Overview

overview

3

Static

static

3

B.A.D论�...ss.asp

windows7-x64

3

B.A.D论�...ss.asp

windows10-2004-x64

3

B.A.D论�...DB.asp

windows7-x64

3

B.A.D论�...DB.asp

windows10-2004-x64

3

B.A.D论�...PDB.js

windows7-x64

1

B.A.D论�...PDB.js

windows10-2004-x64

1

B.A.D论�...vas.js

windows7-x64

1

B.A.D论�...vas.js

windows10-2004-x64

1

B.A.D论�...sp.asp

windows7-x64

3

B.A.D论�...sp.asp

windows10-2004-x64

3

B.A.D论�...ls.dll

windows7-x64

1

B.A.D论�...ls.dll

windows10-2004-x64

1

B.A.D论�...ex.asp

windows7-x64

3

B.A.D论�...ex.asp

windows10-2004-x64

3

B.A.D论�...ss.asp

windows7-x64

3

B.A.D论�...ss.asp

windows10-2004-x64

3

B.A.D论�...st.asp

windows7-x64

3

B.A.D论�...st.asp

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    e94ac22b37e6d48877e20b6f32a4ae9d_JaffaCakes118

  • Size

    151KB

  • MD5

    e94ac22b37e6d48877e20b6f32a4ae9d

  • SHA1

    1b2350fab79b88d6fc3479d1ec5d16c5cde7fbaa

  • SHA256

    538528ce27a9be6f0aa0ead9e6417127a110c6b686cc2a9a97bec7df6f342215

  • SHA512

    082d2df16c74735c51508edf4018bce46dd01fb6f1d0131daa842923c6788df30f99bc0ae6e31e8e100834c8e9d236ade3a7072bf099c3143799229ceb22f66b

  • SSDEEP

    3072:nLPFy2lzaex9fSkSMc6vD2QL/lDSjHttBrIqqu6VBZ0ksu+TRkD6DIPJvFh5:nLPFPz/x9akSlfQLFSTxkfVBZ9srtk22

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e94ac22b37e6d48877e20b6f32a4ae9d_JaffaCakes118
    .rar
  • B.A.D论坛 v2.0/B.A.D论坛V2.0内部资料.txt
  • B.A.D论坛 v2.0/Reply.aspx
    .asp .js polyglot
  • B.A.D论坛 v2.0/Reply_success.aspx
    .asp
  • B.A.D论坛 v2.0/_mmServerScripts/MMHTTPDB.asp
    .asp .vbs polyglot
  • B.A.D论坛 v2.0/_mmServerScripts/MMHTTPDB.js
    .js
  • B.A.D论坛 v2.0/_mmServerScripts/adojavas.inc
    .js
  • B.A.D论坛 v2.0/_mmServerScripts/introspect.aspx
    .asp .js polyglot
  • B.A.D论坛 v2.0/asp.asp
    .asp .vbs polyglot
  • B.A.D论坛 v2.0/badnet.mdb
  • B.A.D论坛 v2.0/bin/DreamweaverCtrls.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • B.A.D论坛 v2.0/index.aspx
    .asp
  • B.A.D论坛 v2.0/pic/1.gif
  • B.A.D论坛 v2.0/pic/2.gif
  • B.A.D论坛 v2.0/pic/3.gif
  • B.A.D论坛 v2.0/pic/4.gif
  • B.A.D论坛 v2.0/pic/FIL119.JPG
    .jpg
  • B.A.D论坛 v2.0/pic/Female.gif
    .gif
  • B.A.D论坛 v2.0/pic/HOT.GIF
    .gif
  • B.A.D论坛 v2.0/pic/LEVEL01.GIF
    .gif
  • B.A.D论坛 v2.0/pic/LEVEL02.GIF
    .gif
  • B.A.D论坛 v2.0/pic/LEVEL03.GIF
    .gif
  • B.A.D论坛 v2.0/pic/MOOD01.gif
    .gif
  • B.A.D论坛 v2.0/pic/MOOD02.gif
    .gif
  • B.A.D论坛 v2.0/pic/MOOD03.gif
    .gif
  • B.A.D论坛 v2.0/pic/MOOD04.gif
    .gif
  • B.A.D论坛 v2.0/pic/MOOD05.gif
    .gif
  • B.A.D论坛 v2.0/pic/MOOD06.gif
    .gif
  • B.A.D论坛 v2.0/pic/MOOD07.gif
    .gif
  • B.A.D论坛 v2.0/pic/NEW.GIF
    .gif
  • B.A.D论坛 v2.0/pic/biaoti.gif
    .gif
  • B.A.D论坛 v2.0/pic/index.jpg
    .jpg
  • B.A.D论坛 v2.0/pic/logo.gif
  • B.A.D论坛 v2.0/pic/male.gif
    .gif
  • B.A.D论坛 v2.0/pic/pic171.gif
    .gif
  • B.A.D论坛 v2.0/pic/post0.gif
    .gif
  • B.A.D论坛 v2.0/pic/reply.GIF
    .gif
  • B.A.D论坛 v2.0/post.aspx
    .asp .js polyglot
  • B.A.D论坛 v2.0/post_success.aspx
    .asp
  • B.A.D论坛 v2.0/topicdetail.aspx
    .asp .js polyglot
  • B.A.D论坛 v2.0/topiclist.aspx
    .asp
  • B.A.D论坛 v2.0/web.config
  • B.A.D论坛 v2.0/下载说明.htm
    .html .js polyglot