Overview

overview

6

Static

static

6

sample.tar

windows7-x64

3

sample.tar

windows10-2004-x64

3

bleeding-l...ect.js

windows7-x64

3

bleeding-l...ect.js

windows10-2004-x64

3

bleeding-l...i85.js

windows7-x64

3

bleeding-l...i85.js

windows10-2004-x64

3

bleeding-l...p2c.js

windows7-x64

3

bleeding-l...p2c.js

windows10-2004-x64

3

bleeding-l...sql.js

windows7-x64

3

bleeding-l...sql.js

windows10-2004-x64

3

bleeding-l...ors.js

windows7-x64

3

bleeding-l...ors.js

windows10-2004-x64

3

bleeding-l...dex.js

windows7-x64

3

bleeding-l...dex.js

windows10-2004-x64

3

bleeding-l...92.pdf

windows7-x64

3

bleeding-l...92.pdf

windows10-2004-x64

3

bleeding-l...88.pdf

windows7-x64

3

bleeding-l...88.pdf

windows10-2004-x64

3

bleeding-l...88.pdf

windows7-x64

3

bleeding-l...88.pdf

windows10-2004-x64

3

bleeding-l...42.jar

windows7-x64

1

bleeding-l...42.jar

windows10-2004-x64

1

bleeding-l...et.jar

windows7-x64

1

bleeding-l...et.jar

windows10-2004-x64

1

bleeding-l...ics.js

windows7-x64

3

bleeding-l...ics.js

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    df19be9e1d930def74baab341a3a5f08_JaffaCakes118

  • Size

    594KB

  • MD5

    df19be9e1d930def74baab341a3a5f08

  • SHA1

    0ee9f57e1dc99f226adb0287e5e375d5a6d0827b

  • SHA256

    36303b4d6d25064a2ca162802f5dd9c42e121666c9a8518b0f3c3041b3c36994

  • SHA512

    bbbed1a61b3c9d5735fade24bf31d32fab685400f41a152e5097ec6fe1d281e54e9d9416f7ea89837895c079232684acbf1a2ec713739a64013f25bbcba42082

  • SSDEEP

    12288:0tf5pEYB66PS7qHGFUnSGOdkt4CljuqPIH:0B5pEO55GF/yfC4G

Score
6/10
pdfevasion

Malware Config

Signatures

  • Malformed or missing cross-reference table in PDF

    Malformed or missing cross-reference tables are often used to evade detection

    pdfevasion

Files

  • df19be9e1d930def74baab341a3a5f08_JaffaCakes118
    .gz
  • sample
    .tar .js .pdf polyglot
  • bleeding-life-2/add_visitor.php
  • bleeding-life-2/config.php
  • bleeding-life-2/disclaimer.txt
  • bleeding-life-2/download_file.php
  • bleeding-life-2/include/PluginDetect.js
    .js
  • bleeding-life-2/include/ascii85.php
    .js
  • bleeding-life-2/include/browser.php
  • bleeding-life-2/include/getJavaInfo.jar
    .zip
  • A.class
  • bleeding-life-2/include/ip-to-country.bin
  • bleeding-life-2/include/ip2c.php
    .js
  • bleeding-life-2/include/shellcode.php
  • bleeding-life-2/include/sql.php
    .js
  • bleeding-life-2/include/util.php
  • bleeding-life-2/include/visitors.php
    .js
  • bleeding-life-2/index.php
    .js
  • bleeding-life-2/install/index.php
  • bleeding-life-2/load_module.php
  • bleeding-life-2/modules/Adobe-2008-2992.php
    .pdf
  • bleeding-life-2/modules/Adobe-2010-1297.php
    .js .pdf polyglot
  • bleeding-life-2/modules/Adobe-2010-2884.php
    .js .pdf polyglot
  • bleeding-life-2/modules/Adobe-80-2010-0188.php
    .pdf
  • bleeding-life-2/modules/Adobe-90-2010-0188.php
    .pdf
  • bleeding-life-2/modules/Java-2010-0842.php
  • bleeding-life-2/modules/Java-2010-3552.php
  • bleeding-life-2/modules/JavaSignedApplet.php
  • bleeding-life-2/modules/helpers/Adobe-2010-1297.swf
  • bleeding-life-2/modules/helpers/Adobe-2010-2884.swf
  • bleeding-life-2/modules/helpers/Java-2010-0842.jar
    .jar
  • bleeding-life-2/modules/helpers/Java-2010-0842Helper.php
  • bleeding-life-2/modules/helpers/JavaSignedApplet.jar
    .jar
  • bleeding-life-2/statistics/clear.php
  • bleeding-life-2/statistics/css/styles.css
  • bleeding-life-2/statistics/images/clear.png
    .png
  • bleeding-life-2/statistics/images/clear_hover.png
    .png
  • bleeding-life-2/statistics/images/logo.png
    .png
  • bleeding-life-2/statistics/images/logout.png
    .png
  • bleeding-life-2/statistics/images/logout_hover.png
    .png
  • bleeding-life-2/statistics/images/middlebar.png
    .png
  • bleeding-life-2/statistics/images/spacer.png
    .png
  • bleeding-life-2/statistics/images/spacer2.png
    .png
  • bleeding-life-2/statistics/index.php
  • bleeding-life-2/statistics/login.php
  • bleeding-life-2/statistics/logout.php
  • bleeding-life-2/statistics/statistics.php
    .js
  • bleeding-life-2/statistics/update.php