioral task
behavioral17
Sample
CooSel v2.0 Final 简体中文版/coosel/Admin_Master.vbs
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
CooSel v2.0 Final 简体中文版/coosel/Admin_Master.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral19
Sample
CooSel v2.0 Final 简体中文版/coosel/Admin_help.vbs
Resource
win7-20231129-en
Behavioral task
behavioral20
Sample
CooSel v2.0 Final 简体中文版/coosel/Admin_help.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral21
Sample
CooSel v2.0 Final 简体中文版/coosel/Admin_load.vbs
Resource
win7-20240319-en
Behavioral task
behavioral22
Sample
CooSel v2.0 Final 简体中文版/coosel/Admin_load.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral23
Sample
CooSel v2.0 Final 简体中文版/coosel/CONN_access.vbs
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
CooSel v2.0 Final 简体中文版/coosel/CONN_access.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral25
Sample
CooSel v2.0 Final 简体中文版/coosel/CONN_sqlserver.vbs
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
CooSel v2.0 Final 简体中文版/coosel/CONN_sqlserver.vbs
Resource
win10v2004-20240412-en
Behavioral task
behavioral27
Sample
CooSel v2.0 Final 简体中文版/coosel/CONST.vbs
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
CooSel v2.0 Final 简体中文版/coosel/CONST.vbs
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
CooSel v2.0 Final 简体中文版/coosel/CheckList.asp
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
CooSel v2.0 Final 简体中文版/coosel/CheckList.asp
Resource
win10v2004-20240412-en
Behavioral task
behavioral31
Sample
CooSel v2.0 Final 简体中文版/coosel/Coo_start.html
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
CooSel v2.0 Final 简体中文版/coosel/Coo_start.html
Resource
win10v2004-20240412-en
Target
f3abfa37239eb57f8be1216b8da07ad9_JaffaCakes118
Size
1.2MB
MD5
f3abfa37239eb57f8be1216b8da07ad9
SHA1
c1640910f22a07ba542f8c6420fd883f53b77035
SHA256
b9a2da597feed08dc0322e915d91cbcffcf492ce5722225f7e4a8f013167ab66
SHA512
da5e3d16d5e2263eff6ab8abafd122908561dd4d692b930a96c3145d9577bb23eb4b58cf8405c23ef4de77cf749ddf98319150f4339f22ce428d41d25c6da0b2
SSDEEP
24576:k8F0JBuK7A/cZXqAiWHYy+SydDQIMY09N/kHHKL3+YkGwsl:HS3uK7bta1dUPY09GKL3Dl
Checks for missing Authenticode signature.
resource |
---|
unpack001/CooSel v2.0 Final 简体中文版/dll/FathZIP.dll |
unpack001/CooSel v2.0 Final 简体中文版/dll/dns.dll |
unpack001/CooSel v2.0 Final 简体中文版/dll/dns_d.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetErrorMode
TlsGetValue
GlobalFlags
LocalReAlloc
GetVersion
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetProcessVersion
GetCPInfo
WritePrivateProfileStringA
GetOEMCP
HeapFree
HeapAlloc
HeapReAlloc
SetCurrentDirectoryA
RaiseException
GetTimeZoneInformation
GetSystemTime
GetLocalTime
SetEnvironmentVariableA
GetCommandLineA
ExitProcess
TerminateProcess
HeapSize
GetACP
RtlUnwind
GlobalReAlloc
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
TlsFree
TlsSetValue
LoadLibraryA
SetUnhandledExceptionFilter
GetFileType
GetCurrentProcessId
CompareStringA
CompareStringW
SetStdHandle
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
LoadResource
SizeofResource
FreeLibrary
WideCharToMultiByte
GetModuleFileNameA
GetModuleHandleA
GetShortPathNameA
lstrlenA
lstrlenW
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
GlobalHandle
TlsAlloc
SetLastError
UnlockFile
GetFullPathNameA
SetEndOfFile
SetFilePointer
LockFile
FlushFileBuffers
DuplicateHandle
GlobalFree
LocalFree
lstrcmpA
GlobalDeleteAtom
GetVolumeInformationA
GetCurrentThread
GetDiskFreeSpaceA
DeleteFileA
CreateDirectoryA
MoveFileA
GetCurrentDirectoryA
SetVolumeLabelA
GetDriveTypeA
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
WriteFile
GetTickCount
SetFileAttributesA
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
CreateFileA
LockResource
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
GetFileSize
ReadFile
GetFileAttributesA
CloseHandle
FindFirstFileA
Sleep
FindNextFileA
GlobalLock
FindClose
GlobalAlloc
FlushInstructionCache
GlobalUnlock
GetCurrentProcess
lstrcpyA
GetCurrentThreadId
lstrcatA
GetProcAddress
MultiByteToWideChar
HeapDestroy
IsDBCSLeadByte
lstrcpynA
lstrcmpiA
LoadLibraryExA
GetLastError
FindResourceA
LCMapStringA
LCMapStringW
GetEnvironmentVariableA
GetVersionExA
GetSysColorBrush
DestroyMenu
GrayStringA
DrawTextA
TabbedTextOutA
GetMenuItemCount
SetWindowTextA
ClientToScreen
GetDlgCtrlID
GetWindowRect
GetClassNameA
UnregisterClassA
CharUpperA
GetSystemMetrics
GetDlgItem
UnhookWindowsHookEx
GetWindowTextA
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetSysColor
MapWindowPoints
IsWindowEnabled
MessageBoxA
EnableWindow
SetCursor
PostMessageA
PostQuitMessage
CharToOemBuffA
OemToCharBuffA
LoadStringA
LoadIconA
DrawEdge
DestroyIcon
BeginPaint
GetClientRect
EndPaint
InvalidateRect
GetDC
ReleaseDC
IntersectRect
EqualRect
OffsetRect
SetWindowRgn
SetWindowPos
IsWindow
GetParent
SetFocus
GetFocus
IsChild
DestroyWindow
GetClassInfoExA
LoadCursorA
wsprintfA
RegisterClassExA
CharNextA
CreateWindowExA
CallWindowProcA
GetWindowLongA
SetWindowLongA
ShowWindow
UnionRect
PtInRect
GetKeyState
AdjustWindowRectEx
CopyRect
GetLastActivePopup
DefWindowProcA
SendMessageA
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetSubMenu
GetMenuItemID
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
DrawIconEx
GetCursorPos
SetWindowsHookExA
GetMenuState
GetWindow
CloseMetaFile
SetWindowExtEx
SetWindowOrgEx
SaveDC
CreateMetaFileA
GetDeviceCaps
DeleteDC
SetViewportOrgEx
SetMapMode
CreateDCA
CreateBitmap
LPtoDP
SelectObject
DeleteObject
SetBkColor
GetStockObject
SetTextColor
OffsetViewportOrgEx
DeleteMetaFile
ScaleViewportExtEx
SetViewportExtEx
ScaleWindowExtEx
GetClipBox
RectVisible
TextOutA
PtVisible
Escape
ExtTextOutA
GetObjectA
CreateRectRgnIndirect
RestoreDC
GetFileTitleA
DocumentPropertiesA
OpenPrinterA
ClosePrinter
RegSetValueExA
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
RegOpenKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegEnumValueA
SHGetDesktopFolder
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
ord17
ProgIDFromCLSID
CreateOleAdviseHolder
OleLoadFromStream
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CreateDataAdviseHolder
OleRegGetMiscStatus
OleRegGetUserType
OleRegEnumVerbs
OleSaveToStream
WriteClassStm
ord250
SysAllocStringByteLen
SysStringByteLen
VariantChangeType
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
VarUI4FromStr
VariantClear
LoadRegTypeLi
SysStringLen
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
SetErrorInfo
CreateErrorInfo
SysAllocStringLen
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
e:\bak\temp\exe\Fmulti\SimpleSystem\Release\SimpleSystem.pdb
ord1092
ord1209
ord314
ord1177
ord1175
ord1201
ord1120
ord371
ord1098
ord1208
ord1206
ord1037
ord315
ord765
ord266
ord265
ord1117
ord1084
ord757
ord566
ord764
ord1167
ord581
_resetstkoflw
_findnext
_findfirst
sprintf
_atoi64
atof
atol
atoi
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__CppXcptFilter
_adjust_fdiv
_initterm
_onexit
__dllonexit
__security_error_handler
memset
??2@YAPAXI@Z
__CxxFrameHandler
_except_handler3
_snprintf
free
malloc
_strlwr
_mbschr
_mbstok
memcpy
_ismbcspace
_mbctoupper
_strdup
realloc
_CxxThrowException
_findclose
ExitProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
LocalFree
lstrlenA
lstrcmpiA
GetLastError
GetVersionExA
LoadStringA
wsprintfA
GetExtensionVersion
GetFilterVersion
HttpExtensionProc
HttpFilterProc
TerminateExtension
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
e:\bak\temp\exe\Fmulti\SimpleSystem\Release\SimpleSystem.pdb
ord1092
ord1209
ord314
ord1177
ord1175
ord1201
ord1120
ord371
ord1098
ord1208
ord1206
ord1037
ord315
ord765
ord266
ord265
ord1117
ord1084
ord757
ord566
ord764
ord1167
ord581
_resetstkoflw
_findnext
_findfirst
sprintf
_atoi64
atof
atol
atoi
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__CppXcptFilter
_adjust_fdiv
_initterm
_onexit
__dllonexit
__security_error_handler
memset
??2@YAPAXI@Z
__CxxFrameHandler
_except_handler3
_snprintf
free
malloc
_strlwr
_mbschr
_mbstok
memcpy
_ismbcspace
_mbctoupper
_strdup
realloc
_CxxThrowException
_findclose
ExitProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
LocalFree
lstrlenA
lstrcmpiA
GetLastError
GetVersionExA
LoadStringA
wsprintfA
GetExtensionVersion
GetFilterVersion
HttpExtensionProc
HttpFilterProc
TerminateExtension
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ