Overview
overview
3Static
static
1#09yuttghttb.asp
windows7-x64
3#09yuttghttb.asp
windows10-2004-x64
3Editor/Dia...log.js
windows7-x64
3Editor/Dia...log.js
windows10-2004-x64
3Editor/Inc/Editor.js
windows7-x64
3Editor/Inc/Editor.js
windows10-2004-x64
3Editor/Inc/Menu.js
windows7-x64
3Editor/Inc/Menu.js
windows10-2004-x64
3Editor/Inc/Table.js
windows7-x64
3Editor/Inc/Table.js
windows10-2004-x64
3Editor/新...��.url
windows7-x64
1Editor/新...��.url
windows10-2004-x64
1_model.vbs
windows7-x64
1_model.vbs
windows10-2004-x64
1bbs_admin.vbs
windows7-x64
1bbs_admin.vbs
windows10-2004-x64
1bbs_admin_hf.vbs
windows7-x64
1bbs_admin_hf.vbs
windows10-2004-x64
1bbs_bj.vbs
windows7-x64
1bbs_bj.vbs
windows10-2004-x64
1bbs_list.vbs
windows7-x64
1bbs_list.vbs
windows10-2004-x64
1bbs_lx.vbs
windows7-x64
1bbs_lx.vbs
windows10-2004-x64
1bbs_noin.vbs
windows7-x64
1bbs_noin.vbs
windows10-2004-x64
1bbs_sy.asp
windows7-x64
3bbs_sy.asp
windows10-2004-x64
3bbs_tj.vbs
windows7-x64
1bbs_tj.vbs
windows10-2004-x64
1bbs_type.vbs
windows7-x64
1bbs_type.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
#09yuttghttb.asp
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
#09yuttghttb.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
Editor/Dialog/Dialog.js
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
Editor/Dialog/Dialog.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
Editor/Inc/Editor.js
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
Editor/Inc/Editor.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
Editor/Inc/Menu.js
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
Editor/Inc/Menu.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
Editor/Inc/Table.js
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
Editor/Inc/Table.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
Editor/新云软件.url
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
Editor/新云软件.url
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
_model.vbs
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
_model.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
bbs_admin.vbs
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
bbs_admin.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
bbs_admin_hf.vbs
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
bbs_admin_hf.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
bbs_bj.vbs
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
bbs_bj.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
bbs_list.vbs
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
bbs_list.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
bbs_lx.vbs
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
bbs_lx.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
bbs_noin.vbs
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
bbs_noin.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
bbs_sy.asp
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
bbs_sy.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
bbs_tj.vbs
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
bbs_tj.vbs
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
bbs_type.vbs
Resource
win7-20240705-en
Behavioral task
behavioral32
Sample
bbs_type.vbs
Resource
win10v2004-20240709-en
General
-
Target
6a7a2853d9107e80bdf4ddf94b84df9f_JaffaCakes118
-
Size
367KB
-
MD5
6a7a2853d9107e80bdf4ddf94b84df9f
-
SHA1
d7514304da6825ad54f4c6484384439480d86427
-
SHA256
a90bd4e4a4b60ce7f957102d587641223da8951ca0b3c8a296c498bad68aad40
-
SHA512
521e70ba2db2f8799428bafd0fe00db6e09acd3fb16b24fd88135477f382ae158ced202563477d5ce778bfa9b74081396f7579424979c70e4366a19a4fa3104e
-
SSDEEP
6144:w4U+B8zWy1VRZZ0K/fXOsTqKNiAjP6oRJiM8a+WcgZzT9M384ctIp:w2ZyhT0KesTqs5bnR84RcgTw8zIp
Malware Config
Signatures
Files
-
6a7a2853d9107e80bdf4ddf94b84df9f_JaffaCakes118.rar
-
#09yuttghttb.asp
-
Editor/Dialog/Anchor.htm.html .js polyglot
-
Editor/Dialog/Dialog.js.js
-
Editor/Dialog/Fieldset.htm.html .js polyglot
-
Editor/Dialog/FindReplace.htm.html .js polyglot
-
Editor/Dialog/Flash.htm.html .js polyglot
-
Editor/Dialog/HyperLink.htm.html .js polyglot
-
Editor/Dialog/Iframe.htm.html .js polyglot
-
Editor/Dialog/Img.htm.html .js polyglot
-
Editor/Dialog/Map.htm.html .js polyglot
-
Editor/Dialog/Marquee.htm.html .js polyglot
-
Editor/Dialog/Media.htm.html .js polyglot
-
Editor/Dialog/SelColor.htm.html .js polyglot
-
Editor/Dialog/Symbol.htm.html .js polyglot
-
Editor/Dialog/Table.htm.html .js polyglot
-
Editor/Dialog/TableCell.htm.html .js polyglot
-
Editor/Dialog/Tablecellsplit.htm.html .js polyglot
-
Editor/HTMLEditor.htm.html .js polyglot
-
Editor/Img/Abspos.gif.gif
-
Editor/Img/Anchor.gif.gif
-
Editor/Img/Backcolor.gif.gif
-
Editor/Img/Backward.gif.gif
-
Editor/Img/Bgcolor.gif.gif
-
Editor/Img/Bgpic.gif.gif
-
Editor/Img/Bold.gif.gif
-
Editor/Img/Br.gif.gif
-
Editor/Img/Checked.gif.gif
-
Editor/Img/Code.gif.gif
-
Editor/Img/Componentmenu.gif.gif
-
Editor/Img/Contextmenu.gif.gif
-
Editor/Img/Copy.gif.gif
-
Editor/Img/Createlink.gif.gif
-
Editor/Img/Cut.gif.gif
-
Editor/Img/Date.gif.gif
-
Editor/Img/Delete.gif.gif
-
Editor/Img/Editmenu.gif.gif
-
Editor/Img/Emot.gif.gif
-
Editor/Img/Excel.gif.gif
-
Editor/Img/Fieldset.gif.gif
-
Editor/Img/File.gif.gif
-
Editor/Img/Filemenu.gif.gif
-
Editor/Img/Findreplace.gif.gif
-
Editor/Img/Flash.gif.gif
-
Editor/Img/Fontmenu.gif.gif
-
Editor/Img/Forecolor.gif.gif
-
Editor/Img/Formbutton.gif.gif
-
Editor/Img/Formcheckbox.gif.gif
-
Editor/Img/Formdropdown.gif.gif
-
Editor/Img/Formmenu.gif.gif
-
Editor/Img/Formradio.gif.gif
-
Editor/Img/Formtext.gif.gif
-
Editor/Img/Formtextarea.gif.gif
-
Editor/Img/Forward.gif.gif
-
Editor/Img/Help.gif.gif
-
Editor/Img/Iframe.gif.gif
-
Editor/Img/Img.gif.gif
-
Editor/Img/Indent.gif.gif
-
Editor/Img/Inserthorizontalrule.gif.gif
-
Editor/Img/Insertorderedlist.gif.gif
-
Editor/Img/Insertparagraph.gif.gif
-
Editor/Img/Insertunorderedlist.gif.gif
-
Editor/Img/Italic.gif.gif
-
Editor/Img/Justifycenter.gif.gif
-
Editor/Img/Justifyfull.gif.gif
-
Editor/Img/Justifyleft.gif.gif
-
Editor/Img/Justifyright.gif.gif
-
Editor/Img/Map.gif.gif
-
Editor/Img/Marquee.gif.gif
-
Editor/Img/Maximize.gif.gif
-
Editor/Img/Media.gif.gif
-
Editor/Img/Minimize.gif.gif
-
Editor/Img/Modecodebtn.gif.gif
-
Editor/Img/Modeeditbtn.gif.gif
-
Editor/Img/Modetextbtn.gif.gif
-
Editor/Img/Modeviewbtn.gif.gif
-
Editor/Img/Objectmenu.gif.gif
-
Editor/Img/Outdent.gif.gif
-
Editor/Img/Paragraphmenu.gif.gif
-
Editor/Img/Paste.gif.gif
-
Editor/Img/Pasteinput.gif.gif
-
Editor/Img/Pastetext.gif.gif
-
Editor/Img/Pasteword.gif.gif
-
Editor/Img/Print.gif.gif
-
Editor/Img/Quote.gif.gif
-
Editor/Img/Rect.gif.gif
-
Editor/Img/Rectimg.gif.gif
-
Editor/Img/Redo.gif.gif
-
Editor/Img/Refresh.gif.gif
-
Editor/Img/Remoteupload.gif.gif
-
Editor/Img/Removeformat.gif.gif
-
Editor/Img/Save.gif.gif
-
Editor/Img/Selectall.gif.gif
-
Editor/Img/Showborders.gif.gif
-
Editor/Img/Showdetails.gif.gif
-
Editor/Img/Site.gif.gif
-
Editor/Img/Sizeminus.gif.gif
-
Editor/Img/Sizeplus.gif.gif
-
Editor/Img/Space.gif.gif
-
Editor/Img/Spellcheck.gif.gif
-
Editor/Img/Strikethrough.gif.gif
-
Editor/Img/Subscript.gif.gif
-
Editor/Img/Superscript.gif.gif
-
Editor/Img/Symbol.gif.gif
-
Editor/Img/Tablecellprop.gif.gif
-
Editor/Img/Tablecellsplit.gif.gif
-
Editor/Img/Tablecoldelete.gif.gif
-
Editor/Img/Tablecolinsertleft.gif.gif
-
Editor/Img/Tablecolinsertright.gif.gif
-
Editor/Img/Tablecolmerge.gif.gif
-
Editor/Img/Tablecolsplit.gif.gif
-
Editor/Img/Tableinsert.gif.gif
-
Editor/Img/Tablemenu.gif.gif
-
Editor/Img/Tableprop.gif.gif
-
Editor/Img/Tablerowdelete.gif.gif
-
Editor/Img/Tablerowinsertabove.gif.gif
-
Editor/Img/Tablerowinsertbelow.gif.gif
-
Editor/Img/Tablerowmerge.gif.gif
-
Editor/Img/Tablerowprop.gif.gif
-
Editor/Img/Tablerowsplit.gif.gif
-
Editor/Img/Time.gif.gif
-
Editor/Img/Tobig.gif.gif
-
Editor/Img/Toolmenu-.gif.gif
-
Editor/Img/Toolmenu.gif.gif
-
Editor/Img/Tosmall.gif.gif
-
Editor/Img/Underline.gif.gif
-
Editor/Img/Undo.gif.gif
-
Editor/Img/Unlink.gif.gif
-
Editor/Img/Unselect.gif.gif
-
Editor/Img/Zoommenu.gif.gif
-
Editor/Inc/Editor.css
-
Editor/Inc/Editor.js.js
-
Editor/Inc/EditorArea.css
-
Editor/Inc/EditorDialog.css
-
Editor/Inc/Menu.js.js
-
Editor/Inc/MenuArea.css
-
Editor/Inc/Table.js.js
-
Editor/新云软件.url.url
-
_model.asp.vbs
-
banquan.htm.html .js polyglot
-
bbs_admin.asp.vbs
-
bbs_admin_hf.asp.vbs
-
bbs_bj.asp.vbs
-
bbs_list.asp.vbs
-
bbs_lx.asp.vbs
-
bbs_noin.asp.vbs
-
bbs_sy.asp
-
bbs_tj.asp.vbs
-
bbs_type.asp.vbs
-
bbs_type_zl.asp.vbs
-
bbs_yt.asp.vbs
-
check.asp
-
conn.asp.vbs
-
filesc.asp.vbs
-
images/1_1.gif.gif
-
images/1_10.gif.gif
-
images/1_11.gif.gif
-
images/1_12.gif.gif
-
images/1_13.gif.gif
-
images/1_14.gif.gif
-
images/1_15.gif.gif
-
images/1_16.gif.gif
-
images/1_2.gif.gif
-
images/1_3.gif.gif
-
images/1_4.gif.gif
-
images/1_5.gif.gif
-
images/1_6.gif.gif
-
images/1_7.gif.gif
-
images/1_8.gif.gif
-
images/1_9.gif.gif
-
images/Ask.gif.gif
-
images/Back.gif.gif
-
images/Favorites.gif.gif
-
images/Forward.gif.gif
-
images/Home.gif.gif
-
images/Topics.gif.gif
-
images/a_001.gif.gif
-
images/a_002.gif.gif
-
images/a_007.gif.gif
-
images/a_01.gif.gif
-
images/a_02.gif.gif
-
images/a_03.gif.gif
-
images/a_04.gif.gif
-
images/a_05.gif.gif
-
images/a_06.gif.gif
-
images/a_07.gif.gif
-
images/all.gif.gif
-
images/arrow01.gif.gif
-
images/arrow02.gif.gif
-
images/bg_header.png.png
-
images/dashed.gif.gif
-
images/lltj.gif.gif
-
images/logo.gif.gif
-
images/logo1.gif.gif
-
images/mail.gif.gif
-
images/menu_bg.gif.gif
-
images/nophoto.gif.gif
-
images/percent.GIF
-
images/playsystem.gif.gif
-
images/qq.gif.gif
-
images/textbg.jpg.jpg
-
images/yr_top_1000.gif.gif
-
images/yr_top_780.gif.gif
-
index.asp.vbs
-
index.html.html
-
js.asp.js
-
kill_keyword.asp.vbs
-
login.asp.vbs
-
mail.asp.vbs
-
md5.asp.vbs
-
menu.html
-
publish.htm.html .js polyglot
-
redime.txt
-
sc.asp.vbs
-
style.css
-
style2.css
-
tb.htm.html
-
tb/11.htm.html
-
tb_admin.asp.html .vbs polyglot
-
tb_admin_left.asp.js
-
tb_dl.asp.vbs
-
tb_dlpm.asp.vbs
-
tb_dlxx.asp.vbs
-
tb_gl.asp.vbs
-
tb_grxx.asp.vbs
-
tb_plsc.asp.vbs
-
tb_pt_lx.asp.vbs
-
tb_sp.asp.vbs
-
tb_sz.asp
-
tb_wjt.asp.js
-
tb_wjw.asp.vbs
-
tb_yrwl.asp
-
tb_zc.asp.vbs
-
tieba.asp.vbs
-
upload_5xsoft.inc.html .vbs polyglot
-
xmlhttp.asp.vbs