General

  • Target

    3e1dbab1c14221f73b36e5ae38503642_JaffaCakes118

  • Size

    3.9MB

  • MD5

    3e1dbab1c14221f73b36e5ae38503642

  • SHA1

    dc90c27f87a46b09c62f807ff6a3d14ec047250f

  • SHA256

    49bef3f9bf36d18f2a0d38019fcf3ea618af95b66be71d34a0dce4a80dd42f7c

  • SHA512

    e7a1f3c213606b83c862aa5d616010aa4d0fa4a28711d7ca50e89ddb7e35a30f11a8722f7e0f3db994f92e34c9f65b0b4fceb5128ff6d7c05a2647b58f72943c

  • SSDEEP

    98304:zWNK1oT8uDJGPaXZvGUcLPw/ABnX5O/YUuqfUB:zqVxUaXZeUO4OnpO/uTB

Score
3/10

Malware Config

Signatures

  • Unsigned PE 45 IoCs

    Checks for missing Authenticode signature.

Files

  • 3e1dbab1c14221f73b36e5ae38503642_JaffaCakes118
    .rar
  • About/.html
  • About/About.html
  • About/AboutNiaoMa.html
  • About/AboutZeiGou.html
  • About/ZeiDu.html
  • About/ads.html
  • About/dd.html
  • About/sss.html
  • About/新云软件.url
    .url
  • App_Data/Data/Dict.dct
  • App_Data/Data/Name.dct
  • App_Data/Data/SingleWords.txt
  • App_Data/Data/chsstopwords.txt
  • App_Data/Data/engstopwords.txt
  • App_Data/NiaoMa/NiaoMa.db
  • App_Data/NiaoMa/复件 NiaoMa.db
  • Common/image.aspx
  • Config/ConnectionStrings.config
  • Default.aspx
    .js
  • PrecompiledApp.config
  • Template/About.html
  • Web.config
  • admin/Default.aspx
  • admin/MasterPage.master
  • admin/about.aspx
  • admin/ad.aspx
  • admin/add_link.aspx
  • admin/admin_password.aspx
  • admin/images/+.gif
    .gif
  • admin/images/-.gif
    .gif
  • admin/images/leftcss.css
  • admin/images/maincss.css
  • admin/images/topcss.css
  • admin/left.aspx
  • admin/links.aspx
  • admin/login.aspx
  • admin/main.aspx
  • admin/nav.aspx
  • admin/news.aspx
  • admin/news_class.aspx
  • admin/report.aspx
  • admin/site_config.aspx
  • admin/sites.aspx
  • admin/stat_visitor.aspx
  • admin/tg_config.aspx
  • admin/tg_links.aspx
  • admin/tg_user.aspx
  • admin/top.aspx
  • bin/App_Code.compiled
  • bin/App_Code.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_about.aspx.fdf7a39c.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_account.aspx.34d20318.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_ad.aspx.fdf7a39c.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_add_link.aspx.fdf7a39c.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_admin_password.aspx.fdf7a39c.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_default.aspx.34d20318.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_default.aspx.4110bdde.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_default.aspx.a893355.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_default.aspx.b6eff17b.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_default.aspx.cdcab7d2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_default.aspx.f54d8e7d.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_default.aspx.fdf7a39c.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_getpoints.aspx.34d20318.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_getpwd.aspx.34d20318.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_image.aspx.38131f0b.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_left.aspx.fdf7a39c.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_links.aspx.fdf7a39c.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_login.aspx.34d20318.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_login.aspx.fdf7a39c.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_main.aspx.fdf7a39c.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_manage.aspx.34d20318.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_masterpage.master.34d20318.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_masterpage.master.fdf7a39c.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_nav.aspx.fdf7a39c.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_news.aspx.fdf7a39c.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_news_class.aspx.fdf7a39c.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_reg.aspx.34d20318.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_report.aspx.fdf7a39c.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_site_config.aspx.fdf7a39c.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_sites.aspx.fdf7a39c.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_stat_visitor.aspx.fdf7a39c.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_tg_config.aspx.fdf7a39c.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_tg_links.aspx.fdf7a39c.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_tg_user.aspx.fdf7a39c.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_top.aspx.fdf7a39c.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/App_Web_union.aspx.34d20318.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/DictSeg.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/FTAlgorithm.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Highlighter.Net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/KTDictSeg.HighLight.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/KTDictSeg.log
  • bin/KTDictSeg.xml
  • bin/KTDictSegAnalyzer.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Lucene.Net.Analyzer.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/Lucene.Net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • bin/System.Data.SQLite.dll
    .dll windows:5 windows x86 arch:x86

    5ca88ce79f96687bf01618161f6c2a16


    Headers

    Imports

    Exports

    Sections

  • cache/RunData/AboutInfo.db
  • cache/RunData/NavInfo.db
  • cache/RunData/SiteInfo.db
  • cache/www/aHR0cDovL21haWwuMTYzLmNvbQ==
    .js
  • cache/www/aHR0cDovL2Jicy5uaWFvbWEuY29t
    .js
  • cache/www/aHR0cDovL2RpY3QuYmFpZHUuY29t
    .js
  • cache/www/aHR0cDovL3d3dy55b3VrdS5jb20=
    .js
  • cache/www/aHR0cDovL3d3dy56ZWlkdS5jb20=
    .js
  • cache/www/aHR0cDovL3d3dy56ZWlnb3UuY29t
    .js
  • cache/www/aHR0cDovL3d3dy5hZG1pbjUuY29tL2FydGljbGUvMjAwOTA5MDIvMTc3NDEwLnNodG1s
    .js
  • cache/www/aHR0cDovL3d3dy5hZG1pbjUuY29tL2FydGljbGUvMjAwOTA5MDgvMTc4NjM1LnNodG1s
    .js
  • cache/www/aHR0cDovL3d3dy5hZG1pbjUuY29tL2FydGljbGUvMjAwOTA5MTgvMTgwOTA5LnNodG1s
    .js
  • cache/www/aHR0cDovL3d3dy5hZG1pbjUuY29tL2FydGljbGUvMjAwOTA5MjIvMTgxNzI1LnNodG1s
    .js
  • cache/www/aHR0cDovL3d3dy5jam9sLmNvbQ==
    .js
  • cache/www/aHR0cDovL3d3dy5pcGFydC5jbg==
    .js
  • cache/www/aHR0cDovL3d3dy5uaWFvbWEuY29t
  • cache/www/aHR0cDovL3d3dy5wY2JhYnkuY29tLmNu
    .js
  • cache/www/aHR0cDovL3d3dy5xcTE2My5jb20=
    .js
  • cache/www/aHR0cDovL3d3dy5yZWFkbm92ZWwuY29t
    .js
  • click/Default.aspx
  • images/index.css
  • images/logo-kz.gif
    .gif
  • images/logo-kz.psd
  • images/logo.gif
    .gif
  • images/logo.psd
  • images/logo_yy.gif
    .gif
  • images/logo_yy.psd
  • images/s.css
  • index/_q0.cfs
  • index/segments.gen
  • index/segments_1g4
  • js/UpdateIndex.aspx
    .js
  • js/global.js
  • js/index.js
    .js
  • k/Default.aspx
  • s/Default.aspx
  • tg/Default.aspx
  • tg/MasterPage.master
  • tg/account.aspx
  • tg/getpoints.aspx
  • tg/getpwd.aspx
  • tg/images/bnr_1.gif
    .gif
  • tg/images/bordertop.gif
    .gif
  • tg/images/button_1.gif
    .gif
  • tg/images/global.css
  • tg/images/headbg.gif
    .gif
  • tg/images/help-tip.gif
    .gif
  • tg/images/ico6_1.gif
    .gif
  • tg/images/ico6_7.gif
    .gif
  • tg/images/index.png
    .png
  • tg/images/loading_2.gif
    .gif
  • tg/images/login_1.gif
    .gif
  • tg/images/login_2.gif
    .gif
  • tg/images/login_3.gif
    .gif
  • tg/images/logo.gif
    .gif
  • tg/images/logo.psd
  • tg/images/logo_e.gif
    .gif
  • tg/images/logo_e.psd
  • tg/images/mnbg-repeat.png
    .png
  • tg/images/mnbg.png
    .png
  • tg/images/reg.css
  • tg/images/show.gif
    .gif
  • tg/images/xjq-body.gif
    .gif
  • tg/images/xjq-left-corner.gif
    .gif
  • tg/images/xjq-left.gif
    .gif
  • tg/images/xjq-li.gif
    .gif
  • tg/images/xjq-right-corner.gif
    .gif
  • tg/images/xjq-right.gif
    .gif
  • tg/login.aspx
  • tg/manage.aspx
    .js
  • tg/reg.aspx
  • tg/union.aspx
    .js
  • top/Default.aspx
    .js
  • top/images/combg.gif
    .gif
  • top/images/css.css
  • top/images/ico_down.gif
    .gif
  • top/images/ico_up.gif
    .gif
  • top/images/logo.gif
    .gif
  • top/images/menu_bg.gif
    .gif
  • top/images/menu_bg_l.gif
    .gif
  • top/images/menu_bg_on.gif
    .gif
  • top/images/menu_split.gif
    .gif
  • top/images/more.gif
    .gif
  • top/images/old.gif
    .gif
  • top/images/r.gif
    .gif
  • 鸟马自动链使用说明.txt