Overview

overview

3

Static

static

3

CoolButton.dll

windows7-x64

3

CoolButton.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    d7198d9549a5cb84de10418ed862efa6_JaffaCakes118

  • Size

    84KB

  • MD5

    d7198d9549a5cb84de10418ed862efa6

  • SHA1

    40b8d89546727f7f68726268f77a322b84e33f43

  • SHA256

    58062988b66beb6d700a9e2474007749bc133583112f807585a57132aa9c60f5

  • SHA512

    1617cd2b6856fe6a823575243836158283f7d91103f11ab5498a243e8f8e7072ea8d3a0340b492dd2bc428dd567205c60acc43acf8394d5e68bb0caf8fa6133f

  • SSDEEP

    1536:22s0yYaanqDGQ88z67UgabS4MLVaR5RXnFEvwh5F3mlsFSlf5qAhn/+eThmiv/+B:2kpaa7luHjS1VS5RX2vrPl39L9min+lj

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d7198d9549a5cb84de10418ed862efa6_JaffaCakes118
    .rar
  • CoolButton.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    43dc8858a08b1f627224a755f63d3c36


    Headers

    Imports

    Exports

    Sections

  • VFP/CBUTTON.PJT
  • VFP/CBUTTON.pjx
  • VFP/cbutton.SCT
  • VFP/cbutton.scx
  • VFP/下载说明.htm
    .html .js polyglot
  • vb/Cbutton.vbp
  • vb/Cbutton.vbw
  • vb/Form1.frm
  • vb/Form1.frx
  • vb/下载说明.htm
    .html .js polyglot
  • 下载说明.htm
    .html .js polyglot
  • 使用说明.txt