General

  • Target
    9968fb6ee18934c2afc193425578e488_JaffaCakes118
  • Size 31.1MB
  • Sample240605-2e4s8sag81
  • SHA256 f646652723994218114d688def2e56f990a8efb100871b691b41ae4c41582176
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
upx

Malware Config

Signatures

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 9968fb6ee18934c2afc193425578e488_JaffaCakes118
    .zip 31.1MB
  • bin/admin.bat
    52B
  • bin/instsvc.bat
    2KB
  • bin/ping.bat
    263B
  • bin/ping.sh
    .sh 154B
  • bin/reset-acl.bat
    268B
  • bin/reset-acl.sh
    .sh 159B
  • bin/reset-pw.bat
    267B
  • bin/reset-pw.sh
    .sh 158B
  • bin/shutdown.bat
    265B
  • bin/shutdown.sh
    .sh 158B
  • bin/startup.bat
    296B
  • bin/startup.sh
    .sh 481B
  • bin/tutorial.bat
    54B
  • bin/unstsvc.bat
    935B
  • conf/appname
    8B
  • conf/biglist.ver
    1B
  • conf/cfg.default
    159B
  • conf/komodia.map
    3KB
  • conf/log4j.default
    565B
  • conf/nxfilter.jks
    2KB
  • conf/tpl/access-violation.ftl
    .html 2KB
  • conf/tpl/alert-email.ftl
    .html 284B
  • conf/tpl/block,block.html
    .html 6KB
  • conf/tpl/block,login.html
    .html 3KB
  • conf/tpl/block,welcome.html
    .html 2KB
  • conf/tpl/common-bypass.txt
    907B
  • conf/tpl/primary-zone.txt
    534B
  • conf/tpl/reverse-zone.txt
    498B
  • conf/wknown.txt
    1.5MB
  • jahaslist/baselist.nxz
    .zip 17.8MB
  • jahaslist/categories.txt
    3KB
  • jahaslist/domain-pattern.txt
    4KB
  • jahaslist/hosting.txt
    74KB
  • jahaslist/ruleset.txt
    40KB
  • lib/activation.jar
    .jar 54KB
  • lib/chardet.jar
    .jar 25KB
  • lib/commons-codec-1.5.jar
    .jar 71KB
  • lib/commons-compress-1.5.jar
    .jar 250KB
  • lib/commons-dbcp-1.4.jar
    .jar 156KB
  • lib/commons-email-1.2.jar
    .jar 31KB
  • lib/commons-io-2.4.jar
    .jar 180KB
  • lib/commons-lang3-3.3.1.jar
    .jar 403KB
  • lib/commons-logging.jar
    .jar 37KB
  • lib/commons-net-3.3.jar
    .jar 274KB
  • lib/commons-pool-1.5.6.jar
    .jar 98KB
  • lib/djmod17.jar
    .jar 628KB
  • lib/ecj-4.4.jar
    .jar 2.2MB
  • lib/freemarker.jar
    .jar 994KB
  • lib/h2-1.3.176.jar
    .jar 1.6MB
  • lib/javax.mail.jar
    .jar 557KB
  • lib/jflow.jar
    .jar 27KB
  • lib/json-simple-1.1.1.jar
    .jar 23KB
  • lib/log4j-1.2.16.jar
    .jar 470KB
  • lib/slf4j-api-1.7.22.jar
    .jar 40KB
  • lib/slf4j-log4j12-1.7.22.jar
    .jar 9KB
  • lib/syslog4j-0.9.46-bin.jar
    .jar 200KB
  • lib/tinyradius.jar
    .jar 63KB
  • lib/tomcat-embed-core.jar
    .jar 2.5MB
  • lib/tomcat-embed-el.jar
    .jar 171KB
  • lib/tomcat-embed-jasper.jar
    .jar 670KB
  • lib/tomcat-embed-logging-juli.jar
    .jar 37KB
  • lib/tomcat7-embed-websocket.jar
    .jar 226KB
  • lib/zip4j_1.3.2.jar
    .jar 127KB
  • license.txt
    2KB
  • modified/h2db-1.3.136/Server.java
    .java .js 24KB
  • modified/h2db-1.3.136/TcpServer.java
    .java .js 16KB
  • nxd.ico
    14KB
  • nxd.jar
    .jar 467KB
  • nxwrapper.exe
    .exe 1018KB
  • out.upx
    .exe 1.0MB
  • prunsrv.exe
    .exe 79KB
  • readme.txt
    60KB
  • third-party-license.txt
    137KB
  • tutorial.html
    .html 592B
  • webapps/WEB-INF/lib/cos.jar
    .jar 55KB
  • webapps/WEB-INF/web.xml
    .xml 2KB
  • webapps/admin.jsp
    .asp 3KB
  • webapps/block,chrome.jsp
    .asp 1KB
  • webapps/block,login.jsp
    .asp 713B
  • webapps/block,proxy.jsp
    .asp 1024B
  • webapps/block,welcome.jsp
    .asp 503B
  • webapps/category,custom.jsp
    .asp .js 5KB
  • webapps/category,custom_edit.jsp
    .asp 3KB
  • webapps/category,domain_test.jsp
    .asp 1KB
  • webapps/category,system.jsp
    .asp .js 10KB
  • webapps/category,system_edit.jsp
    .asp 3KB
  • webapps/classifier,blocklist.jsp
    .asp .js 7KB
  • webapps/classifier,classified.jsp
    .asp .js 8KB
  • webapps/classifier,classified_view.jsp
    .asp 1KB
  • webapps/classifier,excluded.jsp
    .asp .js 4KB
  • webapps/classifier,jahaslist.jsp
    .asp .js 7KB
  • webapps/classifier,ruleset.jsp
    .asp .js 10KB
  • webapps/classifier,setup.jsp
    .asp 3KB
  • webapps/classifier,test_run.jsp
    .asp 1KB
  • webapps/config,admin.jsp
    .asp 5KB
  • webapps/config,alert.jsp
    .asp .js 5KB
  • webapps/config,allowed_ip.jsp
    .asp 3KB
  • webapps/config,backup.jsp
    .asp 1KB
  • webapps/config,block_page.jsp
    .asp .js 3KB
  • webapps/config,cluster.jsp
    .asp .js 4KB
  • webapps/config,setup.jsp
    .asp 9KB
  • webapps/dashboard.jsp
    .asp .js 6KB
  • webapps/dns,redirection.jsp
    .asp .js 3KB
  • webapps/dns,setup.jsp
    .asp 9KB
  • webapps/dns,zone_file.jsp
    .asp .js 3KB
  • webapps/dns,zone_file_edit.jsp
    .asp .js 2KB
  • webapps/dns,zone_transfer.jsp
    .asp .js 3KB
  • webapps/download.jsp
    .asp 793B
  • webapps/error/error-500.html
    10B
  • webapps/example/find_user.jsp
    .asp 345B
  • webapps/example/login_user.jsp
    .asp 913B
  • webapps/example/logout_user.jsp
    .asp 314B
  • webapps/example/noacl,rdesk.jsp
    .asp 1KB
  • webapps/example/upload.jsp
    .asp .js 1022B
  • webapps/favicon.ico
    1KB
  • webapps/img/arrow.png
    .png 505B
  • webapps/img/bg.png
    .png 92B
  • webapps/img/pix.png
    .png 70B
  • webapps/import.jsp
    .asp .js 1KB
  • webapps/include/action_info.jsp
    .asp .js 1KB
  • webapps/include/bottom.jsp
    .js 708B
  • webapps/include/lib.jsp
    .asp .js 15KB
  • webapps/include/top.jsp
    .asp 5KB
  • webapps/index.jsp
    .asp 2KB
  • webapps/lib/jquery-1.11.3.min.js
    .js 93KB
  • webapps/lib/jquery.cookie.js
    .js 3KB
  • webapps/lib/jquery.powertip.min.css
    1KB
  • webapps/lib/jquery.powertip.min.js
    .js 10KB
  • webapps/lib/magnific/LICENSE
    1KB
  • webapps/lib/magnific/jquery.magnific-popup.js
    .js 45KB
  • webapps/lib/magnific/magnific-popup.css
    7KB
  • webapps/lib/mm-styles.css
    3KB
  • webapps/lib/nxlib-new.css
    9KB
  • webapps/lib/nxlib.css
    9KB
  • webapps/lib/nxlib.js
    .js 2KB
  • webapps/lib/xdpick/MIT-LICENSE.txt
    1KB
  • webapps/lib/xdpick/jquery.datetimepicker.css
    16KB
  • webapps/lib/xdpick/jquery.datetimepicker.js
    .js 72KB
  • webapps/logging,netflow.jsp
    .asp .js 10KB
  • webapps/logging,request.jsp
    .asp .js 12KB
  • webapps/logging,signal.jsp
    .asp .js 7KB
  • webapps/policy,cxblock.jsp
    .asp 2KB
  • webapps/policy,free_time.jsp
    .asp .js 4KB
  • webapps/policy,policy.jsp
    .asp .js 5KB
  • webapps/policy,policy_edit.jsp
    .asp 8KB
  • webapps/policy,proxy.jsp
    .asp 5KB
  • webapps/report,daily.jsp
    .asp .js 10KB
  • webapps/report,usage.jsp
    .asp 2KB
  • webapps/report,weekly.jsp
    .asp .js 11KB
  • webapps/user,adap.jsp
    .asp .js 5KB
  • webapps/user,adap_edit.jsp
    .asp .js 5KB
  • webapps/user,group.jsp
    .asp .js 5KB
  • webapps/user,group_edit.jsp
    .asp .js 6KB
  • webapps/user,ldap.jsp
    .asp .js 5KB
  • webapps/user,ldap_edit.jsp
    .asp .js 4KB
  • webapps/user,login_request.jsp
    .asp .js 5KB
  • webapps/user,radius.jsp
    .asp 3KB
  • webapps/user,user.jsp
    .asp .js 5KB
  • webapps/user,user_edit.jsp
    .asp 7KB
  • webapps/user,user_test.jsp
    .asp 2KB
  • webapps/user,vxlogon.jsp
    .asp 2KB
  • webapps/whitelist,common_bypass.jsp
    .asp 1KB
  • webapps/whitelist,domain.jsp
    .asp .js 5KB
  • webapps/whitelist,domain_edit.jsp
    .asp 4KB
  • webapps/whitelist,keyword.jsp
    .asp .js 5KB
  • webapps/whitelist,keyword_edit.jsp
    .asp 4KB

9968fb6ee18934c2afc193425578e488_JaffaCakes118

  • SHA256 f646652723994218114d688def2e56f990a8efb100871b691b41ae4c41582176
  • MD5 SHA1 SHA512 SSDEEP