Overview
overview
3Static
static
1Artitle/ab...us.htm
windows7-x64
3Artitle/ab...us.htm
windows10-2004-x64
1Artitle/ad...eg.vbs
windows7-x64
1Artitle/ad...eg.vbs
windows10-2004-x64
1Artitle/ad...ar.vbs
windows7-x64
1Artitle/ad...ar.vbs
windows10-2004-x64
1Artitle/ad...ck.vbs
windows7-x64
1Artitle/ad...ck.vbs
windows10-2004-x64
1Artitle/ad...ig.asp
windows7-x64
3Artitle/ad...ig.asp
windows10-2004-x64
3Artitle/ad...nn.vbs
windows7-x64
1Artitle/ad...nn.vbs
windows10-2004-x64
1Artitle/ad...ta.vbs
windows7-x64
1Artitle/ad...ta.vbs
windows10-2004-x64
1Artitle/ad...it.vbs
windows7-x64
1Artitle/ad...it.vbs
windows10-2004-x64
1Artitle/ad...ce.asp
windows7-x64
3Artitle/ad...ce.asp
windows10-2004-x64
3Artitle/ad...er.asp
windows7-x64
3Artitle/ad...er.asp
windows10-2004-x64
3Artitle/ad...le.htm
windows7-x64
3Artitle/ad...le.htm
windows10-2004-x64
3Artitle/ad...min.js
windows7-x64
3Artitle/ad...min.js
windows10-2004-x64
3Artitle/ad...ex.vbs
windows7-x64
1Artitle/ad...ex.vbs
windows10-2004-x64
1Artitle/ad...fo.asp
windows7-x64
3Artitle/ad...fo.asp
windows10-2004-x64
3Artitle/ad...dd.vbs
windows7-x64
1Artitle/ad...dd.vbs
windows10-2004-x64
1Artitle/ad...d1.vbs
windows7-x64
1Artitle/ad...d1.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Artitle/about/aboutus.htm
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
Artitle/about/aboutus.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Artitle/admin/XXArticle_reg.vbs
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
Artitle/admin/XXArticle_reg.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Artitle/admin/char.vbs
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
Artitle/admin/char.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Artitle/admin/check.vbs
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
Artitle/admin/check.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Artitle/admin/config.asp
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
Artitle/admin/config.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Artitle/admin/conn.vbs
Resource
win7-20240729-en
Behavioral task
behavioral12
Sample
Artitle/admin/conn.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Artitle/admin/data.vbs
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
Artitle/admin/data.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Artitle/admin/edit.vbs
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
Artitle/admin/edit.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Artitle/admin/face.asp
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
Artitle/admin/face.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Artitle/admin/header.asp
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
Artitle/admin/header.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Artitle/admin/html_table.htm
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
Artitle/admin/html_table.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Artitle/admin/images/admin.js
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
Artitle/admin/images/admin.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Artitle/admin/index.vbs
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
Artitle/admin/index.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Artitle/admin/info.asp
Resource
win7-20240729-en
Behavioral task
behavioral28
Sample
Artitle/admin/info.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Artitle/admin/info_add.vbs
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
Artitle/admin/info_add.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Artitle/admin/info_add1.vbs
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
Artitle/admin/info_add1.vbs
Resource
win10v2004-20240802-en
General
-
Target
bdd15030f3a6a893b78ecf69da492051_JaffaCakes118
-
Size
623KB
-
MD5
bdd15030f3a6a893b78ecf69da492051
-
SHA1
ac64d301dd2c1976eb3fed2f4f539a40816eb550
-
SHA256
1a17e898d3cbe6542eae6c0f379e3f00c37a832f3897fd135b365f3ec2150f6d
-
SHA512
fd0bb3912b0113dab435c6158e39b11fc811ea9717f44c950e99823b821ac0ac636e16ba45a66479834b59cebe7814766627292977f572062016b670337c1038
-
SSDEEP
12288:j/gD45mwZQpXdXxChkfYov8ZI6QdiZADCk1Soquf3pTOHmZKsRMHQNiL:jYSlQJgkfY/Z7QBDCk1Nqu32sRM8iL
Malware Config
Signatures
Files
-
bdd15030f3a6a893b78ecf69da492051_JaffaCakes118.rar
-
Artitle/about/aboutus.htm.html
-
Artitle/admin/XXArticle_reg.asp.vbs
-
Artitle/admin/char.inc.vbs
-
Artitle/admin/check.asp.vbs
-
Artitle/admin/config.asp
-
Artitle/admin/conn.asp.vbs
-
Artitle/admin/data.asp.vbs
-
Artitle/admin/data/XXArticle.mdb
-
Artitle/admin/data_backup/XXArticle_backup.mdb
-
Artitle/admin/edit.asp.vbs
-
Artitle/admin/face.asp
-
Artitle/admin/header.asp
-
Artitle/admin/html_editor.htm.html .js polyglot
-
Artitle/admin/html_selcolor.htm.html .js polyglot
-
Artitle/admin/html_table.htm.html
-
Artitle/admin/images/ALEFT.GIF.gif
-
Artitle/admin/images/ARIGHT.GIF.gif
-
Artitle/admin/images/BOLD.GIF.gif
-
Artitle/admin/images/BULLIST.GIF.gif
-
Artitle/admin/images/CENTER.GIF.gif
-
Artitle/admin/images/COPY.GIF.gif
-
Artitle/admin/images/CUT.GIF.gif
-
Artitle/admin/images/DELETE.GIF.gif
-
Artitle/admin/images/FGCOLOR.GIF.gif
-
Artitle/admin/images/HELP.GIF.gif
-
Artitle/admin/images/HR.GIF.gif
-
Artitle/admin/images/IMG.GIF.gif
-
Artitle/admin/images/INDENT.GIF.gif
-
Artitle/admin/images/ITALIC.GIF.gif
-
Artitle/admin/images/NUMLIST.GIF.gif
-
Artitle/admin/images/OUTDENT.GIF.gif
-
Artitle/admin/images/PASTE.GIF.gif
-
Artitle/admin/images/REDO.GIF.gif
-
Artitle/admin/images/SAVE.GIF.gif
-
Artitle/admin/images/TABLE.GIF.gif
-
Artitle/admin/images/UNDO.GIF.gif
-
Artitle/admin/images/WLINK.GIF.gif
-
Artitle/admin/images/WinCO.gif.gif
-
Artitle/admin/images/WinCO2.gif.gif
-
Artitle/admin/images/admin.js.js
-
Artitle/admin/images/admin_bg_1.gif.gif
-
Artitle/admin/images/admin_bg_2.gif.gif
-
Artitle/admin/images/admin_bg_3.gif.gif
-
Artitle/admin/images/admin_bg_3b.gif.gif
-
Artitle/admin/images/admin_left_1.gif.gif
-
Artitle/admin/images/admin_left_2.gif.gif
-
Artitle/admin/images/admin_left_3.gif.gif
-
Artitle/admin/images/admin_left_4.gif.gif
-
Artitle/admin/images/admin_left_5.gif.gif
-
Artitle/admin/images/admin_left_6.gif.gif
-
Artitle/admin/images/admin_left_7.gif.gif
-
Artitle/admin/images/admin_left_8.gif.gif
-
Artitle/admin/images/admin_top_bg.gif.gif
-
Artitle/admin/images/admin_top_close.gif.gif
-
Artitle/admin/images/admin_top_icon_1.gif.gif
-
Artitle/admin/images/admin_top_icon_5.gif.gif
-
Artitle/admin/images/admin_top_open.gif.gif
-
Artitle/admin/images/bar.gif.gif
-
Artitle/admin/images/bullet.gif.gif
-
Artitle/admin/images/dot.gif.gif
-
Artitle/admin/images/dvbbs.jpg.jpg
-
Artitle/admin/images/forumHeaderBackground.gif.gif
-
Artitle/admin/images/gotop.gif.gif
-
Artitle/admin/images/i_home.gif.gif
-
Artitle/admin/images/left_top.psd
-
Artitle/admin/images/loginbg.jpg.jpg
-
Artitle/admin/images/loginbg2.jpg.jpg
-
Artitle/admin/images/minus.gif.gif
-
Artitle/admin/images/plus.gif.gif
-
Artitle/admin/images/title.gif.gif
-
Artitle/admin/images/title_bg_hide.gif.gif
-
Artitle/admin/images/title_bg_quit.gif.gif
-
Artitle/admin/images/title_bg_show.gif.gif
-
Artitle/admin/images/underline.gif.gif
-
Artitle/admin/images/viewpic.gif.gif
-
Artitle/admin/index.asp.vbs
-
Artitle/admin/info.asp
-
Artitle/admin/info_add.asp.vbs
-
Artitle/admin/info_add1.asp.vbs
-
Artitle/admin/info_add_save.asp.vbs
-
Artitle/admin/info_del.asp.js
-
Artitle/admin/info_edit.asp.vbs
-
Artitle/admin/info_edit_save.asp.vbs
-
Artitle/admin/info_list.asp.html
-
Artitle/admin/info_makeindex.asp.vbs
-
Artitle/admin/info_makeinfo.asp.vbs
-
Artitle/admin/info_makeinfoall.asp.vbs
-
Artitle/admin/info_makesort.asp.vbs
-
Artitle/admin/info_makesortall.asp.vbs
-
Artitle/admin/info_manage.asp.html .vbs polyglot
-
Artitle/admin/info_mb.asp.vbs
-
Artitle/admin/info_mb_info.asp.vbs
-
Artitle/admin/info_mb_list.asp.html
-
Artitle/admin/info_mb_show.asp.html
-
Artitle/admin/info_move.asp.vbs
-
Artitle/admin/info_sort.asp.html .vbs polyglot
-
Artitle/admin/info_sort_save.asp.html .vbs polyglot
-
Artitle/admin/info_type_add.asp.vbs
-
Artitle/admin/info_type_del.asp.vbs
-
Artitle/admin/info_type_edit.asp.vbs
-
Artitle/admin/left.asp.js
-
Artitle/admin/login.asp.vbs
-
Artitle/admin/maillist.asp.html .vbs polyglot
-
Artitle/admin/mailsend.asp.html .vbs polyglot
-
Artitle/admin/main.asp.html
-
Artitle/admin/main.css
-
Artitle/admin/mdb_compress.asp.vbs
-
Artitle/admin/mdb_copy.asp.vbs
-
Artitle/admin/mdb_restore.asp.vbs
-
Artitle/admin/reg.asp.vbs
-
Artitle/admin/system.asp.vbs
-
Artitle/admin/upload.asp.vbs
-
Artitle/admin/upload.htm.html
-
Artitle/admin/upload.inc.html .vbs polyglot
-
Artitle/admin/user.asp.vbs
-
Artitle/admin/user_edit.asp.vbs
-
Artitle/admin/user_list.asp.vbs
-
Artitle/admin/user_save.asp.html .vbs polyglot
-
Artitle/admin/winco.asp.html
-
Artitle/admin/winco2.asp.html
-
Artitle/admin/zcm.asp
-
Artitle/ads/160_80.gif.gif
-
Artitle/ads/206_100.gif.gif
-
Artitle/ads/206_60.gif.gif
-
Artitle/ads/468_60.gif.gif
-
Artitle/ads/Left_Top_news.js.js
-
Artitle/ads/Left_news1.js.js
-
Artitle/ads/Left_news2.js.js
-
Artitle/ads/Left_news3.js.js
-
Artitle/ads/List_news.js.js
-
Artitle/ads/Right_Top_news.js.js
-
Artitle/ads/Right_news1.js.js
-
Artitle/ads/Right_news2.js.js
-
Artitle/ads/Right_news3.js.js
-
Artitle/ads/Right_news4.js.js
-
Artitle/ads/ad_468x60_65658.com.gif.gif
-
Artitle/ads/ad_asp0371_100x100.gif.gif
-
Artitle/ads/ad_asp0371_468x60.gif.gif
-
Artitle/ads/ad_www.asp0371.com_100x50.gif.gif
-
Artitle/ads/gg130x50.gif.gif
-
Artitle/ads/gg290x150.gif.gif
-
Artitle/ads/gg290x150.gif.psd
-
Artitle/ads/gg468x60.gif.gif
-
Artitle/ads/gg468x60.psd
-
Artitle/ads/gg95x75.gif.gif
-
Artitle/ads/img/kete_468.gif.gif
-
Artitle/ads/index_head.js.js
-
Artitle/ads/info_show_right_bottom.js.js
-
Artitle/ads/js_ad_show_1.js.js
-
Artitle/ads/js_ad_show_2.js.js
-
Artitle/ads/js_index_left.js.js
-
Artitle/ads/js_index_yd.js.js
-
Artitle/ads/js_p_index.js.js
-
Artitle/ads/js_p_list.js.js
-
Artitle/ads/js_p_show.js.js
-
Artitle/ads/kete_760.gif.gif
-
Artitle/ads/uijs.files/ui.js.js
-
Artitle/ads/uijs.htm.html
-
Artitle/config.asp
-
Artitle/img/Bottom11_logo.gif.gif
-
Artitle/img/Bottom_logo.gif.gif
-
Artitle/img/Top_logo.gif.gif
-
Artitle/img/ad_title.gif.gif
-
Artitle/img/ad_title_bg.gif.gif
-
Artitle/img/bg.gif.gif
-
Artitle/img/d_2.gif.gif
-
Artitle/img/ico_015.gif.gif
-
Artitle/img/kete_760.gif.gif
-
Artitle/img/main_title.gif.gif
-
Artitle/img/more.gif.gif
-
Artitle/img/nav_bg.gif.gif
-
Artitle/img/navspacer.gif.gif
-
Artitle/img/position.gif.gif
-
Artitle/img/search.gif.gif
-
Artitle/img/side_bg_r1_c1.gif.gif
-
Artitle/img/side_bg_r2_c1.gif.gif
-
Artitle/img/side_bg_r3_c1.gif.gif
-
Artitle/img/time.gif.gif
-
Artitle/img/top_gift.gif.gif
-
Artitle/img/top_home.gif.gif
-
Artitle/img/top_tg.gif.gif
-
Artitle/img/uijs.files/ui.js.js
-
Artitle/img/uijs.htm.html
-
Artitle/img/wel.gif.gif
-
Artitle/in_copy2.js.js
-
Artitle/in_top2.js.js
-
Artitle/search.asp
-
Artitle/softimg/2005619135265.gif.gif
-
Artitle/softimg/2005622194267.gif
-
Artitle/softimg/2005622195443.gif.gif
-
Artitle/style.css
-
Artitle/下载说明.htm.html .js polyglot
-
Artitle/复件 config.asp
-
Artitle/萧萧文章管理系统(XXArticle)使用说明.txt