Static task
static1
Behavioral task
behavioral1
Sample
we T/cgi/geoplugin.class.js
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
we T/cgi/geoplugin.class.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
we T/delete.ps1
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
we T/delete.ps1
Resource
win10v2004-20240508-en
General
-
Target
65c479ad53dd17ae89de854e8b97bf85_JaffaCakes118
-
Size
343KB
-
MD5
65c479ad53dd17ae89de854e8b97bf85
-
SHA1
acc6e6c4995a115fcd4071ec149b0ed4b8fd3adb
-
SHA256
f8225fd818364ef208d8661b0a4f22ecfed11fffc873d7323e2ef0e3e89e12fb
-
SHA512
097961c854dfc0ebb2c44ae3bd78f5f0ee836ba1c203e8909cea7b096ee5e1a01c1a68be787974cc1e0a15bead70cbb876bec6a3cd5f544f2ec54df51f44b458
-
SSDEEP
6144:xYu0WGwh9HAcOcDrlUNQS8jkkFr/2EK2d25jF/ScoZ51KrjxljxBJ2PUeWWTo+Hk:FGwh9HLD5a8jH/2n2AH/ShH1Kx3BJ2ML
Malware Config
Signatures
Files
-
65c479ad53dd17ae89de854e8b97bf85_JaffaCakes118.zip
-
we T/.htaccess
-
we T/blocker.php
-
we T/cgi/geoplugin.class.php.js
-
we T/cgi/img/001.png.png
-
we T/cgi/img/av011.png.png
-
we T/cgi/img/av021.png.png
-
we T/cgi/img/av022.png.png
-
we T/cgi/img/av031.png.png
-
we T/cgi/img/av041.png.png
-
we T/cgi/img/av051.png.png
-
we T/cgi/img/av061.png.png
-
we T/cgi/img/bt01.png.png
-
we T/cgi/img/bt02.png.png
-
we T/cgi/img/bt03.png.png
-
we T/cgi/img/bt04.png.png
-
we T/cgi/img/bt05.png.png
-
we T/cgi/img/bt06.png.png
-
we T/cgi/img/favicon.ico
-
we T/cgi/img/loading.gif.gif
-
we T/cgi/img/timeout.gif.gif
-
we T/cgi/index.php
-
we T/cgi/loading.php.html .js polyglot
-
we T/cgi/login1.php
-
we T/cgi/login2.php
-
we T/cgi/login3.php
-
we T/cgi/login4.php
-
we T/cgi/login5.php
-
we T/cgi/login6.php
-
we T/cgi/robots.txt
-
we T/cgi/timeout.php.html .js polyglot
-
we T/delete.php.ps1
-
we T/i2.php
-
we T/index.php
-
we T/readme.txt
-
we T/robots.txt