General

  • Target

    422fb723254f9efd9c095d4e2f8da8b6_JaffaCakes118

  • Size

    6.8MB

  • MD5

    422fb723254f9efd9c095d4e2f8da8b6

  • SHA1

    71994826b735a9664d6673db25bce43f0f4a20ec

  • SHA256

    92a8c9138a71c19d7ede11e6d3011a5291b88d67b45d6504bf4761e05d3200a1

  • SHA512

    0b5252ddec2d3c9cffc86d0040b96f36a8d09e588458df447b7b83c6feb73ade30ba3e8a073189d4003ccc1aac8b48906f52c66ddaef953c12d6f02cd2eebfa1

  • SSDEEP

    196608:+gz2JWZgnpP19pOgjgn/YvF2RDHVOs3Bmz19XXTX9QqL:xacZgnnHOiuQ92DHVOs3BOXDX9L

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 422fb723254f9efd9c095d4e2f8da8b6_JaffaCakes118
    .rar
  • Ad.asp
    .vbs
  • Ad2.asp
    .vbs
  • Admin/Admin_Adv_list.asp
    .vbs
  • Admin/Admin_Adv_site.asp
    .vbs
  • Admin/Admin_Adv_sitydy.asp
    .vbs
  • Admin/Admin_Announce.asp
    .vbs
  • Admin/Admin_AnnounceEdit.asp
    .vbs
  • Admin/Admin_Chklogin.asp
    .vbs
  • Admin/Admin_Company.asp
    .vbs
  • Admin/Admin_STYLE.CSS
  • Admin/Admin_ServerInfo.asp
    .vbs
  • Admin/Admin_UserModi.asp
    .js
  • Admin/Admin_UserQuestion.asp
    .vbs
  • Admin/Admin_admin.asp
    .vbs
  • Admin/Admin_adv_add.asp
    .vbs
  • Admin/Admin_adv_edit.asp
    .vbs
  • Admin/Admin_adv_siteadd.asp
    .vbs
  • Admin/Admin_adv_siteedit.asp
    .vbs
  • Admin/Admin_answeredit.asp
    .vbs
  • Admin/Admin_crcodes.asp
    .vbs
  • Admin/Admin_crhtml.asp
    .vbs
  • Admin/Admin_email.asp
  • Admin/Admin_email2.asp
    .vbs
  • Admin/Admin_html.asp
    .vbs
  • Admin/Admin_left.CSS
  • Admin/Admin_left.asp
  • Admin/Admin_login.asp
    .js
  • Admin/Admin_logout.asp
  • Admin/Admin_main.asp
    .vbs
  • Admin/Admin_password.asp
    .vbs
  • Admin/Admin_sendemail.asp
    .vbs
  • Admin/Admin_shareEdit.asp
    .vbs
  • Admin/Admin_shareadd.asp
    .vbs
  • Admin/Admin_sharelist.asp
    .vbs
  • Admin/Admin_siteconfig.asp
    .vbs
  • Admin/Admin_top.asp
  • Admin/Admin_user.asp
    .vbs
  • Admin/Admin_userdj.asp
    .vbs
  • Admin/Admin_userzj.asp
    .vbs
  • Admin/Admin_votelist.asp
    .vbs
  • Admin/Admin_wtclass.asp
    .vbs
  • Admin/Admin_wtdetail.asp
    .vbs
  • Admin/Admin_wtedit.asp
    .vbs
  • Admin/Admin_wtlist.asp
    .vbs
  • Admin/Article_BigClassEdit.asp
    .vbs
  • Admin/Article_Edit.asp
    .vbs
  • Admin/Article_Manage.asp
    .vbs
  • Admin/Article_Recyclebin.asp
    .vbs
  • Admin/Article_Smallclassadd.asp
    .vbs
  • Admin/Article_Smallclassedit.asp
    .vbs
  • Admin/Article_action.asp
    .vbs
  • Admin/Article_add.asp
    .vbs
  • Admin/Article_bigclassadd.asp
    .vbs
  • Admin/Article_classmanage.asp
    .vbs
  • Admin/Article_jsedit.asp
    .vbs
  • Admin/Article_jsset.asp
    .vbs
  • Admin/Article_showjs.asp
  • Admin/Article_uploadfile.asp
    .vbs
  • Admin/Login/Admin_login_r1_c1.jpg
    .jpg
  • Admin/Login/Admin_login_r2_c1.jpg
    .jpg
  • Admin/Login/Admin_login_r3_c1.jpg
    .jpg
  • Admin/Login/Admin_login_r3_c2.jpg
    .jpg
  • Admin/Login/Admin_login_r3_c3.jpg
    .jpg
  • Admin/Login/Admin_login_r4_c1.jpg
    .jpg
  • Admin/Login/Admin_login_r5_c1.jpg
    .jpg
  • Admin/Login/Bitmap_104.jpg
    .jpg
  • Admin/Login/Bitmap_108.gif
    .gif
  • Admin/Login/Bitmap_121.gif
    .gif
  • Admin/Login/Bitmap_122.gif
    .gif
  • Admin/Login/code.jpg
    .jpg
  • Admin/Login/pas.png
    .png
  • Admin/Login/pwd.jpg
    .jpg
  • Admin/Login/rzcode.jpg
    .jpg
  • Admin/Login/spacer.gif
    .gif
  • Admin/Login/user.jpg
    .jpg
  • Admin/ad.asp
    .vbs
  • Admin/chklogin.asp
  • Admin/copyright.asp
  • Admin/home.css
  • Admin/images/Admin_left_10.gif
    .gif
  • Admin/images/Admin_left_12.gif
    .gif
  • Admin/images/admin_close.gif
    .gif
  • Admin/images/admin_left_01.gif
    .gif
  • Admin/images/admin_left_02.gif
    .gif
  • Admin/images/admin_left_03.gif
    .gif
  • Admin/images/admin_left_04.gif
    .gif
  • Admin/images/admin_left_05.gif
    .gif
  • Admin/images/admin_left_1.gif
    .gif
  • Admin/images/admin_left_11.gif
    .gif
  • Admin/images/admin_left_13.gif
    .gif
  • Admin/images/admin_left_2.gif
    .gif
  • Admin/images/admin_left_3.gif
    .gif
  • Admin/images/admin_left_4.gif
    .gif
  • Admin/images/admin_left_5.gif
    .gif
  • Admin/images/admin_left_6.gif
    .gif
  • Admin/images/admin_left_7.gif
    .gif
  • Admin/images/admin_left_8.gif
    .gif
  • Admin/images/admin_left_9.gif
    .gif
  • Admin/images/admin_open.gif
    .gif
  • Admin/images/admin_top_bg.gif
    .gif
  • Admin/images/admin_top_close.gif
    .gif
  • Admin/images/admin_top_icon_1.gif
    .gif
  • Admin/images/admin_top_icon_5.gif
    .gif
  • Admin/images/admin_top_icon_6.gif
    .gif
  • Admin/images/admin_top_open.gif
    .gif
  • Admin/images/adminmain01.gif
    .gif
  • Admin/images/adminmain02.gif
    .gif
  • Admin/images/adminmain03.gif
    .gif
  • Admin/images/adminmain0line.gif
    .gif
  • Admin/images/adminmain0line2.gif
    .gif
  • Admin/images/bar.gif
    .gif
  • Admin/images/email.gif
    .gif
  • Admin/images/img_u.gif
    .gif
  • Admin/images/list_point.gif
    .gif
  • Admin/images/main_photo_1.jpg
    .jpg
  • Admin/images/main_photo_2.gif
    .gif
  • Admin/images/main_photo_3.gif
    .gif
  • Admin/images/main_photo_4_bottom.gif
    .gif
  • Admin/images/title.gif
    .gif
  • Admin/images/title_bg_admin.gif
    .gif
  • Admin/images/title_bg_hide.gif
    .gif
  • Admin/images/title_bg_quit.gif
    .gif
  • Admin/images/title_bg_show.gif
    .gif
  • Admin/images/top_an_1.gif
    .gif
  • Admin/images/top_an_2.gif
    .gif
  • Admin/images/top_an_3.gif
    .gif
  • Admin/images/top_an_4.gif
    .gif
  • Admin/images/top_an_5.gif
    .gif
  • Admin/images/top_an_6.gif
    .gif
  • Admin/images/tree_folder3.gif
    .gif
  • Admin/images/tree_folder4.gif
    .gif
  • Admin/images/tree_line1.gif
    .gif
  • Admin/images/tree_line2.gif
    .gif
  • Admin/images/tree_line3.GIF
    .gif
  • Admin/images/tree_line4.gif
    .gif
  • Admin/index.asp
  • Admin/新云软件.url
    .url
  • Announce.asp
    .js
  • Announcecode.asp
    .vbs
  • Answer_Action.asp
    .vbs
  • Answer_Add.asp
    .vbs
  • Answer_CaiNa.asp
    .vbs
  • Answer_cnhd.asp
    .vbs
  • Article/ClickCount.asp
    .vbs
  • Article/Relevance.asp
    .vbs
  • Article/Top_pic.asp
    .vbs
  • Article/detail.asp
    .vbs
  • Article/inc/Channel_Config.asp
  • Article/inc/FunCtionItem.asp
    .vbs
  • Article/index.asp
    .vbs
  • Article/js/player.js
    .js
  • Article/list.asp
    .vbs
  • Article/search.asp
    .vbs
  • Article/search_code.asp
    .html
  • Articlejs.asp
    .vbs
  • Button.asp
  • DownFiles/siruo20085182583898037.rar
    .rar
  • wrar371sc_Greendown.cn-0925.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Editor/editor.htm
    .html .js polyglot
  • Editor/editor/1.html
    .html
  • Editor/editor/UpLoadClass.asp
    .vbs
  • Editor/editor/base.css
  • Editor/editor/editor.js
    .js
  • Editor/editor/img.htm
    .html .js polyglot
  • Editor/editor/link.htm
    .html .js polyglot
  • Editor/editor/table.htm
    .html .js polyglot
  • Editor/editor/upload.asp
    .asp .vbs polyglot
  • Editor/face/001.gif
    .gif
  • Editor/face/002.gif
    .gif
  • Editor/face/003.gif
    .gif
  • Editor/face/004.gif
    .gif
  • Editor/face/005.gif
    .gif
  • Editor/face/006.gif
    .gif
  • Editor/face/007.gif
    .gif
  • Editor/face/008.gif
    .gif
  • Editor/face/009.gif
    .gif
  • Editor/face/010.gif
    .gif
  • Editor/face/011.gif
    .gif
  • Editor/face/012.gif
    .gif
  • Editor/face/013.gif
    .gif
  • Editor/face/014.gif
    .gif
  • Editor/face/015.gif
    .gif
  • Editor/face/016.gif
    .gif
  • Editor/face/017.gif
    .gif
  • Editor/face/018.gif
    .gif
  • Editor/face/019.gif
    .gif
  • Editor/face/020.gif
    .gif
  • Editor/face/021.gif
    .gif
  • Editor/face/022.gif
    .gif
  • Editor/face/023.gif
    .gif
  • Editor/face/024.gif
    .gif
  • Editor/face/025.gif
    .gif
  • Editor/face/026.gif
    .gif
  • Editor/face/027.gif
    .gif
  • Editor/face/028.gif
    .gif
  • Editor/face/029.gif
    .gif
  • Editor/face/030.gif
    .gif
  • Editor/face/031.gif
    .gif
  • Editor/face/032.gif
    .gif
  • Editor/face/033.gif
    .gif
  • Editor/face/034.gif
    .gif
  • Editor/face/035.gif
    .gif
  • Editor/face/036.gif
    .gif
  • Editor/face/037.gif
    .gif
  • Editor/face/038.gif
    .gif
  • Editor/face/039.gif
    .gif
  • Editor/face/040.gif
    .gif
  • Editor/images/arrow_down.gif
    .gif
  • Editor/images/arrow_up.gif
    .gif
  • Editor/images/bg.gif
    .gif
  • Editor/images/blue_sline.gif
    .gif
  • Editor/images/box_vsplit.gif
    .gif
  • Editor/images/del_btn.gif
    .gif
  • Editor/images/dilog_bt_cancel.gif
    .gif
  • Editor/images/dilog_bt_ok.gif
    .gif
  • Editor/images/editor/ParaFormatting.gif
    .gif
  • Editor/images/editor/ParaFormatting_over.gif
    .gif
  • Editor/images/editor/blank.gif
    .gif
  • Editor/images/editor/bold.gif
    .gif
  • Editor/images/editor/bold_over.gif
    .gif
  • Editor/images/editor/copy.gif
    .gif
  • Editor/images/editor/copy_over.gif
    .gif
  • Editor/images/editor/cut.gif
    .gif
  • Editor/images/editor/cut_over.gif
    .gif
  • Editor/images/editor/editor_foot.gif
    .gif
  • Editor/images/editor/face.gif
    .gif
  • Editor/images/editor/face_bg.gif
    .gif
  • Editor/images/editor/face_over.gif
    .gif
  • Editor/images/editor/forecolor.gif
    .gif
  • Editor/images/editor/forecolor_over.gif
    .gif
  • Editor/images/editor/guage.gif
    .gif
  • Editor/images/editor/hilitecolor.gif
    .gif
  • Editor/images/editor/hilitecolor_over.gif
    .gif
  • Editor/images/editor/iask.gif
    .gif
  • Editor/images/editor/iask_over.gif
    .gif
  • Editor/images/editor/img.gif
    .gif
  • Editor/images/editor/img_over.gif
    .gif
  • Editor/images/editor/indent.gif
    .gif
  • Editor/images/editor/indent_over.gif
    .gif
  • Editor/images/editor/inserthorizontalrule.gif
    .gif
  • Editor/images/editor/inserthorizontalrule_over.gif
    .gif
  • Editor/images/editor/insertorderedlist.gif
    .gif
  • Editor/images/editor/insertorderedlist_over.gif
    .gif
  • Editor/images/editor/insertunorderedlist.gif
    .gif
  • Editor/images/editor/insertunorderedlist_over.gif
    .gif
  • Editor/images/editor/italic.gif
    .gif
  • Editor/images/editor/italic_over.gif
    .gif
  • Editor/images/editor/justifycenter.gif
    .gif
  • Editor/images/editor/justifycenter_over.gif
    .gif
  • Editor/images/editor/justifyformat.gif
    .gif
  • Editor/images/editor/justifyformat_bg.gif
    .gif
  • Editor/images/editor/justifyformat_over.gif
    .gif
  • Editor/images/editor/justifyfull.gif
    .gif
  • Editor/images/editor/justifyfull_over.gif
    .gif
  • Editor/images/editor/justifyleft.gif
    .gif
  • Editor/images/editor/justifyleft_over.gif
    .gif
  • Editor/images/editor/justifyright.gif
    .gif
  • Editor/images/editor/justifyright_over.gif
    .gif
  • Editor/images/editor/link.gif
    .gif
  • Editor/images/editor/link_over.gif
    .gif
  • Editor/images/editor/menu_bg.gif
    .gif
  • Editor/images/editor/menu_foot.gif
    .gif
  • Editor/images/editor/menu_title.gif
    .gif
  • Editor/images/editor/outdent.gif
    .gif
  • Editor/images/editor/outdent_over.gif
    .gif
  • Editor/images/editor/paste.gif
    .gif
  • Editor/images/editor/paste_over.gif
    .gif
  • Editor/images/editor/redo.gif
    .gif
  • Editor/images/editor/redo_over.gif
    .gif
  • Editor/images/editor/rsave.gif
    .gif
  • Editor/images/editor/table.gif
    .gif
  • Editor/images/editor/table_over.gif
    .gif
  • Editor/images/editor/textarea.gif
    .gif
  • Editor/images/editor/textarea_over.gif
    .gif
  • Editor/images/editor/title_bg.gif
    .gif
  • Editor/images/editor/toolbar_bg.gif
    .gif
  • Editor/images/editor/underline.gif
    .gif
  • Editor/images/editor/underline_over.gif
    .gif
  • Editor/images/editor/undo.gif
    .gif
  • Editor/images/editor/undo_over.gif
    .gif
  • Editor/images/editor/view.gif
    .gif
  • Editor/images/editor/view_over.gif
    .gif
  • Editor/images/guage.gif
    .gif
  • Editor/images/smb_btn_bg.gif
    .gif
  • Editor/images/srch_btn.gif
    .gif
  • Editor/images/tmpl_btn_bg.gif
    .gif
  • Editor/images/update_btn1.gif
    .gif
  • Editor/images/update_btn2.gif
    .gif
  • Editor/uploadfile/2008051805956210.jpg
    .jpg
  • Html/20085/2008516121439934.html
    .html
  • Question_Add.asp
    .vbs
  • Question_Approve.asp
    .vbs
  • Question_Attribute.asp
    .vbs
  • Question_checktime.asp
    .vbs
  • Question_time.asp
    .vbs
  • Question_today.asp
    .vbs
  • Search.asp
    .vbs
  • Showclass.asp
    .vbs
  • User_Addshare.asp
    .vbs
  • User_Editshare.asp
    .vbs
  • User_Manageshare.asp
    .vbs
  • User_Right.asp
    .vbs
  • User_chklogin.asp
    .vbs
  • User_data.asp
    .vbs
  • User_editinfo.asp
    .vbs
  • User_face.asp
    .html
  • User_index.asp
    .js
  • User_loginout.asp
  • User_logintop.asp
    .vbs
  • User_mark.asp
    .vbs
  • User_question.asp
    .vbs
  • User_reg.asp
    .html .vbs polyglot
  • User_regchk.asp
    .vbs
  • User_session.asp
  • Usershare.asp
    .vbs
  • Vote/ballot.asp
    .vbs
  • Vote/ballot.swf
  • Vote/ballot_a.asp
    .vbs
  • Vote/css.css
  • Vote/index.htm
  • conn.asp
    .vbs
  • css.css
  • digg.asp
    .vbs
  • err.asp
    .vbs
  • getcode.asp
    .vbs
  • images/Ad_Wcdz.jpg
    .jpg
  • images/Ad_products.jpg
    .jpg
  • images/Upshare.gif
    .gif
  • images/cn_point.gif
    .gif
  • images/end_n_bg2.gif
    .gif
  • images/gq_point.gif
    .gif
  • images/gx_ljxz.gif
    .gif
  • images/hot_point.gif
    .gif
  • images/index_login_bg1.gif
    .gif
  • images/jf_point.gif
    .gif
  • images/jing.gif
    .gif
  • images/ks.gif
    .gif
  • images/lc_point.gif
    .gif
  • images/login_bottom_bg.gif
    .gif
  • images/login_conn_left.gif
    .gif
  • images/login_conn_left_b.gif
    .gif
  • images/login_conn_right.gif
    .gif
  • images/login_conn_right_b.gif
    .gif
  • images/login_img_newyear.gif
    .gif
  • images/login_top_bg.gif
    .gif
  • images/login_txt_newyear.gif
    .gif
  • images/login_txt_newyear.png
    .png
  • images/logo-zhidao.gif
    .gif
  • images/logo-zhidao.jpg
    .jpg
  • images/no_an.gif
    .gif
  • images/no_point.gif
    .gif
  • images/q.gif
    .gif
  • images/rss_xml.jpg
    .gif
  • images/tw_01.gif
    .gif
  • images/tw_02.gif
    .gif
  • images/tw_03.gif
    .gif
  • images/tw_04.gif
    .gif
  • images/tw_05.gif
    .gif
  • images/tw_06.gif
    .gif
  • images/tw_07.gif
    .gif
  • images/tw_08.gif
    .gif
  • images/tw_09.gif
    .gif
  • images/tw_10.gif
    .gif
  • images/tw_new.png
    .png
  • images/userface/Image1.gif
    .gif
  • images/userface/Image10.gif
    .gif
  • images/userface/Image11.gif
    .gif
  • images/userface/Image12.gif
    .gif
  • images/userface/Image13.gif
    .gif
  • images/userface/Image14.gif
    .gif
  • images/userface/Image15.gif
    .gif
  • images/userface/Image16.gif
    .gif
  • images/userface/Image17.gif
    .gif
  • images/userface/Image18.gif
    .gif
  • images/userface/Image19.gif
    .gif
  • images/userface/Image2.gif
    .gif
  • images/userface/Image20.gif
    .gif
  • images/userface/Image21.gif
    .gif
  • images/userface/Image22.gif
    .gif
  • images/userface/Image23.gif
    .gif
  • images/userface/Image24.gif
    .gif
  • images/userface/Image25.gif
    .gif
  • images/userface/Image26.gif
    .gif
  • images/userface/Image27.gif
    .gif
  • images/userface/Image28.gif
    .gif
  • images/userface/Image29.gif
    .gif
  • images/userface/Image3.gif
    .gif
  • images/userface/Image30.gif
    .gif
  • images/userface/Image31.gif
    .gif
  • images/userface/Image32.gif
    .gif
  • images/userface/Image33.gif
    .gif
  • images/userface/Image34.gif
    .gif
  • images/userface/Image35.gif
    .gif
  • images/userface/Image36.gif
    .gif
  • images/userface/Image37.gif
    .gif
  • images/userface/Image38.gif
    .gif
  • images/userface/Image39.gif
    .gif
  • images/userface/Image4.gif
    .gif
  • images/userface/Image40.gif
    .gif
  • images/userface/Image41.gif
    .gif
  • images/userface/Image42.gif
    .gif
  • images/userface/Image43.gif
    .gif
  • images/userface/Image44.gif
    .gif
  • images/userface/Image45.gif
    .gif
  • images/userface/Image46.gif
    .gif
  • images/userface/Image47.gif
    .gif
  • images/userface/Image48.gif
    .gif
  • images/userface/Image49.gif
    .gif
  • images/userface/Image5.gif
    .gif
  • images/userface/Image50.gif
    .gif
  • images/userface/Image51.gif
    .gif
  • images/userface/Image52.gif
    .gif
  • images/userface/Image53.gif
    .gif
  • images/userface/Image54.gif
    .gif
  • images/userface/Image55.gif
    .gif
  • images/userface/Image56.gif
    .gif
  • images/userface/Image57.gif
    .gif
  • images/userface/Image58.gif
    .gif
  • images/userface/Image59.gif
    .gif
  • images/userface/Image6.gif
    .gif
  • images/userface/Image60.gif
    .gif
  • images/userface/Image7.gif
    .gif
  • images/userface/Image8.gif
    .gif
  • images/userface/Image9.gif
    .gif
  • images/wu_point.gif
    .gif
  • images/xs_point.gif
    .gif
  • images/yes_point.gif
    .gif
  • images/zhuan.gif
    .gif
  • inc/Md5.asp
    .vbs
  • inc/distinction.asp
  • inc/function.asp
    .vbs
  • index.asp
    .vbs
  • index.html
    .html
  • js/Date.js
    .js
  • js/prototype.js
    .js
  • list.asp
    .vbs
  • login.asp
  • pic/1.gif
    .gif
  • reg_qyinfo.asp
  • rss20.asp
    .vbs
  • sharedownload.asp
    .vbs
  • show_share.asp
    .vbs
  • showcode.asp
    .vbs
  • showuser.asp
    .vbs
  • sql.asp
    .vbs
  • template/Bottom.html
  • template/ShowNews_temp.html
    .html .js polyglot
  • template/Showclass_temp.html
  • template/Showshare_temp.html
    .html .js polyglot
  • template/Showuser_temp.html
  • template/Top.html
    .html
  • template/Usershare_temp.html
  • template/index_temp.html
  • template/list_temp.html
  • template/show_temp.html
    .html
  • template/skin/bg.gif
    .gif
  • template/skin/d_icon.gif
    .gif
  • template/skin/d_icon1.gif
    .gif
  • template/skin/gg_icon.gif
    .gif
  • template/skin/jb_icon.gif
    .gif
  • template/skin/menu_bg.gif
    .gif
  • template/skin/menu_left.gif
    .gif
  • template/skin/menu_right.gif
    .gif
  • template/skin/no_point.gif
    .gif
  • template/skin/style.css
  • template/skin/title_bg.gif
    .gif
  • template/skin/tjyy_icon.gif
    .gif
  • template/skin/xt.gif
    .gif
  • template/skin/yhfx_icon.gif
    .gif
  • template/skin/zc.gif
    .gif
  • template/userlist_temp.html
  • top.asp
    .html
  • upload.asp
    .vbs
  • uppic.asp
    .vbs
  • uptopic.asp
    .vbs
  • user_password.asp
    .vbs
  • userlist.asp
    .vbs
  • 升级说明/SQL查询.txt
  • 数据库.bak
  • 问答系统安装说明.exe
    .exe windows:4 windows x86 arch:x86

    75b138ec13121d15e5765e10b945ff23


    Headers

    Imports

    Exports

    Sections