Overview

overview

3

Static

static

1

TEMP/default/big.html

windows7-x64

1

TEMP/default/big.html

windows10-2004-x64

1

TEMP/default/fl.html

windows7-x64

1

TEMP/default/fl.html

windows10-2004-x64

1

TEMP/defau...h.html

windows7-x64

1

TEMP/defau...h.html

windows10-2004-x64

1

TEMP/defau...x.html

windows7-x64

1

TEMP/defau...x.html

windows10-2004-x64

1

TEMP/default/s.html

windows7-x64

1

TEMP/default/s.html

windows10-2004-x64

1

TEMP/default/swf.html

windows7-x64

1

TEMP/default/swf.html

windows10-2004-x64

1

TEMP/default/tag.html

windows7-x64

1

TEMP/default/tag.html

windows10-2004-x64

1

TEMP/theme3/big.html

windows7-x64

1

TEMP/theme3/big.html

windows10-2004-x64

1

TEMP/theme3/fl.html

windows7-x64

1

TEMP/theme3/fl.html

windows10-2004-x64

1

TEMP/theme...h.html

windows7-x64

1

TEMP/theme...h.html

windows10-2004-x64

1

TEMP/theme...x.html

windows7-x64

1

TEMP/theme...x.html

windows10-2004-x64

1

TEMP/theme3/s.html

windows7-x64

1

TEMP/theme3/s.html

windows10-2004-x64

1

TEMP/theme3/swf.html

windows7-x64

1

TEMP/theme3/swf.html

windows10-2004-x64

1

TEMP/theme3/tag.html

windows7-x64

1

TEMP/theme3/tag.html

windows10-2004-x64

1

TEMP/theme...g.html

windows7-x64

1

TEMP/theme...g.html

windows10-2004-x64

1

admin/Uploadpic.asp

windows7-x64

3

admin/Uploadpic.asp

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    3706cb59e39467488303dd7fbd0c02c4_JaffaCakes118

  • Size

    1.5MB

  • MD5

    3706cb59e39467488303dd7fbd0c02c4

  • SHA1

    127d7f718d2ad98c123ddd472bfecc26c87df925

  • SHA256

    41612795bad3845e59443df3e78897a93e8ced973ed47306ab619263a65fdc19

  • SHA512

    453bf22e45d6cf2f3dfc3bda80f63529b3a843853443a60bef928466e11b82b79fdfdc378c757e477814cc6952daafb09e0c8488859df5b29820fdf461a57e01

  • SSDEEP

    49152:PKlFaNL1y3AM1hqnczs2LT3ir5iLaCgto1ecQ:PM+LmAMaczs2SiL3g6eJ

Score
1/10

Malware Config

Signatures

Files

  • 3706cb59e39467488303dd7fbd0c02c4_JaffaCakes118
    .rar
  • TEMP/default/big.html
    .html .js polyglot
  • TEMP/default/css.css
  • TEMP/default/fl.html
    .html .js polyglot
  • TEMP/default/flash.html
    .html
  • TEMP/default/images/BIG-LOGO.gif
    .gif
  • TEMP/default/images/Thumbs.db
  • TEMP/default/images/an.gif
    .gif
  • TEMP/default/images/b1.gif
    .gif
  • TEMP/default/images/bb.gif
    .gif
  • TEMP/default/images/bbj.gif
    .gif
  • TEMP/default/images/bhhh.gif
    .gif
  • TEMP/default/images/big-bj.gif
    .gif
  • TEMP/default/images/big-bj2.jpg
    .jpg
  • TEMP/default/images/big-sd.gif
    .gif
  • TEMP/default/images/bigtu.gif
    .gif
  • TEMP/default/images/bigtu.jpg
    .jpg
  • TEMP/default/images/bj3.gif
    .gif
  • TEMP/default/images/blank.gif
    .gif
  • TEMP/default/images/bs.gif
    .gif
  • TEMP/default/images/cc.gif
    .gif
  • TEMP/default/images/d1.gif
    .gif
  • TEMP/default/images/dq.gif
    .gif
  • TEMP/default/images/endbj.gif
    .gif
  • TEMP/default/images/good.gif
    .gif
  • TEMP/default/images/img-bg.gif
    .gif
  • TEMP/default/images/img-bg2.gif
    .gif
  • TEMP/default/images/img_02.gif
    .gif
  • TEMP/default/images/img_04.gif
    .gif
  • TEMP/default/images/img_08.gif
    .gif
  • TEMP/default/images/img_16.gif
    .gif
  • TEMP/default/images/img_16b.gif
    .gif
  • TEMP/default/images/img_16b2.gif
    .gif
  • TEMP/default/images/img_18.gif
    .gif
  • TEMP/default/images/img_20.gif
    .gif
  • TEMP/default/images/img_20b.gif
    .gif
  • TEMP/default/images/img_23.gif
    .gif
  • TEMP/default/images/img_27.gif
    .gif
  • TEMP/default/images/img_28.gif
    .gif
  • TEMP/default/images/img_29.gif
    .gif
  • TEMP/default/images/img_30.gif
    .gif
  • TEMP/default/images/img_31.gif
    .gif
  • TEMP/default/images/img_32.gif
    .gif
  • TEMP/default/images/img_35.gif
    .gif
  • TEMP/default/images/img_37.gif
    .gif
  • TEMP/default/images/img_40.gif
    .gif
  • TEMP/default/images/img_42.gif
    .gif
  • TEMP/default/images/img_51.jpg
    .jpg
  • TEMP/default/images/img_54.jpg
    .jpg
  • TEMP/default/images/img_57.gif
    .gif
  • TEMP/default/images/img_58.gif
    .gif
  • TEMP/default/images/img_61.gif
    .gif
  • TEMP/default/images/img_63.gif
    .gif
  • TEMP/default/images/img_65.gif
    .gif
  • TEMP/default/images/img_72.gif
    .gif
  • TEMP/default/images/jbj.gif
    .gif
  • TEMP/default/images/jj.gif
    .gif
  • TEMP/default/images/l1.gif
    .gif
  • TEMP/default/images/paihangbj.gif
    .gif
  • TEMP/default/images/play-.gif
    .gif
  • TEMP/default/images/play.gif
    .gif
  • TEMP/default/images/pull.gif
    .gif
  • TEMP/default/images/ri.gif
    .gif
  • TEMP/default/images/sc.gif
    .gif
  • TEMP/default/images/size.gif
    .gif
  • TEMP/default/images/star.gif
    .gif
  • TEMP/default/images/tbj.gif
    .gif
  • TEMP/default/images/top.gif
    .gif
  • TEMP/default/index.html
    .html .js polyglot
  • TEMP/default/s.html
    .html
  • TEMP/default/swf.html
    .html .js polyglot
  • TEMP/default/tag.html
    .html
  • TEMP/theme3/big.html
    .html .js polyglot
  • TEMP/theme3/css.css
  • TEMP/theme3/fl.html
    .html .js polyglot
  • TEMP/theme3/flash.html
    .html .js polyglot
  • TEMP/theme3/images/BJ2.jpg
    .jpg
  • TEMP/theme3/images/Thumbs.db
  • TEMP/theme3/images/anniu.gif
    .gif
  • TEMP/theme3/images/bhhh.gif
    .gif
  • TEMP/theme3/images/bigbj.gif
    .gif
  • TEMP/theme3/images/bigbj3.gif
    .gif
  • TEMP/theme3/images/bj.jpg
    .jpg
  • TEMP/theme3/images/bj3.gif
    .gif
  • TEMP/theme3/images/bn.gif
    .gif
  • TEMP/theme3/images/bn2.gif
  • TEMP/theme3/images/bq.gif
    .gif
  • TEMP/theme3/images/bs.gif
    .gif
  • TEMP/theme3/images/cv.gif
    .gif
  • TEMP/theme3/images/dl.gif
    .gif
  • TEMP/theme3/images/good.gif
    .gif
  • TEMP/theme3/images/img_03.jpg
    .jpg
  • TEMP/theme3/images/img_06.gif
    .gif
  • TEMP/theme3/images/img_08.gif
    .gif
  • TEMP/theme3/images/img_14.gif
    .gif
  • TEMP/theme3/images/img_16.gif
    .gif
  • TEMP/theme3/images/img_20.jpg
    .jpg
  • TEMP/theme3/images/img_23.jpg
    .jpg
  • TEMP/theme3/images/img_26.jpg
    .jpg
  • TEMP/theme3/images/img_28.jpg
    .jpg
  • TEMP/theme3/images/img_30.jpg
    .jpg
  • TEMP/theme3/images/img_34.gif
    .gif
  • TEMP/theme3/images/img_41.gif
    .gif
  • TEMP/theme3/images/img_43.gif
    .gif
  • TEMP/theme3/images/img_46.gif
    .gif
  • TEMP/theme3/images/img_48.gif
    .gif
  • TEMP/theme3/images/pl-bj.gif
    .gif
  • TEMP/theme3/images/pl.gif
    .gif
  • TEMP/theme3/images/play-.gif
    .gif
  • TEMP/theme3/images/play.gif
    .gif
  • TEMP/theme3/images/pull.gif
    .gif
  • TEMP/theme3/images/sc.gif
    .gif
  • TEMP/theme3/images/tutu.jpg
    .jpg
  • TEMP/theme3/images/xxbj2.gif
    .gif
  • TEMP/theme3/images/xz.gif
    .gif
  • TEMP/theme3/index.html
    .html .js polyglot
  • TEMP/theme3/pinglun.css
  • TEMP/theme3/s.html
    .html
  • TEMP/theme3/swf.html
    .html .js polyglot
  • TEMP/theme3/tag.html
    .html
  • TEMP/theme3/拷贝于 tag.html
    .html
  • admin/Uploadpic.asp
  • admin/ad_admin.asp
    .vbs
  • admin/ad_manage.asp
    .js
  • admin/admin.asp
    .js
  • admin/admin_config.asp
    .vbs
  • admin/admin_left.asp
  • admin/admin_main.asp
    .vbs
  • admin/admin_out.ASP
    .vbs
  • admin/admin_top.asp
    .js
  • admin/admin_user.asp
    .vbs
  • admin/calendar.css
  • admin/calendar.js
    .js
  • admin/check.asp
    .vbs
  • admin/cj_flash.asp
    .vbs
  • admin/cj_flash_all3.asp
    .vbs
  • admin/cj_gx.asp
    .vbs
  • admin/cj_tag.asp
    .vbs
  • admin/cjf.asp
    .vbs
  • admin/cjitem_manage.asp
    .vbs
  • admin/cjxm_admin.asp
    .vbs
  • admin/class_manage.asp
    .vbs
  • admin/classadmin.asp
    .vbs
  • admin/cms_01.asp
  • admin/cms_data.asp
    .vbs
  • admin/cms_data_descript.asp
    .html
  • admin/cms_login.asp
    .html
  • admin/cms_reg.asp
    .html
  • admin/comments_manage.asp
    .vbs
  • admin/conn.asp
    .asp .vbs polyglot
  • admin/cur_ver.txt
  • admin/databakup.asp
    .vbs
  • admin/dataimport.asp
    .vbs
  • admin/flash_add.asp
    .vbs
  • admin/flash_get.asp
    .vbs
  • admin/flash_manage.asp
    .vbs
  • admin/flashad_admin.asp
    .vbs
  • admin/flashad_manage.asp
    .js
  • admin/images/big-bj.jpg
    .jpg
  • admin/images/bj2.jpg
    .jpg
  • admin/images/dl.gif
    .gif
  • admin/images/fc.gif
    .gif
  • admin/images/fc2.gif
    .gif
  • admin/images/ig.jpg
    .jpg
  • admin/images/img_03.gif
    .gif
  • admin/images/img_05.gif
    .gif
  • admin/images/img_08.gif
    .gif
  • admin/images/img_14.gif
    .gif
  • admin/images/img_18.gif
    .gif
  • admin/images/img_22.gif
    .gif
  • admin/images/in.gif
    .gif
  • admin/images/ina.gif
    .gif
  • admin/images/l1.gif
    .gif
  • admin/images/l2.gif
    .gif
  • admin/images/l3.gif
    .gif
  • admin/images/left_bg.gif
    .gif
  • admin/images/login.jpg
    .jpg
  • admin/images/style.css
    .js
  • admin/inc/CHAR.INC
    .vbs
  • admin/inc/config.asp
    .vbs
  • admin/inc/creat.asp
  • admin/inc/function.asp
    .vbs
  • admin/inc/js.js
    .js
  • admin/inc/upload.inc
    .html .vbs polyglot
  • admin/index.htm
    .html .js polyglot
  • admin/index_mb.asp
    .vbs
  • admin/keyword.asp
    .vbs
  • admin/keyword_manage.asp
    .vbs
  • admin/link_admin.asp
    .vbs
  • admin/link_manage.asp
    .vbs
  • admin/make_html_flash.asp
    .vbs
  • admin/make_html_index.asp
    .vbs
  • admin/make_htmlclass.asp
    .vbs
  • admin/make_htmlclassall.asp
    .vbs
  • admin/make_htmltag.asp
    .vbs
  • admin/make_htmltagall.asp
    .vbs
  • admin/makehtml_ad.asp
    .vbs
  • admin/makehtml_flashall.asp
    .vbs
  • admin/makehtml_qt.asp
  • admin/pic_down.asp
    .vbs
  • admin/pic_downall.asp
    .vbs
  • admin/pl.asp
    .vbs
  • admin/pl_manage.asp
    .vbs
  • admin/runSync.asp
    .vbs
  • admin/sc.asp
    .vbs
  • admin/sc_admin.asp
    .vbs
  • admin/superuser.asp
    .vbs
  • admin/swf_down.asp
    .vbs
  • admin/swf_downall.asp
    .vbs
  • admin/sync/2010-10-01-01.txt
  • admin/sync/2010-10-01-02.txt
  • admin/sync/code/2010-10-01-01_run_test2.asp.txt
    .vbs
  • admin/sync/code/2010-10-01-01_test.asp.txt
  • admin/sync/code/2010-10-01-01_test2.asp.txt
    .vbs
  • admin/sync/code/2010-10-01-02_gl.asp.txt
  • admin/sync/ver.txt
  • admin/tag_add.asp
    .vbs
  • admin/tag_get.asp
    .vbs
  • admin/tag_manage.asp
    .vbs
  • admin/top_mb.asp
    .vbs
  • admin/tr.htc
  • admin/upfile.asp
    .vbs
  • admin/upload.asp
    .vbs
  • admin/user_admin.asp
    .vbs
  • admin/user_manage.asp
    .vbs
  • admin/user_modi.asp
    .vbs
  • admin/ver.txt
  • admin/xyx.All.js
    .js
  • admin/xyx.Jquery.js
    .js
  • admin/新云软件.url
    .url
  • ads/default_index_200x300.js
  • ads/default_search_250x250.js
  • ads/default_swf_1.js.js
  • ads/default_tag_250x250.js
  • ads/falsh_1.js.js
  • ads/fl_1.js.js
  • ads/flash_2.js.js
  • ads/index250x80.js
  • ads/theme3_fl_250x250.js
  • ads/theme3_flash_950x80.js
  • ads/theme3_flash_950x80_2.js
  • ads/theme3_index_250x250.js
  • ads/theme3_s_250x250.js
  • ads/theme3_swf_250x250.js
  • ads/theme3_tag_250x250.js
  • ads/tiepian.js
  • ads/tiepian2.js
  • ajax.js
    .js
  • c.asp
    .vbs
  • cms.asp
    .asp .vbs polyglot
  • cms.js
    .js
  • cmsajax.asp
  • crossdomain.xml
    .xml
  • css.css
  • data/#xydfl_1x.asp
  • flashplayer/player.swf
  • images/1.gif
    .gif
  • images/10.gif
    .gif
  • images/2.gif
    .gif
  • images/3.gif
    .gif
  • images/4.gif
    .gif
  • images/5.gif
    .gif
  • images/6.gif
    .gif
  • images/7.gif
    .gif
  • images/8.gif
    .gif
  • images/9.gif
    .gif
  • images/Thumbs.db
  • images/anniu.gif
    .gif
  • images/anniu1.gif
    .gif
  • images/anniu2.gif
    .gif
  • images/anniu3.gif
    .gif
  • images/anniu4.gif
    .gif
  • images/anniu5.gif
    .gif
  • images/anniu6.gif
    .gif
  • images/baidu.gif
    .gif
  • images/bb.gif
    .gif
  • images/big2.jpg
    .jpg
  • images/big3.jpg
    .jpg
  • images/bj2.gif
    .gif
  • images/bj_03.jpg
    .jpg
  • images/bjx.gif
    .gif
  • images/flash.gif
    .gif
  • images/full.gif
    .gif
  • images/img_03.gif
    .gif
  • images/img_06.gif
    .gif
  • images/img_08.gif
    .gif
  • images/img_10.gif
    .gif
  • images/img_100.gif
    .gif
  • images/img_17.gif
    .gif
  • images/img_20.gif
    .gif
  • images/img_24.jpg
    .jpg
  • images/img_26.jpg
    .jpg
  • images/img_32.gif
    .gif
  • images/img_35.gif
    .gif
  • images/img_37.gif
    .gif
  • images/img_42.gif
    .gif
  • images/img_45.gif
    .gif
  • images/img_49.gif
    .gif
  • images/img_51.gif
    .gif
  • images/img_54.gif
    .gif
  • images/img_56.gif
    .gif
  • images/img_63.gif
    .gif
  • images/img_66.jpg
    .jpg
  • images/img_69.jpg
    .jpg
  • images/img_74.gif
    .gif
  • images/img_76.gif
    .gif
  • images/img_79.gif
    .gif
  • images/img_84.gif
    .gif
  • images/img_87.gif
    .gif
  • images/img_91.jpg
    .jpg
  • images/img_94.jpg
    .jpg
  • images/img_96.gif
    .gif
  • images/img_97.gif
    .gif
  • images/left.gif
    .gif
  • images/left1.gif
    .gif
  • images/logo-tip.jpg
    .jpg
  • images/playan.gif
    .gif
  • images/right.gif
    .gif
  • images/right1.gif
    .gif
  • images/star.gif
    .gif
  • images/xlogo.gif
    .gif
  • inc/CHAR.INC
    .vbs
  • inc/ajax.js
    .js
  • inc/chkuser.asp
    .vbs
  • inc/code.asp
    .vbs
  • inc/config.asp
  • inc/conn.asp
    .vbs
  • inc/lable_parse.asp
    .vbs
  • index.htm
    .html .js polyglot
  • l.asp
    .vbs
  • s.asp
    .vbs
  • test.asp
  • 小游戏CMS XyxCms V1.3 正式版说明.txt
  • 模板标签参考 - 小游戏CMS帮助中心.url
    .url