Overview
overview
3Static
static
1biz/About/index.asp
windows7-x64
3biz/About/index.asp
windows10-2004-x64
3biz/Ad/ad4x4.js
windows7-x64
3biz/Ad/ad4x4.js
windows10-2004-x64
3biz/Ad/adshow.js
windows7-x64
3biz/Ad/adshow.js
windows10-2004-x64
3biz/Ad/adtop.js
windows7-x64
3biz/Ad/adtop.js
windows10-2004-x64
3biz/Ad/duilian.js
windows7-x64
3biz/Ad/duilian.js
windows10-2004-x64
3biz/Ad/index.asp
windows7-x64
3biz/Ad/index.asp
windows10-2004-x64
3biz/AdClic...st.vbs
windows7-x64
1biz/AdClic...st.vbs
windows10-2004-x64
1biz/AdClick/Index.vbs
windows7-x64
1biz/AdClick/Index.vbs
windows10-2004-x64
1biz/AdClic...Ad.vbs
windows7-x64
1biz/AdClic...Ad.vbs
windows10-2004-x64
1biz/Admin/...Ad.vbs
windows7-x64
1biz/Admin/...Ad.vbs
windows10-2004-x64
1biz/Admin/...pi.vbs
windows7-x64
1biz/Admin/...pi.vbs
windows10-2004-x64
1biz/Admin/...em.vbs
windows7-x64
1biz/Admin/...em.vbs
windows10-2004-x64
1biz/Admin/...Ip.vbs
windows7-x64
1biz/Admin/...Ip.vbs
windows10-2004-x64
1biz/Admin/...og.vbs
windows7-x64
1biz/Admin/...og.vbs
windows10-2004-x64
1biz/Admin/...me.asp
windows7-x64
3biz/Admin/...me.asp
windows10-2004-x64
3biz/Admin/Index.asp
windows7-x64
3biz/Admin/Index.asp
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
biz/About/index.asp
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
biz/About/index.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
biz/Ad/ad4x4.js
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
biz/Ad/ad4x4.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
biz/Ad/adshow.js
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
biz/Ad/adshow.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
biz/Ad/adtop.js
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
biz/Ad/adtop.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
biz/Ad/duilian.js
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
biz/Ad/duilian.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
biz/Ad/index.asp
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
biz/Ad/index.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
biz/AdClick/AdConst.vbs
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
biz/AdClick/AdConst.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
biz/AdClick/Index.vbs
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
biz/AdClick/Index.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
biz/AdClick/UpdateAd.vbs
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
biz/AdClick/UpdateAd.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
biz/Admin/Admin_Ad.vbs
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
biz/Admin/Admin_Ad.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
biz/Admin/Admin_Api.vbs
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
biz/Admin/Admin_Api.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
biz/Admin/Admin_Bankroolitem.vbs
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
biz/Admin/Admin_Bankroolitem.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
biz/Admin/Admin_Ip.vbs
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
biz/Admin/Admin_Ip.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
biz/Admin/Admin_RequestLog.vbs
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
biz/Admin/Admin_RequestLog.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
biz/Admin/Admin_Welcome.asp
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
biz/Admin/Admin_Welcome.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
biz/Admin/Index.asp
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
biz/Admin/Index.asp
Resource
win10v2004-20240709-en
General
-
Target
34ad98f3ca1909c47355f01dacb3645a_JaffaCakes118
-
Size
1.6MB
-
MD5
34ad98f3ca1909c47355f01dacb3645a
-
SHA1
b16181e345e57d92409125aee0d6cbc06ddeeeec
-
SHA256
d950e1619928a9d00c369ba05ad26b4d87c82b829fd54675f229757ebd090a3b
-
SHA512
d2c7f3ca26574045aba28c0003191462fa07dfd27d8b97732dc7ce0660bfadb7e38e5b4c0a52fab4c7261ee7899b2ee4e1e40f9db5d2401bf0d98efe7bdfbcb0
-
SSDEEP
49152:6euVzq0TRY7qnHKfLMXEcQXQSf32WmpLB8g6C:6euVzq0tYWHKf+nQT32WmKC
Malware Config
Signatures
Files
-
34ad98f3ca1909c47355f01dacb3645a_JaffaCakes118.rar
-
biz/About/index.asp
-
biz/Ad/06dnscom.gif.gif
-
biz/Ad/960x90_18022535.gif.gif
-
biz/Ad/960x90_18022535.jpg.jpg
-
biz/Ad/960x90_18022535111.gif.gif
-
biz/Ad/Thumbs.db
-
biz/Ad/ad4x4.js
-
biz/Ad/adpic/F4.gif.gif
-
biz/Ad/adpic/Thumbs.db
-
biz/Ad/adpic/a1.gif.gif
-
biz/Ad/adpic/chabeian-sndns-230X60.rar.rar
-
chabeian-sndns-230X60.gif.gif
-
biz/Ad/adpic/d1.gif.gif
-
biz/Ad/adpic/d1.rar.rar
-
d1.gif.gif
-
biz/Ad/adpic/d1xx.gif.gif
-
biz/Ad/adpic/d2.gif.gif
-
biz/Ad/adpic/d20426.gif.gif
-
biz/Ad/adpic/d3.gif.gif
-
biz/Ad/adpic/d4.gif.gif
-
biz/Ad/adpic/d4_taobao.gif.gif
-
biz/Ad/adpic/dl120.gif.gif
-
biz/Ad/adpic/e1.gif.gif
-
biz/Ad/adpic/e2.gif.gif
-
biz/Ad/adpic/i1.jpg.jpg
-
biz/Ad/adpic/i2.gif.gif
-
biz/Ad/adshow.js
-
biz/Ad/adtop.js
-
biz/Ad/beian.gif.gif
-
biz/Ad/dl120.gif.gif
-
biz/Ad/duilian.js.js
-
biz/Ad/index.asp
-
biz/Ad/melyyagent.gif.gif
-
biz/Ad/melyyidc.gif.gif
-
biz/Ad/miku001.gif.gif
-
biz/Ad/p1.gif
-
biz/Ad/p2.jpg.jpg
-
biz/Ad/p3.jpg.jpg
-
biz/Ad/p4.gif.gif
-
biz/Ad/sndns.gif.gif
-
biz/Ad/tj55.gif.gif
-
biz/AdClick/AdConst.Asp.vbs
-
biz/AdClick/Index.asp.vbs
-
biz/AdClick/UpdateAd.Asp.vbs
-
biz/Admin/Admin_Ad.Asp.vbs
-
biz/Admin/Admin_Api.Asp.vbs
-
biz/Admin/Admin_Bankroolitem.Asp.vbs
-
biz/Admin/Admin_Ip.Asp.vbs
-
biz/Admin/Admin_RequestLog.Asp.vbs
-
biz/Admin/Admin_Welcome.Asp
-
biz/Admin/Css/Thumbs.db
-
biz/Admin/Css/anniu.jpg.jpg
-
biz/Admin/Css/anniu_20.jpg.jpg
-
biz/Admin/Css/ba.jpg.jpg
-
biz/Admin/Css/ba2.jpg.jpg
-
biz/Admin/Css/ba_05.jpg.jpg
-
biz/Admin/Css/ba_11.jpg.jpg
-
biz/Admin/Css/ba_15.jpg.jpg
-
biz/Admin/Css/back.gif.gif
-
biz/Admin/Css/badd_03.jpg.jpg
-
biz/Admin/Css/bj.jpg.jpg
-
biz/Admin/Css/btn1.jpg.jpg
-
biz/Admin/Css/check_error.gif.gif
-
biz/Admin/Css/check_right.gif.gif
-
biz/Admin/Css/common.css
-
biz/Admin/Css/contact_53.jpg.jpg
-
biz/Admin/Css/contact_61.jpg.jpg
-
biz/Admin/Css/dian_31.jpg.jpg
-
biz/Admin/Css/dian_34.jpg.jpg
-
biz/Admin/Css/dl.jpg.jpg
-
biz/Admin/Css/foot_05.jpg.jpg
-
biz/Admin/Css/gg31.jpg.jpg
-
biz/Admin/Css/jj.gif.gif
-
biz/Admin/Css/lb_30.jpg.jpg
-
biz/Admin/Css/lefttitarr.gif.gif
-
biz/Admin/Css/lie.jpg.jpg
-
biz/Admin/Css/liuc_50.jpg.jpg
-
biz/Admin/Css/loading.gif.gif
-
biz/Admin/Css/logininfo.jpg.jpg
-
biz/Admin/Css/menubg.jpg.jpg
-
biz/Admin/Css/navbg_book.gif.gif
-
biz/Admin/Css/news-bt.jpg.jpg
-
biz/Admin/Css/regbt.gif.gif
-
biz/Admin/Css/regbtm.gif.gif
-
biz/Admin/Css/regbtt.gif.gif
-
biz/Admin/Css/register.css
-
biz/Admin/Css/regtt.gif.gif
-
biz/Admin/Css/step_1.gif.gif
-
biz/Admin/Css/titbg.jpg.jpg
-
biz/Admin/Css/topbg.jpg.jpg
-
biz/Admin/Css/user_14.jpg.jpg
-
biz/Admin/Css/user_18.jpg.jpg
-
biz/Admin/Css/user_21.jpg.jpg
-
biz/Admin/Css/user_24.jpg.jpg
-
biz/Admin/Css/xw_38.jpg.jpg
-
biz/Admin/Css/zczh_13.jpg.jpg
-
biz/Admin/Css/zczh_16.jpg.jpg
-
biz/Admin/Images/Thumbs.db
-
biz/Admin/Images/bapz_06.jpg.jpg
-
biz/Admin/Images/basic.css
-
biz/Admin/Images/calendar/Calendar.gif.gif
-
biz/Admin/Images/calendar/Calendar_Close.gif.gif
-
biz/Admin/Images/calendar/Calendar_Closed.gif
-
biz/Admin/Images/calendar/Calendar_Down.gif.gif
-
biz/Admin/Images/calendar/Calendar_Drop1.gif.gif
-
biz/Admin/Images/calendar/Calendar_Drop2.gif.gif
-
biz/Admin/Images/calendar/Calendar_Left1.gif.gif
-
biz/Admin/Images/calendar/Calendar_Left2.gif.gif
-
biz/Admin/Images/calendar/Calendar_Right1.gif.gif
-
biz/Admin/Images/calendar/Calendar_Right2.gif.gif
-
biz/Admin/Images/calendar/Calendar_Up.gif.gif
-
biz/Admin/Images/calendar/Thumbs.db
-
biz/Admin/Images/check_error.gif.gif
-
biz/Admin/Images/check_right.gif.gif
-
biz/Admin/Images/foot_96.jpg.jpg
-
biz/Admin/Images/foot_99.jpg.jpg
-
biz/Admin/Images/indexmain.css
-
biz/Admin/Images/liuc_54.jpg.jpg
-
biz/Admin/Images/liuchengnew.gif.gif
-
biz/Admin/Images/loading.gif.gif
-
biz/Admin/Images/main.css
-
biz/Admin/Images/more_03.jpg.jpg
-
biz/Admin/Images/nw_liuchengpic2.gif.gif
-
biz/Admin/Images/top_logo.jpg.jpg
-
biz/Admin/Index.Asp
-
biz/Admin/Login.asp.vbs
-
biz/Admin/LoginOut.asp
-
biz/Api/Index.asp.vbs
-
biz/Business/index.asp
-
biz/Common/GetCert.asp.vbs
-
biz/Common/GetCount.Asp
-
biz/Common/GetDomain.Asp.vbs
-
biz/Content/toolsite.css
-
biz/Content/topbar.css
-
biz/Database/##FFGdd886941TTsdfg.mdb
-
biz/Dev/details.asp
-
biz/Dev/index.asp
-
biz/Dev/piliang.asp.vbs
-
biz/Dev/功能说明.txt
-
biz/Domain/index.asp.vbs
-
biz/Function/MelyySoft.Article.asp.vbs
-
biz/Function/MelyySoft.Common.Content.asp.vbs
-
biz/Function/MelyySoft.Common.Manage.asp.vbs
-
biz/Function/MelyySoft.Common.asp.vbs
-
biz/Function/MelyySoft.Data.Asp.vbs
-
biz/Function/MelyySoft.FSO.asp.vbs
-
biz/Function/MelyySoft.System.Asp.vbs
-
biz/Function/MelyySoft.XmlHttp.asp.vbs
-
biz/Function/cha.Cache.asp.vbs
-
biz/Function/cha.Common.Asp.vbs
-
biz/Function/cha.XmlHttp.Asp.vbs
-
biz/Help/index.asp
-
biz/IDC/index.asp
-
biz/Include/Config.asp
-
biz/Include/ConfigAd.asp
-
biz/Include/ConfigApi.asp
-
biz/Include/ConfigGenuine.asp
-
biz/Include/ConfigSiteBranch.Asp
-
biz/Include/Conn.asp.vbs
-
biz/Include/Conn_dbFile.Asp
-
biz/Include/Const.asp.vbs
-
biz/Include/ConstMaster.asp.vbs
-
biz/Js/ajax.js.js
-
biz/Js/webmasterHome.js.js
-
biz/Language/Gb2312.xml.xml
-
biz/Language/MelyySoft.Common.Asp
-
biz/Miibeian/index.asp.vbs
-
biz/Show/index.asp.vbs
-
biz/Spread/index.asp
-
biz/Whois/Index.asp
-
biz/cache.asp
-
biz/css/Subject_Title_bg.gif.gif
-
biz/css/Subject_bg.gif.gif
-
biz/css/domain.css
-
biz/css/index.css
-
biz/css/tabs.gif.gif
-
biz/css/web.css
-
biz/download/index.asp.js
-
biz/download/说明.txt
-
biz/httpd.ini
-
biz/httpd.parse.errors
-
biz/images/Logo_Top.gif.gif
-
biz/images/Search_Bg.gif.gif
-
biz/images/Search_Bnt.gif.gif
-
biz/images/Search_L.gif.gif
-
biz/images/Search_R.gif.gif
-
biz/images/Thumbs.db
-
biz/images/ba_balckListTab.css
-
biz/images/ba_style.css
-
biz/images/ba_tablesorter.css
-
biz/images/bodybg.png.png
-
biz/images/btn_2.jpg.jpg
-
biz/images/certinfo/b_01.gif.gif
-
biz/images/certinfo/b_02.gif.gif
-
biz/images/certinfo/b_03.gif.gif
-
biz/images/certinfo/b_04.gif.gif
-
biz/images/certinfo/b_05.gif.gif
-
biz/images/certinfo/b_06.gif.gif
-
biz/images/certinfo/b_07.gif.gif
-
biz/images/certinfo/b_08.gif.gif
-
biz/images/icon_alltheweb.gif.gif
-
biz/images/icon_altavista.gif.gif
-
biz/images/icon_baidu.gif.gif
-
biz/images/icon_bing.gif.gif
-
biz/images/icon_google.gif.gif
-
biz/images/icon_qq.gif.gif
-
biz/images/icon_yahoo.gif.gif
-
biz/images/indexed_cn.gif.gif
-
biz/images/indexed_en.gif.gif
-
biz/images/loadding.gif.gif
-
biz/images/loading.gif.gif
-
biz/images/menu-bg.gif.gif
-
biz/images/s-menu-bg.gif.gif
-
biz/images/sogoupr.gif.gif
-
biz/images/sogouprbar.gif.gif
-
biz/images/url.gif
-
biz/index.asp.vbs
-
biz/使用说明/功能说明.txt
-
biz/使用说明/配置说明.txt
-
biz/新云软件.url.url