Overview
overview
3Static
static
1Ad/Index_A.js
windows7-x64
3Ad/Index_A.js
windows10-2004-x64
3Ad/Top_3.js
windows7-x64
3Ad/Top_3.js
windows10-2004-x64
3Ad/ad6.htm
windows7-x64
3Ad/ad6.htm
windows10-2004-x64
3Ad/新云软件.url
windows7-x64
1Ad/新云软件.url
windows10-2004-x64
1Admin2000/...ss.vbs
windows7-x64
1Admin2000/...ss.vbs
windows10-2004-x64
1Admin2000/...ig.vbs
windows7-x64
1Admin2000/...ig.vbs
windows10-2004-x64
1Admin2000/...ta.vbs
windows7-x64
1Admin2000/...ta.vbs
windows10-2004-x64
1Admin2000/...he.vbs
windows7-x64
1Admin2000/...he.vbs
windows10-2004-x64
1Admin2000/...te.vbs
windows7-x64
1Admin2000/...te.vbs
windows10-2004-x64
1Admin2000/...le.vbs
windows7-x64
1Admin2000/...le.vbs
windows10-2004-x64
1Admin2000/...ML.vbs
windows7-x64
1Admin2000/...ML.vbs
windows10-2004-x64
1Admin2000/..._S.vbs
windows7-x64
1Admin2000/..._S.vbs
windows10-2004-x64
1Admin2000/...ex.vbs
windows7-x64
1Admin2000/...ex.vbs
windows10-2004-x64
1Admin2000/...ie.vbs
windows7-x64
1Admin2000/...ie.vbs
windows10-2004-x64
1Admin2000/...an.vbs
windows7-x64
1Admin2000/...an.vbs
windows10-2004-x64
1Admin2000/...el.vbs
windows7-x64
1Admin2000/...el.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Ad/Index_A.js
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Ad/Index_A.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Ad/Top_3.js
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Ad/Top_3.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Ad/ad6.htm
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
Ad/ad6.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Ad/新云软件.url
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
Ad/新云软件.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Admin2000/Admin_Class.vbs
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
Admin2000/Admin_Class.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
Admin2000/Admin_Config.vbs
Resource
win7-20240705-en
Behavioral task
behavioral12
Sample
Admin2000/Admin_Config.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
Admin2000/Admin_Data.vbs
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
Admin2000/Admin_Data.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
Admin2000/Admin_Delcache.vbs
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
Admin2000/Admin_Delcache.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Admin2000/Admin_FriendSite.vbs
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
Admin2000/Admin_FriendSite.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
Admin2000/Admin_FsoFile.vbs
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
Admin2000/Admin_FsoFile.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
Admin2000/Admin_HTML.vbs
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
Admin2000/Admin_HTML.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
Admin2000/Admin_HTML_S.vbs
Resource
win7-20240729-en
Behavioral task
behavioral24
Sample
Admin2000/Admin_HTML_S.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
Admin2000/Admin_Index.vbs
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
Admin2000/Admin_Index.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
Admin2000/Admin_Jie.vbs
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
Admin2000/Admin_Jie.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
Admin2000/Admin_Juan.vbs
Resource
win7-20240729-en
Behavioral task
behavioral30
Sample
Admin2000/Admin_Juan.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
Admin2000/Admin_Label.vbs
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
Admin2000/Admin_Label.vbs
Resource
win10v2004-20240802-en
General
-
Target
c6ac3a4c78fa03d094ae381815a67488_JaffaCakes118
-
Size
576KB
-
MD5
c6ac3a4c78fa03d094ae381815a67488
-
SHA1
951131fa829c3733fb5d4b26dfd15e38f62a78b1
-
SHA256
be27381a8b7f792ef017754696834f9f1f9572a8c9f6f8cffcf1427e270b244c
-
SHA512
48e21da9710a1cc5fb001d8c887e04d82d670fcff635e52ee78282623b50d05c21e94cde8b6e6323965cc1feeb38bc8453ea0f9c257f40c50f8e12b73fcb6042
-
SSDEEP
12288:4zVvMq8oGOYIPmzN3eZamovJPd1l2nzGOrEtyMG4WiUBnTygdasj5:4zpeoGyOzN3eZamwl/2nzGclMBWi6nTH
Malware Config
Signatures
Files
-
c6ac3a4c78fa03d094ae381815a67488_JaffaCakes118.rar
-
Ad/Index_A.js
-
Ad/Top_3.Js
-
Ad/UploadPic/200812921265023981-0.gif.gif
-
Ad/ad6.htm.html
-
Ad/新云软件.url.url
-
Admin2000/Admin_Class.asp.vbs
-
Admin2000/Admin_Config.asp.vbs
-
Admin2000/Admin_Data.asp.vbs
-
Admin2000/Admin_Delcache.asp.vbs
-
Admin2000/Admin_FriendSite.asp.vbs
-
Admin2000/Admin_FsoFile.asp.vbs
-
Admin2000/Admin_HTML.asp.vbs
-
Admin2000/Admin_HTML_S.asp.vbs
-
Admin2000/Admin_Index.asp.vbs
-
Admin2000/Admin_Jie.asp.vbs
-
Admin2000/Admin_Juan.asp.vbs
-
Admin2000/Admin_Label.asp.vbs
-
Admin2000/Admin_Ly.asp.vbs
-
Admin2000/Admin_Ma.asp.vbs
-
Admin2000/Admin_Mold.asp.js
-
Admin2000/Admin_Page.asp.vbs
-
Admin2000/Admin_Rw.asp.vbs
-
Admin2000/Admin_Shu.asp.vbs
-
Admin2000/Admin_Sitemap.asp.vbs
-
Admin2000/Admin_SpaceSize.asp.vbs
-
Admin2000/Admin_Sql.asp.vbs
-
Admin2000/Admin_WebMaster.asp.vbs
-
Admin2000/Admin_admanage.asp.vbs
-
Admin2000/Admin_replace.asp.vbs
-
Admin2000/Upload/ClsFileUp.asp.vbs
-
Admin2000/Upload/ClsUpLoad.asp.vbs
-
Admin2000/Upload/Loading.asp.asp .vbs polyglot
-
Admin2000/Upload/Upload.asp.js
-
Admin2000/admin_other.asp.vbs
-
Admin2000/editor/Asp_upload.asp.html
-
Admin2000/editor/editor.js.js
-
Admin2000/editor/plugins/flash.html.html
-
Admin2000/editor/plugins/image.html.html
-
Admin2000/editor/plugins/link.html.html
-
Admin2000/editor/plugins/media.html.html
-
Admin2000/editor/plugins/plainpaste.html.html
-
Admin2000/editor/plugins/remote_image.html.html
-
Admin2000/editor/plugins/wordpaste.html.html .js polyglot
-
Admin2000/editor/skins/default.css
-
Admin2000/editor/skins/default.gif.gif
-
Admin2000/editor/skins/spacer.gif.gif
-
Admin2000/editor/skins/tinymce.css
-
Admin2000/editor/skins/tinymce.gif.gif
-
Admin2000/include/cls_admanage.asp.vbs
-
Admin2000/include/fixed.inc
-
Admin2000/include/float.inc.js
-
Admin2000/include/html.inc.html
-
Admin_Login.asp.vbs
-
Book.asp.vbs
-
Class.asp.vbs
-
Config.asp.asp
-
Contents.asp.vbs
-
Databackup/#KenQiao_Label.Mdb
-
Databackup/#KenQiao_Page.Mdb
-
Databackup/采集规则.mdb
-
Database/#数据231311库@[email protected]
-
Database/Admin_FY插件库_DateAAA_aaa.mdb
-
FriendSiteReg.asp.vbs
-
FriendSiteclick.asp.vbs
-
Include/FY.Cache.asp.vbs
-
Include/FY.Common.All.asp.vbs
-
Include/FY.Common.Front.asp.vbs
-
Install.asp.vbs
-
Novel.asp.vbs
-
Plus_Config.asp
-
Skin/2Yue/bang.gif.gif
-
Skin/2Yue/bg1.gif.gif
-
Skin/2Yue/bg2.gif.gif
-
Skin/2Yue/bg3.gif.gif
-
Skin/2Yue/bg4.gif.gif
-
Skin/2Yue/css.css
-
Skin/2Yue/hbg.gif.gif
-
Skin/2Yue/hm_bg.png.png
-
Skin/2Yue/lang.js.js
-
Skin/2Yue/logo.png.png
-
Skin/2Yue/ly.png.png
-
Skin/2Yue/memu_d.png.png
-
Skin/2Yue/memu_l.png.png
-
Skin/2Yue/menu_bg.png.png
-
Skin/2Yue/search.png.png
-
Skin/2Yue/tit_a.png.png
-
Skin/2Yue/view.js.js
-
Skin/Elu/css.css
-
Skin/Elu/logo.gif.gif
-
Skin/Elu/menu.gif.gif
-
Skin/Elu/nav.gif.gif
-
Skin/Elu/read.gif.gif
-
Skin/Elu/so.gif.gif
-
Skin/KenQiao/More.gif.gif
-
Skin/KenQiao/abg.jpg.jpg
-
Skin/KenQiao/arrow2.gif.gif
-
Skin/KenQiao/bbg.gif.gif
-
Skin/KenQiao/blogin.gif.gif
-
Skin/KenQiao/book.gif.gif
-
Skin/KenQiao/button.gif.gif
-
Skin/KenQiao/ico2.gif.gif
-
Skin/KenQiao/icod.gif.gif
-
Skin/KenQiao/index.css
-
Skin/KenQiao/li3.gif.gif
-
Skin/KenQiao/li_ggao.gif.gif
-
Skin/KenQiao/logo.gif.gif
-
Skin/KenQiao/logo1.gif.gif
-
Skin/KenQiao/logo2.gif.gif
-
Skin/KenQiao/menu21.gif.gif
-
Skin/KenQiao/menu22.gif.gif
-
Skin/KenQiao/menubg.jpg.jpg
-
Skin/KenQiao/menubgleft.jpg.jpg
-
Skin/KenQiao/mini.gif.gif
-
Skin/KenQiao/msn_ind_bg0.gif.gif
-
Skin/KenQiao/msn_t_bg1.gif.gif
-
Skin/KenQiao/new.gif.gif
-
Skin/KenQiao/novel.css
-
Skin/KenQiao/sc.gif.gif
-
Skin/KenQiao/span.gif.gif
-
Skin/KenQiao/ssz.gif.gif
-
Skin/KenQiao/style.css
-
Skin/KenQiao/top_1.jpg.jpg
-
Skin/KenQiao/tp.gif.gif
-
Skin/KenQiao/view.js.js
-
Skin/KenQiao/vipt.gif.gif
-
Skin/KenQiao/xdd.gif.gif
-
Skin/KenQiao/xdd2.gif.gif
-
Skin/KenQiao/zoon.gif.gif
-
Skin/KenQiao/幻灯_A1.jpg.jpg
-
Skin/KenQiao/幻灯_A2.jpg.jpg
-
Skin/KenQiao/幻灯_A3.jpg.jpg
-
Skin/KenQiao/幻灯_A4.jpg.jpg
-
Skin/KenQiao/幻灯_B1.jpg.jpg
-
Skin/KenQiao/幻灯_B2.jpg.jpg
-
Skin/KenQiao/幻灯_B3.jpg.jpg
-
Skin/KenQiao/幻灯_B4.jpg.jpg
-
click.asp.vbs
-
conn.asp.vbs
-
error.asp.vbs
-
images/Head.Fix
-
images/Pic.js.js
-
images/SiteMap_Css.css
-
images/admin/Gl.gif.gif
-
images/admin/Style.css
-
images/admin/admin_bg_1.jpg.jpg
-
images/admin/admin_left.jpg.jpg
-
images/admin/admin_left_1.jpg.jpg
-
images/admin/admin_logo.gif.gif
-
images/admin/admin_logo_1.gif.gif
-
images/admin/admin_logo_2.gif.gif
-
images/admin/admin_title.gif.gif
-
images/admin/admin_top_bg.gif.gif
-
images/admin/bar.gif.gif
-
images/admin/bullet.gif.gif
-
images/admin/help.gif.gif
-
images/admin/i_home.gif.gif
-
images/admin/k.gif.gif
-
images/admin/lined.gif.gif
-
images/admin/login_button.gif.gif
-
images/admin/login_center.gif.gif
-
images/admin/login_code.gif.gif
-
images/admin/login_left.gif.gif
-
images/admin/login_name.gif.gif
-
images/admin/login_pass.gif.gif
-
images/admin/login_title.gif.gif
-
images/admin/menubg.gif.gif
-
images/admin/nextnext.gif.gif
-
images/admin/prepre.gif.gif
-
images/admin/sizeminus.gif.gif
-
images/admin/sizeplus.gif.gif
-
images/body1.fix
-
images/body10.fix
-
images/body11.fix
-
images/body12.fix
-
images/body13.fix
-
images/body14.fix
-
images/body15.fix
-
images/body16.fix
-
images/body17.fix
-
images/body18.fix
-
images/body2.fix
-
images/body3.fix
-
images/body4.fix
-
images/body5.fix
-
images/body6.fix
-
images/body7.fix
-
images/body8.fix
-
images/body9.fix
-
images/dialogclose.gif.gif
-
images/face/001.gif.gif
-
images/face/002.gif.gif
-
images/face/003.gif.gif
-
images/face/004.gif.gif
-
images/face/005.gif.gif
-
images/face/006.gif.gif
-
images/face/007.gif.gif
-
images/face/008.gif.gif
-
images/face/009.gif.gif
-
images/face/010.gif.gif
-
images/face/011.gif.gif
-
images/face/012.gif.gif
-
images/face/013.gif.gif
-
images/face/014.gif.gif
-
images/face/015.gif.gif
-
images/face/016.gif.gif
-
images/face/017.gif.gif
-
images/face/018.gif.gif
-
images/face/019.gif.gif
-
images/face/020.gif.gif
-
images/face/021.gif.gif
-
images/face/022.gif.gif
-
images/face/023.gif.gif
-
images/face/024.gif.gif
-
images/face/025.gif.gif
-
images/face/026.gif.gif
-
images/face/027.gif.gif
-
images/face/028.gif.gif
-
images/face/029.gif.gif
-
images/face/030.gif.gif
-
images/face/031.gif.gif
-
images/face/032.gif.gif
-
images/face/033.gif.gif
-
images/face/034.gif.gif
-
images/face/035.gif.gif
-
images/face/036.gif.gif
-
images/face/037.gif.gif
-
images/face/038.gif.gif
-
images/face/039.gif.gif
-
images/face/040.gif.gif
-
images/logo.gif.gif
-
images/nologo.gif.gif
-
images/nopic.gif.gif
-
images/popup.js.js
-
inc/Admin_checkuser.asp.vbs
-
inc/CheckCode.asp.vbs
-
inc/Fso.asp.vbs
-
inc/Function.asp.vbs
-
inc/Inc.asp
-
inc/Ver.asp
-
inc/md5.asp.vbs
-
index.asp.vbs
-
search.asp.vbs
-
template/二月小说/Class.Html.html
-
template/二月小说/Contents.Html.html .js polyglot
-
template/二月小说/Index.Html.html
-
template/二月小说/List.Html.html
-
template/二月小说/Novel.Html.html
-
template/二月小说/search.Html.html
-
template/仿E路/Class.Html.html
-
template/仿E路/Contents.Html.html .js polyglot
-
template/仿E路/Index.Html.html
-
template/仿E路/List.Html.html
-
template/仿E路/Novel.Html.html
-
template/仿E路/search.Html.html
-
template/蓝色商业风格/Class.Html.html
-
template/蓝色商业风格/Contents.Html.html .js polyglot
-
template/蓝色商业风格/Index.Html.html
-
template/蓝色商业风格/List.Html.html
-
template/蓝色商业风格/Novel.Html.html .js polyglot
-
template/蓝色商业风格/search.Html.html
-
使用教程.txt
-
免费版与商业版区别.txt
-
更新说明.txt
-
标签解释与探讨.url.url