Overview

overview

3

Static

static

1

Gbook.js

windows7-x64

3

Gbook.js

windows10-2004-x64

3

admin/addpz.asp

windows7-x64

3

admin/addpz.asp

windows10-2004-x64

3

admin/admin_login.asp

windows7-x64

3

admin/admin_login.asp

windows10-2004-x64

3

admin/changepwd.asp

windows7-x64

3

admin/changepwd.asp

windows10-2004-x64

3

admin/checklogin.vbs

windows7-x64

1

admin/checklogin.vbs

windows10-2004-x64

1

admin/chec...on.asp

windows7-x64

3

admin/chec...on.asp

windows10-2004-x64

3

admin/config.asp

windows7-x64

3

admin/config.asp

windows10-2004-x64

3

admin/editbumen.asp

windows7-x64

3

admin/editbumen.asp

windows10-2004-x64

3

admin/editqq.asp

windows7-x64

3

admin/editqq.asp

windows10-2004-x64

3

admin/frame.asp

windows7-x64

3

admin/frame.asp

windows10-2004-x64

3

admin/index.asp

windows7-x64

3

admin/index.asp

windows10-2004-x64

3

admin/main.asp

windows7-x64

3

admin/main.asp

windows10-2004-x64

3

admin/quit.asp

windows7-x64

3

admin/quit.asp

windows10-2004-x64

3

admin/showbook.asp

windows7-x64

3

admin/showbook.asp

windows10-2004-x64

3

admin/top.asp

windows7-x64

3

admin/top.asp

windows10-2004-x64

3

admin/upda...ne.vbs

windows7-x64

1

admin/upda...ne.vbs

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8b29845a99bfc4818f31cfbfb77a09e3_JaffaCakes118

  • Size

    198KB

  • MD5

    8b29845a99bfc4818f31cfbfb77a09e3

  • SHA1

    0c76d3611d32659caf8baa6cce8172d33d76c58d

  • SHA256

    7cf2a6af48bf9b892438ccc4534e4fdbe4d79e223299e03bb214eac41049c52a

  • SHA512

    35365507fd50993c6437cf14f7905a555cb3eca40f6954819dc5d9956b40cb45268c1331a51b701333c457053ba7eb147bb1f37389a5852213385b33dbf6ca62

  • SSDEEP

    6144:hJ/HZNb4Ek7REWGyu5BOWgSCNjX7sxnVU03yt/:hxHnbo5awWgSCjX7WY

Score
1/10

Malware Config

Signatures

Files

  • 8b29845a99bfc4818f31cfbfb77a09e3_JaffaCakes118
    .rar
  • Gbook.js
    .js
  • admin/addpz.asp
    .asp
  • admin/admin_login.asp
  • admin/changepwd.asp
    .asp .vbs polyglot
  • admin/checklogin.asp
    .vbs
  • admin/checklogin_session.asp
  • admin/config.asp
    .asp .vbs polyglot
  • admin/editbumen.asp
    .asp .vbs polyglot
  • admin/editqq.asp
    .asp .vbs polyglot
  • admin/frame.asp
  • admin/image/002_04.jpg
    .jpg
  • admin/image/002_05.jpg
    .jpg
  • admin/image/002_06.jpg
    .jpg
  • admin/image/002_07.jpg
    .jpg
  • admin/image/002_09.jpg
    .jpg
  • admin/image/002_10.jpg
    .jpg
  • admin/image/002_11.jpg
    .jpg
  • admin/image/01.gif
    .gif
  • admin/image/02.gif
    .gif
  • admin/image/b_reset.gif
    .gif
  • admin/image/b_submit.gif
    .gif
  • admin/image/bar01.gif
    .gif
  • admin/image/bar02.gif
    .gif
  • admin/image/bg.jpg
    .jpg
  • admin/image/bg1.jpg
    .jpg
  • admin/image/bg3.jpg
    .jpg
  • admin/image/bg4.jpg
    .jpg
  • admin/image/css.css
  • admin/image/de02.jpg
    .jpg
  • admin/image/dl_01.jpg
    .jpg
  • admin/image/dl_02.jpg
    .jpg
  • admin/image/dl_03.jpg
    .jpg
  • admin/image/dl_04.jpg
    .jpg
  • admin/image/dl_05.jpg
    .jpg
  • admin/image/dl_06.jpg
    .jpg
  • admin/image/dl_07.jpg
    .jpg
  • admin/image/dl_08.jpg
    .jpg
  • admin/image/dl_09.jpg
    .jpg
  • admin/image/dl_10.jpg
    .jpg
  • admin/image/dl_11.jpg
    .jpg
  • admin/image/dl_12.jpg
    .jpg
  • admin/image/dl_13.jpg
    .jpg
  • admin/image/dl_14.jpg
    .jpg
  • admin/image/dl_15.jpg
    .jpg
  • admin/image/dl_16.jpg
    .jpg
  • admin/image/dl_17.jpg
    .jpg
  • admin/image/err.gif
    .gif
  • admin/image/icon01.jpg
    .jpg
  • admin/image/icon04.gif
    .gif
  • admin/image/last.gif
    .gif
  • admin/image/login.gif
    .gif
  • admin/image/next.gif
    .gif
  • admin/image/password.gif
    .gif
  • admin/image/spacer.gif
    .gif
  • admin/image/style.css
  • admin/image/succ.gif
    .gif
  • admin/image/分隔符.gif
    .gif
  • admin/images/dynCalendar.gif
    .gif
  • admin/images/mess_shart2_blue
    .jpg
  • admin/images/mess_shart2_blue.jpg
    .jpg
  • admin/images/mess_shart2_red
    .jpg
  • admin/images/mess_shart2_red.jpg
    .jpg
  • admin/images/mess_shart2_white
    .jpg
  • admin/images/mess_shart2_white.jpg
    .jpg
  • admin/images/next.gif
    .gif
  • admin/images/prev.gif
    .gif
  • admin/index.asp
    .asp
  • admin/main.asp
    .asp
  • admin/quit.asp
  • admin/showbook.asp
    .asp .vbs polyglot
  • admin/top.asp
  • admin/updateonline.asp
    .vbs
  • admin/新云软件.url
    .url
  • cn.asp
    .vbs
  • config.asp
  • db/#datebase.mdb
  • dynCalendar/browserSniffer.js
    .js
  • dynCalendar/calendar.html
    .html
  • dynCalendar/dynCalendar.css
  • dynCalendar/dynCalendar.html
    .html
  • dynCalendar/dynCalendar.js
    .js
  • dynCalendar/images/dynCalendar.gif
    .gif
  • dynCalendar/images/next.gif
    .gif
  • dynCalendar/images/prev.gif
    .gif
  • get_mess2.asp
    .vbs
  • image/err.gif
    .gif
  • image/succ.gif
    .gif
  • images/Icon_01.gif
    .gif
  • images/Icon_03.gif
    .gif
  • images/Icon_05.gif
    .gif
  • images/Icon_06.gif
    .gif
  • images/Icon_07.gif
    .gif
  • images/Icon_08.gif
    .gif
  • images/Icon_09.gif
    .gif
  • images/Thumbs.db
  • images/bg_1.gif
    .gif
  • images/bg_2.gif
    .gif
  • images/bg_3.gif
    .gif
  • images/button.gif
    .gif
  • images/cancel.gif
    .gif
  • images/face1.jpg
    .jpg
  • images/face2.jpg
    .jpg
  • images/face3.jpg
    .jpg
  • images/ico2.gif
    .gif
  • images/ico3.gif
    .gif
  • images/ico4.gif
    .gif
  • images/ico_1a.gif
    .gif
  • images/ico_1b.gif
    .gif
  • images/ico_2a.gif
    .gif
  • images/ico_2b.gif
    .gif
  • images/ico_3a.gif
    .gif
  • images/ico_3b.gif
    .gif
  • images/msn.jpg
    .jpg
  • images/ok.gif
    .gif
  • images/pot.gif
    .gif
  • images/qq.gif
    .gif
  • side.html
    .html .js polyglot
  • 安装说明.txt