Overview
overview
6Static
static
1admin.ps1
windows7-x64
3admin.ps1
windows10-2004-x64
3admin/comment.ps1
windows7-x64
3admin/comment.ps1
windows10-2004-x64
3admin/global.js
windows7-x64
3admin/global.js
windows10-2004-x64
3admin/list.ps1
windows7-x64
3admin/list.ps1
windows10-2004-x64
3admin/module.ps1
windows7-x64
3admin/module.ps1
windows10-2004-x64
3admin/mysql.ps1
windows7-x64
3admin/mysql.ps1
windows10-2004-x64
3admin/replace.ps1
windows7-x64
6admin/replace.ps1
windows10-2004-x64
6admin/sort.ps1
windows7-x64
3admin/sort.ps1
windows10-2004-x64
3admin/spsort.ps1
windows7-x64
3admin/spsort.ps1
windows10-2004-x64
3admin/temp...ad.htm
windows7-x64
3admin/temp...ad.htm
windows10-2004-x64
1admin/temp...ce.htm
windows7-x64
3admin/temp...ce.htm
windows10-2004-x64
3admin/temp...ad.htm
windows7-x64
3admin/temp...ad.htm
windows10-2004-x64
3admin/temp...ce.htm
windows7-x64
3admin/temp...ce.htm
windows10-2004-x64
3admin/temp...nu.htm
windows7-x64
3admin/temp...nu.htm
windows10-2004-x64
3admin/temp...et.htm
windows7-x64
3admin/temp...et.htm
windows10-2004-x64
3admin/temp...st.htm
windows7-x64
3admin/temp...st.htm
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
admin.ps1
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
admin.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
admin/comment.ps1
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
admin/comment.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
admin/global.js
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
admin/global.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
admin/list.ps1
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
admin/list.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
admin/module.ps1
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
admin/module.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
admin/mysql.ps1
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
admin/mysql.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
admin/replace.ps1
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
admin/replace.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
admin/sort.ps1
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
admin/sort.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
admin/spsort.ps1
Resource
win7-20240729-en
Behavioral task
behavioral18
Sample
admin/spsort.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
admin/template/ad/addad.htm
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
admin/template/ad/addad.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
admin/template/ad/addplace.htm
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
admin/template/ad/addplace.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
admin/template/ad/listad.htm
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
admin/template/ad/listad.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
admin/template/ad/listadplace.htm
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
admin/template/ad/listadplace.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
admin/template/ad/menu.htm
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
admin/template/ad/menu.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
admin/template/autopass/set.htm
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
admin/template/autopass/set.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
admin/template/cache/list.htm
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
admin/template/cache/list.htm
Resource
win10v2004-20240802-en
General
-
Target
888460fca953ea7b6fbe6d1aee31bd49_JaffaCakes118
-
Size
569KB
-
MD5
888460fca953ea7b6fbe6d1aee31bd49
-
SHA1
914ee7332f255e44c9804799a23521359bc14f4a
-
SHA256
3e4fbd7bde760cf8340ad50680300a7f221925c0ee3ef2ff9d30d4cce9d6c094
-
SHA512
373c73b3b5546c63d0ad9f3f8dd41c6268d139666a022301500c7a8339a537e3df4d96d168e7fca1627e613271456f4dcd20b1281495f87a50d6a58b44a59791
-
SSDEEP
12288:ypIwBiioqKlIKJhMeCyfMW2teDR7yJff/rVaLPHV1a1eL45GoKoNzG32a:ciioxIKYpdzRG1EtRKuG32a
Malware Config
Signatures
Files
-
888460fca953ea7b6fbe6d1aee31bd49_JaffaCakes118.rar
-
admin.php.ps1
-
admin/ad.php
-
admin/autopass.php
-
admin/cache.php
-
admin/center.php
-
admin/comment.php.ps1
-
admin/foot.php
-
admin/global.php.js
-
admin/head.php
-
admin/images/Thumbs.db
-
admin/images/arrow.gif.gif
-
admin/images/bt_bg.gif
-
admin/images/help_icon.gif.gif
-
admin/images/post_bt.gif.gif
-
admin/images/qq_22.gif.gif
-
admin/images/style.css
-
admin/index.php
-
admin/js.php
-
admin/label.inc.php
-
admin/left.php
-
admin/list.php.ps1
-
admin/makehtml.php
-
admin/menu.php
-
admin/module.php.ps1
-
admin/mysql.php.ps1
-
admin/mysql_into.php
-
admin/popularize.php
-
admin/replace.php.ps1
-
admin/report.php
-
admin/sellad.php
-
admin/sort.php.ps1
-
admin/spsort.php.ps1
-
admin/template/ad/addad.htm
-
admin/template/ad/addplace.htm.js
-
admin/template/ad/listad.htm
-
admin/template/ad/listadplace.htm.js
-
admin/template/ad/menu.htm
-
admin/template/autopass/set.htm.js
-
admin/template/cache/list.htm
-
admin/template/center/config.htm
-
admin/template/center/contact.htm
-
admin/template/center/guide.htm
-
admin/template/center/makehtml.htm
-
admin/template/center/post.htm
-
admin/template/center/top.htm.js
-
admin/template/comment/list.htm.js
-
admin/template/comment/show.htm
-
admin/template/foot.htm.js
-
admin/template/gather/addrulesql.htm
-
admin/template/gather/edit_content.htm.js
-
admin/template/gather/edit_title.htm.js
-
admin/template/gather/list.htm
-
admin/template/gather/list_title.htm.js
-
admin/template/gather/mod.htm.js
-
admin/template/gather/sharerulesql.htm.js
-
admin/template/head.htm.html .js polyglot
-
admin/template/index.htm.html
-
admin/template/js/set.htm
-
admin/template/label/set.htm.js
-
admin/template/left.htm.html
-
admin/template/list.htm.js
-
admin/template/login.htm.html
-
admin/template/makehtml/set.htm
-
admin/template/module/config.htm
-
admin/template/module/editfield.htm
-
admin/template/module/editmodule.htm
-
admin/template/module/editsort.htm.js
-
admin/template/module/sort.htm.js
-
admin/template/module/tpl.htm
-
admin/template/mysql/del.htm
-
admin/template/mysql/into.htm
-
admin/template/mysql/menu.htm
-
admin/template/mysql/out.htm.js
-
admin/template/mysql/outaction.htm
-
admin/template/mysql/sql.htm
-
admin/template/popularize/set.htm.js
-
admin/template/post/list.htm.js
-
admin/template/post/post.htm.js
-
admin/template/post/work.htm.js
-
admin/template/replace/choose.htm.js
-
admin/template/replace/list.htm
-
admin/template/report/list.htm.js
-
admin/template/sellad/addplace.htm.js
-
admin/template/sellad/listad.htm.js
-
admin/template/sellad/listuser.htm
-
admin/template/sort/batch.htm
-
admin/template/sort/config.htm
-
admin/template/sort/editfield.htm.js
-
admin/template/sort/editsort.htm.js
-
admin/template/sort/label.htm
-
admin/template/sort/listfield.htm.js
-
admin/template/sort/menu.htm
-
admin/template/sort/save.htm
-
admin/template/sort/sort.htm.js
-
admin/template/sort/table.htm
-
admin/template/spsort/batch.htm
-
admin/template/spsort/city.htm
-
admin/template/spsort/edit_city.htm.js
-
admin/template/spsort/edit_street.htm.js
-
admin/template/spsort/edit_zone.htm.js
-
admin/template/spsort/editsort.htm.js
-
admin/template/spsort/sort.htm
-
admin/template/spsort/street.htm
-
admin/template/spsort/zone.htm
-
admin/新云软件.url.url
-
allcity.php
-
bencandy.php.ps1
-
data.sql
-
global.php.ps1
-
images/default/2line.gif.gif
-
images/default/Thumbs.db
-
images/default/adtitle_ico.gif.gif
-
images/default/allcity_post.gif.gif
-
images/default/article_elite.gif.gif
-
images/default/bgg.jpg.jpg
-
images/default/bt_bg.gif
-
images/default/btn_post.gif.gif
-
images/default/button.gif.gif
-
images/default/cate_nav_bg.gif.gif
-
images/default/cate_nav_bg2.gif.gif
-
images/default/cate_nav_bg_1.gif.gif
-
images/default/cate_nav_bg_2.gif.gif
-
images/default/cate_nav_bg_3.gif.gif
-
images/default/default.css
-
images/default/ding.gif.gif
-
images/default/ehead_bg1.gif.gif
-
images/default/ehead_bg2.gif.gif
-
images/default/ehead_bg3.gif.gif
-
images/default/email.gif.gif
-
images/default/favor.gif.gif
-
images/default/fenl2.jpg.jpg
-
images/default/flea_line.gif.gif
-
images/default/flowers.gif
-
images/default/freefabu.gif.gif
-
images/default/freefei.gif.gif
-
images/default/good_ico.gif.gif
-
images/default/hd1.gif.gif
-
images/default/head.gif
-
images/default/head2.gif.gif
-
images/default/head_bg.gif.gif
-
images/default/head_bg1.gif.gif
-
images/default/head_bg2.gif.gif
-
images/default/head_bg3.gif.gif
-
images/default/head_top_1.gif.gif
-
images/default/head_top_2.gif.gif
-
images/default/head_top_3.gif.gif
-
images/default/headbg.gif.gif
-
images/default/headbg2.gif.gif
-
images/default/header_gray.gif.gif
-
images/default/headtoppic.gif.gif
-
images/default/icobg.gif.gif
-
images/default/icon_bluedian.gif.gif
-
images/default/icon_qi.gif.gif
-
images/default/icotop.gif.gif
-
images/default/iheadbg.gif.gif
-
images/default/ii.gif.gif
-
images/default/img_ico.gif.gif
-
images/default/line.gif.gif
-
images/default/logo.gif.gif
-
images/default/nobody.gif.gif
-
images/default/nohead.gif.gif
-
images/default/noimg.jpg.jpg
-
images/default/nomap.gif
-
images/default/nopic.jpg.jpg
-
images/default/othermenu.jpg.gif
-
images/default/post_bt.gif.gif
-
images/default/qq_msn_phone.gif.gif
-
images/default/report.gif.gif
-
images/default/rollpic.swf
-
images/default/select_menu.js.js
-
images/default/send.gif.gif
-
images/default/top_icon.gif.gif
-
images/default/tu.gif.gif
-
images/default/upfile.gif.gif
-
images/default/wangyoudianping.gif.gif
-
images/default/ww_offline.gif.gif
-
images/default/zip_ico.gif.gif
-
inc/foot.php
-
inc/function.php.ps1
-
inc/head.php
-
inc/job/adinfo.php
-
inc/job/allnewinfo.php.ps1
-
inc/job/bigsortshownewinfo.php
-
inc/job/collect.php
-
inc/job/cominfo.php
-
inc/job/comment_ajax.php
-
inc/job/doinfo.php
-
inc/job/dotop.php
-
inc/job/getstreet.php
-
inc/job/getzone.php
-
inc/job/hotinfo.php
-
inc/job/img.php
-
inc/job/ip.php
-
inc/job/makeindex.php
-
inc/job/map_position.php
-
inc/job/mob.php
-
inc/job/pingfen.php
-
inc/job/popshow.php
-
inc/job/report.php
-
inc/job/update.php
-
inc/job/userinfo.php
-
inc/mobilebook.dat
-
index.php
-
install.php
-
job.php
-
list.php.ps1
-
member/collection.php.ps1
-
member/comment.php.ps1
-
member/foot.php
-
member/global.php
-
member/head.php
-
member/index.php
-
member/job.php
-
member/list.php
-
member/map.php
-
member/menu.php
-
member/template/collection.htm
-
member/template/comment/list.htm.js
-
member/template/comment/mylist.htm.js
-
member/template/foot.htm.html .js polyglot
-
member/template/head.htm.html .js polyglot
-
member/template/list.htm
-
member/template/map.htm
-
php168/ad_cache.php
-
php168/all_area.php
-
php168/all_city.php
-
php168/all_fid.php
-
php168/all_spfid.php
-
php168/config.php
-
php168/guide_fid.php
-
php168/module_db.php
-
php168/report.php
-
php168/style/default.php
-
php168/zone/1.php
-
php168/zone/103.php
-
php168/zone/158.php
-
php168/zone/2.php
-
php168/zone/26.php
-
php168/zone/271.php
-
php168/zone/281.php
-
php168/zone/3.php
-
php168/zone/4.php
-
php168/zone/5.php
-
php168/zone/56.php
-
php168/zone/6.php
-
php168/zone/78.php
-
post.php.ps1
-
search.php.ps1
-
template/default/admin.htm.js
-
template/default/allcity.htm
-
template/default/bencandy_0.htm.js
-
template/default/bencandy_1.htm.js
-
template/default/bencandy_2.htm.js
-
template/default/bencandy_3.htm.js
-
template/default/bencandy_4.htm.js
-
template/default/bencandy_5.htm.js
-
template/default/bencandy_6.htm.js
-
template/default/bencandy_7.htm.js
-
template/default/bigsort.htm.js
-
template/default/comment_ajax.htm.ps1
-
template/default/foot.htm.js
-
template/default/head.htm.html .js polyglot
-
template/default/index.htm.js
-
template/default/ip.htm
-
template/default/list_0.htm.js
-
template/default/list_1.htm.js
-
template/default/list_2.htm.js
-
template/default/list_3.htm.js
-
template/default/list_4.htm.js
-
template/default/list_5.htm.js
-
template/default/list_6.htm.js
-
template/default/list_7.htm.js
-
template/default/mob.htm
-
template/default/post_0.htm
-
template/default/post_1.htm
-
template/default/post_2.htm
-
template/default/post_3.htm
-
template/default/post_4.htm
-
template/default/post_5.htm
-
template/default/post_6.htm
-
template/default/post_7.htm
-
template/default/pub.htm
-
template/default/report.htm
-
template/default/search_0.htm.js
-
template/default/search_1.htm.js
-
template/default/search_2.htm.js
-
template/default/search_3.htm.js
-
template/default/search_4.htm.js
-
template/default/search_5.htm.js
-
template/default/search_6.htm.js
-
template/default/search_7.htm.js
-
template/default/userinfo.htm
-
安装说明.txt