Overview
overview
3Static
static
1api/新云软件.url
windows7-x64
1api/新云软件.url
windows10-2004-x64
1install/im...tor.js
windows7-x64
3install/im...tor.js
windows10-2004-x64
3install/im...gex.js
windows7-x64
3install/im...gex.js
windows10-2004-x64
3install/im...min.js
windows7-x64
3install/im...min.js
windows10-2004-x64
3install/index.html
windows7-x64
3install/index.html
windows10-2004-x64
3install/install.ps1
windows7-x64
3install/install.ps1
windows10-2004-x64
3install/st...l.html
windows7-x64
3install/st...l.html
windows10-2004-x64
3install/st...tpl.js
windows7-x64
3install/st...tpl.js
windows10-2004-x64
3install/st...tpl.js
windows7-x64
3install/st...tpl.js
windows10-2004-x64
3source/lib...ass.js
windows7-x64
3source/lib...ass.js
windows10-2004-x64
3source/lib...ass.js
windows7-x64
3source/lib...ass.js
windows10-2004-x64
3source/lib...ass.js
windows7-x64
3source/lib...ass.js
windows10-2004-x64
3source/lib...ass.js
windows7-x64
3source/lib...ass.js
windows10-2004-x64
3source/lib...ass.js
windows7-x64
3source/lib...ass.js
windows10-2004-x64
3source/lib...unc.js
windows7-x64
3source/lib...unc.js
windows10-2004-x64
3source/mod...ass.js
windows7-x64
3source/mod...ass.js
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
api/新云软件.url
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
api/新云软件.url
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
install/images/formvalidator.js
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
install/images/formvalidator.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
install/images/formvalidatorregex.js
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
install/images/formvalidatorregex.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
install/images/jquery.min.js
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
install/images/jquery.min.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
install/index.html
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
install/index.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
install/install.ps1
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
install/install.ps1
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
install/step/header.tpl.html
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
install/step/header.tpl.html
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
install/step/step3.tpl.js
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
install/step/step3.tpl.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
install/step/step4.tpl.js
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
install/step/step4.tpl.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
source/libs/classes/http.class.js
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
source/libs/classes/http.class.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
source/libs/classes/session_mysql.class.js
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
source/libs/classes/session_mysql.class.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
source/libs/classes/sms.class.js
Resource
win7-20240729-en
Behavioral task
behavioral24
Sample
source/libs/classes/sms.class.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
source/libs/classes/tree.class.js
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
source/libs/classes/tree.class.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
source/libs/classes/xml.class.js
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
source/libs/classes/xml.class.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
source/libs/functions/global.func.js
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
source/libs/functions/global.func.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
source/modules/admin/classes/mobilelist.class.js
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
source/modules/admin/classes/mobilelist.class.js
Resource
win10v2004-20240802-en
General
-
Target
d9b8a4d6e03573e2ab3edb5cd36e4388_JaffaCakes118
-
Size
596KB
-
MD5
d9b8a4d6e03573e2ab3edb5cd36e4388
-
SHA1
247a67a59d99c0ddd2da1136a5a32e3d2ebbb833
-
SHA256
f873807b5266cd321bc668c6acbd53a379a11ea84410d5ccbd44f64b3df800de
-
SHA512
c556908c9bb3cb5a5a16fb23284bbbe6f89fe272d09310e0e780ace24053df5dd64707ec64580b4bc854beae7d740ad0df1667ab2250b59889c491800304d8ce
-
SSDEEP
12288:yAD2jnG4InkwyW/dcu74DljE4wHkccdsuuqTdiabA2o2lO/3BYrCuTMOKH6K:yYkwyW/dN74eHkccdskdiabE2lO/BYra
Malware Config
Signatures
Files
-
d9b8a4d6e03573e2ab3edb5cd36e4388_JaffaCakes118.rar
-
admin.php
-
api.php
-
api/checkcode.php
-
api/新云软件.url.url
-
caches/caches_admin/caches_data/settings.cache.php
-
caches/caches_sms/data/xtcms_mobile_1295255448.txt
-
caches/caches_sms/data/xtcms_mobile_1295255454.txt
-
configs/database.php
-
configs/route.php
-
configs/system.php
-
index.php
-
install/chmod.txt
-
install/css/install.css
-
install/images/correct.png.png
-
install/images/error.png.png
-
install/images/formvalidator.js.js
-
install/images/formvalidatorregex.js.js
-
install/images/gth.gif.gif
-
install/images/help.png.png
-
install/images/i_body_bg.jpg.jpg
-
install/images/i_bodyb_bg.jpg.jpg
-
install/images/i_c_bbg.gif.gif
-
install/images/i_c_icon.jpg.jpg
-
install/images/i_c_tbg.gif.gif
-
install/images/i_index.gif.gif
-
install/images/i_loadin.jpg.jpg
-
install/images/i_mng.gif.gif
-
install/images/i_t_btn.jpg.jpg
-
install/images/is_c_icon.jpg.jpg
-
install/images/is_hd_bg.jpg.jpg
-
install/images/is_loadin.jpg.jpg
-
install/images/jj_bg.jpg.jpg
-
install/images/jquery.min.js.js
-
install/index.html.html
-
install/install.php.ps1
-
install/license.txt
-
install/main/xtcms_db.sql
-
install/step.inc.php
-
install/step/header.tpl.php.html
-
install/step/step1.tpl.php
-
install/step/step2.tpl.php
-
install/step/step3.tpl.php.js
-
install/step/step4.tpl.php.js
-
install/step/step5.tpl.php
-
source/base.php
-
source/languages/zh-cn/admin.lang.php
-
source/languages/zh-cn/system.lang.php
-
source/languages/zh-cn/system_menu.lang.php
-
source/libs/classes/application.class.php
-
source/libs/classes/cache_factory.class.php
-
source/libs/classes/cache_file.class.php
-
source/libs/classes/cache_memcache.class.php
-
source/libs/classes/checkcode.class.php
-
source/libs/classes/db_factory.class.php
-
source/libs/classes/form.class.php
-
source/libs/classes/format.class.php
-
source/libs/classes/http.class.php.js
-
source/libs/classes/model.class.php
-
source/libs/classes/mysql.class.php
-
source/libs/classes/param.class.php
-
source/libs/classes/session_mysql.class.php.js
-
source/libs/classes/sms.class.php.js
-
source/libs/classes/template_cache.class.php
-
source/libs/classes/tree.class.php.js
-
source/libs/classes/xml.class.php.js
-
source/libs/data/font/elephant.ttf
-
source/libs/data/ipdata/mini.Dat
-
source/libs/functions/dir.func.php
-
source/libs/functions/global.func.php.js
-
source/libs/functions/iconv.func.php
-
source/model/admin_model.class.php
-
source/model/cache_model.class.php
-
source/model/session_model.class.php
-
source/model/settings_model.class.php
-
source/model/sms_model.class.php
-
source/model/times_model.class.php
-
source/modules/admin/administrator.php
-
source/modules/admin/cache.php
-
source/modules/admin/classes/admin.class.php
-
source/modules/admin/classes/mobilelist.class.php.js
-
source/modules/admin/classes/send.class.php.js
-
source/modules/admin/functions/global.func.php
-
source/modules/admin/index.php
-
source/modules/admin/login.php
-
source/modules/admin/mobile.php
-
source/modules/admin/password.php
-
source/modules/admin/send_sms.php
-
source/modules/admin/sms_admin.php
-
source/modules/admin/sms_log.php
-
source/modules/admin/system.php
-
source/modules/admin/templates/administrator_add.tpl.php.js
-
source/modules/admin/templates/administrator_edit.tpl.php.js
-
source/modules/admin/templates/administrator_list.tpl.php
-
source/modules/admin/templates/cache.tpl.php
-
source/modules/admin/templates/header.tpl.php.js
-
source/modules/admin/templates/index.tpl.php.js
-
source/modules/admin/templates/login.tpl.php.js
-
source/modules/admin/templates/mobile_import.tpl.php
-
source/modules/admin/templates/mobile_list.tpl.php.js
-
source/modules/admin/templates/password.tpl.php.js
-
source/modules/admin/templates/right.tpl.php
-
source/modules/admin/templates/setting.tpl.php
-
source/modules/admin/templates/showmessage.tpl.php.js
-
source/modules/admin/templates/sms_log.tpl.php.js
-
source/modules/admin/templates/sms_search_list.tpl.php.js
-
source/modules/admin/templates/sms_send.tpl.php.js
-
source/modules/admin/templates/system.tpl.php.js
-
statics/css/dialog.css
-
statics/css/login.css
-
statics/css/reset.css
-
statics/css/style.css
-
statics/css/system.css
-
statics/css/table_form.css
-
statics/images/admin_img/input.png.png
-
statics/images/admin_img/input_date.png.png
-
statics/images/admin_img/input_focus.png.png
-
statics/images/admin_img/question-balloon.png.png
-
statics/images/admin_img/x_bg.png.png
-
statics/images/bnt_bg.png.png
-
statics/images/fav-nav-bg.png.png
-
statics/images/guanli_center.gif.gif
-
statics/images/h_bg.gif.gif
-
statics/images/icon_use.png.png
-
statics/images/input.png.png
-
statics/images/left_bg.png.png
-
statics/images/left_menu.png.png
-
statics/images/left_menu_openClose.png.png
-
statics/images/login_box_bot.gif.gif
-
statics/images/login_box_mid.gif.gif
-
statics/images/login_box_top.gif.gif
-
statics/images/login_button.gif.gif
-
statics/images/login_input.gif.gif
-
statics/images/login_logo.gif.gif
-
statics/images/logo.gif.gif
-
statics/images/logo_1.gif.gif
-
statics/images/msg_bg.png.png
-
statics/images/msg_img/border.png.png
-
statics/images/msg_img/btns.png.png
-
statics/images/msg_img/chrome_s.png.png
-
statics/images/msg_img/chrome_s_1.png.png
-
statics/images/msg_img/icons.png.png
-
statics/images/msg_img/loading.gif.gif
-
statics/images/msg_img/msg.png.png
-
statics/images/msg_img/msg_bg.png.png
-
statics/images/pages.png.png
-
statics/images/spacer.gif.gif
-
statics/images/x_bg.png.png
-
statics/js/add.js.js
-
statics/js/admin_common.js.js
-
statics/js/calendar/calendar-blue.css
-
statics/js/calendar/calendar.js.js
-
statics/js/colorpicker.js.js
-
statics/js/content_addtop.js.js
-
statics/js/formvalidator.js.js
-
statics/js/formvalidatorregex.js.js
-
statics/js/index.js.js
-
statics/js/jquery.min.js.js
-
statics/js/swfobject.js.js
-
templates/default/add.html
-
templates/default/footer.html
-
templates/default/header.html.html .js polyglot
-
templates/default/index.html
-
templates/default/js.html.js
-
templates/default/list.html
-
templates/default/message.html.html .js polyglot