Overview
overview
3Static
static
1Include/RSS_Head.vbs
windows7-x64
1Include/RSS_Head.vbs
windows10-2004-x64
1Include/ch...in.asp
windows7-x64
3Include/ch...in.asp
windows10-2004-x64
3Include/cls_class.vbs
windows7-x64
1Include/cls_class.vbs
windows10-2004-x64
1Include/cl...s2.vbs
windows7-x64
1Include/cl...s2.vbs
windows10-2004-x64
Include/footer.asp
windows7-x64
3Include/footer.asp
windows10-2004-x64
3Include/function.vbs
windows7-x64
1Include/function.vbs
windows10-2004-x64
1Include/header.vbs
windows7-x64
1Include/header.vbs
windows10-2004-x64
1Include/img.vbs
windows7-x64
1Include/img.vbs
windows10-2004-x64
1Include/itf4.html
windows7-x64
3Include/itf4.html
windows10-2004-x64
3Include/liangconn.vbs
windows7-x64
1Include/liangconn.vbs
windows10-2004-x64
1Include/li...nn.vbs
windows7-x64
1Include/li...nn.vbs
windows10-2004-x64
1Include/md5.vbs
windows7-x64
1Include/md5.vbs
windows10-2004-x64
1Include/sqlin.vbs
windows7-x64
1Include/sqlin.vbs
windows10-2004-x64
1MessageList.vbs
windows7-x64
1MessageList.vbs
windows10-2004-x64
1MessageSave.vbs
windows7-x64
1MessageSave.vbs
windows10-2004-x64
1MessageWrite.vbs
windows7-x64
1MessageWrite.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Include/RSS_Head.vbs
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Include/RSS_Head.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Include/checklogin.asp
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Include/checklogin.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Include/cls_class.vbs
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
Include/cls_class.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Include/cls_class2.vbs
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
Include/cls_class2.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Include/footer.asp
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
Include/footer.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Include/function.vbs
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
Include/function.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Include/header.vbs
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
Include/header.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Include/img.vbs
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
Include/img.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Include/itf4.html
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
Include/itf4.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Include/liangconn.vbs
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
Include/liangconn.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Include/liangjingconn.vbs
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
Include/liangjingconn.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Include/md5.vbs
Resource
win7-20240729-en
Behavioral task
behavioral24
Sample
Include/md5.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Include/sqlin.vbs
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
Include/sqlin.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
MessageList.vbs
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
MessageList.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
MessageSave.vbs
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
MessageSave.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
MessageWrite.vbs
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
MessageWrite.vbs
Resource
win10v2004-20240802-en
General
-
Target
abf850b2eefd972da8af6f3e7618d66b_JaffaCakes118
-
Size
1.3MB
-
MD5
abf850b2eefd972da8af6f3e7618d66b
-
SHA1
4ff5f64ef02f38e8f0da1b213ef10b76bae29edc
-
SHA256
0a289275b60ea881e3c887a9a0a672fc2c62fc98842c576a261a2f99f50413ab
-
SHA512
8c694d211fa6bc63f2fceafa4b37c6a114071754b804a186eef0c5c18cdd0b6b186b0596fd42586ae56f813ad55eea65d4336e1d43c37a528041224be6525119
-
SSDEEP
24576:biVXfoYsVMFhm47IEYvqJ3xutseKxwSwumMbbXJ9v0FPVqW4H:bilfoYsghm48CdxjwSLppYPV6
Malware Config
Signatures
Files
-
abf850b2eefd972da8af6f3e7618d66b_JaffaCakes118.rar
-
Database/Liangjing#20100713.mdb
-
Include/RSS_Head.asp.vbs
-
Include/adovbs.inc
-
Include/checklogin.asp
-
Include/cls_class.asp.vbs
-
Include/cls_class2.asp.vbs
-
Include/footer.asp
-
Include/function.asp.vbs
-
Include/header.asp.vbs
-
Include/img.asp.vbs
-
Include/itf4.asp.html
-
Include/liangconn.asp.vbs
-
Include/liangjingconn.asp.vbs
-
Include/md5.asp.vbs
-
Include/sqlin.asp.vbs
-
MessageList.Asp.vbs
-
MessageSave.asp.vbs
-
MessageWrite.Asp.vbs
-
Rss.asp.vbs
-
UpFileClass.asp.vbs
-
UpFileForm.asp.html
-
UpFileSave.asp.asp .vbs polyglot
-
Upfile_Photo.asp.asp .vbs polyglot
-
UploadFile/2010713172852595.jpg.jpg
-
UploadFile/2010713173052914.jpg.jpg
-
UploadFile/Thumbs.db
-
Upload_Photo.asp.html .js polyglot
-
admin/CheckCode/CheckCode.asp.vbs
-
admin/CheckCode/Head.Fix
-
admin/CheckCode/body1.fix
-
admin/CheckCode/body10.fix
-
admin/CheckCode/body11.fix
-
admin/CheckCode/body12.fix
-
admin/CheckCode/body13.fix
-
admin/CheckCode/body14.fix
-
admin/CheckCode/body15.fix
-
admin/CheckCode/body16.fix
-
admin/CheckCode/body17.fix
-
admin/CheckCode/body18.fix
-
admin/CheckCode/body2.fix
-
admin/CheckCode/body3.fix
-
admin/CheckCode/body4.fix
-
admin/CheckCode/body5.fix
-
admin/CheckCode/body6.fix
-
admin/CheckCode/body7.fix
-
admin/CheckCode/body8.fix
-
admin/CheckCode/body9.fix
-
admin/DelContent.asp
-
admin/MessageEdit.asp.vbs
-
admin/MessageList.asp.vbs
-
admin/SetSite.asp.asp .vbs polyglot
-
admin/admin.asp.js
-
admin/admin_adminmanage.asp.vbs
-
admin/admin_classmanage.asp.vbs
-
admin/admin_default.asp.vbs
-
admin/admin_ewsysinfo.asp
-
admin/admin_left.asp.js
-
admin/admin_login.asp.vbs
-
admin/admin_spacesize.asp.vbs
-
admin/admin_specialmanage.asp.vbs
-
admin/admin_upfilemanage.asp.vbs
-
admin/default.asp
-
admin/goin.asp
-
admin/images/Admin.css
-
admin/images/Bar.gif.gif
-
admin/images/Dot_Info.gif.gif
-
admin/images/Explain.gif.gif
-
admin/images/Login_line.gif.gif
-
admin/images/Login_tit.gif.gif
-
admin/images/Menu_BG.gif.gif
-
admin/images/Menu_BG1.gif.gif
-
admin/images/SortEnd_Folder_Close.gif.gif
-
admin/images/SortEnd_Folder_Open.gif.gif
-
admin/images/Sort_File.gif.gif
-
admin/images/Sort_File_End.gif.gif
-
admin/images/Sort_Folder_Close.gif.gif
-
admin/images/Sort_Folder_Open.gif.gif
-
admin/images/Sort_Listline.gif.gif
-
admin/images/Survey.gif.gif
-
admin/images/SysLeft_bg.gif.gif
-
admin/images/Thumbs.db
-
admin/images/Upload.gif.gif
-
admin/images/admin.js.js
-
admin/images/admin_p.gif.gif
-
admin/images/arrow.gif.gif
-
admin/images/bg2.gif.gif
-
admin/images/dot.gif.gif
-
admin/images/help_icon.gif.gif
-
admin/images/home.gif.gif
-
admin/images/left.gif.gif
-
admin/images/left_bg.gif.gif
-
admin/images/left_menu_bg.gif.gif
-
admin/images/logo_up.gif.gif
-
admin/images/menu/Thumbs.db
-
admin/images/menu/blank.gif.gif
-
admin/images/menu/email.gif.gif
-
admin/images/menu/homepage.gif.gif
-
admin/images/menu/icon.gif.gif
-
admin/images/menu/menu1.gif.gif
-
admin/images/menu/menu2.gif.gif
-
admin/images/menu01.gif.gif
-
admin/images/menu01_right.gif.gif
-
admin/images/right.gif.gif
-
admin/images/style.css
-
admin/images/style_left.css
-
admin/images/teble_bottom_left.gif.gif
-
admin/images/teble_bottom_right.gif.gif
-
admin/images/teble_top_left.gif.gif
-
admin/images/teble_top_right.gif.gif
-
admin/images/top_bg.gif.gif
-
admin/images/top_table_leftbg.gif.gif
-
admin/images/tree_folder4.gif.gif
-
admin/images/tree_line1.gif.gif
-
admin/images/vote/thumbs.db
-
admin/images/vote/votel.gif.gif
-
admin/images/vote/votem.gif.gif
-
admin/images/vote/voter.gif.gif
-
admin/left.asp.html
-
admin/media_link.asp.vbs
-
admin/member_manage.asp.vbs
-
admin/member_showinfo.asp.vbs
-
admin/msg_add.asp.vbs
-
admin/msg_edit.asp.vbs
-
admin/msg_manage.asp.vbs
-
admin/src.asp.vbs
-
admin/src_manage.asp.vbs
-
admin/sys_tagmanage.asp.vbs
-
admin/新云软件.url.url
-
config.asp
-
css/main.css.js
-
css/style.css.js
-
css/style1.css.js
-
css/style2.css.js
-
css/style3.css.js
-
css/style4.css.js
-
css/style5.css.js
-
editor/css/behaviors/disablehandles.htc
-
editor/css/behaviors/hiddenfield.gif.gif
-
editor/css/behaviors/hiddenfield.htc
-
editor/css/behaviors/showtableborders.htc
-
editor/css/fck_editorarea.css
-
editor/css/fck_internal.css
-
editor/css/fck_showtableborders_gecko.css
-
editor/css/images/fck_anchor.gif.gif
-
editor/css/images/fck_flashlogo.gif.gif
-
editor/css/images/fck_pagebreak.gif.gif
-
editor/css/images/thumbs.db
-
editor/dialog/common/fck_dialog_common.css
-
editor/dialog/common/fck_dialog_common.js.js
-
editor/dialog/common/fcknumericfield.htc.js
-
editor/dialog/common/moz-bindings.xml.js .xml polyglot
-
editor/dialog/fck_colorselector.html.js
-
editor/dialog/fck_flash.html
-
editor/dialog/fck_flash/fck_flash.js.js
-
editor/dialog/fck_flash/fck_flash_preview.html.js
-
editor/dialog/fck_image.html
-
editor/dialog/fck_image/fck_image.js.js
-
editor/dialog/fck_image/fck_image_preview.html.js
-
editor/dialog/fck_link.html
-
editor/dialog/fck_link/fck_link.js.js
-
editor/dialog/fck_listprop.html.js
-
editor/fckblank.html
-
editor/fckconfig.js.js
-
editor/fckdebug.html.js
-
editor/fckdialog.html.js
-
editor/fckeditor.html.html .js polyglot
-
editor/fckeditor.js.js
-
editor/fckstyles.xml.xml
-
editor/images/Thumbs.db
-
editor/images/fck_dialog.css
-
editor/images/fck_editor.css
-
editor/images/fck_strip.gif.gif
-
editor/images/images/Thumbs.db
-
editor/images/images/toolbar.arrowright.gif.gif
-
editor/images/images/toolbar.buttonarrow.gif.gif
-
editor/images/images/toolbar.buttonbg.gif.gif
-
editor/images/images/toolbar.collapse.gif.gif
-
editor/images/images/toolbar.end.gif.gif
-
editor/images/images/toolbar.expand.gif.gif
-
editor/images/images/toolbar.separator.gif.gif
-
editor/images/images/toolbar.start.gif.gif
-
editor/js/fckeditorcode_gecko.js.js
-
editor/js/fckeditorcode_ie.js.js
-
editor/js/js.asp
-
editor/lang/zh-cn.js.js
-
editor/plugins/fckplugin.js
-
editor/plugins/madmedia/fckplugin.js
-
editor/plugins/madmedia/lang/editone.asp.js
-
editor/plugins/madmedia/lang/en.js
-
editor/plugins/madmedia/lang/zh-cn.js
-
editor/plugins/madmedia/media.gif.gif
-
editor/plugins/madmedia/media.html
-
editor/plugins/madmedia/media.js.js
-
editor/upload/class_upload.asp.vbs
-
editor/upload/config.asp.vbs
-
editor/upload/io.asp
-
editor/upload/upload.asp.asp .vbs polyglot
-
editrevert.asp.js
-
forgetpass.asp.vbs
-
images/Thumbs.db
-
images/b1_100519.png.png
-
images/b3_100506.png.png
-
images/b4_100506.png.png
-
images/barrow.gif.gif
-
images/bg.jpg.jpg
-
images/bg1.jpg.jpg
-
images/bg2.jpg.jpg
-
images/bg3.jpg.jpg
-
images/bg4.jpg.jpg
-
images/bg5.jpg.jpg
-
images/bgckground.gif.gif
-
images/bgckground1.gif.gif
-
images/bgckground2.gif.gif
-
images/bgckground4.gif.gif
-
images/bgckground5.gif.gif
-
images/dig1.gif.gif
-
images/dig2.gif.gif
-
images/dot.jpg.jpg
-
images/favicon.ico
-
images/fshadow.png.png
-
images/gifBg2_v0_0_1.gif.gif
-
images/ico_blog.gif.gif
-
images/ico_category.gif.gif
-
images/ico_comments.gif.gif
-
images/ico_favorites.gif.gif
-
images/ico_pm.gif.gif
-
images/ico_quote.gif.gif
-
images/ico_tags.gif.gif
-
images/ico_time.gif.gif
-
images/icons/1.gif.gif
-
images/icons/10.gif.gif
-
images/icons/11.gif.gif
-
images/icons/12.gif.gif
-
images/icons/13.gif.gif
-
images/icons/14.gif.gif
-
images/icons/15.gif.gif
-
images/icons/16.gif.gif
-
images/icons/17.gif.gif
-
images/icons/18.gif.gif
-
images/icons/19.gif.gif
-
images/icons/2.gif.gif
-
images/icons/20.gif.gif
-
images/icons/21.gif.gif
-
images/icons/22.gif.gif
-
images/icons/23.gif.gif
-
images/icons/24.gif.gif
-
images/icons/3.gif.gif
-
images/icons/4.gif.gif
-
images/icons/5.gif.gif
-
images/icons/6.gif.gif
-
images/icons/7.gif.gif
-
images/icons/8.gif.gif
-
images/icons/9.gif.gif
-
images/icons/Thumbs.db
-
images/icons/icon_del.gif.gif
-
images/icons/icon_edit.gif.gif
-
images/letterBg.png.png
-
images/liangjingweibo.gif.gif
-
images/ljAD.jpg.jpg
-
images/loading.gif.gif
-
images/login.gif.gif
-
images/login_bg.png.png
-
images/logo.gif.gif
-
images/logo.jpg.jpg
-
images/noimage.gif.gif
-
images/rss.gif.gif
-
images/submit.gif.gif
-
images/u1002491.jpg.jpg
-
images/untitled.bmp
-
images/uphoto/1.jpg.jpg
-
images/uphoto/10.jpg.jpg
-
images/uphoto/2.jpg.jpg
-
images/uphoto/3.jpg.jpg
-
images/uphoto/4.jpg.jpg
-
images/uphoto/5.jpg.jpg
-
images/uphoto/6.jpg.jpg
-
images/uphoto/7.jpg.jpg
-
images/uphoto/8.jpg.jpg
-
images/uphoto/9.jpg.jpg
-
images/uphoto/Thumbs.db
-
images/uphoto/noimage.gif.gif
-
images/wrapbg_v0.0.1.jpg.jpg
-
images/xiaobopic.gif.gif
-
inc/upfile_class.asp.vbs
-
index.asp.vbs
-
isay.asp.vbs
-
js/Ajax.js.js
-
js/common.js.js
-
js/cookies.js.js
-
js/doajax.asp.vbs
-
js/jquery.js.js
-
js/main.js.js
-
js/speed_v1.6-min.js.js
-
js/weiboid.js.js
-
js/xiaobo.js.js
-
login.asp.vbs
-
my.asp.vbs
-
register.asp.js
-
resubmits.asp.js
-
setting.asp.vbs
-
showmsg.asp.vbs
-
srcrevert.asp.vbs
-
srcshow.asp.vbs
-
srcsubmit.asp.js
-
tags.asp.vbs
-
upload/uploadimg/Thumbs.db
-
upload/uploadimg/noimage.gif.gif
-
使用说明.txt