Overview
overview
3Static
static
1Ad/1.js
windows7-x64
3Ad/1.js
windows10-2004-x64
3Ad/2.js
windows7-x64
3Ad/2.js
windows10-2004-x64
3Ad/3.js
windows7-x64
3Ad/3.js
windows10-2004-x64
3Ad/4.js
windows7-x64
3Ad/4.js
windows10-2004-x64
3Ad/5.js
windows7-x64
3Ad/5.js
windows10-2004-x64
3Ad/6.js
windows7-x64
3Ad/6.js
windows10-2004-x64
3Ad/7.js
windows7-x64
3Ad/7.js
windows10-2004-x64
3Ad/8.js
windows7-x64
3Ad/8.js
windows10-2004-x64
3Ad/新云软件.url
windows7-x64
1Ad/新云软件.url
windows10-2004-x64
1Config.asp
windows7-x64
3Config.asp
windows10-2004-x64
3Conn.vbs
windows7-x64
1Conn.vbs
windows10-2004-x64
1Data.vbs
windows7-x64
1Data.vbs
windows10-2004-x64
1Err.vbs
windows7-x64
1Err.vbs
windows10-2004-x64
1Hits.js
windows7-x64
3Hits.js
windows10-2004-x64
3Images/sof...ard.js
windows7-x64
3Images/sof...ard.js
windows10-2004-x64
3Images/thickbox.js
windows7-x64
3Images/thickbox.js
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Ad/1.js
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
Ad/1.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
Ad/2.js
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
Ad/2.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
Ad/3.js
Resource
win7-20240611-en
Behavioral task
behavioral6
Sample
Ad/3.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
Ad/4.js
Resource
win7-20240611-en
Behavioral task
behavioral8
Sample
Ad/4.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
Ad/5.js
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
Ad/5.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
Ad/6.js
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
Ad/6.js
Resource
win10v2004-20240611-en
Behavioral task
behavioral13
Sample
Ad/7.js
Resource
win7-20240611-en
Behavioral task
behavioral14
Sample
Ad/7.js
Resource
win10v2004-20240611-en
Behavioral task
behavioral15
Sample
Ad/8.js
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
Ad/8.js
Resource
win10v2004-20240611-en
Behavioral task
behavioral17
Sample
Ad/新云软件.url
Resource
win7-20240611-en
Behavioral task
behavioral18
Sample
Ad/新云软件.url
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
Config.asp
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
Config.asp
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
Conn.vbs
Resource
win7-20240419-en
Behavioral task
behavioral22
Sample
Conn.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
Data.vbs
Resource
win7-20240611-en
Behavioral task
behavioral24
Sample
Data.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
Err.vbs
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
Err.vbs
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
Hits.js
Resource
win7-20231129-en
Behavioral task
behavioral28
Sample
Hits.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
Images/softkeyboard.js
Resource
win7-20240508-en
Behavioral task
behavioral30
Sample
Images/softkeyboard.js
Resource
win10v2004-20240611-en
Behavioral task
behavioral31
Sample
Images/thickbox.js
Resource
win7-20240419-en
Behavioral task
behavioral32
Sample
Images/thickbox.js
Resource
win10v2004-20240611-en
General
-
Target
0104110cefb4a651ec4e68569f664d6c_JaffaCakes118
-
Size
2.1MB
-
MD5
0104110cefb4a651ec4e68569f664d6c
-
SHA1
6b4b52091b1de8404a7ab2da045a1590706d0a4c
-
SHA256
9b3fcd55136efa60e98cd32b564c8b0136d161374fd7dfb6d81f0396a01af351
-
SHA512
7477295e83c5a70ecb2ed1c420a7fef6d5ccf21e4502d1b9c56e21ae82f5c3d24a9148c0fa2c547668c06e27546d1094b36fde7e3f282f9a8714262a925adb5e
-
SSDEEP
49152:XCrGL6izBJArsXvlxf0HEwxZGrCXtuo3fqdzKtLmMgmPM7yJJvp9+XCZgH:7Lj3b/r0H3ruo3CdutL347+JvpR2H
Malware Config
Signatures
Files
-
0104110cefb4a651ec4e68569f664d6c_JaffaCakes118.rar
-
Ad/1.js
-
Ad/2.js
-
Ad/3.js
-
Ad/4.js
-
Ad/5.js
-
Ad/6.js
-
Ad/7.js
-
Ad/8.js
-
Ad/Thumbs.db
-
Ad/新云软件.url.url
-
Config.asp
-
Conn.asp.vbs
-
Data.asp.vbs
-
Err.asp.vbs
-
Gb.asp.html .js polyglot
-
Hits.asp.js
-
Images/20081121173582758.gif.gif
-
Images/Head.Fix
-
Images/Thumbs.db
-
Images/bmp.gif.gif
-
Images/body1.fix
-
Images/body10.fix
-
Images/body11.fix
-
Images/body12.fix
-
Images/body13.fix
-
Images/body14.fix
-
Images/body15.fix
-
Images/body16.fix
-
Images/body17.fix
-
Images/body18.fix
-
Images/body2.fix
-
Images/body3.fix
-
Images/body4.fix
-
Images/body5.fix
-
Images/body6.fix
-
Images/body7.fix
-
Images/body8.fix
-
Images/body9.fix
-
Images/loading.gif.gif
-
Images/mayi.swf
-
Images/nopic.gif.gif
-
Images/softkeyboard.js.js
-
Images/thickbox.css
-
Images/thickbox.js.js
-
Include/Adnim.Admin.asp
-
Include/Adnim.Admin.js.js
-
Include/Adnim.Checkcode.asp.vbs
-
Include/Adnim.Class.Gb.asp.vbs
-
Include/Adnim.Create.All.asp.vbs
-
Include/Adnim.Create.Class.asp
-
Include/Adnim.Create.Data.asp.vbs
-
Include/Adnim.Create.Index.asp
-
Include/Adnim.Create.Main.asp.vbs
-
Include/Adnim.Create.Search.asp.vbs
-
Include/Adnim.Create.Site.asp.vbs
-
Include/Adnim.Funciton.asp.vbs
-
Include/Adnim.Gb.asp
-
Include/Adnim.Jquery.js.js
-
Include/Adnim.Md5.asp.vbs
-
Include/Adnim.Player.asp
-
Index.asp.vbs
-
Js/Elite.js.js
-
Js/Hot.js.js
-
Js/New.js.js
-
List.asp.vbs
-
Movie#data/msmovie.asp
-
Play/1.html.html .js polyglot
-
Play/1.js.js
-
Play/10.asp
-
Play/10.html.html .js polyglot
-
Play/11.asp
-
Play/11.html.html .js polyglot
-
Play/12.html.html .js polyglot
-
Play/12.swf
-
Play/13.html.html .js polyglot
-
Play/14.html.html .js polyglot
-
Play/15.html.html .js polyglot
-
Play/15.swf
-
Play/16.html.html .js polyglot
-
Play/17.html.html .js polyglot
-
Play/18.html.html
-
Play/3.html.html
-
Play/4.html.html .js polyglot
-
Play/5.html.html .js polyglot
-
Play/56.html.html .js polyglot
-
Play/6.html.html .js polyglot
-
Play/6_1.js.js
-
Play/6_swf.htm.html .js polyglot
-
Play/6_swf.swf
-
Play/7.html.js
-
Play/8.html.html .js polyglot
-
Play/9.html.html .js polyglot
-
Play/fso.asp.vbs
-
Play/ip.asp.vbs
-
Play/ip2.asp
-
Play/player.js.js
-
Play/tudou.html.html .js polyglot
-
Play_1.asp.vbs
-
Play_2.asp.vbs
-
Plus/Cai_56.asp.vbs
-
Plus/Cai_Flash.asp.js
-
Plus/Cai_Inc.asp.vbs
-
Plus/Cai_XunLei.asp.vbs
-
Plus/Cai_tudou.asp.vbs
-
Plus/Cai_yuku.asp.vbs
-
Plus/Sql_Function.asp.vbs
-
Plus/Sql_Function_1.asp.vbs
-
Plus/Sql_Function_2.asp.vbs
-
Plus/Sql_Function_3.asp.vbs
-
Plus/ping_config.asp
-
Plus/ping_save.asp.vbs
-
Plus/vip_id.asp.vbs
-
Plus/vip_save.asp.vbs
-
Search.asp.vbs
-
Skin/blue/adn_all.html.html
-
Skin/blue/adn_data.html.html
-
Skin/blue/adn_elite.html
-
Skin/blue/adn_hot.html
-
Skin/blue/adn_index.html.html
-
Skin/blue/adn_list.html.html
-
Skin/blue/adn_new.html
-
Skin/blue/adn_player.html.html
-
Skin/blue/adn_search.html.html
-
Skin/blue/layout.css
-
Skin/blue/logo.gif.gif
-
Skin/blue/menu.js.js
-
Skin/blue/menubg.gif.gif
-
Skin/blue/menubg2.gif.gif
-
Skin/blue/menudiv.gif.gif
-
Skin/blue/menulast.gif.gif
-
Skin/blue/module.css
-
Skin/blue/small-wide-bg.gif.gif
-
Skin/blue/style.css
-
Skin/blue/wide-bg.gif.gif
-
Sql.asp.vbs
-
Ubb/edit.htm.html .js polyglot
-
Ubb/images/Thumbs.db
-
Ubb/images/bb_alipay.gif.gif
-
Ubb/images/bb_bold.gif.gif
-
Ubb/images/bb_center.gif.gif
-
Ubb/images/bb_clear.gif.gif
-
Ubb/images/bb_code.gif.gif
-
Ubb/images/bb_color.gif.gif
-
Ubb/images/bb_contract.gif.gif
-
Ubb/images/bb_email.gif.gif
-
Ubb/images/bb_expand.gif.gif
-
Ubb/images/bb_flash.gif.gif
-
Ubb/images/bb_image.gif.gif
-
Ubb/images/bb_indent.gif.gif
-
Ubb/images/bb_italic.gif.gif
-
Ubb/images/bb_left.gif.gif
-
Ubb/images/bb_look.gif.gif
-
Ubb/images/bb_menupop.gif.gif
-
Ubb/images/bb_orderedlist.gif.gif
-
Ubb/images/bb_outdent.gif.gif
-
Ubb/images/bb_qq.gif.gif
-
Ubb/images/bb_quote.gif.gif
-
Ubb/images/bb_redo.gif.gif
-
Ubb/images/bb_removeformat.gif.gif
-
Ubb/images/bb_right.gif.gif
-
Ubb/images/bb_rm.gif.gif
-
Ubb/images/bb_separator.gif.gif
-
Ubb/images/bb_table.gif.gif
-
Ubb/images/bb_underline.gif.gif
-
Ubb/images/bb_undo.gif.gif
-
Ubb/images/bb_unlink.gif.gif
-
Ubb/images/bb_unorderedlist.gif.gif
-
Ubb/images/bb_url.gif.gif
-
Ubb/images/bb_wmv.gif.gif
-
Ubb/images/bbcode.js.js
-
Ubb/images/common.Js.js
-
Ubb/images/credits.gif.gif
-
Ubb/images/editor.js.js
-
Ubb/images/menu.js.js
-
Ubb/images/s.gif.gif
-
Ubb/images/ubb.css
-
Ubb/ubb.asp.vbs
-
admin/Adn_Ad.asp.js
-
admin/Adn_Admin.asp.vbs
-
admin/Adn_CaiJi.asp
-
admin/Adn_Check.asp.vbs
-
admin/Adn_Class.asp.vbs
-
admin/Adn_Class_Save.asp.vbs
-
admin/Adn_Config.asp.vbs
-
admin/Adn_Conn.asp
-
admin/Adn_Create.asp.vbs
-
admin/Adn_CreateAll.asp.vbs
-
admin/Adn_CreateClass.asp.vbs
-
admin/Adn_CreateData.asp.vbs
-
admin/Adn_CreateElite.asp.vbs
-
admin/Adn_CreateHot.asp.vbs
-
admin/Adn_CreateIndex.asp.vbs
-
admin/Adn_CreateNew.asp.vbs
-
admin/Adn_CreateSiteMap.asp.vbs
-
admin/Adn_Data.asp.vbs
-
admin/Adn_Data_Add.asp.vbs
-
admin/Adn_Data_All.asp.vbs
-
admin/Adn_Data_Check.asp.vbs
-
admin/Adn_Data_Edit.asp.vbs
-
admin/Adn_Data_Laji.asp.vbs
-
admin/Adn_Data_Save.asp.vbs
-
admin/Adn_Err.asp.vbs
-
admin/Adn_Gb.asp.vbs
-
admin/Adn_Index.asp.js
-
admin/Adn_Left.asp.html
-
admin/Adn_Link.asp.vbs
-
admin/Adn_Login.asp.vbs
-
admin/Adn_Main.asp.vbs
-
admin/Adn_Master.asp.vbs
-
admin/Adn_Server.asp.vbs
-
admin/Adn_Server_Save.asp.vbs
-
admin/Adn_SiteMap.asp
-
admin/Adn_Skin.asp.vbs
-
admin/Adn_Tool.asp.vbs
-
admin/Adn_Top.asp.html
-
admin/Adn_Upfile.asp.asp .vbs polyglot
-
admin/Adn_Upfile.htm.html
-
admin/Adn_Upfile.inc.vbs
-
admin/Adn_Url.asp.vbs
-
admin/Adn_Url_Edit.asp.vbs
-
admin/Adn_Url_Save.asp.vbs
-
admin/Adn_XunLei_Config.js.js
-
admin/Adn_XunLei_Main.js.js
-
admin/images/Admin_Login1_0_02.gif.gif
-
admin/images/Admin_Login1_0_03.gif.gif
-
admin/images/Admin_Login1_0_04.gif.gif
-
admin/images/Admin_Login1_0_05.gif.gif
-
admin/images/Admin_Login1_0_06.gif.gif
-
admin/images/Admin_Login1_0_09.gif.gif
-
admin/images/Admin_Login1_0_10.gif.gif
-
admin/images/Admin_Login1_0_11.gif.gif
-
admin/images/Admin_Login1_0_15.gif.gif
-
admin/images/Admin_Login1_0_19.gif.gif
-
admin/images/Admin_Login1_0_23.gif.gif
-
admin/images/Admin_Login1_admin.gif.gif
-
admin/images/BaiduSiteMaplogo.gif.gif
-
admin/images/GoogleSiteMaplogo.gif.gif
-
admin/images/Thumbs.db
-
admin/images/arrow.gif.gif
-
admin/images/bg.gif.gif
-
admin/images/bg2.gif.gif
-
admin/images/bg3.gif.gif
-
admin/images/bg4.gif.gif
-
admin/images/body_bg.gif.gif
-
admin/images/button_bg.gif.gif
-
admin/images/left.gif.gif
-
admin/images/left_bg.gif.gif
-
admin/images/left_menu_bg.gif.gif
-
admin/images/menu01.gif.gif
-
admin/images/menu01_right.gif.gif
-
admin/images/menu02.gif.gif
-
admin/images/menu_button_bg.gif.gif
-
admin/images/menu_icon.gif.gif
-
admin/images/menu_icon2.gif.gif
-
admin/images/menu_left_topbg.gif.gif
-
admin/images/right.gif.gif
-
admin/images/search.gif.gif
-
admin/images/teble_bottom_left.gif.gif
-
admin/images/teble_bottom_right.gif.gif
-
admin/images/teble_top_left.gif.gif
-
admin/images/teble_top_right.gif.gif
-
admin/images/top_bg.gif.gif
-
admin/images/top_table_leftbg.gif.gif
-
admin/inc/admin.js.js
-
admin/index.asp
-
admin/skins/css/adn_main.css
-
admin/skins/css/main.css
-
admin/skins/css/style.css
-
admin/skins/css/style_left.css
-
admin/skins/default/Forum_nav.gif.gif
-
admin/skins/default/Thumbs.db
-
admin/skins/default/bg2.gif.gif
-
admin/skins/default/line_bg.gif.gif
-
admin/skins/images/Thumbs.db
-
admin/skins/images/arrow.gif.gif
-
admin/skins/images/bbs_home.gif.gif
-
admin/skins/images/bg.gif.gif
-
admin/skins/images/bg2.gif.gif
-
admin/skins/images/bg3.gif.gif
-
admin/skins/images/bg4.gif.gif
-
admin/skins/images/body_bg.gif.gif
-
admin/skins/images/botbg.gif.gif
-
admin/skins/images/button_bg.gif.gif
-
admin/skins/images/left.gif.gif
-
admin/skins/images/leftbg.gif.gif
-
admin/skins/images/leftop.gif.gif
-
admin/skins/images/logo_up.gif.gif
-
admin/skins/images/menu01.gif.gif
-
admin/skins/images/menu01_right.gif.gif
-
admin/skins/images/menu02.gif.gif
-
admin/skins/images/menu_button_bg.gif.gif
-
admin/skins/images/menu_icon2.gif.gif
-
admin/skins/images/menu_left_topbg.gif.gif
-
admin/skins/images/menubg.gif.gif
-
admin/skins/images/menubg_hover.gif.gif
-
admin/skins/images/menubg_on.gif.gif
-
admin/skins/images/right.gif.gif
-
admin/skins/images/tableft6.gif.gif
-
admin/skins/images/tabright6.gif.gif
-
admin/skins/images/top_bg.gif.gif