Overview
overview
3Static
static
1so/admin.vbs
windows7-x64
1so/admin.vbs
windows10-2004-x64
1so/big5.asp
windows7-x64
3so/big5.asp
windows10-2004-x64
3so/client.vbs
windows7-x64
1so/client.vbs
windows10-2004-x64
1so/config.vbs
windows7-x64
1so/config.vbs
windows10-2004-x64
1so/data/zxsoudata.asp
windows7-x64
3so/data/zxsoudata.asp
windows10-2004-x64
3so/festival.asp
windows7-x64
3so/festival.asp
windows10-2004-x64
3so/getcode.js
windows7-x64
3so/getcode.js
windows10-2004-x64
3so/index.asp
windows7-x64
3so/index.asp
windows10-2004-x64
3so/js/change.js
windows7-x64
3so/js/change.js
windows10-2004-x64
3so/js/getc...pic.js
windows7-x64
3so/js/getc...pic.js
windows10-2004-x64
3so/js/search.js
windows7-x64
3so/js/search.js
windows10-2004-x64
3so/md5.vbs
windows7-x64
1so/md5.vbs
windows10-2004-x64
1so/notice.asp
windows7-x64
3so/notice.asp
windows10-2004-x64
3so/rank.vbs
windows7-x64
1so/rank.vbs
windows10-2004-x64
1so/search.vbs
windows7-x64
1so/search.vbs
windows10-2004-x64
1so/system.asp
windows7-x64
3so/system.asp
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
so/admin.vbs
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
so/admin.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral3
Sample
so/big5.asp
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
so/big5.asp
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
so/client.vbs
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
so/client.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral7
Sample
so/config.vbs
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
so/config.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral9
Sample
so/data/zxsoudata.asp
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
so/data/zxsoudata.asp
Resource
win10v2004-20240704-en
Behavioral task
behavioral11
Sample
so/festival.asp
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
so/festival.asp
Resource
win10v2004-20240704-en
Behavioral task
behavioral13
Sample
so/getcode.js
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
so/getcode.js
Resource
win10v2004-20240708-en
Behavioral task
behavioral15
Sample
so/index.asp
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
so/index.asp
Resource
win10v2004-20240704-en
Behavioral task
behavioral17
Sample
so/js/change.js
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
so/js/change.js
Resource
win10v2004-20240704-en
Behavioral task
behavioral19
Sample
so/js/getcode_showpic.js
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
so/js/getcode_showpic.js
Resource
win10v2004-20240704-en
Behavioral task
behavioral21
Sample
so/js/search.js
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
so/js/search.js
Resource
win10v2004-20240704-en
Behavioral task
behavioral23
Sample
so/md5.vbs
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
so/md5.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral25
Sample
so/notice.asp
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
so/notice.asp
Resource
win10v2004-20240704-en
Behavioral task
behavioral27
Sample
so/rank.vbs
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
so/rank.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral29
Sample
so/search.vbs
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
so/search.vbs
Resource
win10v2004-20240704-en
Behavioral task
behavioral31
Sample
so/system.asp
Resource
win7-20240705-en
Behavioral task
behavioral32
Sample
so/system.asp
Resource
win10v2004-20240704-en
General
-
Target
2cb42c4314a573e9b727732d1e44d83f_JaffaCakes118
-
Size
219KB
-
MD5
2cb42c4314a573e9b727732d1e44d83f
-
SHA1
6fd6d8c646d71e896d513402eb24d649b0239fe2
-
SHA256
6be8ae20fb8edb5dbdf0f9865d42c6ddad3384cc87914568f26202d72a22fee8
-
SHA512
43f6eb2a13cabcd58a0ac3c55a3df4db4c9508ee4ce64f3bc115a1cfb5132a33a20a011d4027052d3985bd9ac77ff149af5b021821bf1e5a04ef7661e88ab995
-
SSDEEP
3072:mG2EALKP62AT1IZZvHLSNflHA1U1GejwQVO8H4YFcY/Syen+kSAoKkvu+i2HiZbf:NsT1iF1U1zjwlEuYqyen+kM2+iXkAt
Malware Config
Signatures
Files
-
2cb42c4314a573e9b727732d1e44d83f_JaffaCakes118.rar
-
so/admin.asp.vbs
-
so/big5.asp.asp .vbs polyglot
-
so/client.asp.vbs
-
so/config.asp.vbs
-
so/data/zxsoudata.asp
-
so/favicon.ico
-
so/festival.asp
-
so/find.xml
-
so/getcode.asp.js
-
so/images/bg_2008christmas.gif.gif
-
so/images/bg_beijing2008.gif.gif
-
so/images/bg_beijing2008_9.gif.gif
-
so/images/bg_china08.gif.gif
-
so/images/getcode_1.gif.gif
-
so/images/getcode_2.gif.gif
-
so/images/getcode_3.gif.gif
-
so/images/getcode_4.gif.gif
-
so/images/logo.gif.gif
-
so/images/logo_1616.gif.gif
-
so/images/logo_2008christmas.gif.gif
-
so/images/logo_2008christmas.psd
-
so/images/logo_9025.gif.gif
-
so/images/logo_beijing2008.gif.gif
-
so/images/logo_beijing2008_9.gif.gif
-
so/images/logo_china08.gif.gif
-
so/images/search_bg_2008christmas.gif.gif
-
so/images/search_bg_beijing2008.gif.gif
-
so/images/search_bg_beijing2008.jpg.jpg
-
so/images/search_bg_beijing2008_9.gif.gif
-
so/images/search_bg_beijing2008_9.jpg.jpg
-
so/images/search_bg_blue.gif.gif
-
so/images/search_bg_china08.gif.gif
-
so/images/search_bg_gray.gif.gif
-
so/images/search_bg_hot.gif.gif
-
so/images/search_bg_red.gif.gif
-
so/images/search_code_bg.gif.gif
-
so/images/search_code_more.gif.gif
-
so/images/search_code_nav.gif.gif
-
so/images/search_code_nav_bg.gif.gif
-
so/images/search_nav_2008christmas_1.gif.gif
-
so/images/search_nav_2008christmas_2.gif.gif
-
so/images/search_nav_2008christmas_3.gif.gif
-
so/images/search_nav_2008christmas_4.gif.gif
-
so/images/search_nav_2008christmas_5.gif.gif
-
so/images/search_nav_2008christmas_6.gif.gif
-
so/images/search_nav_2008christmas_7.gif.gif
-
so/images/search_nav_beijing2008_9_five.gif.gif
-
so/images/search_nav_beijing2008_9_four.gif.gif
-
so/images/search_nav_beijing2008_9_one.gif.gif
-
so/images/search_nav_beijing2008_9_seven.gif.gif
-
so/images/search_nav_beijing2008_9_six.gif.gif
-
so/images/search_nav_beijing2008_9_three.gif.gif
-
so/images/search_nav_beijing2008_9_two.gif.gif
-
so/images/search_nav_beijing2008_five.gif.gif
-
so/images/search_nav_beijing2008_four.gif.gif
-
so/images/search_nav_beijing2008_one.gif.gif
-
so/images/search_nav_beijing2008_seven.gif.gif
-
so/images/search_nav_beijing2008_six.gif.gif
-
so/images/search_nav_beijing2008_three.gif.gif
-
so/images/search_nav_beijing2008_two.gif.gif
-
so/images/search_nav_blue.gif.gif
-
so/images/search_nav_china08.gif.gif
-
so/images/search_nav_china08_mid.gif.gif
-
so/images/search_nav_hot.gif.gif
-
so/images/search_nav_yellow.gif.gif
-
so/index.asp
-
so/js/change.js.js
-
so/js/getcode_showpic.js.js
-
so/js/search.js.js
-
so/md5.asp.vbs
-
so/notice.asp
-
so/rank.asp.vbs
-
so/search.asp.vbs
-
so/style/admin.css
-
so/style/index_2008christmas.css
-
so/style/index_baidu.css
-
so/style/index_beijing2008.css
-
so/style/index_beijing2008_9.css
-
so/style/index_blue.css
-
so/style/index_china08.css
-
so/style/index_gray.css
-
so/style/index_hot.css
-
so/style/index_red.css
-
so/system.asp
-
so/version.asp
-
so/新云软件.url.url
-
so/说明.txt