Overview
overview
6Static
static
1phpgdv40/a...k.html
windows7-x64
3phpgdv40/a...k.html
windows10-2004-x64
3phpgdv40/a...enu.js
windows7-x64
3phpgdv40/a...enu.js
windows10-2004-x64
3phpgdv40/a...uts.js
windows7-x64
3phpgdv40/a...uts.js
windows10-2004-x64
3phpgdv40/a...er.ps1
windows7-x64
3phpgdv40/a...er.ps1
windows10-2004-x64
3phpgdv40/a...w2.ps1
windows7-x64
3phpgdv40/a...w2.ps1
windows10-2004-x64
3phpgdv40/a...end.js
windows7-x64
3phpgdv40/a...end.js
windows10-2004-x64
3phpgdv40/a...er.htm
windows7-x64
3phpgdv40/a...er.htm
windows10-2004-x64
3phpgdv40/a...se.ps1
windows7-x64
3phpgdv40/a...se.ps1
windows10-2004-x64
3phpgdv40/a...rs.ps1
windows7-x64
6phpgdv40/a...rs.ps1
windows10-2004-x64
6phpgdv40/a...ps.ps1
windows7-x64
6phpgdv40/a...ps.ps1
windows10-2004-x64
6phpgdv40/a...l.html
windows7-x64
3phpgdv40/a...l.html
windows10-2004-x64
3phpgdv40/a...wse.js
windows7-x64
3phpgdv40/a...wse.js
windows10-2004-x64
3phpgdv40/e...1.html
windows7-x64
3phpgdv40/e...1.html
windows10-2004-x64
3phpgdv40/e...2.html
windows7-x64
3phpgdv40/e...2.html
windows10-2004-x64
3phpgdv40/e...e1.htm
windows7-x64
3phpgdv40/e...e1.htm
windows10-2004-x64
3phpgdv40/e...2.html
windows7-x64
3phpgdv40/e...2.html
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
phpgdv40/admin_blank.html
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
phpgdv40/admin_blank.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
phpgdv40/admin_dropdownmenu.js
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
phpgdv40/admin_dropdownmenu.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
phpgdv40/admin_edit_inputs.js
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
phpgdv40/admin_edit_inputs.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
phpgdv40/admin_edit_user.ps1
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
phpgdv40/admin_edit_user.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
phpgdv40/admin_list_view2.ps1
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
phpgdv40/admin_list_view2.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
phpgdv40/admin_massemail_send.js
Resource
win7-20240704-en
Behavioral task
behavioral12
Sample
phpgdv40/admin_massemail_send.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
phpgdv40/admin_picker.htm
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
phpgdv40/admin_picker.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
phpgdv40/admin_popchoose.ps1
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
phpgdv40/admin_popchoose.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
phpgdv40/admin_set_group_users.ps1
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
phpgdv40/admin_set_group_users.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
phpgdv40/admin_set_user_groups.ps1
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
phpgdv40/admin_set_user_groups.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
phpgdv40/admin_uninstall.html
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
phpgdv40/admin_uninstall.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
phpgdv40/admin_wizard_browse.js
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
phpgdv40/admin_wizard_browse.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
phpgdv40/examples/auto_prepend_file_protection/protectedpage1.html
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
phpgdv40/examples/auto_prepend_file_protection/protectedpage1.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
phpgdv40/examples/auto_prepend_file_protection/protectedpage2.html
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
phpgdv40/examples/auto_prepend_file_protection/protectedpage2.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
phpgdv40/examples/mod_rewrite_protection/protectedpage1.htm
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
phpgdv40/examples/mod_rewrite_protection/protectedpage1.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
phpgdv40/examples/mod_rewrite_protection/protectedpage2.html
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
phpgdv40/examples/mod_rewrite_protection/protectedpage2.html
Resource
win10v2004-20240802-en
General
-
Target
ba531acc6fceae4afc40c180af697a24_JaffaCakes118
-
Size
606KB
-
MD5
ba531acc6fceae4afc40c180af697a24
-
SHA1
ce3dab0d08f6723abe75e7fd4a707277de20627e
-
SHA256
c68c5051a833bad41827da3b2b7215a0a09c5ff5ce9e8bf145202d6073f95669
-
SHA512
719b774a4f61d13d4114e0092238dd6d6390ae5f454211e4031b8da0782ddd881c80eeec325cd143102fb967e12aaea22ff889dd68b5487651516143690aceba
-
SSDEEP
12288:tudW6FMYf1DufETXlQEedrHKeo24PrxqBwt0eDkh0jvX2j3Gp7JGFO3s:t96PRuWHed2PNywt0F0rXCSGkc
Malware Config
Signatures
Files
-
ba531acc6fceae4afc40c180af697a24_JaffaCakes118.rar
-
phpgdv40/READ ME FIRST.txt
-
phpgdv40/_sourcefiles/mod_rewrite_protection/.htaccess
-
phpgdv40/_sourcefiles/mod_rewrite_protection/special_login.php
-
phpgdv40/admin_blank.php.html
-
phpgdv40/admin_datadump.php
-
phpgdv40/admin_dropdownmenu.php.js
-
phpgdv40/admin_edit_colors.php
-
phpgdv40/admin_edit_group.php
-
phpgdv40/admin_edit_hints.php
-
phpgdv40/admin_edit_inputs.php.js
-
phpgdv40/admin_edit_language.php
-
phpgdv40/admin_edit_options.php
-
phpgdv40/admin_edit_regemail.php
-
phpgdv40/admin_edit_user.php.ps1
-
phpgdv40/admin_edit_user_mass.php
-
phpgdv40/admin_edit_verifyemail.php
-
phpgdv40/admin_email_send.php
-
phpgdv40/admin_email_verify.php
-
phpgdv40/admin_groupavail.php
-
phpgdv40/admin_help_access.php
-
phpgdv40/admin_help_administration.php
-
phpgdv40/admin_help_contact.php
-
phpgdv40/admin_help_customization.php
-
phpgdv40/admin_help_faqs.php
-
phpgdv40/admin_help_function.php
-
phpgdv40/admin_help_installation.php
-
phpgdv40/admin_help_login.php
-
phpgdv40/admin_help_menu.php
-
phpgdv40/admin_help_pop.php
-
phpgdv40/admin_help_protecting.php
-
phpgdv40/admin_help_quickstart.php
-
phpgdv40/admin_help_subscription.php
-
phpgdv40/admin_help_using.php
-
phpgdv40/admin_import_users.php
-
phpgdv40/admin_ip.php
-
phpgdv40/admin_list.php
-
phpgdv40/admin_list_view2.php.ps1
-
phpgdv40/admin_massemail.php
-
phpgdv40/admin_massemail_confirm.php
-
phpgdv40/admin_massemail_send.php.js
-
phpgdv40/admin_menu.php
-
phpgdv40/admin_passwords.php
-
phpgdv40/admin_payment_process.php
-
phpgdv40/admin_paypal_live.php
-
phpgdv40/admin_paypal_logs.php
-
phpgdv40/admin_paypal_process.php
-
phpgdv40/admin_phpinfo.php
-
phpgdv40/admin_picker.htm
-
phpgdv40/admin_popchoose.php.ps1
-
phpgdv40/admin_popview.php
-
phpgdv40/admin_popview_cc.php
-
phpgdv40/admin_pose_logout.php
-
phpgdv40/admin_reports.php
-
phpgdv40/admin_reports_active.php
-
phpgdv40/admin_reports_controller.php
-
phpgdv40/admin_reports_delete.php
-
phpgdv40/admin_reports_groups.php
-
phpgdv40/admin_reports_tracking.php
-
phpgdv40/admin_reports_visits.php
-
phpgdv40/admin_set_group_users.php.ps1
-
phpgdv40/admin_set_user_groups.php.ps1
-
phpgdv40/admin_subsaudit_delete.php
-
phpgdv40/admin_subscriptions.php
-
phpgdv40/admin_subscriptions_authorize.php
-
phpgdv40/admin_subscriptions_current.php
-
phpgdv40/admin_subscriptions_edit.php
-
phpgdv40/admin_subscriptions_free.php
-
phpgdv40/admin_subscriptions_linkpoint.php
-
phpgdv40/admin_subscriptions_paypal.php
-
phpgdv40/admin_subscriptions_user_bill.php
-
phpgdv40/admin_subscriptions_users.php
-
phpgdv40/admin_subscriptions_verisign.php
-
phpgdv40/admin_testdir.php
-
phpgdv40/admin_testemail.php
-
phpgdv40/admin_uninstall.php.html
-
phpgdv40/admin_view_inactive.php
-
phpgdv40/admin_view_ungrouped.php
-
phpgdv40/admin_welcome.php
-
phpgdv40/admin_wizard.php
-
phpgdv40/admin_wizard_browse.php.js
-
phpgdv40/admin_wizard_files.php
-
phpgdv40/admin_wizard_test.php
-
phpgdv40/admin_wizard_view.php
-
phpgdv40/box.php
-
phpgdv40/examples/auto_prepend_file_protection/protectedpage1.php.html
-
phpgdv40/examples/auto_prepend_file_protection/protectedpage2.php.html
-
phpgdv40/examples/basic_protection/index.php
-
phpgdv40/examples/getfile_protection/index.php
-
phpgdv40/examples/mod_rewrite_protection/.htaccess
-
phpgdv40/examples/mod_rewrite_protection/protectedimage.gif.gif
-
phpgdv40/examples/mod_rewrite_protection/protectedpage1.htm.html
-
phpgdv40/examples/mod_rewrite_protection/protectedpage2.html.html
-
phpgdv40/examples/mod_rewrite_protection/special_login.php
-
phpgdv40/file_id.diz
-
phpgdv40/getfile.php
-
phpgdv40/guard.php
-
phpgdv40/guard_cvv.php
-
phpgdv40/guard_dbdown.php
-
phpgdv40/guard_edit_subs.php
-
phpgdv40/guard_edit_subs_info.php
-
phpgdv40/guard_edit_subs_view.php
-
phpgdv40/guard_edit_user.php
-
phpgdv40/guard_emailpass.php
-
phpgdv40/guard_encrypt.php
-
phpgdv40/guard_extend.php.js
-
phpgdv40/guard_extend_cccheck.php
-
phpgdv40/guard_hint.php
-
phpgdv40/guard_login.php
-
phpgdv40/guard_logout.php
-
phpgdv40/guard_members.php
-
phpgdv40/guard_resetpass.php
-
phpgdv40/guard_useravail.php
-
phpgdv40/guard_vars.php
-
phpgdv40/guard_view_user.php
-
phpgdv40/html2xhtml.js.js
-
phpgdv40/images/Untitled-1_14.gif.gif
-
phpgdv40/images/Untitled-2_14.gif.gif
-
phpgdv40/images/adminheaders.gif.gif
-
phpgdv40/images/amex.gif.gif
-
phpgdv40/images/bgcolor.gif.gif
-
phpgdv40/images/bgwelcome.gif.gif
-
phpgdv40/images/blackdot.gif.gif
-
phpgdv40/images/blank.gif.gif
-
phpgdv40/images/bluebegin.gif.gif
-
phpgdv40/images/bluebg.gif.gif
-
phpgdv40/images/bold.gif.gif
-
phpgdv40/images/but_clickclosewindow.gif.gif
-
phpgdv40/images/but_clickherehelp.gif.gif
-
phpgdv40/images/but_custom-off.gif.gif
-
phpgdv40/images/but_custom-on.gif.gif
-
phpgdv40/images/but_data-off.gif.gif
-
phpgdv40/images/but_data-on.gif.gif
-
phpgdv40/images/but_groups-off.gif.gif
-
phpgdv40/images/but_groups-on.gif.gif
-
phpgdv40/images/but_ip-off.gif.gif
-
phpgdv40/images/but_ip-on.gif.gif
-
phpgdv40/images/but_newsletters-off.gif.gif
-
phpgdv40/images/but_newsletters-on.gif.gif
-
phpgdv40/images/but_options-off.gif.gif
-
phpgdv40/images/but_options-on.gif.gif
-
phpgdv40/images/but_protection-off.gif.gif
-
phpgdv40/images/but_protection-on.gif.gif
-
phpgdv40/images/but_reports-off.gif.gif
-
phpgdv40/images/but_reports-on.gif.gif
-
phpgdv40/images/but_subscriptions-off.gif.gif
-
phpgdv40/images/but_subscriptions-on.gif.gif
-
phpgdv40/images/but_users-off.gif.gif
-
phpgdv40/images/but_users-on.gif.gif
-
phpgdv40/images/centre.gif.gif
-
phpgdv40/images/copy.gif.gif
-
phpgdv40/images/cut.gif.gif
-
phpgdv40/images/downarrow.gif.gif
-
phpgdv40/images/email.gif.gif
-
phpgdv40/images/file.gif.gif
-
phpgdv40/images/folder.gif.gif
-
phpgdv40/images/folderup.gif.gif
-
phpgdv40/images/gradient.gif.gif
-
phpgdv40/images/header_helpandref.gif.gif
-
phpgdv40/images/hr.gif.gif
-
phpgdv40/images/hyperlink.gif.gif
-
phpgdv40/images/image.gif.gif
-
phpgdv40/images/indent.gif.gif
-
phpgdv40/images/input_checkbox.gif.gif
-
phpgdv40/images/input_dropdown.gif.gif
-
phpgdv40/images/input_multselect.gif.gif
-
phpgdv40/images/input_multselect2.gif.gif
-
phpgdv40/images/input_radio.gif.gif
-
phpgdv40/images/input_text.gif.gif
-
phpgdv40/images/input_textarea.gif.gif
-
phpgdv40/images/insert_table.gif.gif
-
phpgdv40/images/italic.gif.gif
-
phpgdv40/images/justifyfull.gif.gif
-
phpgdv40/images/left_just.gif.gif
-
phpgdv40/images/list.gif.gif
-
phpgdv40/images/logo.gif.gif
-
phpgdv40/images/menubg.gif.gif
-
phpgdv40/images/needhelpclick.gif.gif
-
phpgdv40/images/numbered_list.gif.gif
-
phpgdv40/images/outdent.gif.gif
-
phpgdv40/images/paste.gif.gif
-
phpgdv40/images/phpguarddog.gif.gif
-
phpgdv40/images/pointout.gif.gif
-
phpgdv40/images/redo.gif.gif
-
phpgdv40/images/right_just.gif.gif
-
phpgdv40/images/smiley.gif.gif
-
phpgdv40/images/spellcheck.gif.gif
-
phpgdv40/images/textcolor.gif.gif
-
phpgdv40/images/underline.gif.gif
-
phpgdv40/images/undo.gif.gif
-
phpgdv40/images/uparrow.gif.gif
-
phpgdv40/images/user_both.gif.gif
-
phpgdv40/images/user_neither.gif.gif
-
phpgdv40/images/user_view.gif.gif
-
phpgdv40/images/visa.gif.gif
-
phpgdv40/images/welcome.gif.gif
-
phpgdv40/images/welcome_bottom_bg.gif.gif
-
phpgdv40/images/welcome_bottomleft.gif.gif
-
phpgdv40/images/welcome_bottomright.gif.gif
-
phpgdv40/images/welcome_left_bg.gif.gif
-
phpgdv40/images/welcome_right_bg.gif.gif
-
phpgdv40/images/welcome_top_bg.gif.gif
-
phpgdv40/images/welcome_topleft.gif.gif
-
phpgdv40/images/welcome_topright.gif.gif
-
phpgdv40/include_bottom.htm
-
phpgdv40/include_top.htm
-
phpgdv40/index.php
-
phpgdv40/index_frames.php
-
phpgdv40/insert_link.htm.html .js polyglot
-
phpgdv40/insert_table.htm.html .js polyglot
-
phpgdv40/language/english/guard.php
-
phpgdv40/language/english/guard_cvv.php
-
phpgdv40/language/english/guard_edit_subs.php
-
phpgdv40/language/english/guard_edit_subs_info.php
-
phpgdv40/language/english/guard_edit_user.php
-
phpgdv40/language/english/guard_emailpass.php
-
phpgdv40/language/english/guard_extend.php
-
phpgdv40/language/english/guard_hint.php
-
phpgdv40/language/english/guard_login.php
-
phpgdv40/language/english/guard_logout.php
-
phpgdv40/language/english/guard_members.php
-
phpgdv40/language/english/guard_resetpass.php
-
phpgdv40/language/english/guard_useravail.php
-
phpgdv40/language/english/guard_view_user.php
-
phpgdv40/language/english/include_login.php
-
phpgdv40/language/spanish/guard.php
-
phpgdv40/language/spanish/guard_cvv.php
-
phpgdv40/language/spanish/guard_edit_subs.php
-
phpgdv40/language/spanish/guard_edit_subs_info.php
-
phpgdv40/language/spanish/guard_edit_user.php
-
phpgdv40/language/spanish/guard_emailpass.php
-
phpgdv40/language/spanish/guard_extend.php
-
phpgdv40/language/spanish/guard_hint.php
-
phpgdv40/language/spanish/guard_login.php
-
phpgdv40/language/spanish/guard_logout.php
-
phpgdv40/language/spanish/guard_members.php
-
phpgdv40/language/spanish/guard_resetpass.php
-
phpgdv40/language/spanish/guard_useravail.php
-
phpgdv40/language/spanish/guard_view_user.php
-
phpgdv40/language/spanish/include_login.php
-
phpgdv40/menu_bottom.php.js
-
phpgdv40/newWin.js.js
-
phpgdv40/palette.htm.html
-
phpgdv40/payments/.htaccess
-
phpgdv40/payments/linkpoint/sample.pem
-
phpgdv40/payments/verisign/certs/f73e89fd.0
-
phpgdv40/payments/verisign/libpfpro.so.elf linux x86
-
phpgdv40/payments/verisign/pfpro.elf linux x86
-
phpgdv40/picker.js.js
-
phpgdv40/richtext.js.js
-
phpgdv40/richtext_compressed.js.js
-
phpgdv40/rte.css
-
phpgdv40/selectbox.js.js
-
phpgdv40/setup.php
-
phpgdv40/sm-check.md5
-
phpgdv40/sm-check.php
-
phpgdv40/styles.css
-
phpgdv40/sysmsg.php
-
phpgdv40/sysmsg_admin.php
-
phpgdv40/下载说明.htm.html .js polyglot
-
phpgdv40/非常世纪资源网.url.url