Overview
overview
3Static
static
1Admin/Error.asp
windows7-x64
3Admin/Error.asp
windows10-2004-x64
3Admin/Main.vbs
windows7-x64
1Admin/Main.vbs
windows10-2004-x64
1Admin/[email protected]
windows7-x64
1Admin/[email protected]
windows10-2004-x64
1Admin/[email protected]
windows7-x64
1Admin/[email protected]
windows10-2004-x64
1Admin/[email protected]
windows7-x64
1Admin/[email protected]
windows10-2004-x64
1Admin/[email protected]
windows7-x64
1Admin/[email protected]
windows10-2004-x64
1Admin/[email protected]
windows7-x64
1Admin/[email protected]
windows10-2004-x64
1Admin/[email protected]
windows7-x64
1Admin/[email protected]
windows10-2004-x64
1Admin/[email protected]
windows7-x64
1Admin/[email protected]
windows10-2004-x64
1Admin/[email protected]
windows7-x64
1Admin/[email protected]
windows10-2004-x64
1Admin/[email protected]
windows7-x64
1Admin/[email protected]
windows10-2004-x64
1Admin/[email protected]
windows7-x64
1Admin/[email protected]
windows10-2004-x64
1Admin/[email protected]
windows7-x64
1Admin/[email protected]
windows10-2004-x64
1Admin/[email protected]
windows7-x64
3Admin/[email protected]
windows10-2004-x64
3Admin/[email protected]
windows7-x64
1Admin/[email protected]
windows10-2004-x64
1Admin/[email protected]
windows7-x64
1Admin/[email protected]
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Admin/Error.asp
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
Admin/Error.asp
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
Admin/Main.vbs
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
Admin/Main.vbs
Resource
win10v2004-20240508-en
General
-
Target
17aa5f31beed3e23e5df55e2bed2819b_JaffaCakes118
-
Size
400KB
-
MD5
17aa5f31beed3e23e5df55e2bed2819b
-
SHA1
daff4c1241f51cb8e0a8ac1aa3d66e8c617658e4
-
SHA256
d3dcf4af00658da5e7dc20c2df572357d554109cda989bc18a59ce610007a814
-
SHA512
d43caa1d72aa2c306f368230e6c2a747f58d3730813dde4a41e04e2610e45d0641eba329d186f25dae8e5f3f28e64f1d1707c8d7e9db453c6fc5803f0cb64c2a
-
SSDEEP
6144:6lE8FMYWge+emSOBvSraZMJMBxI4PUCATMDMQXSUZeQZzDhKeneDVzFa+:KVldvS++J0p1MQXPZe6nYz1
Malware Config
Signatures
Files
-
17aa5f31beed3e23e5df55e2bed2819b_JaffaCakes118.rar
-
Admin/Error.asp.asp .vbs polyglot
-
Admin/Main.asp.vbs
-
Admin/[email protected].vbs
-
Admin/[email protected].vbs
-
Admin/[email protected].vbs
-
Admin/[email protected].vbs
-
Admin/[email protected].vbs
-
Admin/[email protected].vbs
-
Admin/[email protected].vbs
-
Admin/[email protected].vbs
-
Admin/[email protected].vbs
-
Admin/[email protected].vbs
-
Admin/[email protected].vbs
-
Admin/[email protected]
-
Admin/[email protected].vbs
-
Admin/[email protected].vbs
-
Admin/[email protected].vbs
-
Admin/img/+-.gif.gif
-
Admin/img/+.gif.gif
-
Admin/img/-.gif.gif
-
Admin/img/Thumbs.db
-
Admin/img/WWS.gif.gif
-
Admin/img/adminlogin.gif.gif
-
Admin/img/adminloginbutton.gif.gif
-
Admin/img/css.css
-
Admin/img/js.js.js
-
Admin/img/leftmenubg.gif.gif
-
Admin/img/leftmenuoverbg.gif.gif
-
Admin/img/li.gif.gif
-
Admin/img/product.jpg.jpg
-
Admin/img/topbg.gif.gif
-
Admin/img/topimg.gif.gif
-
Admin/index.asp.vbs
-
Admin/新云软件.url.url
-
Ajax.asp
-
Article.asp.vbs
-
Book.asp.vbs
-
Channel.asp.vbs
-
Data/#WWS#.mdb
-
Dj.asp.vbs
-
Download.asp.vbs
-
Editor/css/behaviors/disablehandles.htc
-
Editor/css/behaviors/hiddenfield.gif.gif
-
Editor/css/behaviors/hiddenfield.htc
-
Editor/css/behaviors/showtableborders.htc.js
-
Editor/css/fck_editorarea.css
-
Editor/css/fck_internal.css
-
Editor/css/fck_showtableborders_gecko.css
-
Editor/css/images/Thumbs.db
-
Editor/css/images/fck_flashlogo.gif.gif
-
Editor/dialog/common/fck_dialog_common.js.js
-
Editor/dialog/fck_image.html.html
-
Editor/dialog/fck_image/fck_image.js.js
-
Editor/dialog/fck_link.html.html
-
Editor/dialog/fck_link/fck_link.js.js
-
Editor/dialog/fck_media.html.html
-
Editor/dialog/fck_media/fck_media.js.js
-
Editor/dialog/fck_source.html.html .js polyglot
-
Editor/dialog/fck_table.html.html .js polyglot
-
Editor/fckblank.html.html
-
Editor/fckconfig.js
-
Editor/fckdialog.html.html .js polyglot
-
Editor/fckeditor.html.html
-
Editor/images/spacer.gif.gif
-
Editor/js/fck_startup.js.js
-
Editor/js/fckeditorcode_gecko.js.js
-
Editor/js/fckeditorcode_gecko_1.js.js
-
Editor/js/fckeditorcode_gecko_2.js.js
-
Editor/js/fckeditorcode_ie.js.js
-
Editor/js/fckeditorcode_ie_1.js.js
-
Editor/js/fckeditorcode_ie_2.js.js
-
Editor/lang/en.js.js
-
Editor/lang/fcklanguagemanager.js.js
-
Editor/lang/zh-cn.js.js
-
Editor/lang/zh.js.js
-
Editor/skins/default/fck_contextmenu.css
-
Editor/skins/default/fck_dialog.css
-
Editor/skins/default/fck_editor.css
-
Editor/skins/default/images/toolbar.start.gif.gif
-
Editor/skins/default/toolbar/Thumbs.db
-
Editor/skins/default/toolbar/about.gif.gif
-
Editor/skins/default/toolbar/bold.gif.gif
-
Editor/skins/default/toolbar/image.gif.gif
-
Editor/skins/default/toolbar/indent.gif.gif
-
Editor/skins/default/toolbar/inserthorizontalrule.gif.gif
-
Editor/skins/default/toolbar/insertorderedlist.gif.gif
-
Editor/skins/default/toolbar/insertunorderedlist.gif.gif
-
Editor/skins/default/toolbar/italic.gif.gif
-
Editor/skins/default/toolbar/justifycenter.gif.gif
-
Editor/skins/default/toolbar/justifyleft.gif.gif
-
Editor/skins/default/toolbar/justifyright.gif.gif
-
Editor/skins/default/toolbar/link.gif.gif
-
Editor/skins/default/toolbar/media.gif.gif
-
Editor/skins/default/toolbar/outdent.gif.gif
-
Editor/skins/default/toolbar/preview.gif.gif
-
Editor/skins/default/toolbar/source.gif.gif
-
Editor/skins/default/toolbar/table.gif.gif
-
Editor/skins/default/toolbar/textcolor.gif.gif
-
Editor/skins/default/toolbar/underline.gif.gif
-
Editor/skins/default/toolbar/unlink.gif.gif
-
Editor/skins/default/toolbar/unorderedlist.gif.gif
-
Error.asp.asp .vbs polyglot
-
Img/1.gif.gif
-
Img/1.jpg.jpg
-
Img/10.jpg.jpg
-
Img/2.gif.gif
-
Img/2.jpg.jpg
-
Img/3.gif.gif
-
Img/3.jpg.jpg
-
Img/4.gif.gif
-
Img/4.jpg.jpg
-
Img/5.gif.gif
-
Img/5.jpg
-
Img/6.gif.gif
-
Img/6.jpg.jpg
-
Img/7.gif.gif
-
Img/7.jpg.jpg
-
Img/8.gif.gif
-
Img/8.jpg.jpg
-
Img/9.jpg.jpg
-
Img/logo.gif.gif
-
Img/noimg.gif.gif
-
Img/nopic.gif.gif
-
Index.asp.vbs
-
Link.asp.vbs
-
News.asp.vbs
-
Photo.asp.vbs
-
Reply.asp
-
Rss.asp.vbs
-
Search.asp.vbs
-
Setup.asp.asp .vbs polyglot
-
Skin/Index/1.css
-
Skin/Index/2.css
-
Skin/Index/3.css
-
Skin/Index/Cache/Article.#
-
Skin/Index/Cache/ArticleShow.#
-
Skin/Index/Cache/Book.#
-
Skin/Index/Cache/BookAdd.#.js
-
Skin/Index/Cache/Channel.#
-
Skin/Index/Cache/DJ.#
-
Skin/Index/Cache/DjShow.#
-
Skin/Index/Cache/Download.#
-
Skin/Index/Cache/DownloadShow.#
-
Skin/Index/Cache/Foot.#
-
Skin/Index/Cache/Head.#
-
Skin/Index/Cache/Index.#
-
Skin/Index/Cache/Link.#
-
Skin/Index/Cache/News.#
-
Skin/Index/Cache/NewsShow.#
-
Skin/Index/Cache/Photo.#
-
Skin/Index/Cache/PhotoShow.#
-
Skin/Index/Cache/Search.#
-
Skin/Index/Cache/User.#
-
Skin/Index/Cache/UserAddinfo.#
-
Skin/Index/Cache/UserEdit.#
-
Skin/Index/Cache/UserLogin.#
-
Skin/Index/Cache/UserReg.#
-
Skin/Index/Cache/UserReply.#
-
Skin/Index/Thumbs.db
-
Skin/Index/UserID.gif.gif
-
Skin/Index/UserPass.gif.gif
-
Skin/Index/flash.swf
-
Skin/Index/footbg_.gif.gif
-
Skin/Index/headbg.gif.gif
-
Skin/Index/headbg_.gif.gif
-
Skin/Index/headbg__.gif.gif
-
Skin/Index/li.gif.gif
-
Skin/Index/li_.gif.gif
-
Skin/Index/li__.gif.gif
-
Skin/Index/loginbg.gif.gif
-
Skin/Index/loginbg_.gif.gif
-
Skin/Index/loginbg__.gif.gif
-
Skin/Index/menubg.gif.gif
-
Skin/Index/menubg_.gif.gif
-
Skin/Index/menubg__.gif.gif
-
Skin/Index/putbg.gif.gif
-
Skin/Index/titlebg.gif.gif
-
Skin/Index/titlebg_.gif.gif
-
Skin/Index/titlebg__.gif.gif
-
System/Admin.Class.Asp.vbs
-
System/Code.Asp.asp
-
System/Conn.Asp.asp .vbs polyglot
-
System/Set.Asp
-
System/Share.Class.asp.vbs
-
System/System.js.js
-
System/Upload.Sct.js .xml polyglot
-
System/WWS.Class.Asp.vbs
-
User.asp.vbs
-
Vote.asp.vbs
-
说明.txt