Overview

overview

3

Static

static

1

gezi/News.vbs

windows7-x64

1

gezi/News.vbs

windows10-2004-x64

1

gezi/News_display.vbs

windows7-x64

1

gezi/News_display.vbs

windows10-2004-x64

1

gezi/admin/admin.asp

windows7-x64

3

gezi/admin/admin.asp

windows10-2004-x64

3

gezi/admin...ws.vbs

windows7-x64

1

gezi/admin...ws.vbs

windows10-2004-x64

1

gezi/admin...dd.asp

windows7-x64

3

gezi/admin...dd.asp

windows10-2004-x64

3

gezi/admin...it.vbs

windows7-x64

1

gezi/admin...it.vbs

windows10-2004-x64

1

gezi/admin...ve.vbs

windows7-x64

1

gezi/admin...ve.vbs

windows10-2004-x64

1

gezi/admin...ad.vbs

windows7-x64

1

gezi/admin...ad.vbs

windows10-2004-x64

1

gezi/admin...dw.vbs

windows7-x64

1

gezi/admin...dw.vbs

windows10-2004-x64

1

gezi/admin...dx.vbs

windows7-x64

1

gezi/admin...dx.vbs

windows10-2004-x64

1

gezi/admin...up.vbs

windows7-x64

1

gezi/admin...up.vbs

windows10-2004-x64

1

gezi/admin...de.vbs

windows7-x64

1

gezi/admin...de.vbs

windows10-2004-x64

1

gezi/admin...dd.vbs

windows7-x64

1

gezi/admin...dd.vbs

windows10-2004-x64

1

gezi/admin...od.vbs

windows7-x64

1

gezi/admin...od.vbs

windows10-2004-x64

1

gezi/admin...el.vbs

windows7-x64

1

gezi/admin...el.vbs

windows10-2004-x64

1

gezi/admin...eft.js

windows7-x64

3

gezi/admin...eft.js

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    3e5fb1ef58c16eab95f3f6450b1e7b39_JaffaCakes118

  • Size

    352KB

  • MD5

    3e5fb1ef58c16eab95f3f6450b1e7b39

  • SHA1

    c904d52a20919c644fc8ed6d204ab83691ab897e

  • SHA256

    9ad7566061cc015d605585a3158b27a242bd2b260185a0986840f2a423c4fb57

  • SHA512

    4d18e7eca3b454b2cc6183dd4ab3f556e8c6b7e61031f5d4e7096909f5e7f084575596cdf0963db4d80064eaee7514b76b477d0a49909eca086e6e632912cfaa

  • SSDEEP

    6144:u0RTTz0M1lF9swfUFRgnFoaPtFgcuMg1tTPazsEnq8/3VVfIJXCq7:j530M1lbnF4p1pizsR8QJSM

Score
1/10

Malware Config

Signatures

Files

  • 3e5fb1ef58c16eab95f3f6450b1e7b39_JaffaCakes118
    .rar
  • gezi/News.asp
    .vbs
  • gezi/News_display.asp
    .vbs
  • gezi/admin/admin.asp
  • gezi/admin/admin_News.asp
    .vbs
  • gezi/admin/admin_News_add.asp
  • gezi/admin/admin_News_edit.asp
    .vbs
  • gezi/admin/admin_News_save.asp
    .vbs
  • gezi/admin/admin_ad.asp
    .vbs
  • gezi/admin/admin_adw.asp
    .vbs
  • gezi/admin/admin_adx.asp
    .vbs
  • gezi/admin/admin_checkup.asp
    .vbs
  • gezi/admin/admin_chkcode.asp
    .vbs
  • gezi/admin/admin_classadd.asp
    .vbs
  • gezi/admin/admin_classmod.asp
    .vbs
  • gezi/admin/admin_del.asp
    .vbs
  • gezi/admin/admin_left.asp
    .js
  • gezi/admin/admin_link.asp
    .vbs
  • gezi/admin/admin_loginadd.asp
    .vbs
  • gezi/admin/admin_loginmod.asp
    .vbs
  • gezi/admin/admin_loginuser.asp
    .html .js polyglot
  • gezi/admin/admin_popedom.asp
    .vbs
  • gezi/admin/admin_revision.asp
    .vbs
  • gezi/admin/admin_revision_add.asp
    .vbs
  • gezi/admin/admin_right.asp
    .vbs
  • gezi/admin/admin_serverinfo.asp
    .asp .vbs polyglot
  • gezi/admin/admin_system.asp
    .vbs
  • gezi/admin/admin_tj.asp
    .vbs
  • gezi/admin/admin_webno.asp
    .vbs
  • gezi/admin/admin_webyes.asp
    .js
  • gezi/admin/admin_ws.asp
    .vbs
  • gezi/admin/conn.asp
    .vbs
  • gezi/admin/images/Head.Fix
  • gezi/admin/images/admin1.gif
    .gif
  • gezi/admin/images/admin2.gif
    .gif
  • gezi/admin/images/admin4.gif
    .gif
  • gezi/admin/images/adminbg.gif
    .gif
  • gezi/admin/images/adminline.gif
    .gif
  • gezi/admin/images/adminmain02.gif
    .gif
  • gezi/admin/images/adminmain03.gif
    .gif
  • gezi/admin/images/adminmain0line.gif
    .gif
  • gezi/admin/images/adminmain0line2.gif
    .gif
  • gezi/admin/images/adminphoto.gif
    .gif
  • gezi/admin/images/adminphoto_1.gif
    .gif
  • gezi/admin/images/adminsub.gif
    .gif
  • gezi/admin/images/bg.jpg
    .jpg
  • gezi/admin/images/body1.fix
  • gezi/admin/images/body10.fix
  • gezi/admin/images/body11.fix
  • gezi/admin/images/body12.fix
  • gezi/admin/images/body13.fix
  • gezi/admin/images/body14.fix
  • gezi/admin/images/body15.fix
  • gezi/admin/images/body16.fix
  • gezi/admin/images/body17.fix
  • gezi/admin/images/body18.fix
  • gezi/admin/images/body2.fix
  • gezi/admin/images/body3.fix
  • gezi/admin/images/body4.fix
  • gezi/admin/images/body5.fix
  • gezi/admin/images/body6.fix
  • gezi/admin/images/body7.fix
  • gezi/admin/images/body8.fix
  • gezi/admin/images/body9.fix
  • gezi/admin/images/login1.jpg
    .jpg
  • gezi/admin/images/login2.jpg
    .jpg
  • gezi/admin/images/login3.jpg
    .jpg
  • gezi/admin/images/login41.jpg
    .jpg
  • gezi/admin/images/login42.jpg
    .jpg
  • gezi/admin/images/login5.jpg
    .jpg
  • gezi/admin/images/login6.jpg
    .jpg
  • gezi/admin/images/login7.jpg
    .jpg
  • gezi/admin/images/loginButton2.jpg
    .jpg
  • gezi/admin/images/loginPWD1.jpg
    .jpg
  • gezi/admin/images/loginPWD2.jpg
    .jpg
  • gezi/admin/images/loginPWD3.jpg
    .jpg
  • gezi/admin/images/loginPasD1.jpg
    .jpg
  • gezi/admin/images/loginPasD2.jpg
    .jpg
  • gezi/admin/images/loginUID1.jpg
    .jpg
  • gezi/admin/images/loginUID2.jpg
    .jpg
  • gezi/admin/images/loginUID3.jpg
    .jpg
  • gezi/admin/images/loginbutton1.jpg
    .jpg
  • gezi/admin/images/loginge1.jpg
    .jpg
  • gezi/admin/images/loginge2.jpg
    .jpg
  • gezi/admin/images/loginge3.jpg
    .jpg
  • gezi/admin/inc/checkcode.asp
    .vbs
  • gezi/admin/inc/code.ASP
    .vbs
  • gezi/admin/inc/css.css
  • gezi/admin/inc/function.asp
    .vbs
  • gezi/admin/inc/softkeyboard.js
    .js
  • gezi/admin/index.asp
    .asp .vbs polyglot
  • gezi/bottom.asp
    .html .vbs polyglot
  • gezi/class.asp
    .asp .vbs polyglot
  • gezi/conn.asp
  • gezi/conn_and_config.asp
  • gezi/css/Date.js
    .js
  • gezi/css/bbs.htm
    .html
  • gezi/css/css.css
  • gezi/data/www.wjbbs.org.asp
  • gezi/data_config.asp
    .vbs
  • gezi/gezi/News.asp
    .vbs
  • gezi/gezi/News_display.asp
    .vbs
  • gezi/gezi/admin/admin.asp
  • gezi/gezi/admin/admin_News.asp
    .vbs
  • gezi/gezi/admin/admin_News_add.asp
  • gezi/gezi/admin/admin_News_edit.asp
    .vbs
  • gezi/gezi/admin/admin_News_save.asp
    .vbs
  • gezi/gezi/admin/admin_ad.asp
    .vbs
  • gezi/gezi/admin/admin_adw.asp
    .vbs
  • gezi/gezi/admin/admin_adx.asp
    .vbs
  • gezi/gezi/admin/admin_checkup.asp
    .vbs
  • gezi/gezi/admin/admin_chkcode.asp
    .vbs
  • gezi/gezi/admin/admin_classadd.asp
    .vbs
  • gezi/gezi/admin/admin_classmod.asp
    .vbs
  • gezi/gezi/admin/admin_del.asp
    .vbs
  • gezi/gezi/admin/admin_left.asp
    .js
  • gezi/gezi/admin/admin_link.asp
    .vbs
  • gezi/gezi/admin/admin_loginadd.asp
    .vbs
  • gezi/gezi/admin/admin_loginmod.asp
    .vbs
  • gezi/gezi/admin/admin_loginuser.asp
    .html .js polyglot
  • gezi/gezi/admin/admin_popedom.asp
    .vbs
  • gezi/gezi/admin/admin_revision.asp
    .vbs
  • gezi/gezi/admin/admin_revision_add.asp
    .vbs
  • gezi/gezi/admin/admin_right.asp
    .vbs
  • gezi/gezi/admin/admin_serverinfo.asp
    .asp .vbs polyglot
  • gezi/gezi/admin/admin_system.asp
    .vbs
  • gezi/gezi/admin/admin_tj.asp
    .vbs
  • gezi/gezi/admin/admin_webno.asp
    .vbs
  • gezi/gezi/admin/admin_webyes.asp
    .js
  • gezi/gezi/admin/admin_ws.asp
    .vbs
  • gezi/gezi/admin/conn.asp
    .vbs
  • gezi/gezi/admin/images/Head.Fix
  • gezi/gezi/admin/images/admin1.gif
    .gif
  • gezi/gezi/admin/images/admin2.gif
    .gif
  • gezi/gezi/admin/images/admin4.gif
    .gif
  • gezi/gezi/admin/images/adminbg.gif
    .gif
  • gezi/gezi/admin/images/adminline.gif
    .gif
  • gezi/gezi/admin/images/adminmain02.gif
    .gif
  • gezi/gezi/admin/images/adminmain03.gif
    .gif
  • gezi/gezi/admin/images/adminmain0line.gif
    .gif
  • gezi/gezi/admin/images/adminmain0line2.gif
    .gif
  • gezi/gezi/admin/images/adminphoto.gif
    .gif
  • gezi/gezi/admin/images/adminphoto_1.gif
    .gif
  • gezi/gezi/admin/images/adminsub.gif
    .gif
  • gezi/gezi/admin/images/bg.jpg
    .jpg
  • gezi/gezi/admin/images/body1.fix
  • gezi/gezi/admin/images/body10.fix
  • gezi/gezi/admin/images/body11.fix
  • gezi/gezi/admin/images/body12.fix
  • gezi/gezi/admin/images/body13.fix
  • gezi/gezi/admin/images/body14.fix
  • gezi/gezi/admin/images/body15.fix
  • gezi/gezi/admin/images/body16.fix
  • gezi/gezi/admin/images/body17.fix
  • gezi/gezi/admin/images/body18.fix
  • gezi/gezi/admin/images/body2.fix
  • gezi/gezi/admin/images/body3.fix
  • gezi/gezi/admin/images/body4.fix
  • gezi/gezi/admin/images/body5.fix
  • gezi/gezi/admin/images/body6.fix
  • gezi/gezi/admin/images/body7.fix
  • gezi/gezi/admin/images/body8.fix
  • gezi/gezi/admin/images/body9.fix
  • gezi/gezi/admin/images/login1.jpg
    .jpg
  • gezi/gezi/admin/images/login2.jpg
    .jpg
  • gezi/gezi/admin/images/login3.jpg
    .jpg
  • gezi/gezi/admin/images/login41.jpg
    .jpg
  • gezi/gezi/admin/images/login42.jpg
    .jpg
  • gezi/gezi/admin/images/login5.jpg
    .jpg
  • gezi/gezi/admin/images/login6.jpg
    .jpg
  • gezi/gezi/admin/images/login7.jpg
    .jpg
  • gezi/gezi/admin/images/loginButton2.jpg
    .jpg
  • gezi/gezi/admin/images/loginPWD1.jpg
    .jpg
  • gezi/gezi/admin/images/loginPWD2.jpg
    .jpg
  • gezi/gezi/admin/images/loginPWD3.jpg
    .jpg
  • gezi/gezi/admin/images/loginPasD1.jpg
    .jpg
  • gezi/gezi/admin/images/loginPasD2.jpg
    .jpg
  • gezi/gezi/admin/images/loginUID1.jpg
    .jpg
  • gezi/gezi/admin/images/loginUID2.jpg
    .jpg
  • gezi/gezi/admin/images/loginUID3.jpg
    .jpg
  • gezi/gezi/admin/images/loginbutton1.jpg
    .jpg
  • gezi/gezi/admin/images/loginge1.jpg
    .jpg
  • gezi/gezi/admin/images/loginge2.jpg
    .jpg
  • gezi/gezi/admin/images/loginge3.jpg
    .jpg
  • gezi/gezi/admin/inc/checkcode.asp
    .vbs
  • gezi/gezi/admin/inc/code.ASP
    .vbs
  • gezi/gezi/admin/inc/css.css
  • gezi/gezi/admin/inc/function.asp
    .vbs
  • gezi/gezi/admin/inc/softkeyboard.js
    .js
  • gezi/gezi/admin/index.asp
    .asp .vbs polyglot
  • gezi/gezi/bottom.asp
    .html .vbs polyglot
  • gezi/gezi/class.asp
    .asp .vbs polyglot
  • gezi/gezi/conn.asp
  • gezi/gezi/conn_and_config.asp
  • gezi/gezi/css/Date.js
    .js
  • gezi/gezi/css/bbs.htm
    .html
  • gezi/gezi/css/css.css
  • gezi/gezi/data/www.wjbbs.org.asp
  • gezi/gezi/data_config.asp
    .vbs
  • gezi/gezi/gg01.asp
    .vbs
  • gezi/gezi/go.asp
    .asp .vbs polyglot
  • gezi/gezi/help.asp
    .asp .vbs polyglot
  • gezi/gezi/images/120x60.gif
    .gif
  • gezi/gezi/images/468x60.gif
    .gif
  • gezi/gezi/images/68x60.gif
    .gif
  • gezi/gezi/images/88x31.gif
    .gif
  • gezi/gezi/images/985x80.gif
    .gif
  • gezi/gezi/images/AD120x60.gif
    .gif
  • gezi/gezi/images/User_Login_0_02.gif
    .gif
  • gezi/gezi/images/User_Login_0_04.gif
    .gif
  • gezi/gezi/images/User_Login_0_05.gif
    .gif
  • gezi/gezi/images/User_Login_0_08.gif
    .gif
  • gezi/gezi/images/User_Login_0_13.gif
    .gif
  • gezi/gezi/images/User_Login_0_15.gif
    .gif
  • gezi/gezi/images/User_Login_0_19.gif
    .gif
  • gezi/gezi/images/User_Login_0_23.gif
    .gif
  • gezi/gezi/images/forum_nav.gif
    .gif
  • gezi/gezi/images/gezi.gif
    .gif
  • gezi/gezi/images/imagesUser_Login_Cookie.gif
    .gif
  • gezi/gezi/images/img/login_qdxg.gif
    .gif
  • gezi/gezi/images/img/reg_bty.gif
    .gif
  • gezi/gezi/images/img/reg_qdjm.gif
    .gif
  • gezi/gezi/images/img/reg_wty.gif
    .gif
  • gezi/gezi/images/img/wjbbstop_01.gif
    .gif
  • gezi/gezi/images/img/wjbbstop_02.gif
    .gif
  • gezi/gezi/images/img/wjbbstop_03.gif
    .gif
  • gezi/gezi/images/img/wjbbstop_04.gif
    .gif
  • gezi/gezi/images/img/wjbbstop_05.gif
    .gif
  • gezi/gezi/images/img/wjbbstop_06.gif
    .gif
  • gezi/gezi/images/img/wjbbstop_07.gif
    .gif
  • gezi/gezi/images/img/wjbbstop_08.gif
    .gif
  • gezi/gezi/images/img/wjbbstop_09.gif
    .gif
  • gezi/gezi/images/logo.gif
    .gif
  • gezi/gezi/images/logo88x31.gif
    .gif
  • gezi/gezi/index.asp
    .asp .vbs polyglot
  • gezi/gezi/join.asp
    .asp .vbs polyglot
  • gezi/gezi/link.asp
    .vbs
  • gezi/gezi/login.asp
    .asp .vbs polyglot
  • gezi/gezi/login1.asp
    .asp .vbs polyglot
  • gezi/gezi/md5.asp
    .vbs
  • gezi/gezi/spread/inc/char.inc
    .vbs
  • gezi/gezi/spread/inc/ubb.inc
    .vbs
  • gezi/gezi/spread/inc/upload.asp
    .html .vbs polyglot
  • gezi/gezi/spread/inc/upload.inc
    .html .vbs polyglot
  • gezi/gezi/spread/inc/upload_5xsoft.inc
    .html .vbs polyglot
  • gezi/gezi/spread/picon1.asp
    .html
  • gezi/gezi/spread/picon2.asp
    .html .vbs polyglot
  • gezi/gezi/spread/webshow/2007413204953.gif
    .gif
  • gezi/gezi/top.asp
    .vbs
  • gezi/gezi/wjbbsmfgzw.asp
    .vbs
  • gezi/gezi/忘记BBs免费格子网安装说明.txt
  • gezi/gezi/注册机文件.reg
  • gezi/gg01.asp
    .vbs
  • gezi/go.asp
    .asp .vbs polyglot
  • gezi/help.asp
    .asp .vbs polyglot
  • gezi/images/120x60.gif
    .gif
  • gezi/images/468x60.gif
    .gif
  • gezi/images/68x60.gif
    .gif
  • gezi/images/88x31.gif
    .gif
  • gezi/images/985x80.gif
    .gif
  • gezi/images/AD120x60.gif
    .gif
  • gezi/images/Thumbs.db
  • gezi/images/User_Login_0_02.gif
    .gif
  • gezi/images/User_Login_0_04.gif
    .gif
  • gezi/images/User_Login_0_05.gif
    .gif
  • gezi/images/User_Login_0_08.gif
    .gif
  • gezi/images/User_Login_0_13.gif
    .gif
  • gezi/images/User_Login_0_15.gif
    .gif
  • gezi/images/User_Login_0_19.gif
    .gif
  • gezi/images/User_Login_0_23.gif
    .gif
  • gezi/images/forum_nav.gif
    .gif
  • gezi/images/gezi.gif
    .gif
  • gezi/images/imagesUser_Login_Cookie.gif
    .gif
  • gezi/images/img/Thumbs.db
  • gezi/images/img/login_qdxg.gif
    .gif
  • gezi/images/img/reg_bty.gif
    .gif
  • gezi/images/img/reg_qdjm.gif
    .gif
  • gezi/images/img/reg_wty.gif
    .gif
  • gezi/images/img/wjbbstop_01.gif
    .gif
  • gezi/images/img/wjbbstop_02.gif
    .gif
  • gezi/images/img/wjbbstop_03.gif
    .gif
  • gezi/images/img/wjbbstop_04.gif
    .gif
  • gezi/images/img/wjbbstop_05.gif
    .gif
  • gezi/images/img/wjbbstop_06.gif
    .gif
  • gezi/images/img/wjbbstop_07.gif
    .gif
  • gezi/images/img/wjbbstop_08.gif
    .gif
  • gezi/images/img/wjbbstop_09.gif
    .gif
  • gezi/images/logo.gif
    .gif
  • gezi/images/logo88x31.gif
    .gif
  • gezi/index.asp
    .asp .vbs polyglot
  • gezi/join.asp
    .asp .vbs polyglot
  • gezi/link.asp
    .vbs
  • gezi/login.asp
    .asp .vbs polyglot
  • gezi/login1.asp
    .asp .vbs polyglot
  • gezi/md5.asp
    .vbs
  • gezi/spread/inc/char.inc
    .vbs
  • gezi/spread/inc/ubb.inc
    .vbs
  • gezi/spread/inc/upload.asp
    .html .vbs polyglot
  • gezi/spread/inc/upload.inc
    .html .vbs polyglot
  • gezi/spread/inc/upload_5xsoft.inc
    .html .vbs polyglot
  • gezi/spread/picon1.asp
    .html
  • gezi/spread/picon2.asp
    .html .vbs polyglot
  • gezi/spread/webshow/2007413204953.gif
    .gif
  • gezi/top.asp
    .vbs
  • gezi/wjbbsmfgzw.asp
    .vbs
  • gezi/忘记BBs免费格子网v2.0超大格子版安装说明.txt
  • gezi/新云软件.url
    .url
  • gezi/无忧无虑升级网.url
    .url
  • gezi/注册机文件.reg