Overview

overview

3

Static

static

3

77265liank...in.vbs

windows7-x64

1

77265liank...in.vbs

windows10-2004-x64

1

77265liank...se.vbs

windows7-x64

1

77265liank...se.vbs

windows10-2004-x64

1

77265liank...nk.vbs

windows7-x64

1

77265liank...nk.vbs

windows10-2004-x64

1

77265liank...dex.js

windows7-x64

3

77265liank...dex.js

windows10-2004-x64

3

77265liank...ge.vbs

windows7-x64

1

77265liank...ge.vbs

windows10-2004-x64

1

77265liank...pe.vbs

windows7-x64

1

77265liank...pe.vbs

windows10-2004-x64

1

77265liank...yz.vbs

windows7-x64

1

77265liank...yz.vbs

windows10-2004-x64

1

77265liank...in.vbs

windows7-x64

1

77265liank...in.vbs

windows10-2004-x64

1

77265liank...le.asp

windows7-x64

3

77265liank...le.asp

windows10-2004-x64

3

77265liank...hk.vbs

windows7-x64

1

77265liank...hk.vbs

windows10-2004-x64

1

77265liank...ck.asp

windows7-x64

3

77265liank...ck.asp

windows10-2004-x64

3

77265liank...ar.vbs

windows7-x64

1

77265liank...ar.vbs

windows10-2004-x64

1

77265liank...ck.vbs

windows7-x64

1

77265liank...ck.vbs

windows10-2004-x64

1

77265liank...un.vbs

windows7-x64

1

77265liank...un.vbs

windows10-2004-x64

1

77265liank...ss.vbs

windows7-x64

1

77265liank...ss.vbs

windows10-2004-x64

1

77265liank...ig.vbs

windows7-x64

1

77265liank...ig.vbs

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    a9fd07e25a5bd58aa03306812486d3aa_JaffaCakes118

  • Size

    762KB

  • MD5

    a9fd07e25a5bd58aa03306812486d3aa

  • SHA1

    408aceebe5f1ba0bbc3c777379047bbe35ab76ac

  • SHA256

    8c1da54a028620cb28a9fbaac17050ffefb999d914cf526ab817771ad5bb9816

  • SHA512

    b3dc7c037684d697ec7632b67d15eacd1c57ddc5a5dc2ea60359246eaf8096d268d3e557031452c971c1ae81f22459947782e8bd0afebbaf3fd9801df8e47ced

  • SSDEEP

    12288:nsiK283OZURX/3/cWb6A5UOVER+ZO0MuteVeKdyXagek3A+Kxp:sA8ZXv/cWTSwk+ZAevKR6gb

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a9fd07e25a5bd58aa03306812486d3aa_JaffaCakes118
    .rar
  • 77265liank_v3.0/admin.asp
    .vbs
  • 77265liank_v3.0/admin_database.asp
    .vbs
  • 77265liank_v3.0/admin_editlink.asp
    .vbs
  • 77265liank_v3.0/admin_index.asp
    .js
  • 77265liank_v3.0/admin_manage.asp
    .vbs
  • 77265liank_v3.0/admin_type.asp
    .vbs
  • 77265liank_v3.0/admin_yz.asp
    .vbs
  • 77265liank_v3.0/adminlogin.asp
    .vbs
  • 77265liank_v3.0/admintitle.asp
  • 77265liank_v3.0/admintitlechk.asp
    .vbs
  • 77265liank_v3.0/aspcheck.asp
    .asp .vbs polyglot
  • 77265liank_v3.0/char.inc
    .vbs
  • 77265liank_v3.0/check.asp
    .vbs
  • 77265liank_v3.0/checkfun.asp
    .vbs
  • 77265liank_v3.0/class.asp
    .vbs
  • 77265liank_v3.0/config.asp
    .vbs
  • 77265liank_v3.0/conn.asp
    .asp .vbs polyglot
  • 77265liank_v3.0/css.css
  • 77265liank_v3.0/data/admin.mdb
  • 77265liank_v3.0/date.js
    .js
  • 77265liank_v3.0/images/051.gif
    .gif
  • 77265liank_v3.0/images/060.gif
    .gif
  • 77265liank_v3.0/images/12060.gif
    .gif
  • 77265liank_v3.0/images/468.gif
    .gif
  • 77265liank_v3.0/images/8831.gif
    .gif
  • 77265liank_v3.0/images/ad.gif
    .gif
  • 77265liank_v3.0/images/adggao.gif
    .gif
  • 77265liank_v3.0/images/adm.gif
    .gif
  • 77265liank_v3.0/images/admin_left_2.gif
    .gif
  • 77265liank_v3.0/images/admin_title.gif
    .gif
  • 77265liank_v3.0/images/almm.gif
    .gif
  • 77265liank_v3.0/images/bodybg.gif
    .gif
  • 77265liank_v3.0/images/bullet.gif
    .gif
  • 77265liank_v3.0/images/common.gif
    .gif
  • 77265liank_v3.0/images/css.css
  • 77265liank_v3.0/images/icon.gif
    .gif
  • 77265liank_v3.0/images/intro2.gif
    .gif
  • 77265liank_v3.0/images/introtitlebg.gif
    .gif
  • 77265liank_v3.0/images/logo.gif
    .gif
  • 77265liank_v3.0/images/logo_s1.gif
    .gif
  • 77265liank_v3.0/images/main_title1.gif
    .gif
  • 77265liank_v3.0/images/new.gif
    .gif
  • 77265liank_v3.0/images/no.gif
    .gif
  • 77265liank_v3.0/images/tbj.gif
    .gif
  • 77265liank_v3.0/images/tit_bg1.gif
    .gif
  • 77265liank_v3.0/images/tit_bg2.gif
    .gif
  • 77265liank_v3.0/images/title_bg_quit.gif
    .gif
  • 77265liank_v3.0/images/title_bg_show.gif
    .gif
  • 77265liank_v3.0/in.asp
    .vbs
  • 77265liank_v3.0/index.asp
    .vbs
  • 77265liank_v3.0/index.html
    .html .js polyglot
  • 77265liank_v3.0/into.asp
    .js
  • 77265liank_v3.0/left.asp
  • 77265liank_v3.0/md5.asp
    .vbs
  • 77265liank_v3.0/new.asp
    .vbs
  • 77265liank_v3.0/newtop.asp
    .vbs
  • 77265liank_v3.0/out.asp
    .vbs
  • 77265liank_v3.0/reg.asp
    .vbs
  • 77265liank_v3.0/right.asp
  • 77265liank_v3.0/run.asp
    .vbs
  • 77265liank_v3.0/style.css
  • 77265liank_v3.0/sys.asp
    .vbs
  • 77265liank_v3.0/under.asp
  • 77265liank_v3.0/使用说明.txt
  • 77265liank_v3.0/新云软件.url
    .url
  • 77265liank_v3.0/点击_本地测试.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections