General

  • Target

    d702377c1df0ed79da43e4fc5d5e8609_JaffaCakes118

  • Size

    454KB

  • MD5

    d702377c1df0ed79da43e4fc5d5e8609

  • SHA1

    4f6bc2f57721e094cd854128b059512f48f3bb99

  • SHA256

    000319651d6ee30a93ac4e1dfdea9c7e938fae77478c1ff79fded8d0bbd89058

  • SHA512

    cd4da6a6b80e4b5095b85e5c008a77c81ad8dfb6ad063bed9616fe057d83421ce2b72de61f8cc7a2cc4dfa5bf8326ad8addcf8cdeb09fdd031b784cadd8b7fd2

  • SSDEEP

    6144:TzJFEBpapWHla1lBk6qImrJDBql7kOIo7XBJ4bnd6Mz8EHP796pKsoZ7P9XF4Nbu:TzzQ8IPNDBAJFKbndfPpsoZToNu54hcH

Score
3/10

Malware Config

Signatures

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • d702377c1df0ed79da43e4fc5d5e8609_JaffaCakes118
    .rar
  • web/Admin.aspx
  • web/Admin_Add.aspx
  • web/Admin_Edit.aspx
  • web/Admin_Update.aspx
  • web/App_Data/GameDB.mdf
  • web/App_Data/GameDB_log.ldf
  • web/CSS.css
  • web/Center.aspx
    .js
  • web/Default.aspx
    .asp .js polyglot
  • web/GroupUse.aspx
  • web/GroupUseGet.aspx
  • web/GroupUse_Add.aspx
  • web/GroupUse_AllAdd.aspx
  • web/GroupUse_AllDown.aspx
  • web/GroupUse_Edit.aspx
    .asp
  • web/GroupUse_Sell.aspx
  • web/Images/001.gif
    .gif
  • web/Images/002.gif
    .gif
  • web/Images/003.gif
    .gif
  • web/Images/11.gif
    .gif
  • web/Images/22.gif
    .gif
  • web/Images/33.gif
    .gif
  • web/Images/back.gif
    .gif
  • web/Images/bg.gif
    .gif
  • web/Images/cookie.js
    .js
  • web/Images/del.gif
    .gif
  • web/Images/edt.gif
    .gif
  • web/Images/exit.gif
    .gif
  • web/Images/first.gif
    .gif
  • web/Images/go.gif
    .gif
  • web/Images/item.gif
    .gif
  • web/Images/last.gif
    .gif
  • web/Images/login_01.jpg
    .jpg
  • web/Images/login_02.gif
    .gif
  • web/Images/login_05.gif
    .gif
  • web/Images/login_06.gif
    .gif
  • web/Images/login_07.gif
    .gif
  • web/Images/login_08.gif
    .gif
  • web/Images/login_09.gif
    .gif
  • web/Images/login_09_1.gif
    .gif
  • web/Images/login_10.gif
    .gif
  • web/Images/login_10_1.gif
    .gif
  • web/Images/login_11.gif
    .gif
  • web/Images/login_12.gif
    .gif
  • web/Images/main_01.gif
    .gif
  • web/Images/main_02.gif
    .gif
  • web/Images/main_03.gif
    .gif
  • web/Images/main_05.gif
    .gif
  • web/Images/main_06.gif
    .gif
  • web/Images/main_07.gif
    .gif
  • web/Images/main_07_1.gif
    .gif
  • web/Images/main_08.gif
    .gif
  • web/Images/main_08_1.gif
    .gif
  • web/Images/main_09.gif
    .gif
  • web/Images/main_10.gif
    .gif
  • web/Images/main_10_1.gif
    .gif
  • web/Images/main_11.gif
    .gif
  • web/Images/main_11_1.gif
    .gif
  • web/Images/main_12.gif
    .gif
  • web/Images/main_12_1.gif
    .gif
  • web/Images/main_13.gif
    .gif
  • web/Images/main_13_1.gif
    .gif
  • web/Images/main_14.gif
    .gif
  • web/Images/main_14_1.gif
    .gif
  • web/Images/main_15.gif
    .gif
  • web/Images/main_16.gif
    .gif
  • web/Images/main_18.gif
    .gif
  • web/Images/main_24.gif
    .gif
  • web/Images/main_26.gif
    .gif
  • web/Images/main_28.gif
    .gif
  • web/Images/main_29.gif
    .gif
  • web/Images/main_34.gif
    .gif
  • web/Images/main_35.gif
    .gif
  • web/Images/main_37.gif
    .gif
  • web/Images/main_41.gif
    .gif
  • web/Images/main_41_1.gif
    .gif
  • web/Images/main_43.gif
    .gif
  • web/Images/main_45.gif
    .gif
  • web/Images/main_46.gif
    .gif
  • web/Images/main_48.gif
    .gif
  • web/Images/main_50.gif
    .gif
  • web/Images/main_51.gif
    .gif
  • web/Images/next.gif
    .gif
  • web/Images/tab_03.gif
    .gif
  • web/Images/tab_05.gif
    .gif
  • web/Images/tab_07.gif
    .gif
  • web/Images/tab_12.gif
    .gif
  • web/Images/tab_15.gif
    .gif
  • web/Images/tab_17.gif
    .gif
  • web/Images/tab_18.gif
    .gif
  • web/Images/tab_19.gif
    .gif
  • web/Images/tab_20.gif
    .gif
  • web/Images/tb.gif
    .gif
  • web/Images/title1.gif
    .gif
  • web/Images/title2.gif
    .gif
  • web/Images/topbg.gif
    .gif
  • web/Images/tree.gif
    .gif
  • web/Images/treeLine.gif
    .gif
  • web/Images/user.gif
    .gif
  • web/JS.js
    .js
  • web/Left.aspx
    .asp .js polyglot
  • web/Main.aspx
  • web/Out.aspx
  • web/Page.aspx
  • web/Personnel.aspx
  • web/PersonnelCount.aspx
  • web/PersonnelUse.aspx
  • web/PersonnelUseGet.aspx
  • web/PersonnelUse_Add.aspx
  • web/PersonnelUse_Edit.aspx
  • web/Personnel_Add.aspx
  • web/Personnel_AllAdd.aspx
  • web/Personnel_AllDown.aspx
  • web/Personnel_Edit.aspx
  • web/Produce.aspx
  • web/Produce_Add.aspx
  • web/Produce_Edit.aspx
  • web/Sell.aspx
  • web/SellCount.aspx
  • web/Sell_Add.aspx
  • web/Sell_Edit.aspx
  • web/Server.aspx
  • web/Tab.aspx
    .asp
  • web/Top.aspx
    .asp .js polyglot
  • web/Web.config
    .xml
  • web/bin/AspNetPager.XML
    .xml
  • web/bin/AspNetPager.dll
    .dll .js windows:4 windows x86 arch:x86 polyglot

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • web/bin/DBGame.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • web/bin/DBGame.pdb
  • web/bin/en/AspNetPager.resources.dll
    .dll .js windows:4 windows x86 arch:x86 polyglot

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • web/bin/zh-CHT/AspNetPager.resources.dll
    .dll .js windows:4 windows x86 arch:x86 polyglot

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • web/calendar.js
    .js
  • web/calendar2.js
    .js
  • web/新云软件.url
    .url
  • 使用说明.txt