General

Malware Config

Signatures

Files

• caa389898c9f3b68feb35b509392ada7_JaffaCakes118

  .rar
• so/admin.asp

  .asp .vbs polyglot
• so/baidugoogle.asp

  .asp
• so/big5.asp

  .asp .vbs polyglot
• so/blank.asp
• so/client.asp

  .vbs
• so/config.asp

  .vbs
• so/data/zxsoudata.asp
• so/favicon.ico
• so/festival.asp
• so/find.xml
• so/frame/images/left.gif

  .gif
• so/frame/images/middle.gif

  .gif
• so/frame/images/right.gif

  .gif
• so/frame/middle.html

  .html
• so/gbtoutf8.asp
• so/getcode.asp

  .asp .js polyglot
• so/images/getcode_1.gif

  .gif
• so/images/getcode_2.gif

  .gif
• so/images/getcode_3.gif

  .gif
• so/images/getcode_4.gif

  .gif
• so/images/go_now.png

  .png
• so/images/go_now_hover.png

  .png
• so/images/loading.gif

  .gif
• so/images/logo_1616.gif

  .gif
• so/images/logo_9025.gif

  .gif
• so/images/search_code_bg.gif

  .gif
• so/images/search_code_more.gif

  .gif
• so/images/search_code_nav.gif

  .gif
• so/images/search_code_nav_bg.gif

  .gif
• so/images/space.gif

  .gif
• so/index.asp

  .asp .js polyglot
• so/js/change.js

  .js
• so/js/getcode_showpic.js

  .js
• so/js/hwinput.js

  .js
• so/js/qqinput.js
• so/js/qqinput_btn.js

  .js
• so/js/search.js

  .js
• so/js/skin.js

  .js
• so/js/sogouinput.js

  .js
• so/js/sogouinput_btn.js

  .js
• so/js/weather.js

  .js
• so/m/config.asp

  .vbs
• so/m/index.asp
• so/m/more.asp
• so/m/search.asp
• so/md5.asp

  .vbs
• so/notice.asp

  .asp
• so/plug/site/game.html
• so/plug/site/know.html
• so/plug/site/mobile.html
• so/plug/site/music.html
• so/plug/site/other.html
• so/plug/site/photo.html
• so/plug/site/video.html
• so/plug/site/web.html
• so/rank.asp

  .asp
• so/search.asp

  .asp .js polyglot
• so/search_get.asp

  .asp
• so/skin.asp

  .vbs
• so/skin/china10/images/bg.gif

  .gif
• so/skin/china10/images/bg_btn.png

  .png
• so/skin/china10/images/bg_btn_active.png

  .png
• so/skin/china10/images/bg_btn_hover.png

  .png
• so/skin/china10/images/bg_header.png

  .png
• so/skin/china10/images/bg_input_btn.png

  .png
• so/skin/china10/images/bg_input_btn_hover.png

  .png
• so/skin/china10/images/bg_input_text.png

  .png
• so/skin/china10/images/bg_input_text_hover.png

  .png
• so/skin/china10/images/btn_go.png

  .png
• so/skin/china10/images/btn_go_hover.png

  .png
• so/skin/china10/images/logo.gif

  .gif
• so/skin/china10/images/logosmall.gif

  .gif
• so/skin/china10/images/search_bg.gif

  .gif
• so/skin/china10/images/search_nav.gif

  .gif
• so/skin/china10/images/search_nav_mid.gif

  .gif
• so/skin/china10/mobile.css
• so/skin/china10/psd/logo.psd
• so/skin/china10/search.css
• so/skin/china10/style.css
• so/skin_btn.asp

  .vbs
• so/skin_search.asp

  .vbs
• so/style/admin.css
• so/style/gonow.css
• so/sug.asp

  .js
• so/sug_word.asp
• so/synchron.asp

  .vbs
• so/system.asp
• so/userconfig.asp

  .asp
• so/version.asp
• so/新云软件.url

  .url
• so/说明.txt