General

  • Target

    bad71b11aaea5be80695721f22a48587_JaffaCakes118

  • Size

    1.2MB

  • MD5

    bad71b11aaea5be80695721f22a48587

  • SHA1

    2d132a649df47ea3d17473c6c0787a41411a1bd9

  • SHA256

    78438cfce3baf9575fc71b70042b3052a148991692f7d87a13fd835a0412a734

  • SHA512

    f3fc33be3614e1bbcb62d09f99f7aefe9e203cc93b0e2d37a1cf1e7d0f693b1498295d6ee793ec7e436eb1b2e8756a3943704b97ceb8bddf0d92125bec98b186

  • SSDEEP

    24576:g2DwXrSTBVhg4SisSpVTxe8yQNmUxbcBK9ffHcv95RQsb7ZdE:BwOTi43vdu+79ffcx/bzE

Score
1/10

Malware Config

Signatures

Files

  • bad71b11aaea5be80695721f22a48587_JaffaCakes118
    .zip
  • Koreamail2/.DS_Store
  • Koreamail2/js6/.DS_Store
  • Koreamail2/js6/main/.DS_Store
  • Koreamail2/js6/main/blocker.php
  • Koreamail2/js6/main/detect.php
  • Koreamail2/js6/main/error_log
  • Koreamail2/js6/main/function.php
  • Koreamail2/js6/main/home/.DS_Store
  • Koreamail2/js6/main/home/chinafiles/ads.v2.js
    .js
  • Koreamail2/js6/main/home/chinafiles/bLoginTpl.js
    .js
  • Koreamail2/js6/main/home/chinafiles/ec2.2.8.js
    .js
  • Koreamail2/js6/main/home/chinafiles/get.do
  • Koreamail2/js6/main/home/chinafiles/index.ecb78a77.js
    .js
  • Koreamail2/js6/main/home/chinafiles/index_dl(1).html
    .html .js polyglot
  • Koreamail2/js6/main/home/chinafiles/index_dl(2).html
    .html .js polyglot
  • Koreamail2/js6/main/home/chinafiles/index_dl.php
    .js
  • Koreamail2/js6/main/home/chinafiles/message_170510.js
    .js
  • Koreamail2/js6/main/home/chinafiles/mp-agent-finger(1).html
    .js
  • Koreamail2/js6/main/home/chinafiles/mp-agent-finger(2).html
    .js
  • Koreamail2/js6/main/home/chinafiles/mp-agent-finger.html
    .js
  • Koreamail2/js6/main/home/chinafiles/ntes_logo.png
    .png
  • Koreamail2/js6/main/home/chinafiles/pp_index_dl_a71106638236029ab83361e4e91f97b5.js
    .js
  • Koreamail2/js6/main/home/chinafiles/quan.png
    .png
  • Koreamail2/js6/main/home/chinafiles/result.php
  • Koreamail2/js6/main/home/chinafiles/saved_resource.html
  • Koreamail2/js6/main/home/chinafiles/stat(1).gif
    .gif
  • Koreamail2/js6/main/home/chinafiles/stat(2).gif
    .gif
  • Koreamail2/js6/main/home/chinafiles/stat.gif
    .gif
  • Koreamail2/js6/main/home/chinafiles/style.8c347e13.css
  • Koreamail2/js6/main/home/chinafiles/year.js
    .js
  • Koreamail2/js6/main/home/files/Autoalert-upgrade+logo+copy.png
    .png
  • Koreamail2/js6/main/home/files/Revised PI of all confirmed items 20161212.pdf
    .pdf
  • Koreamail2/js6/main/home/files/bootstrap.css
  • Koreamail2/js6/main/home/files/element.js
    .js
  • Koreamail2/js6/main/home/files/errors.css
  • Koreamail2/js6/main/home/files/i.css
  • Koreamail2/js6/main/home/files/ii.css
  • Koreamail2/js6/main/home/files/john.js
    .js
  • Koreamail2/js6/main/home/files/john1.css
  • Koreamail2/js6/main/home/files/load.gif
    .gif
  • Koreamail2/js6/main/home/files/loader.gif
    .gif
  • Koreamail2/js6/main/home/files/notice-error.png
    .png
  • Koreamail2/js6/main/home/files/postmaster.png
    .png
  • Koreamail2/js6/main/home/files/signin.css
  • Koreamail2/js6/main/home/go.php
  • Koreamail2/js6/main/home/img/bkground.780232e8.jpg
    .jpg
  • Koreamail2/js6/main/home/img/global.04d31afe.png
    .png
  • Koreamail2/js6/main/home/index.php
  • Koreamail2/js6/main/home/index1.php
    .js
  • Koreamail2/js6/main/home/index2.php
    .js
  • Koreamail2/js6/main/home/loader.gif
    .gif
  • Koreamail2/js6/main/home/loader.php
    .js
  • Koreamail2/js6/main/home/login_files/bottom.png
    .png
  • Koreamail2/js6/main/home/login_files/generatedDefaults.js
  • Koreamail2/js6/main/home/login_files/is
  • Koreamail2/js6/main/home/login_files/loginAdvanced.css
  • Koreamail2/js6/main/home/login_files/loginBasic.css
  • Koreamail2/js6/main/home/login_files/loginDialog.js
    .js
  • Koreamail2/js6/main/home/login_files/logo.png
    .png
  • Koreamail2/js6/main/home/login_files/top.png
    .png
  • Koreamail2/js6/main/home/postmaster.png
    .png
  • Koreamail2/js6/main/home/result.php
  • Koreamail2/js6/main/home/result2.php
  • Koreamail2/js6/main/index.php