Overview
overview
3Static
static
3CCProxy.exe
windows7-x64
3CCProxy.exe
windows10-2004-x64
3Language/C...GB.chm
windows7-x64
1Language/C...GB.chm
windows10-2004-x64
1Language/English.chm
windows7-x64
1Language/English.chm
windows10-2004-x64
1web/cn_accadd.htm
windows7-x64
3web/cn_accadd.htm
windows10-2004-x64
3web/cn_accheader.htm
windows7-x64
3web/cn_accheader.htm
windows10-2004-x64
3web/cn_acc...in.htm
windows7-x64
3web/cn_acc...in.htm
windows10-2004-x64
3web/cn_acc...er.htm
windows7-x64
3web/cn_acc...er.htm
windows10-2004-x64
3web/cn_index.html
windows7-x64
3web/cn_index.html
windows10-2004-x64
3web/cn_list.htm
windows7-x64
3web/cn_list.htm
windows10-2004-x64
3web/cn_log.htm
windows7-x64
3web/cn_log.htm
windows10-2004-x64
3web/en_accadd.htm
windows7-x64
3web/en_accadd.htm
windows10-2004-x64
3web/en_accheader.htm
windows7-x64
3web/en_accheader.htm
windows10-2004-x64
3web/en_acc...in.htm
windows7-x64
3web/en_acc...in.htm
windows10-2004-x64
3web/en_acc...er.htm
windows7-x64
3web/en_acc...er.htm
windows10-2004-x64
3web/en_index.html
windows7-x64
3web/en_index.html
windows10-2004-x64
3web/en_list.htm
windows7-x64
3web/en_list.htm
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
CCProxy.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
CCProxy.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
Language/ChineseGB.chm
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Language/ChineseGB.chm
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
Language/English.chm
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
Language/English.chm
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
web/cn_accadd.htm
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
web/cn_accadd.htm
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
web/cn_accheader.htm
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
web/cn_accheader.htm
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
web/cn_acclistadmin.htm
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
web/cn_acclistadmin.htm
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
web/cn_acclistuser.htm
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
web/cn_acclistuser.htm
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
web/cn_index.html
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
web/cn_index.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
web/cn_list.htm
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
web/cn_list.htm
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
web/cn_log.htm
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
web/cn_log.htm
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
web/en_accadd.htm
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
web/en_accadd.htm
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
web/en_accheader.htm
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
web/en_accheader.htm
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
web/en_acclistadmin.htm
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
web/en_acclistadmin.htm
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
web/en_acclistuser.htm
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
web/en_acclistuser.htm
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
web/en_index.html
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
web/en_index.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
web/en_list.htm
Resource
win7-20240705-en
Behavioral task
behavioral32
Sample
web/en_list.htm
Resource
win10v2004-20240709-en
General
-
Target
752700cb237be246451d4df1eb7462a3_JaffaCakes118
-
Size
1.8MB
-
MD5
752700cb237be246451d4df1eb7462a3
-
SHA1
36816deec9a941c7b66e95782b3b7bb515eaff2e
-
SHA256
7b2e7cb37eb150318f0e83d22290f1224bbff9e7864fb57021bdee4a68e9f4d7
-
SHA512
4e822cc7aff90703aa3b299c5b44f9b84d5543276a5f6b7c06f4d50a2980f906631c43035dfb3d0710178c7ecbb2b020468dff7d96ff80bd45ff7eb96ee1ad48
-
SSDEEP
49152:mVO0DAiUH2G4RzHP+DF3955PMlfQY/nWDZZ:kO/tSzvMl8oY/C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/CCProxy.exe
Files
-
752700cb237be246451d4df1eb7462a3_JaffaCakes118.rar
-
CCProxy.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 381KB - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Language/ChineseBig5.ini
-
Language/ChineseGB.chm.chm
-
Language/ChineseGB.ini
-
Language/English.chm.chm
-
Language/English.ini
-
Language/French.ini
-
Language/German.ini
-
Language/Italiano.ini
-
Language/Portuguese.ini
-
Language/Russian.ini
-
Language/Spanish.ini
-
Language/Swedish.ini
-
web/cn_accadd.htm.js
-
web/cn_accheader.htm.html
-
web/cn_acclistadmin.htm.js
-
web/cn_acclistuser.htm.js
-
web/cn_index.html.html
-
web/cn_list.htm.html
-
web/cn_log.htm.html
-
web/cn_settings.htm.html .js polyglot
-
web/en_accadd.htm.js
-
web/en_accheader.htm.html
-
web/en_acclistadmin.htm.js
-
web/en_acclistuser.htm.js
-
web/en_index.html.html
-
web/en_list.htm.html
-
web/en_log.htm.html
-
web/en_settings.htm.html .js polyglot
-
web/proxyadmin.php
-
安装必看.url.url