General

  • Target

    ba531acc6fceae4afc40c180af697a24_JaffaCakes118

  • Size

    606KB

  • MD5

    ba531acc6fceae4afc40c180af697a24

  • SHA1

    ce3dab0d08f6723abe75e7fd4a707277de20627e

  • SHA256

    c68c5051a833bad41827da3b2b7215a0a09c5ff5ce9e8bf145202d6073f95669

  • SHA512

    719b774a4f61d13d4114e0092238dd6d6390ae5f454211e4031b8da0782ddd881c80eeec325cd143102fb967e12aaea22ff889dd68b5487651516143690aceba

  • SSDEEP

    12288:tudW6FMYf1DufETXlQEedrHKeo24PrxqBwt0eDkh0jvX2j3Gp7JGFO3s:t96PRuWHed2PNywt0F0rXCSGkc

Score
1/10

Malware Config

Signatures

Files

  • ba531acc6fceae4afc40c180af697a24_JaffaCakes118
    .rar
  • phpgdv40/READ ME FIRST.txt
  • phpgdv40/_sourcefiles/mod_rewrite_protection/.htaccess
  • phpgdv40/_sourcefiles/mod_rewrite_protection/special_login.php
  • phpgdv40/admin_blank.php
    .html
  • phpgdv40/admin_datadump.php
  • phpgdv40/admin_dropdownmenu.php
    .js
  • phpgdv40/admin_edit_colors.php
  • phpgdv40/admin_edit_group.php
  • phpgdv40/admin_edit_hints.php
  • phpgdv40/admin_edit_inputs.php
    .js
  • phpgdv40/admin_edit_language.php
  • phpgdv40/admin_edit_options.php
  • phpgdv40/admin_edit_regemail.php
  • phpgdv40/admin_edit_user.php
    .ps1
  • phpgdv40/admin_edit_user_mass.php
  • phpgdv40/admin_edit_verifyemail.php
  • phpgdv40/admin_email_send.php
  • phpgdv40/admin_email_verify.php
  • phpgdv40/admin_groupavail.php
  • phpgdv40/admin_help_access.php
  • phpgdv40/admin_help_administration.php
  • phpgdv40/admin_help_contact.php
  • phpgdv40/admin_help_customization.php
  • phpgdv40/admin_help_faqs.php
  • phpgdv40/admin_help_function.php
  • phpgdv40/admin_help_installation.php
  • phpgdv40/admin_help_login.php
  • phpgdv40/admin_help_menu.php
  • phpgdv40/admin_help_pop.php
  • phpgdv40/admin_help_protecting.php
  • phpgdv40/admin_help_quickstart.php
  • phpgdv40/admin_help_subscription.php
  • phpgdv40/admin_help_using.php
  • phpgdv40/admin_import_users.php
  • phpgdv40/admin_ip.php
  • phpgdv40/admin_list.php
  • phpgdv40/admin_list_view2.php
    .ps1
  • phpgdv40/admin_massemail.php
  • phpgdv40/admin_massemail_confirm.php
  • phpgdv40/admin_massemail_send.php
    .js
  • phpgdv40/admin_menu.php
  • phpgdv40/admin_passwords.php
  • phpgdv40/admin_payment_process.php
  • phpgdv40/admin_paypal_live.php
  • phpgdv40/admin_paypal_logs.php
  • phpgdv40/admin_paypal_process.php
  • phpgdv40/admin_phpinfo.php
  • phpgdv40/admin_picker.htm
  • phpgdv40/admin_popchoose.php
    .ps1
  • phpgdv40/admin_popview.php
  • phpgdv40/admin_popview_cc.php
  • phpgdv40/admin_pose_logout.php
  • phpgdv40/admin_reports.php
  • phpgdv40/admin_reports_active.php
  • phpgdv40/admin_reports_controller.php
  • phpgdv40/admin_reports_delete.php
  • phpgdv40/admin_reports_groups.php
  • phpgdv40/admin_reports_tracking.php
  • phpgdv40/admin_reports_visits.php
  • phpgdv40/admin_set_group_users.php
    .ps1
  • phpgdv40/admin_set_user_groups.php
    .ps1
  • phpgdv40/admin_subsaudit_delete.php
  • phpgdv40/admin_subscriptions.php
  • phpgdv40/admin_subscriptions_authorize.php
  • phpgdv40/admin_subscriptions_current.php
  • phpgdv40/admin_subscriptions_edit.php
  • phpgdv40/admin_subscriptions_free.php
  • phpgdv40/admin_subscriptions_linkpoint.php
  • phpgdv40/admin_subscriptions_paypal.php
  • phpgdv40/admin_subscriptions_user_bill.php
  • phpgdv40/admin_subscriptions_users.php
  • phpgdv40/admin_subscriptions_verisign.php
  • phpgdv40/admin_testdir.php
  • phpgdv40/admin_testemail.php
  • phpgdv40/admin_uninstall.php
    .html
  • phpgdv40/admin_view_inactive.php
  • phpgdv40/admin_view_ungrouped.php
  • phpgdv40/admin_welcome.php
  • phpgdv40/admin_wizard.php
  • phpgdv40/admin_wizard_browse.php
    .js
  • phpgdv40/admin_wizard_files.php
  • phpgdv40/admin_wizard_test.php
  • phpgdv40/admin_wizard_view.php
  • phpgdv40/box.php
  • phpgdv40/examples/auto_prepend_file_protection/protectedpage1.php
    .html
  • phpgdv40/examples/auto_prepend_file_protection/protectedpage2.php
    .html
  • phpgdv40/examples/basic_protection/index.php
  • phpgdv40/examples/getfile_protection/index.php
  • phpgdv40/examples/mod_rewrite_protection/.htaccess
  • phpgdv40/examples/mod_rewrite_protection/protectedimage.gif
    .gif
  • phpgdv40/examples/mod_rewrite_protection/protectedpage1.htm
    .html
  • phpgdv40/examples/mod_rewrite_protection/protectedpage2.html
    .html
  • phpgdv40/examples/mod_rewrite_protection/special_login.php
  • phpgdv40/file_id.diz
  • phpgdv40/getfile.php
  • phpgdv40/guard.php
  • phpgdv40/guard_cvv.php
  • phpgdv40/guard_dbdown.php
  • phpgdv40/guard_edit_subs.php
  • phpgdv40/guard_edit_subs_info.php
  • phpgdv40/guard_edit_subs_view.php
  • phpgdv40/guard_edit_user.php
  • phpgdv40/guard_emailpass.php
  • phpgdv40/guard_encrypt.php
  • phpgdv40/guard_extend.php
    .js
  • phpgdv40/guard_extend_cccheck.php
  • phpgdv40/guard_hint.php
  • phpgdv40/guard_login.php
  • phpgdv40/guard_logout.php
  • phpgdv40/guard_members.php
  • phpgdv40/guard_resetpass.php
  • phpgdv40/guard_useravail.php
  • phpgdv40/guard_vars.php
  • phpgdv40/guard_view_user.php
  • phpgdv40/html2xhtml.js
    .js
  • phpgdv40/images/Untitled-1_14.gif
    .gif
  • phpgdv40/images/Untitled-2_14.gif
    .gif
  • phpgdv40/images/adminheaders.gif
    .gif
  • phpgdv40/images/amex.gif
    .gif
  • phpgdv40/images/bgcolor.gif
    .gif
  • phpgdv40/images/bgwelcome.gif
    .gif
  • phpgdv40/images/blackdot.gif
    .gif
  • phpgdv40/images/blank.gif
    .gif
  • phpgdv40/images/bluebegin.gif
    .gif
  • phpgdv40/images/bluebg.gif
    .gif
  • phpgdv40/images/bold.gif
    .gif
  • phpgdv40/images/but_clickclosewindow.gif
    .gif
  • phpgdv40/images/but_clickherehelp.gif
    .gif
  • phpgdv40/images/but_custom-off.gif
    .gif
  • phpgdv40/images/but_custom-on.gif
    .gif
  • phpgdv40/images/but_data-off.gif
    .gif
  • phpgdv40/images/but_data-on.gif
    .gif
  • phpgdv40/images/but_groups-off.gif
    .gif
  • phpgdv40/images/but_groups-on.gif
    .gif
  • phpgdv40/images/but_ip-off.gif
    .gif
  • phpgdv40/images/but_ip-on.gif
    .gif
  • phpgdv40/images/but_newsletters-off.gif
    .gif
  • phpgdv40/images/but_newsletters-on.gif
    .gif
  • phpgdv40/images/but_options-off.gif
    .gif
  • phpgdv40/images/but_options-on.gif
    .gif
  • phpgdv40/images/but_protection-off.gif
    .gif
  • phpgdv40/images/but_protection-on.gif
    .gif
  • phpgdv40/images/but_reports-off.gif
    .gif
  • phpgdv40/images/but_reports-on.gif
    .gif
  • phpgdv40/images/but_subscriptions-off.gif
    .gif
  • phpgdv40/images/but_subscriptions-on.gif
    .gif
  • phpgdv40/images/but_users-off.gif
    .gif
  • phpgdv40/images/but_users-on.gif
    .gif
  • phpgdv40/images/centre.gif
    .gif
  • phpgdv40/images/copy.gif
    .gif
  • phpgdv40/images/cut.gif
    .gif
  • phpgdv40/images/downarrow.gif
    .gif
  • phpgdv40/images/email.gif
    .gif
  • phpgdv40/images/file.gif
    .gif
  • phpgdv40/images/folder.gif
    .gif
  • phpgdv40/images/folderup.gif
    .gif
  • phpgdv40/images/gradient.gif
    .gif
  • phpgdv40/images/header_helpandref.gif
    .gif
  • phpgdv40/images/hr.gif
    .gif
  • phpgdv40/images/hyperlink.gif
    .gif
  • phpgdv40/images/image.gif
    .gif
  • phpgdv40/images/indent.gif
    .gif
  • phpgdv40/images/input_checkbox.gif
    .gif
  • phpgdv40/images/input_dropdown.gif
    .gif
  • phpgdv40/images/input_multselect.gif
    .gif
  • phpgdv40/images/input_multselect2.gif
    .gif
  • phpgdv40/images/input_radio.gif
    .gif
  • phpgdv40/images/input_text.gif
    .gif
  • phpgdv40/images/input_textarea.gif
    .gif
  • phpgdv40/images/insert_table.gif
    .gif
  • phpgdv40/images/italic.gif
    .gif
  • phpgdv40/images/justifyfull.gif
    .gif
  • phpgdv40/images/left_just.gif
    .gif
  • phpgdv40/images/list.gif
    .gif
  • phpgdv40/images/logo.gif
    .gif
  • phpgdv40/images/menubg.gif
    .gif
  • phpgdv40/images/needhelpclick.gif
    .gif
  • phpgdv40/images/numbered_list.gif
    .gif
  • phpgdv40/images/outdent.gif
    .gif
  • phpgdv40/images/paste.gif
    .gif
  • phpgdv40/images/phpguarddog.gif
    .gif
  • phpgdv40/images/pointout.gif
    .gif
  • phpgdv40/images/redo.gif
    .gif
  • phpgdv40/images/right_just.gif
    .gif
  • phpgdv40/images/smiley.gif
    .gif
  • phpgdv40/images/spellcheck.gif
    .gif
  • phpgdv40/images/textcolor.gif
    .gif
  • phpgdv40/images/underline.gif
    .gif
  • phpgdv40/images/undo.gif
    .gif
  • phpgdv40/images/uparrow.gif
    .gif
  • phpgdv40/images/user_both.gif
    .gif
  • phpgdv40/images/user_neither.gif
    .gif
  • phpgdv40/images/user_view.gif
    .gif
  • phpgdv40/images/visa.gif
    .gif
  • phpgdv40/images/welcome.gif
    .gif
  • phpgdv40/images/welcome_bottom_bg.gif
    .gif
  • phpgdv40/images/welcome_bottomleft.gif
    .gif
  • phpgdv40/images/welcome_bottomright.gif
    .gif
  • phpgdv40/images/welcome_left_bg.gif
    .gif
  • phpgdv40/images/welcome_right_bg.gif
    .gif
  • phpgdv40/images/welcome_top_bg.gif
    .gif
  • phpgdv40/images/welcome_topleft.gif
    .gif
  • phpgdv40/images/welcome_topright.gif
    .gif
  • phpgdv40/include_bottom.htm
  • phpgdv40/include_top.htm
  • phpgdv40/index.php
  • phpgdv40/index_frames.php
  • phpgdv40/insert_link.htm
    .html .js polyglot
  • phpgdv40/insert_table.htm
    .html .js polyglot
  • phpgdv40/language/english/guard.php
  • phpgdv40/language/english/guard_cvv.php
  • phpgdv40/language/english/guard_edit_subs.php
  • phpgdv40/language/english/guard_edit_subs_info.php
  • phpgdv40/language/english/guard_edit_user.php
  • phpgdv40/language/english/guard_emailpass.php
  • phpgdv40/language/english/guard_extend.php
  • phpgdv40/language/english/guard_hint.php
  • phpgdv40/language/english/guard_login.php
  • phpgdv40/language/english/guard_logout.php
  • phpgdv40/language/english/guard_members.php
  • phpgdv40/language/english/guard_resetpass.php
  • phpgdv40/language/english/guard_useravail.php
  • phpgdv40/language/english/guard_view_user.php
  • phpgdv40/language/english/include_login.php
  • phpgdv40/language/spanish/guard.php
  • phpgdv40/language/spanish/guard_cvv.php
  • phpgdv40/language/spanish/guard_edit_subs.php
  • phpgdv40/language/spanish/guard_edit_subs_info.php
  • phpgdv40/language/spanish/guard_edit_user.php
  • phpgdv40/language/spanish/guard_emailpass.php
  • phpgdv40/language/spanish/guard_extend.php
  • phpgdv40/language/spanish/guard_hint.php
  • phpgdv40/language/spanish/guard_login.php
  • phpgdv40/language/spanish/guard_logout.php
  • phpgdv40/language/spanish/guard_members.php
  • phpgdv40/language/spanish/guard_resetpass.php
  • phpgdv40/language/spanish/guard_useravail.php
  • phpgdv40/language/spanish/guard_view_user.php
  • phpgdv40/language/spanish/include_login.php
  • phpgdv40/menu_bottom.php
    .js
  • phpgdv40/newWin.js
    .js
  • phpgdv40/palette.htm
    .html
  • phpgdv40/payments/.htaccess
  • phpgdv40/payments/linkpoint/sample.pem
  • phpgdv40/payments/verisign/certs/f73e89fd.0
  • phpgdv40/payments/verisign/libpfpro.so
    .elf linux x86
  • phpgdv40/payments/verisign/pfpro
    .elf linux x86
  • phpgdv40/picker.js
    .js
  • phpgdv40/richtext.js
    .js
  • phpgdv40/richtext_compressed.js
    .js
  • phpgdv40/rte.css
  • phpgdv40/selectbox.js
    .js
  • phpgdv40/setup.php
  • phpgdv40/sm-check.md5
  • phpgdv40/sm-check.php
  • phpgdv40/styles.css
  • phpgdv40/sysmsg.php
  • phpgdv40/sysmsg_admin.php
  • phpgdv40/下载说明.htm
    .html .js polyglot
  • phpgdv40/非常世纪资源网.url
    .url