Overview

overview

7

Static

static

7

CCPROXY6.6...er.exe

windows7-x64

7

CCPROXY6.6...er.exe

windows10-2004-x64

7

CCProxy.dll

windows7-x64

3

CCProxy.dll

windows10-2004-x64

3

CCProxy.exe

windows7-x64

3

CCProxy.exe

windows10-2004-x64

3

LogMoniter.exe

windows7-x64

1

LogMoniter.exe

windows10-2004-x64

1

Setup/CCproxySet.exe

windows7-x64

3

Setup/CCproxySet.exe

windows10-2004-x64

3

Setup/COMDLG32.dll

windows7-x64

3

Setup/COMDLG32.dll

windows10-2004-x64

3

Setup/MSCOMCTL.dll

windows7-x64

3

Setup/MSCOMCTL.dll

windows10-2004-x64

3

Setup/TABCTL32.dll

windows7-x64

3

Setup/TABCTL32.dll

windows10-2004-x64

3

addmessage.htm

windows7-x64

3

addmessage.htm

windows10-2004-x64

3

ccproxyplugin.exe

windows7-x64

3

ccproxyplugin.exe

windows10-2004-x64

3

web/accinfo.htm

windows7-x64

3

web/accinfo.htm

windows10-2004-x64

3

web/authin...nt.htm

windows7-x64

3

web/authin...nt.htm

windows10-2004-x64

3

web/authin...nt.htm

windows7-x64

3

web/authin...nt.htm

windows10-2004-x64

3

web/authinfo-site.htm

windows7-x64

3

web/authinfo-site.htm

windows10-2004-x64

3

web/cn_acc...in.htm

windows7-x64

3

web/cn_acc...in.htm

windows10-2004-x64

3

web/cn_acc...er.htm

windows7-x64

3

web/cn_acc...er.htm

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a5136b56cbc01b11842b0c9bb7712bc7_JaffaCakes118

  • Size

    1.7MB

  • MD5

    a5136b56cbc01b11842b0c9bb7712bc7

  • SHA1

    0eacae54364b44f9bb16d20b806f17597601186a

  • SHA256

    eb16c17dc767bf23ee7ea3c4ef717824cff858558d7d4c8c0ccc77817ecde6b3

  • SHA512

    0853d27a6cc7dfbbc37497b733f7c11368e1d3eea1fb2e366de15fbf244fd926f4d16817dfd5ac80ec59ddc72168e31ea196bdfd4418fdb337be5be9fc20d29a

  • SSDEEP

    49152:S9MNXxfhp15itj/qdGcvzMP6OuYt2+3lHO5+K24wB7k/FVe64KQ:aO35I7qdzze6Opt2OHOUK2XUVeb

Score
7/10
upxaspackv2

Malware Config

Signatures

  • ASPack v2.12-2.42 1 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 8 IoCs

    Checks for missing Authenticode signature.

Files

  • a5136b56cbc01b11842b0c9bb7712bc7_JaffaCakes118
    .zip
  • AccInfo.ini
  • AccInfo.txt
  • CCPROXY6.64Keymaker.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • CCProxy.dll
    .dll windows:4 windows x86 arch:x86

    b81ebea088d7d3738bcd6e6ab97d5a55


    Headers

    Imports

    Exports

    Sections

  • CCProxy.exe
    .exe windows:4 windows x86 arch:x86

    2c69d590790e52f0fa271b40dd167f67


    Headers

    Imports

    Sections

  • CCProxy.ini
  • Language/ChineseBig5.ini
  • Language/ChineseGB.ini
  • Language/English.ini
  • Log/log20100819.txt
  • LogMoniter.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Setup/CCProxy.ini
  • Setup/CCproxySet.exe
    .exe windows:4 windows x86 arch:x86

    3cf2ba29659ddf21e5f05158cc06ce8e


    Headers

    Imports

    Sections

  • Setup/COMDLG32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    988f29c1eb8054253091352741683c76


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Setup/MSCOMCTL.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    2b2ee4e06ab7ae589a670cad99121b44


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Setup/TABCTL32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    aa8b0ec5b7d56e08d6614ae243221096


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Setup/˵.txt
  • addmessage.htm
  • ccproxyplugin.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • web/accinfo.htm
  • web/authinfo-account.htm
  • web/authinfo-content.htm
  • web/authinfo-site.htm
  • web/cn_acclistadmin.htm
  • web/cn_acclistuser.htm
  • web/en_acclistadmin.htm
  • web/en_acclistuser.htm
  • web/proxyadmin.php
  • zlib1.dll
    .dll windows:4 windows x86 arch:x86

    7e3560e4dd2deaa398fa039458dd4b4b


    Headers

    Imports

    Exports

    Sections