Overview
overview
3Static
static
1admin.asp
windows7-x64
3admin.asp
windows10-2004-x64
3ads/b1.js
windows7-x64
3ads/b1.js
windows10-2004-x64
3ads/b2.js
windows7-x64
3ads/b2.js
windows10-2004-x64
3ads/c1.js
windows7-x64
3ads/c1.js
windows10-2004-x64
3ads/d2.js
windows7-x64
3ads/d2.js
windows10-2004-x64
3ads/e2.js
windows7-x64
3ads/e2.js
windows10-2004-x64
3ads/e5.js
windows7-x64
3ads/e5.js
windows10-2004-x64
3ads/menu.js
windows7-x64
3ads/menu.js
windows10-2004-x64
3ads/other.js
windows7-x64
3ads/other.js
windows10-2004-x64
3ads/新云软件.url
windows7-x64
1ads/新云软件.url
windows10-2004-x64
1book.vbs
windows7-x64
1book.vbs
windows10-2004-x64
1down.asp
windows7-x64
3down.asp
windows10-2004-x64
3images/upi...ex.vbs
windows7-x64
1images/upi...ex.vbs
windows10-2004-x64
1include/cache.vbs
windows7-x64
1include/cache.vbs
windows10-2004-x64
1include/config.asp
windows7-x64
3include/config.asp
windows10-2004-x64
3include/conn.vbs
windows7-x64
1include/conn.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
admin.asp
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
admin.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
ads/b1.js
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
ads/b1.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
ads/b2.js
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
ads/b2.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
ads/c1.js
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
ads/c1.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
ads/d2.js
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
ads/d2.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
ads/e2.js
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
ads/e2.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
ads/e5.js
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
ads/e5.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
ads/menu.js
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
ads/menu.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
ads/other.js
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
ads/other.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
ads/新云软件.url
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
ads/新云软件.url
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
book.vbs
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
book.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
down.asp
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
down.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
images/uping/index.vbs
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
images/uping/index.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
include/cache.vbs
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
include/cache.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
include/config.asp
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
include/config.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
include/conn.vbs
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
include/conn.vbs
Resource
win10v2004-20240709-en
General
-
Target
42aecb4f1e615f3d0a6e4359444057c5_JaffaCakes118
-
Size
368KB
-
MD5
42aecb4f1e615f3d0a6e4359444057c5
-
SHA1
d5e1db0ccced0450643c4a95a6c97f6079ca2834
-
SHA256
2cfc052a96965908d2af75fb45dfba79c90f1002d567cce4f17e3949fd7ed22c
-
SHA512
3ae2d31e4337a7ed495bdce819f788de1094610551e2aca38ecdf9985a974455a05dab3eddd1a284341303e34e61f7b6b1422b6b6d9d2d0c9ba859758d806640
-
SSDEEP
6144:SPJigfqnOLUkP3SRdQaPl0rE6wD1daY8wQmYHur1dNHihJbM+EpgDfyZ:SsgiOLNP3YPPl0rWLN8wQJAPdih1cpQs
Malware Config
Signatures
Files
-
42aecb4f1e615f3d0a6e4359444057c5_JaffaCakes118.rar
-
!!!说明.txt
-
admin.asp.asp .vbs polyglot
-
ads/b1.js
-
ads/b2.js
-
ads/c1.js
-
ads/d2.js
-
ads/e2.js
-
ads/e5.js
-
ads/menu.js
-
ads/other.js
-
ads/新云软件.url.url
-
book.asp.vbs
-
down.asp
-
images/admin/bg_login.gif.gif
-
images/admin/bg_repno.gif.gif
-
images/admin/bg_repx.gif.gif
-
images/admin/bg_repx_h.gif.gif
-
images/admin/bg_repx_hb.gif.gif
-
images/admin/bg_repx_hc.gif.gif
-
images/admin/bg_repx_hd.gif.gif
-
images/admin/bg_repy.gif.gif
-
images/admin/bg_tab_line.gif.gif
-
images/admin/correct.gif.gif
-
images/admin/error.gif.gif
-
images/admin/loading.gif.gif
-
images/admin/style.css
-
images/logo.gif.gif
-
images/uping/index.asp.vbs
-
include/cache.asp.vbs
-
include/config.asp
-
include/conn.asp.vbs
-
include/data/#data.db
-
include/function.asp.asp .vbs polyglot
-
include/install/images/bg_footer.gif.gif
-
include/install/images/bg_repno.gif.gif
-
include/install/images/bg_repx.gif.gif
-
include/install/images/bg_stepstatus.gif.gif
-
include/install/images/close.gif.gif
-
include/install/images/stepnum.gif.gif
-
include/install/license.tlcms
-
include/install/step1.tlcms.html
-
include/install/style.css
-
include/link.asp
-
include/md5.asp.vbs
-
include/tags.asp
-
include/template.asp.vbs
-
index.asp
-
info.asp
-
install.asp.asp .vbs polyglot
-
over.asp
-
rss.asp
-
search.asp
-
sort.asp
-
template/default/book.html.html .js polyglot
-
template/default/bottom.html
-
template/default/css/basic.css
-
template/default/css/chapter.css
-
template/default/css/header.css
-
template/default/css/index.css
-
template/default/css/page.css
-
template/default/css/search.css
-
template/default/css/showbooklist.css
-
template/default/css/showbookover.css
-
template/default/css/showbooktop.css
-
template/default/css/sort.css
-
template/default/css/xml.css
-
template/default/head.html
-
template/default/images/3.jpg.jpg
-
template/default/images/Formbg1.jpg.jpg
-
template/default/images/Member_line.jpg.jpg
-
template/default/images/Rss.gif.gif
-
template/default/images/Wap.gif.gif
-
template/default/images/Xml.gif.gif
-
template/default/images/bg.gif.gif
-
template/default/images/blank.gif.gif
-
template/default/images/bodybg.gif.gif
-
template/default/images/bt6.gif.gif
-
template/default/images/bt7.gif.gif
-
template/default/images/button.png.png
-
template/default/images/catebg.gif.gif
-
template/default/images/critique_bg.gif.gif
-
template/default/images/fontcolor.gif.gif
-
template/default/images/hot.gif.gif
-
template/default/images/keybg.gif.gif
-
template/default/images/login.jpg.jpg
-
template/default/images/logo.gif.gif
-
template/default/images/numlist.gif.gif
-
template/default/images/pic.gif.gif
-
template/default/images/pic_bak.gif.gif
-
template/default/images/rank.gif.gif
-
template/default/images/rb.gif.gif
-
template/default/images/search.jpg.jpg
-
template/default/images/titlist.gif.gif
-
template/default/images/titlist2.gif.gif
-
template/default/images/topbar_bg.gif.gif
-
template/default/images/topbg.gif.gif
-
template/default/images/userinfo.png.png
-
template/default/images/vip.jpg.jpg
-
template/default/images/vipsever.gif.gif
-
template/default/images/xdashed.gif.gif
-
template/default/images/yp.gif.gif
-
template/default/index.html.html
-
template/default/info.html.html .js polyglot
-
template/default/js/funcs.js.js
-
template/default/js/gb.js.js
-
template/default/js/jquery-cookie.js.js
-
template/default/js/jquery-css.js.js
-
template/default/list.html.html
-
template/default/over.html.html
-
template/default/rss.xml.xml
-
template/default/search.html.html
-
template/default/sort.html.html
-
template/default/top.html.html
-
template/default/topover.html.html
-
template/default/xml.xml.xml
-
template/default/xml.xsl.xml
-
top.asp
-
topover.asp
-
xml.asp