Overview
overview
3Static
static
1Global.html
windows7-x64
1Global.html
windows10-2004-x64
1Install.vbs
windows7-x64
1Install.vbs
windows10-2004-x64
1POPbook.vbs
windows7-x64
1POPbook.vbs
windows10-2004-x64
1about.vbs
windows7-x64
1about.vbs
windows10-2004-x64
1admin/Admi...op.vbs
windows7-x64
1admin/Admi...op.vbs
windows10-2004-x64
1admin/POPbook.vbs
windows7-x64
1admin/POPbook.vbs
windows10-2004-x64
1admin/addu.vbs
windows7-x64
1admin/addu.vbs
windows10-2004-x64
1admin/admin.asp
windows7-x64
3admin/admin.asp
windows10-2004-x64
3admin/admin_add.vbs
windows7-x64
1admin/admin_add.vbs
windows10-2004-x64
1admin/admi...ta.vbs
windows7-x64
1admin/admi...ta.vbs
windows10-2004-x64
1admin/admin_addkcs.js
windows7-x64
3admin/admin_addkcs.js
windows10-2004-x64
3admin/admin_adds.js
windows7-x64
3admin/admin_adds.js
windows10-2004-x64
3admin/admin_cj.vbs
windows7-x64
1admin/admin_cj.vbs
windows10-2004-x64
1admin/admin_del.vbs
windows7-x64
1admin/admin_del.vbs
windows10-2004-x64
1admin/admi...ok.vbs
windows7-x64
1admin/admi...ok.vbs
windows10-2004-x64
1admin/admi...st.vbs
windows7-x64
1admin/admi...st.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Global.html
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Global.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
Install.vbs
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Install.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
POPbook.vbs
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
POPbook.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
about.vbs
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
about.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
admin/Admin_index_Top.vbs
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
admin/Admin_index_Top.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
admin/POPbook.vbs
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
admin/POPbook.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
admin/addu.vbs
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
admin/addu.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
admin/admin.asp
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
admin/admin.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
admin/admin_add.vbs
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
admin/admin_add.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
admin/admin_adddata.vbs
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
admin/admin_adddata.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
admin/admin_addkcs.js
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
admin/admin_addkcs.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
admin/admin_adds.js
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
admin/admin_adds.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
admin/admin_cj.vbs
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
admin/admin_cj.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
admin/admin_del.vbs
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
admin/admin_del.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
admin/admin_guestbook.vbs
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
admin/admin_guestbook.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
admin/admin_guestbook_list.vbs
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
admin/admin_guestbook_list.vbs
Resource
win10v2004-20240704-en
General
-
Target
31b996ee9ef1c832da2fb6600efcbe0d_JaffaCakes118
-
Size
922KB
-
MD5
31b996ee9ef1c832da2fb6600efcbe0d
-
SHA1
e133ac7345451dc9f637c8ab1d64fe5924031e17
-
SHA256
8d582cd61f0d36a86ec56d649c76d42de6d096b36f6a651cfb9ffc2554235e05
-
SHA512
4e36b925c83b2ba46ce4ed5156d6eddc4bfe3ea3a335f71f6e9ae18e51a2dff3937446126bf1823f8fc4eb614fca44fa3377434934754abe5e00992907b7e047
-
SSDEEP
24576:rqCzCWuk6Kx27pJfGM+NrXuQwqr6SfqPOI3VtM6JIEP5UqRN:rqCzCPkH2V9sr+bqr6SfqPb3VefkN
Malware Config
Signatures
Files
-
31b996ee9ef1c832da2fb6600efcbe0d_JaffaCakes118.rar
-
25175_readme.txt
-
Global.asa.html
-
Install.asp.vbs
-
POPbook.asp.vbs
-
about.asp.vbs
-
admin/Admin_Style.css
-
admin/Admin_index_Top.asp.vbs
-
admin/Admin_left.css
-
admin/POPbook.asp.vbs
-
admin/addu.asp.vbs
-
admin/admin.asp
-
admin/admin_add.asp.vbs
-
admin/admin_adddata.asp.vbs
-
admin/admin_addkcs.asp.js
-
admin/admin_adds.asp.js
-
admin/admin_cj.asp.vbs
-
admin/admin_del.asp.vbs
-
admin/admin_guestbook.asp.vbs
-
admin/admin_guestbook_list.asp.vbs
-
admin/admin_kcs.asp.vbs
-
admin/admin_liuyan.asp.vbs
-
admin/admin_main.asp
-
admin/admin_manager.asp.vbs
-
admin/admin_mc.asp.vbs
-
admin/admin_post.asp.vbs
-
admin/admin_select.asp.js
-
admin/admin_top.asp.html .vbs polyglot
-
admin/admin_user.asp.vbs
-
admin/admin_user_search.asp.vbs
-
admin/adminmenu.asp.js
-
admin/admpost.asp
-
admin/checklogin.asp.vbs
-
admin/cl.asp.vbs
-
admin/common.asp.vbs
-
admin/conn.asp.vbs
-
admin/del.asp
-
admin/fsoconfig.asp
-
admin/fsodel.asp.vbs
-
admin/fsodelbatch.asp.vbs
-
admin/fsoexplorer.asp.vbs
-
admin/fsofunctions.asp.vbs
-
admin/fsoupload.asp
-
admin/image/Admin_left.gif.gif
-
admin/image/arr.gif.gif
-
admin/image/arrd.gif.gif
-
admin/image/title.gif.gif
-
admin/inc.asp.vbs
-
admin/incupload.asp.html .vbs polyglot
-
admin/manage_results.asp.vbs
-
admin/manage_results_add.asp.js
-
admin/manage_results_adds.asp.js
-
admin/modify.asp.vbs
-
admin/save.asp.vbs
-
admin/search.asp
-
admin/selects.js.js
-
admin/show.asp.vbs
-
admin/sorttable.js.js
-
admin/student_adminlook.asp.vbs
-
admin/updata.asp.vbs
-
admin/upprocess.asp.vbs
-
admin/新云软件.url.url
-
checklogin.asp.vbs
-
config.asp
-
conn.asp.vbs
-
data/#class_cj.mdb
-
edituser.asp.vbs
-
error.asp
-
images/Column05_BG.gif.gif
-
images/Column05_BGb.gif.gif
-
images/Column05_C.gif.gif
-
images/Column05_L.gif.gif
-
images/Column05_Lb.gif.gif
-
images/Column05_R.gif.gif
-
images/Column05_Rb.gif.gif
-
images/Dot_Left.gif.gif
-
images/Dot_Right.gif.gif
-
images/More04.gif.gif
-
images/NEW_ADD.gif.gif
-
images/admin_top_bg.gif.gif
-
images/admin_top_close.gif.gif
-
images/admin_top_icon_1.gif.gif
-
images/admin_top_icon_5.gif.gif
-
images/admin_top_icon_6.gif.gif
-
images/admin_top_open.gif.gif
-
images/announce.gif.gif
-
images/arr.gif.gif
-
images/body_03.gif.gif
-
images/body_04.gif.gif
-
images/delete.gif.gif
-
images/dl.jpg.gif
-
images/edit.gif.gif
-
images/email.gif.gif
-
images/error.gif.gif
-
images/face/01.gif.gif
-
images/face/02.gif.gif
-
images/face/03.gif.gif
-
images/face/04.gif.gif
-
images/face/05.gif.gif
-
images/face/06.gif.gif
-
images/face/07.gif.gif
-
images/face/08.gif.gif
-
images/face/09.gif.gif
-
images/face/10.gif.gif
-
images/face/11.gif.gif
-
images/face/12.gif.gif
-
images/face/13.gif.gif
-
images/face/14.gif.gif
-
images/face/15.gif.gif
-
images/face/16.gif.gif
-
images/face/17.gif.gif
-
images/face/18.gif.gif
-
images/face/19.gif.gif
-
images/face/20.gif.gif
-
images/fals.GIF.gif
-
images/female.gif.gif
-
images/homepage.gif.gif
-
images/icon04.gif.gif
-
images/index_01.gif.gif
-
images/index_02.gif.gif
-
images/index_03.gif.gif
-
images/index_04.gif.gif
-
images/index_05.gif.gif
-
images/index_06.gif.gif
-
images/index_07.gif.gif
-
images/ip.gif.gif
-
images/jav.inc.html .js polyglot
-
images/jav1.inc.html .js polyglot
-
images/jav2.inc.html .js polyglot
-
images/jav3.inc.html .js polyglot
-
images/jav4.inc.html .js polyglot
-
images/jav5.inc.html .js polyglot
-
images/jav6.inc.html .js polyglot
-
images/jav7.inc.html .js polyglot
-
images/jav8.inc.html .js polyglot
-
images/left_01_01.gif.gif
-
images/left_01_02.gif.gif
-
images/left_01_03.gif.gif
-
images/left_01_04.gif.gif
-
images/left_02_01.gif.gif
-
images/left_02_03.gif.gif
-
images/left_03_01.gif.gif
-
images/left_03_02.gif.gif
-
images/left_03_03.gif.gif
-
images/left_04_01.gif.gif
-
images/left_04_03.gif.gif
-
images/left_05_01.gif.gif
-
images/left_05_02.gif.gif
-
images/left_05_03.gif.gif
-
images/left_menu_00_01.gif.gif
-
images/left_menu_00_02.gif.gif
-
images/left_menu_01_01.gif.gif
-
images/left_menu_01_02.gif.gif
-
images/left_menu_02_01.gif.gif
-
images/left_menu_02_02.gif.gif
-
images/left_menu_03_01.gif.gif
-
images/left_menu_03_02.gif.gif
-
images/left_menu_04_01.gif.gif
-
images/left_menu_04_02.gif.gif
-
images/left_menu_05_01.gif.gif
-
images/left_menu_05_02.gif.gif
-
images/line1.gif.gif
-
images/login_botton_01.gif.gif
-
images/login_botton_01_01.gif.gif
-
images/login_botton_01_03.gif.gif
-
images/login_botton_01_05.gif.gif
-
images/login_botton_03.gif.gif
-
images/login_botton_05.gif.gif
-
images/logo_foot.gif.gif
-
images/m_school2.GIF.gif
-
images/main_top_bg.GIF.gif
-
images/male.gif.gif
-
images/menu_01.gif.gif
-
images/menu_02.gif.gif
-
images/menu_03.gif.gif
-
images/menu_04.gif.gif
-
images/menu_bg.gif.gif
-
images/menu_mid_01.gif.gif
-
images/menu_mid_03.gif.gif
-
images/menu_top_01.gif.gif
-
images/menu_top_02.gif.gif
-
images/mz_cicon.gif.gif
-
images/new.gif.gif
-
images/new_add.jpg.jpg
-
images/no.gif.gif
-
images/oicq.gif.gif
-
images/pic/Shockwave.gif.gif
-
images/pic/bold.gif.gif
-
images/pic/center.gif.gif
-
images/pic/em01.gif
-
images/pic/em02.gif.gif
-
images/pic/em03.gif.gif
-
images/pic/em04.gif.gif
-
images/pic/em05.gif.gif
-
images/pic/em06.gif.gif
-
images/pic/em07.gif.gif
-
images/pic/em08.gif.gif
-
images/pic/em09.gif.gif
-
images/pic/em10.gif.gif
-
images/pic/em11.gif.gif
-
images/pic/em12.gif.gif
-
images/pic/em13.gif.gif
-
images/pic/em14.gif.gif
-
images/pic/em15.gif.gif
-
images/pic/em16.gif.gif
-
images/pic/em17.gif.gif
-
images/pic/em18.gif.gif
-
images/pic/em19.gif.gif
-
images/pic/em20.gif.gif
-
images/pic/em21.gif.gif
-
images/pic/em22.gif.gif
-
images/pic/em23.gif.gif
-
images/pic/em24.gif.gif
-
images/pic/em25.gif.gif
-
images/pic/em26.gif.gif
-
images/pic/em27.gif.gif
-
images/pic/em28.gif.gif
-
images/pic/em39.gif.gif
-
images/pic/em40.gif.gif
-
images/pic/em41.gif.gif
-
images/pic/em42.gif.gif
-
images/pic/em43.gif.gif
-
images/pic/em44.gif.gif
-
images/pic/em45.gif.gif
-
images/pic/em46.gif.gif
-
images/pic/em47.gif.gif
-
images/pic/em48.gif.gif
-
images/pic/em49.gif.gif
-
images/pic/em50.gif.gif
-
images/pic/em51.gif.gif
-
images/pic/em52.gif.gif
-
images/pic/em53.gif.gif
-
images/pic/email1.gif.gif
-
images/pic/face1.gif.gif
-
images/pic/fly.gif.gif
-
images/pic/glow.gif.gif
-
images/pic/image.gif.gif
-
images/pic/italicize.gif.gif
-
images/pic/move.gif.gif
-
images/pic/mp.gif.gif
-
images/pic/qt.gif.gif
-
images/pic/quote1.gif.gif
-
images/pic/rm.gif.gif
-
images/pic/shadow.gif.gif
-
images/pic/swf.gif.gif
-
images/pic/underline.gif.gif
-
images/pic/url.gif.gif
-
images/pic/url1.gif.gif
-
images/powered.gif.gif
-
images/right_01.gif.gif
-
images/right_01_01.gif.gif
-
images/right_01_02.gif.gif
-
images/right_01_03.gif.gif
-
images/right_02_01.gif.gif
-
images/right_02_03.gif.gif
-
images/right_03_01.gif.gif
-
images/right_03_02.gif.gif
-
images/right_03_03.gif.gif
-
images/space.gif.gif
-
images/spacer.gif.gif
-
images/style.css
-
images/success.gif.gif
-
images/title.gif.gif
-
images/title_bg_quit.gif.gif
-
images/top_logo.gif.gif
-
images/top_menu_bg.gif.gif
-
images/top_menu_bg2.gif.gif
-
images/type01.gif.gif
-
images/voteView.gif.gif
-
images/win.gif.gif
-
images/yes.gif.gif
-
images/zc.gif.gif
-
images/zs.gif.gif
-
images/分隔符.gif.gif
-
imgchk/validatebody.fix
-
imgchk/validatecode.asp.vbs
-
imgchk/validatehead.fix
-
inc/BOTTOM.asp
-
inc/Cls_ShowoPage.asp.vbs
-
inc/NK_SqlIn.Asp.vbs
-
inc/Ubb.asp
-
inc/Ubbadd.asp.html .js polyglot
-
inc/Ubbshow.asp.vbs
-
inc/clearevents.js.js
-
inc/copyright.asp
-
inc/md5.asp.vbs
-
inc/popmenu.js.js
-
inc/selectkc.asp.vbs
-
inc/selectlj.asp.vbs
-
inc/selectxq.asp.vbs
-
inc/showo_page.js.js
-
inc/stumenu.asp
-
inc/top.asp.html
-
index.asp.vbs
-
logout.ASP.vbs
-
post_list.asp.vbs
-
re.asp
-
readme_25175_002.html.html
-
register.asp.vbs
-
stulook.asp.vbs
-
stupuser.asp.vbs
-
success.asp
-
temp.asp.vbs
-
user.asp.vbs
-
使用说明.txt