Overview
overview
3Static
static
1Common/common.ps1
windows7-x64
3Common/common.ps1
windows10-2004-x64
3Common/新...��.url
windows7-x64
1Common/新...��.url
windows10-2004-x64
1Lib/Action...ss.ps1
windows7-x64
3Lib/Action...ss.ps1
windows10-2004-x64
3Lib/Action...ss.ps1
windows7-x64
3Lib/Action...ss.ps1
windows10-2004-x64
3Public/adm...n.html
windows7-x64
3Public/adm...n.html
windows10-2004-x64
3Public/admin/ads.html
windows7-x64
3Public/admin/ads.html
windows10-2004-x64
3Public/adm...e.html
windows7-x64
3Public/adm...e.html
windows10-2004-x64
1Public/adm...t.html
windows7-x64
3Public/adm...t.html
windows10-2004-x64
3Public/adm...d.html
windows7-x64
3Public/adm...d.html
windows10-2004-x64
3Public/adm...d.html
windows7-x64
3Public/adm...d.html
windows10-2004-x64
3Public/adm...t.html
windows7-x64
3Public/adm...t.html
windows10-2004-x64
3Public/adm...o.html
windows7-x64
3Public/adm...o.html
windows10-2004-x64
3Public/adm...t.html
windows7-x64
3Public/adm...t.html
windows10-2004-x64
1Public/adm...n.html
windows7-x64
3Public/adm...n.html
windows10-2004-x64
3Public/adm...d.html
windows7-x64
3Public/adm...d.html
windows10-2004-x64
3Public/adm...g.html
windows7-x64
3Public/adm...g.html
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Common/common.ps1
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Common/common.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Common/新云软件.url
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
Common/新云软件.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Lib/Action/Admin/AdsAction.class.ps1
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
Lib/Action/Admin/AdsAction.class.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Lib/Action/Admin/LinkAction.class.ps1
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
Lib/Action/Admin/LinkAction.class.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Public/admin/admin.html
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
Public/admin/admin.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Public/admin/ads.html
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
Public/admin/ads.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Public/admin/cache.html
Resource
win7-20240708-en
Behavioral task
behavioral14
Sample
Public/admin/cache.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Public/admin/collect.html
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
Public/admin/collect.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Public/admin/collectend.html
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
Public/admin/collectend.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Public/admin/collectingid.html
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
Public/admin/collectingid.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Public/admin/collectinglist.html
Resource
win7-20240729-en
Behavioral task
behavioral22
Sample
Public/admin/collectinglist.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Public/admin/collectinglistgo.html
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
Public/admin/collectinglistgo.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Public/admin/collectingtest.html
Resource
win7-20240729-en
Behavioral task
behavioral26
Sample
Public/admin/collectingtest.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Public/admin/collectmain.html
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
Public/admin/collectmain.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Public/admin/collectppvod.html
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
Public/admin/collectppvod.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Public/admin/config.html
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
Public/admin/config.html
Resource
win10v2004-20240802-en
General
-
Target
88653dc1f833d39558e4b7db39a2b589_JaffaCakes118
-
Size
494KB
-
MD5
88653dc1f833d39558e4b7db39a2b589
-
SHA1
5fd19e605d497102854fd33c3201f9e37f91028b
-
SHA256
f7418b8b6a1906e311cc62a06717ec23af743f3620f5bc2942d33d9a632c4928
-
SHA512
baa15006996b75f07ded0dd518e8f260247533801fc54e7a3e2c320de32d877d63ebe3ccca27fc7584949781d9d957cad75cdaa740e133fcc154fdec59ca1fd4
-
SSDEEP
12288:1dtsUPhApE17n13w4c9iSzqQK8jbRI6grZOHT0kP+eKLOh:HtsfqdoISZKRK0kP+eKC
Malware Config
Signatures
Files
-
88653dc1f833d39558e4b7db39a2b589_JaffaCakes118.rar
-
.htaccess
-
Common/common.php.ps1
-
Common/新云软件.url.url
-
Conf/config.php
-
Conf/setting.php
-
Lib/Action/Admin/AdsAction.class.php.ps1
-
Lib/Action/Admin/CacheAction.class.php
-
Lib/Action/Admin/CollectAction.class.php
-
Lib/Action/Admin/HtmlAction.class.php
-
Lib/Action/Admin/IndexAction.class.php
-
Lib/Action/Admin/InstallAction.class.php
-
Lib/Action/Admin/LinkAction.class.php.ps1
-
Lib/Action/Admin/ListAction.class.php
-
Lib/Action/Admin/LoginAction.class.php
-
Lib/Action/Admin/NewsAction.class.php
-
Lib/Action/Admin/ToolAction.class.php
-
Lib/Action/Admin/UploadAction.class.php
-
Lib/Action/Admin/UserAction.class.php
-
Lib/Action/Admin/VodAction.class.php
-
Lib/Action/AllAction.class.php
-
Lib/Action/BaseAction.class.php
-
Lib/Action/Home/IndexAction.class.php
-
Lib/Action/Home/NewsAction.class.php
-
Lib/Action/Home/VodAction.class.php
-
Lib/Action/HomeAction.class.php
-
Lib/Model/Admin/AdminModel.class.php
-
Lib/Model/Admin/AdsModel.class.php
-
Lib/Model/Admin/CollectModel.class.php
-
Lib/Model/Admin/LinkModel.class.php
-
Lib/Model/Admin/ListModel.class.php
-
Lib/Model/Admin/LoginModel.class.php
-
Lib/Model/Admin/NewsModel.class.php
-
Lib/Model/Admin/UserModel.class.php
-
Lib/Model/Admin/VodModel.class.php
-
Lib/Model/Home/NewsModel.class.php
-
Lib/Model/Home/VodModel.class.php
-
Public/admin/admin.html.html
-
Public/admin/ads.html.html
-
Public/admin/cache.html.html
-
Public/admin/collect.html.html
-
Public/admin/collectend.html
-
Public/admin/collectingid.html
-
Public/admin/collectinglist.html
-
Public/admin/collectinglistgo.html
-
Public/admin/collectingtest.html
-
Public/admin/collectmain.html.html
-
Public/admin/collectppvod.html.html
-
Public/admin/collectxml.html.xml
-
Public/admin/config.html.html
-
Public/admin/footer.html
-
Public/admin/html.html.html
-
Public/admin/index.html
-
Public/admin/install.html.html
-
Public/admin/left.html.html
-
Public/admin/link.html.html
-
Public/admin/list.html.html
-
Public/admin/login.html.html .js polyglot
-
Public/admin/main.html.html
-
Public/admin/news.html.html .js polyglot
-
Public/admin/tool.html.html
-
Public/admin/top.html.html
-
Public/admin/upload.html
-
Public/admin/user.html.html
-
Public/admin/vod.html.html .js polyglot
-
Public/ads/left250250.js.js
-
Public/ads/right300250.js.js
-
Public/ads/right300300.js.js
-
Public/ads/top46860.js.js
-
Public/ads/top72890.js.js
-
Public/css/admin.css
-
Public/css/play.css
-
Public/css/plus_news_ud.css
-
Public/css/plus_vod_ud.css
-
Public/images/add.gif.gif
-
Public/images/addtime.gif.gif
-
Public/images/bg_repno.gif.gif
-
Public/images/body_load.gif.gif
-
Public/images/button_bg.gif.gif
-
Public/images/cancel.gif.gif
-
Public/images/cancelbutton.gif.gif
-
Public/images/continu.gif.gif
-
Public/images/del.gif.gif
-
Public/images/dir.gif.gif
-
Public/images/edit.gif.gif
-
Public/images/hot_no.gif.gif
-
Public/images/hot_yes.gif.gif
-
Public/images/inbg.gif.gif
-
Public/images/load.gif.gif
-
Public/images/loading.gif.gif
-
Public/images/no.gif.gif
-
Public/images/order_asc.gif.gif
-
Public/images/order_desc.gif.gif
-
Public/images/photo_upload.png.png
-
Public/images/play_bg.png.png
-
Public/images/plus_news_ud_mark.gif.gif
-
Public/images/plus_news_ud_sprites.gif.gif
-
Public/images/plus_vod_ud_action.gif.gif
-
Public/images/pub.gif.gif
-
Public/images/star_no.gif.gif
-
Public/images/star_ok.gif.gif
-
Public/images/tag.gif.gif
-
Public/images/top1.gif.gif
-
Public/images/top10.gif.gif
-
Public/images/top11.gif.gif
-
Public/images/top12.gif.gif
-
Public/images/top13.gif.gif
-
Public/images/top14.gif.gif
-
Public/images/top15.gif.gif
-
Public/images/top16.gif.gif
-
Public/images/top17.gif.gif
-
Public/images/top18.gif.gif
-
Public/images/top19.gif.gif
-
Public/images/top2.gif.gif
-
Public/images/top20.gif.gif
-
Public/images/top21.gif.gif
-
Public/images/top22.gif.gif
-
Public/images/top23.gif.gif
-
Public/images/top24.gif.gif
-
Public/images/top3.gif.gif
-
Public/images/top4.gif.gif
-
Public/images/top5.gif.gif
-
Public/images/top6.gif.gif
-
Public/images/top7.gif.gif
-
Public/images/top8.gif.gif
-
Public/images/top9.gif.gif
-
Public/images/watermark.gif.gif
-
Public/images/yes.gif.gif
-
Public/install/install.sql
-
Public/js/admin.js.js
-
Public/js/editor/kindeditor.js.js
-
Public/js/editor/plugins/about.html.html
-
Public/js/editor/plugins/emoticons/etc_01.gif.gif
-
Public/js/editor/plugins/emoticons/etc_02.gif.gif
-
Public/js/editor/plugins/emoticons/etc_03.gif.gif
-
Public/js/editor/plugins/emoticons/etc_04.gif.gif
-
Public/js/editor/plugins/emoticons/etc_05.gif.gif
-
Public/js/editor/plugins/emoticons/etc_06.gif.gif
-
Public/js/editor/plugins/emoticons/etc_07.gif.gif
-
Public/js/editor/plugins/emoticons/etc_08.gif.gif
-
Public/js/editor/plugins/emoticons/etc_09.gif.gif
-
Public/js/editor/plugins/emoticons/etc_10.gif.gif
-
Public/js/editor/plugins/emoticons/etc_11.gif.gif
-
Public/js/editor/plugins/emoticons/etc_12.gif.gif
-
Public/js/editor/plugins/emoticons/etc_13.gif.gif
-
Public/js/editor/plugins/emoticons/etc_14.gif.gif
-
Public/js/editor/plugins/emoticons/etc_15.gif.gif
-
Public/js/editor/plugins/emoticons/etc_16.gif.gif
-
Public/js/editor/plugins/emoticons/etc_17.gif.gif
-
Public/js/editor/plugins/emoticons/etc_18.gif.gif
-
Public/js/editor/plugins/emoticons/etc_19.gif.gif
-
Public/js/editor/plugins/emoticons/etc_20.gif.gif
-
Public/js/editor/plugins/emoticons/etc_21.gif.gif
-
Public/js/editor/plugins/emoticons/etc_22.gif.gif
-
Public/js/editor/plugins/emoticons/etc_23.gif.gif
-
Public/js/editor/plugins/emoticons/etc_24.gif.gif
-
Public/js/editor/plugins/emoticons/etc_25.gif.gif
-
Public/js/editor/plugins/emoticons/etc_26.gif.gif
-
Public/js/editor/plugins/emoticons/etc_27.gif.gif
-
Public/js/editor/plugins/emoticons/etc_28.gif.gif
-
Public/js/editor/plugins/emoticons/etc_29.gif.gif
-
Public/js/editor/plugins/emoticons/etc_30.gif.gif
-
Public/js/editor/plugins/emoticons/etc_31.gif.gif
-
Public/js/editor/plugins/emoticons/etc_32.gif.gif
-
Public/js/editor/plugins/emoticons/etc_33.gif.gif
-
Public/js/editor/plugins/emoticons/etc_34.gif.gif
-
Public/js/editor/plugins/emoticons/etc_35.gif.gif
-
Public/js/editor/plugins/emoticons/etc_36.gif.gif
-
Public/js/editor/plugins/flash.html.html
-
Public/js/editor/plugins/image.html.html
-
Public/js/editor/plugins/link.html.html
-
Public/js/editor/plugins/media.html.html
-
Public/js/editor/plugins/plainpaste.html.html
-
Public/js/editor/plugins/wordpaste.html.html .js polyglot
-
Public/js/editor/skins/default.css
-
Public/js/editor/skins/default.gif.gif
-
Public/js/editor/skins/div.gif.gif
-
Public/js/editor/skins/dl.gif.gif
-
Public/js/editor/skins/editor.css
-
Public/js/editor/skins/ol.gif.gif
-
Public/js/editor/skins/p.gif.gif
-
Public/js/editor/skins/page.gif.gif
-
Public/js/editor/skins/tinymce.css
-
Public/js/editor/skins/tinymce.gif.gif
-
Public/js/editor/skins/ul.gif.gif
-
Public/js/jquery.js.js
-
Public/js/left.js.js
-
Public/js/plus_copy.js.js
-
Public/js/plus_news_ud.js.js
-
Public/js/plus_vod_ud.js.js
-
Public/player/Flv.swf
-
Public/player/flv.js.js
-
Public/player/gvod.js.js
-
Public/player/media.js.js
-
Public/player/openv.js.js
-
Public/player/play.css
-
Public/player/play.html.html .js polyglot
-
Public/player/pptv.js.js
-
Public/player/pvod.js.js
-
Public/player/qvod.js.js
-
Public/player/real.js.js
-
Public/player/swf.js.js
-
Public/player/tudou.js.js
-
Public/player/web9.js.js
-
Public/player/yuku.js.js
-
Runtime/Data/_collects/cid_1.php
-
Runtime/Data/_collects/cid_1_replace.php
-
Runtime/Data/_collects/cid_1_rule.php
-
Runtime/Data/_collects/cid_4.php
-
Runtime/Data/_collects/cid_4_replace.php
-
Runtime/Data/_collects/cid_4_rule.php
-
Runtime/Data/_ppvod/link.php
-
Runtime/Data/_ppvod/list.php
-
Runtime/Data/_ppvod/listnews.php
-
Runtime/Data/_ppvod/listtree.php
-
Runtime/Data/_ppvod/listvod.php
-
ThinkPHP/Common/alias.php
-
ThinkPHP/Common/compat.php
-
ThinkPHP/Common/convention.php
-
ThinkPHP/Common/core.php
-
ThinkPHP/Common/debug.php
-
ThinkPHP/Common/defines.php
-
ThinkPHP/Common/functions.php.ps1
-
ThinkPHP/Common/paths.php
-
ThinkPHP/Common/runtime.php.ps1
-
ThinkPHP/LICENSE.txt
-
ThinkPHP/Lang/zh-cn.php
-
ThinkPHP/Lib/ORG/Io/Dir.class.php
-
ThinkPHP/Lib/ORG/Net/UploadFile.class.php
-
ThinkPHP/Lib/ORG/Util/Image.class.php
-
ThinkPHP/Lib/ORG/Util/Page.class.php
-
ThinkPHP/Lib/ORG/Util/String.class.php
-
ThinkPHP/Lib/Think/Core/Action.class.php
-
ThinkPHP/Lib/Think/Core/App.class.php.ps1
-
ThinkPHP/Lib/Think/Core/Log.class.php
-
ThinkPHP/Lib/Think/Core/Model.class.php.ps1
-
ThinkPHP/Lib/Think/Core/Model/AdvModel.class.php.ps1
-
ThinkPHP/Lib/Think/Core/Model/RelationModel.class.php.ps1
-
ThinkPHP/Lib/Think/Core/Model/ViewModel.class.php.ps1
-
ThinkPHP/Lib/Think/Core/Think.class.php
-
ThinkPHP/Lib/Think/Core/View.class.php
-
ThinkPHP/Lib/Think/Db/Db.class.php.ps1
-
ThinkPHP/Lib/Think/Db/Driver/DbIbase.class.php
-
ThinkPHP/Lib/Think/Db/Driver/DbMssql.class.php
-
ThinkPHP/Lib/Think/Db/Driver/DbMysql.class.php
-
ThinkPHP/Lib/Think/Db/Driver/DbMysqli.class.php
-
ThinkPHP/Lib/Think/Db/Driver/DbOracle.class.php.ps1
-
ThinkPHP/Lib/Think/Db/Driver/DbPdo.class.php.js
-
ThinkPHP/Lib/Think/Db/Driver/DbPgsql.class.php
-
ThinkPHP/Lib/Think/Db/Driver/DbSqlite.class.php
-
ThinkPHP/Lib/Think/Exception/ThinkException.class.php
-
ThinkPHP/Lib/Think/Template/TagLib.class.php.ps1
-
ThinkPHP/Lib/Think/Template/TagLib/TagLibCx.class.php
-
ThinkPHP/Lib/Think/Template/TagLib/TagLibHtml.class.php.ps1
-
ThinkPHP/Lib/Think/Template/Tags/cx.xml.xml
-
ThinkPHP/Lib/Think/Template/Tags/html.xml.xml
-
ThinkPHP/Lib/Think/Template/ThinkTemplate.class.php.ps1
-
ThinkPHP/Lib/Think/Util/Behavior.class.php
-
ThinkPHP/Lib/Think/Util/Cache.class.php
-
ThinkPHP/Lib/Think/Util/Cache/CacheApachenote.class.php
-
ThinkPHP/Lib/Think/Util/Cache/CacheApc.class.php
-
ThinkPHP/Lib/Think/Util/Cache/CacheDb.class.php.js
-
ThinkPHP/Lib/Think/Util/Cache/CacheEaccelerator.class.php
-
ThinkPHP/Lib/Think/Util/Cache/CacheFile.class.php
-
ThinkPHP/Lib/Think/Util/Cache/CacheMemcache.class.php
-
ThinkPHP/Lib/Think/Util/Cache/CacheShmop.class.php
-
ThinkPHP/Lib/Think/Util/Cache/CacheSqlite.class.php
-
ThinkPHP/Lib/Think/Util/Cache/CacheXcache.class.php
-
ThinkPHP/Lib/Think/Util/Cookie.class.php
-
ThinkPHP/Lib/Think/Util/Debug.class.php
-
ThinkPHP/Lib/Think/Util/Dispatcher.class.php.ps1
-
ThinkPHP/Lib/Think/Util/HtmlCache.class.php
-
ThinkPHP/Lib/Think/Util/Session.class.php
-
ThinkPHP/Lib/Think/Util/Template/TemplateEase.class.php
-
ThinkPHP/Lib/Think/Util/Template/TemplateLite.class.php
-
ThinkPHP/Lib/Think/Util/Template/TemplateSmart.class.php
-
ThinkPHP/Lib/Think/Util/Template/TemplateSmarty.class.php
-
ThinkPHP/Lib/Think/Util/Template/TemplateThink.class.php
-
ThinkPHP/Lib/Think/Util/Widget.class.php
-
ThinkPHP/Mode/Cli/Action.class.php
-
ThinkPHP/Mode/Cli/App.class.php.ps1
-
ThinkPHP/Mode/Cli/alias.php
-
ThinkPHP/Mode/Lite/Action.class.php
-
ThinkPHP/Mode/Lite/App.class.php.ps1
-
ThinkPHP/Mode/Lite/Db.class.php.ps1
-
ThinkPHP/Mode/Lite/Dispatcher.class.php.ps1
-
ThinkPHP/Mode/Lite/Model.class.php
-
ThinkPHP/Mode/Lite/alias.php
-
ThinkPHP/Mode/Thin/Action.class.php
-
ThinkPHP/Mode/Thin/App.class.php.ps1
-
ThinkPHP/Mode/Thin/Db.class.php
-
ThinkPHP/Mode/Thin/Model.class.php.ps1
-
ThinkPHP/Mode/Thin/alias.php
-
ThinkPHP/Mode/cli.php
-
ThinkPHP/Mode/lite.php
-
ThinkPHP/Mode/thin.php
-
ThinkPHP/ThinkPHP.php
-
ThinkPHP/Tpl/PageTrace.tpl.php
-
ThinkPHP/Tpl/ThinkException.tpl.php.html
-
ThinkPHP/Vendor/News/Page.php.js
-
Tpl/.htaccess
-
Tpl/default/Home/pp_footer.html
-
Tpl/default/Home/pp_header.html
-
Tpl/default/Home/pp_index.html.html
-
Tpl/default/Home/pp_mynewsnew.html.js
-
Tpl/default/Home/pp_myvodup.html.js
-
Tpl/default/Home/pp_news.html.html
-
Tpl/default/Home/pp_newslist.html.html
-
Tpl/default/Home/pp_newssearch.html.html
-
Tpl/default/Home/pp_play.html.html
-
Tpl/default/Home/pp_vod.html.html .js polyglot
-
Tpl/default/Home/pp_vodlist.html.html .js polyglot
-
Tpl/default/Home/pp_vodsearch.html.html
-
Tpl/default/Public/success.html.html
-
Tpl/default/images/bluera.gif.gif
-
Tpl/default/images/dian.gif.gif
-
Tpl/default/images/ico1.jpg.jpg
-
Tpl/default/images/index_nav.png.png
-
Tpl/default/images/logo.gif.gif
-
Tpl/default/images/more.gif.gif
-
Tpl/default/images/s_list_2.gif.gif
-
Tpl/default/images/sprite.png.png
-
Tpl/default/images/titbg.jpg.jpg
-
Tpl/default/images/titico.jpg.jpg
-
Tpl/default/style.css
-
admin.php
-
httpd.ini
-
index.php
-
install.php
-
安装说明.txt
-
系统介绍.txt
-
诚邀合作.txt