Static task
static1
Behavioral task
behavioral1
Sample
2499873/VirtualHostProxy.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2499873/VirtualHostProxy.exe
Resource
win10v2004-20240802-en
General
-
Target
f4fb5cb46949c43e4245ea4fde98fc80_JaffaCakes118
-
Size
44KB
-
MD5
f4fb5cb46949c43e4245ea4fde98fc80
-
SHA1
cd1bd8c1c30cc0e860aa1be5c1910bdb325f9e46
-
SHA256
12ecc007c590292fca36fcffaa8284c7d4d36446cf89f2f8a594f2e761f8b859
-
SHA512
b9d7da79f43a650838dd5aa493774f89ac25ea9b30aeb54050ab769a0bf176fe13af7506a60a86dce56c355b5000d0289a2941d6d1a951998b14a18ffa960053
-
SSDEEP
768:tPjtnxR9hds/4hNs+sSLwDorRINQIawUPhkjjL+5DYT3PbhOmHEvcyvEM+:tp1hxTsS0DorRnIBfq5DYTDkYEnvV+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/2499873/VirtualHostProxy.exe
Files
-
f4fb5cb46949c43e4245ea4fde98fc80_JaffaCakes118.rar
-
2499873/StdAfx.cpp
-
2499873/StdAfx.h
-
2499873/VirtualHostProxy.cpp
-
2499873/VirtualHostProxy.dsp
-
2499873/VirtualHostProxy.dsw
-
2499873/VirtualHostProxy.exe.exe windows:4 windows x86 arch:x86
1f325dc9b62dc47673f2a91020c997e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
CreateFileA
lstrcpynA
lstrlenA
lstrcpyA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
LocalAlloc
LocalFree
GlobalFree
GlobalUnlock
lstrcmpiA
GlobalReAlloc
SetErrorMode
GetFileType
lstrcmpA
GlobalFlags
GetProcessVersion
TlsAlloc
TlsSetValue
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
ExitProcess
GetVersion
RtlUnwind
GetCommandLineA
GetModuleHandleA
FreeLibrary
GetStringTypeW
SetStdHandle
CloseHandle
LCMapStringA
GetStringTypeA
LCMapStringW
SetFilePointer
MultiByteToWideChar
LoadLibraryA
FlushFileBuffers
VirtualAlloc
GetProcAddress
HeapReAlloc
GetCPInfo
GetOEMCP
GetACP
IsBadReadPtr
IsBadCodePtr
IsBadWritePtr
GlobalAlloc
InterlockedDecrement
SetUnhandledExceptionFilter
SetConsoleMode
InterlockedIncrement
HeapAlloc
InitializeCriticalSection
VirtualFree
WriteFile
HeapFree
GetVersionExA
HeapCreate
HeapDestroy
GetStartupInfoA
GetEnvironmentVariableA
DeleteCriticalSection
LocalReAlloc
GetStdHandle
GetLastError
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsGetValue
SetLastError
GlobalHandle
GlobalLock
ReadConsoleInputA
GetConsoleMode
HeapSize
RaiseException
user32
DrawTextA
GrayStringA
SetWindowTextA
IsWindowEnabled
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
GetClassNameA
LoadStringA
PostQuitMessage
LoadCursorA
GetSysColorBrush
DestroyMenu
MapWindowPoints
GetSysColor
GetFocus
SetFocus
AdjustWindowRectEx
GetClientRect
CopyRect
PtInRect
TabbedTextOutA
GetTopWindow
MessageBoxA
GetParent
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetDlgItem
GetWindowTextA
GetDlgCtrlID
GetKeyState
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SendMessageA
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
ReleaseDC
GetDC
ClientToScreen
GetWindowRect
GetSystemMetrics
wsprintfA
EnableWindow
SetTimer
KillTimer
WaitMessage
PeekMessageA
DispatchMessageA
PostMessageA
LoadIconA
GetMenuItemID
gdi32
GetClipBox
SetBkColor
GetObjectA
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
SetWindowExtEx
DeleteObject
GetDeviceCaps
RectVisible
TextOutA
PtVisible
Escape
CreateBitmap
ExtTextOutA
SetTextColor
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
comctl32
ord17
wsock32
bind
htons
htonl
ioctlsocket
closesocket
gethostbyname
recv
send
WSAAsyncSelect
accept
sendto
connect
WSAGetLastError
WSASetLastError
WSAStartup
WSACleanup
listen
inet_ntoa
socket
recvfrom
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
2499873/下载说明.htm.html .js polyglot