Overview
overview
7Static
static
7clients.js
windows7-x64
3clients.js
windows10-2004-x64
3css/PIE.js
windows7-x64
3css/PIE.js
windows10-2004-x64
3home.js
windows7-x64
3home.js
windows10-2004-x64
3inc/stayontop.js
windows7-x64
3inc/stayontop.js
windows10-2004-x64
3js/colapse.js
windows7-x64
3js/colapse.js
windows10-2004-x64
3js/gscript.js
windows7-x64
3js/gscript.js
windows10-2004-x64
3js/init.js
windows7-x64
3js/init.js
windows10-2004-x64
3js/jquery.packed.js
windows7-x64
3js/jquery.packed.js
windows10-2004-x64
3js/placeholder.js
windows7-x64
3js/placeholder.js
windows10-2004-x64
3js/popup.js
windows7-x64
3js/popup.js
windows10-2004-x64
3js/prefixfree.min.js
windows7-x64
3js/prefixfree.min.js
windows10-2004-x64
3js/skel.min.js
windows7-x64
3js/skel.min.js
windows10-2004-x64
3js/thickbox.packed.js
windows7-x64
3js/thickbox.packed.js
windows10-2004-x64
3plugins/POS.exe
windows7-x64
7plugins/POS.exe
windows10-2004-x64
7reports.js
windows7-x64
3reports.js
windows10-2004-x64
3statistics.js
windows7-x64
3statistics.js
windows10-2004-x64
3Behavioral task
behavioral1
Sample
clients.js
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
clients.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
css/PIE.js
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
css/PIE.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
home.js
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
home.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
inc/stayontop.js
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
inc/stayontop.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
js/colapse.js
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
js/colapse.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
js/gscript.js
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
js/gscript.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
js/init.js
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
js/init.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
js/jquery.packed.js
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
js/jquery.packed.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
js/placeholder.js
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
js/placeholder.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
js/popup.js
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
js/popup.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
js/prefixfree.min.js
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
js/prefixfree.min.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
js/skel.min.js
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
js/skel.min.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
js/thickbox.packed.js
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
js/thickbox.packed.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
plugins/POS.exe
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
plugins/POS.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
reports.js
Resource
win7-20240704-en
Behavioral task
behavioral30
Sample
reports.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
statistics.js
Resource
win7-20240708-en
Behavioral task
behavioral32
Sample
statistics.js
Resource
win10v2004-20240802-en
General
-
Target
e07e8b8e43761c089bb7deffba9820ef_JaffaCakes118
-
Size
2.2MB
-
MD5
e07e8b8e43761c089bb7deffba9820ef
-
SHA1
1bba6b063e34c98bedd545187b2fbb8bde4a3459
-
SHA256
845d1840934026cdf592dec5b31210dc9296203f9655111b6697cc115316b40e
-
SHA512
ffd620e6ef1880e451aa4f871035d6d365de1cbd031607ca15f861033b44869107332a93a0c5ed2a6ea8bda1ffad7ebcf4e81440c5d5b5558f22e6ef51fdb8d9
-
SSDEEP
49152:3vzCpQcrsA5E+Xq1Spuf9pd2ai7HKmMvckFeBYnJHVBDYbvbub5FTQ+7WzHRC9WO:LMQc41+617lpd2aEHEvcBCxVBDADaD99
Malware Config
Signatures
-
resource yara_rule static1/unpack001/plugins/POS.p upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/plugins/POS.p
Files
-
e07e8b8e43761c089bb7deffba9820ef_JaffaCakes118.rar
-
ajax.php
-
clients.php.js
-
css/PIE.htc.js
-
css/button.css
-
css/dwn.css
-
css/font/FontAwesome.otf
-
css/font/fontawesome-webfont.eot
-
css/font/fontawesome-webfont.svg.xml
-
css/font/fontawesome-webfont.ttf
-
css/font/fontawesome-webfont.woff
-
css/gallery.css
-
css/home.css
-
css/images/bg.png.png
-
css/images/hover-bebc66.gif.gif
-
css/images/hover_sub-eb2b0d.gif.gif
-
css/images/overlay.png.png
-
css/images/seperator-bebc53.gif.gif
-
css/images/toggle.svg
-
css/log.css
-
css/menu.css
-
css/sbody.css
-
css/style-ins.css
-
css/style-login.css
-
css/style-wide.css
-
css/style.css
-
css/stylex.css
-
css/top-menu.css
-
dwn.php
-
gate.php
-
home.php.js
-
img/Document.png.png
-
img/avatar.jpg.jpg
-
img/banners/kartoxa1.png.png
-
img/banners/kartoxa2.png.png
-
img/banners/kartoxa3.png.png
-
img/banners/kartoxa4.png.png
-
img/banners/kartoxa5.png.png
-
img/banners/kartoxa6.png.png
-
img/banners/kartoxa7.png.png
-
img/bg.png.png
-
img/card.png.png
-
img/delete-icon.png.png
-
img/error.gif.gif
-
img/favicon.ico
-
img/flags/.DS_Store
-
img/flags/ad.gif.gif
-
img/flags/ae.gif.gif
-
img/flags/af.gif.gif
-
img/flags/ag.gif.gif
-
img/flags/ai.gif.gif
-
img/flags/al.gif.gif
-
img/flags/am.gif.gif
-
img/flags/an.gif.gif
-
img/flags/ao.gif.gif
-
img/flags/ar.gif.gif
-
img/flags/as.gif.gif
-
img/flags/at.gif.gif
-
img/flags/au.gif.gif
-
img/flags/aw.gif.gif
-
img/flags/ax.gif.gif
-
img/flags/az.gif.gif
-
img/flags/ba.gif.gif
-
img/flags/bb.gif.gif
-
img/flags/bd.gif.gif
-
img/flags/be.gif.gif
-
img/flags/bf.gif.gif
-
img/flags/bg.gif.gif
-
img/flags/bh.gif.gif
-
img/flags/bi.gif.gif
-
img/flags/bj.gif.gif
-
img/flags/bm.gif.gif
-
img/flags/bn.gif.gif
-
img/flags/bo.gif.gif
-
img/flags/br.gif.gif
-
img/flags/bs.gif.gif
-
img/flags/bt.gif.gif
-
img/flags/bv.gif.gif
-
img/flags/bw.gif.gif
-
img/flags/by.gif.gif
-
img/flags/bz.gif.gif
-
img/flags/ca.gif.gif
-
img/flags/catalonia.gif.gif
-
img/flags/cc.gif.gif
-
img/flags/cd.gif.gif
-
img/flags/cf.gif.gif
-
img/flags/cg.gif.gif
-
img/flags/ch.gif.gif
-
img/flags/ci.gif.gif
-
img/flags/ck.gif.gif
-
img/flags/cl.gif.gif
-
img/flags/cm.gif.gif
-
img/flags/cn.gif.gif
-
img/flags/co.gif.gif
-
img/flags/cr.gif.gif
-
img/flags/cs.gif.gif
-
img/flags/cu.gif.gif
-
img/flags/cv.gif.gif
-
img/flags/cx.gif.gif
-
img/flags/cy.gif.gif
-
img/flags/cz.gif.gif
-
img/flags/de.gif.gif
-
img/flags/dj.gif.gif
-
img/flags/dk.gif.gif
-
img/flags/dm.gif.gif
-
img/flags/do.gif.gif
-
img/flags/dz.gif.gif
-
img/flags/ec.gif.gif
-
img/flags/ee.gif.gif
-
img/flags/eg.gif.gif
-
img/flags/eh.gif.gif
-
img/flags/england.gif.gif
-
img/flags/er.gif.gif
-
img/flags/es.gif.gif
-
img/flags/et.gif.gif
-
img/flags/europeanunion.gif.gif
-
img/flags/fam.gif.gif
-
img/flags/fi.gif.gif
-
img/flags/fj.gif.gif
-
img/flags/fk.gif.gif
-
img/flags/fm.gif.gif
-
img/flags/fo.gif.gif
-
img/flags/fr.gif.gif
-
img/flags/ga.gif.gif
-
img/flags/gb.gif.gif
-
img/flags/gd.gif.gif
-
img/flags/ge.gif.gif
-
img/flags/gf.gif.gif
-
img/flags/gh.gif.gif
-
img/flags/gi.gif.gif
-
img/flags/gl.gif.gif
-
img/flags/gm.gif.gif
-
img/flags/gn.gif.gif
-
img/flags/gp.gif.gif
-
img/flags/gq.gif.gif
-
img/flags/gr.gif.gif
-
img/flags/gs.gif.gif
-
img/flags/gt.gif.gif
-
img/flags/gu.gif.gif
-
img/flags/gw.gif.gif
-
img/flags/gy.gif.gif
-
img/flags/hk.gif.gif
-
img/flags/hm.gif.gif
-
img/flags/hn.gif.gif
-
img/flags/hr.gif.gif
-
img/flags/ht.gif.gif
-
img/flags/hu.gif.gif
-
img/flags/id.gif.gif
-
img/flags/ie.gif.gif
-
img/flags/il.gif.gif
-
img/flags/in.gif.gif
-
img/flags/io.gif.gif
-
img/flags/iq.gif.gif
-
img/flags/ir.gif.gif
-
img/flags/is.gif.gif
-
img/flags/it.gif.gif
-
img/flags/jm.gif.gif
-
img/flags/jo.gif.gif
-
img/flags/jp.gif.gif
-
img/flags/ke.gif.gif
-
img/flags/kg.gif.gif
-
img/flags/kh.gif.gif
-
img/flags/ki.gif.gif
-
img/flags/km.gif.gif
-
img/flags/kn.gif.gif
-
img/flags/kp.gif.gif
-
img/flags/kr.gif.gif
-
img/flags/kw.gif.gif
-
img/flags/ky.gif.gif
-
img/flags/kz.gif.gif
-
img/flags/la.gif.gif
-
img/flags/lb.gif.gif
-
img/flags/lc.gif.gif
-
img/flags/li.gif.gif
-
img/flags/lk.gif.gif
-
img/flags/lr.gif.gif
-
img/flags/ls.gif.gif
-
img/flags/lt.gif.gif
-
img/flags/lu.gif.gif
-
img/flags/lv.gif.gif
-
img/flags/ly.gif.gif
-
img/flags/ma.gif.gif
-
img/flags/mc.gif.gif
-
img/flags/md.gif.gif
-
img/flags/me.gif.gif
-
img/flags/mg.gif.gif
-
img/flags/mh.gif.gif
-
img/flags/mk.gif.gif
-
img/flags/ml.gif.gif
-
img/flags/mm.gif.gif
-
img/flags/mn.gif.gif
-
img/flags/mo.gif.gif
-
img/flags/mp.gif.gif
-
img/flags/mq.gif.gif
-
img/flags/mr.gif.gif
-
img/flags/ms.gif.gif
-
img/flags/mt.gif.gif
-
img/flags/mu.gif.gif
-
img/flags/mv.gif.gif
-
img/flags/mw.gif.gif
-
img/flags/mx.gif.gif
-
img/flags/my.gif.gif
-
img/flags/mz.gif.gif
-
img/flags/na.gif.gif
-
img/flags/nc.gif.gif
-
img/flags/ne.gif.gif
-
img/flags/nf.gif.gif
-
img/flags/ng.gif.gif
-
img/flags/ni.gif.gif
-
img/flags/nl.gif.gif
-
img/flags/no.gif.gif
-
img/flags/noflag.gif.gif
-
img/flags/np.gif.gif
-
img/flags/nr.gif.gif
-
img/flags/nu.gif.gif
-
img/flags/nz.gif.gif
-
img/flags/om.gif.gif
-
img/flags/pa.gif.gif
-
img/flags/pe.gif.gif
-
img/flags/pf.gif.gif
-
img/flags/pg.gif.gif
-
img/flags/ph.gif.gif
-
img/flags/pk.gif.gif
-
img/flags/pl.gif.gif
-
img/flags/pm.gif.gif
-
img/flags/pn.gif.gif
-
img/flags/pr.gif.gif
-
img/flags/ps.gif.gif
-
img/flags/pt.gif.gif
-
img/flags/pw.gif.gif
-
img/flags/py.gif.gif
-
img/flags/qa.gif.gif
-
img/flags/re.gif.gif
-
img/flags/ro.gif.gif
-
img/flags/rs.gif.gif
-
img/flags/ru.gif.gif
-
img/flags/rw.gif.gif
-
img/flags/sa.gif.gif
-
img/flags/sb.gif.gif
-
img/flags/sc.gif.gif
-
img/flags/scotland.gif.gif
-
img/flags/sd.gif.gif
-
img/flags/se.gif.gif
-
img/flags/sg.gif.gif
-
img/flags/sh.gif.gif
-
img/flags/si.gif.gif
-
img/flags/sj.gif.gif
-
img/flags/sk.gif.gif
-
img/flags/sl.gif.gif
-
img/flags/sm.gif.gif
-
img/flags/sn.gif.gif
-
img/flags/so.gif.gif
-
img/flags/sr.gif.gif
-
img/flags/st.gif.gif
-
img/flags/sv.gif.gif
-
img/flags/sy.gif.gif
-
img/flags/sz.gif.gif
-
img/flags/tc.gif.gif
-
img/flags/td.gif.gif
-
img/flags/tf.gif.gif
-
img/flags/tg.gif.gif
-
img/flags/th.gif.gif
-
img/flags/tj.gif.gif
-
img/flags/tk.gif.gif
-
img/flags/tl.gif.gif
-
img/flags/tm.gif.gif
-
img/flags/tn.gif.gif
-
img/flags/to.gif.gif
-
img/flags/tr.gif.gif
-
img/flags/tt.gif.gif
-
img/flags/tv.gif.gif
-
img/flags/tw.gif.gif
-
img/flags/tz.gif.gif
-
img/flags/ua.gif.gif
-
img/flags/ug.gif.gif
-
img/flags/um.gif.gif
-
img/flags/us.gif.gif
-
img/flags/uy.gif.gif
-
img/flags/uz.gif.gif
-
img/flags/va.gif.gif
-
img/flags/vc.gif.gif
-
img/flags/ve.gif.gif
-
img/flags/vg.gif.gif
-
img/flags/vi.gif.gif
-
img/flags/vn.gif.gif
-
img/flags/vu.gif.gif
-
img/flags/wales.gif.gif
-
img/flags/wf.gif.gif
-
img/flags/ws.gif.gif
-
img/flags/ye.gif.gif
-
img/flags/yt.gif.gif
-
img/flags/za.gif.gif
-
img/flags/zm.gif.gif
-
img/flags/zw.gif.gif
-
img/ftp.png.png
-
img/info.png.png
-
img/logo.png.png
-
img/mail.png.png
-
img/messaging.png.png
-
img/off.ico
-
img/on.ico
-
img/passwords.png.png
-
img/rdp.png.png
-
img/save-icon.png.png
-
img/task.png.png
-
img/title.png.png
-
inc/alert.php
-
inc/blacklist.php
-
inc/counts.php
-
inc/cron.php
-
inc/exec.php
-
inc/full_info.php
-
inc/functions.php
-
inc/gallery.php
-
inc/host.php
-
inc/html_footer.php
-
inc/html_grund.php
-
inc/html_menu.php
-
inc/index.php
-
inc/ip_files/0.php
-
inc/ip_files/1.php
-
inc/ip_files/10.php
-
inc/ip_files/100.php
-
inc/ip_files/101.php
-
inc/ip_files/102.php
-
inc/ip_files/103.php
-
inc/ip_files/104.php
-
inc/ip_files/105.php
-
inc/ip_files/106.php
-
inc/ip_files/107.php
-
inc/ip_files/108.php
-
inc/ip_files/109.php
-
inc/ip_files/11.php
-
inc/ip_files/110.php
-
inc/ip_files/111.php
-
inc/ip_files/112.php
-
inc/ip_files/113.php
-
inc/ip_files/114.php
-
inc/ip_files/115.php
-
inc/ip_files/116.php
-
inc/ip_files/117.php
-
inc/ip_files/118.php
-
inc/ip_files/119.php
-
inc/ip_files/12.php
-
inc/ip_files/120.php
-
inc/ip_files/121.php
-
inc/ip_files/122.php
-
inc/ip_files/123.php
-
inc/ip_files/124.php
-
inc/ip_files/125.php
-
inc/ip_files/126.php
-
inc/ip_files/127.php
-
inc/ip_files/128.php
-
inc/ip_files/129.php
-
inc/ip_files/13.php
-
inc/ip_files/130.php
-
inc/ip_files/131.php
-
inc/ip_files/132.php
-
inc/ip_files/133.php
-
inc/ip_files/134.php
-
inc/ip_files/135.php
-
inc/ip_files/136.php
-
inc/ip_files/137.php
-
inc/ip_files/138.php
-
inc/ip_files/139.php
-
inc/ip_files/14.php
-
inc/ip_files/140.php
-
inc/ip_files/141.php
-
inc/ip_files/142.php
-
inc/ip_files/143.php
-
inc/ip_files/144.php
-
inc/ip_files/145.php
-
inc/ip_files/146.php
-
inc/ip_files/147.php
-
inc/ip_files/148.php
-
inc/ip_files/149.php
-
inc/ip_files/15.php
-
inc/ip_files/150.php
-
inc/ip_files/151.php
-
inc/ip_files/152.php
-
inc/ip_files/153.php
-
inc/ip_files/154.php
-
inc/ip_files/155.php
-
inc/ip_files/156.php
-
inc/ip_files/157.php
-
inc/ip_files/158.php
-
inc/ip_files/159.php
-
inc/ip_files/16.php
-
inc/ip_files/160.php
-
inc/ip_files/161.php
-
inc/ip_files/162.php
-
inc/ip_files/163.php
-
inc/ip_files/164.php
-
inc/ip_files/165.php
-
inc/ip_files/166.php
-
inc/ip_files/167.php
-
inc/ip_files/168.php
-
inc/ip_files/169.php
-
inc/ip_files/17.php
-
inc/ip_files/170.php
-
inc/ip_files/171.php
-
inc/ip_files/172.php
-
inc/ip_files/173.php
-
inc/ip_files/174.php
-
inc/ip_files/175.php
-
inc/ip_files/176.php
-
inc/ip_files/177.php
-
inc/ip_files/178.php
-
inc/ip_files/179.php
-
inc/ip_files/18.php
-
inc/ip_files/180.php
-
inc/ip_files/181.php
-
inc/ip_files/182.php
-
inc/ip_files/183.php
-
inc/ip_files/184.php
-
inc/ip_files/185.php
-
inc/ip_files/186.php
-
inc/ip_files/187.php
-
inc/ip_files/188.php
-
inc/ip_files/189.php
-
inc/ip_files/19.php
-
inc/ip_files/190.php
-
inc/ip_files/191.php
-
inc/ip_files/192.php
-
inc/ip_files/193.php
-
inc/ip_files/194.php
-
inc/ip_files/195.php
-
inc/ip_files/196.php
-
inc/ip_files/197.php
-
inc/ip_files/198.php
-
inc/ip_files/199.php
-
inc/ip_files/2.php
-
inc/ip_files/20.php
-
inc/ip_files/200.php
-
inc/ip_files/201.php
-
inc/ip_files/202.php
-
inc/ip_files/203.php
-
inc/ip_files/204.php
-
inc/ip_files/205.php
-
inc/ip_files/206.php
-
inc/ip_files/207.php
-
inc/ip_files/208.php
-
inc/ip_files/209.php
-
inc/ip_files/21.php
-
inc/ip_files/210.php
-
inc/ip_files/211.php
-
inc/ip_files/212.php
-
inc/ip_files/213.php
-
inc/ip_files/214.php
-
inc/ip_files/215.php
-
inc/ip_files/216.php
-
inc/ip_files/217.php
-
inc/ip_files/218.php
-
inc/ip_files/219.php
-
inc/ip_files/22.php
-
inc/ip_files/220.php
-
inc/ip_files/221.php
-
inc/ip_files/222.php
-
inc/ip_files/223.php
-
inc/ip_files/224.php
-
inc/ip_files/225.php
-
inc/ip_files/226.php
-
inc/ip_files/227.php
-
inc/ip_files/228.php
-
inc/ip_files/229.php
-
inc/ip_files/23.php
-
inc/ip_files/230.php
-
inc/ip_files/231.php
-
inc/ip_files/232.php
-
inc/ip_files/233.php
-
inc/ip_files/234.php
-
inc/ip_files/235.php
-
inc/ip_files/236.php
-
inc/ip_files/237.php
-
inc/ip_files/238.php
-
inc/ip_files/239.php
-
inc/ip_files/24.php
-
inc/ip_files/240.php
-
inc/ip_files/241.php
-
inc/ip_files/242.php
-
inc/ip_files/243.php
-
inc/ip_files/244.php
-
inc/ip_files/245.php
-
inc/ip_files/246.php
-
inc/ip_files/247.php
-
inc/ip_files/248.php
-
inc/ip_files/249.php
-
inc/ip_files/25.php
-
inc/ip_files/250.php
-
inc/ip_files/251.php
-
inc/ip_files/252.php
-
inc/ip_files/253.php
-
inc/ip_files/254.php
-
inc/ip_files/255.php
-
inc/ip_files/26.php
-
inc/ip_files/27.php
-
inc/ip_files/28.php
-
inc/ip_files/29.php
-
inc/ip_files/3.php
-
inc/ip_files/30.php
-
inc/ip_files/31.php
-
inc/ip_files/32.php
-
inc/ip_files/33.php
-
inc/ip_files/34.php
-
inc/ip_files/35.php
-
inc/ip_files/36.php
-
inc/ip_files/37.php
-
inc/ip_files/38.php
-
inc/ip_files/39.php
-
inc/ip_files/4.php
-
inc/ip_files/40.php
-
inc/ip_files/41.php
-
inc/ip_files/42.php
-
inc/ip_files/43.php
-
inc/ip_files/44.php
-
inc/ip_files/45.php
-
inc/ip_files/46.php
-
inc/ip_files/47.php
-
inc/ip_files/48.php
-
inc/ip_files/49.php
-
inc/ip_files/5.php
-
inc/ip_files/50.php
-
inc/ip_files/51.php
-
inc/ip_files/52.php
-
inc/ip_files/53.php
-
inc/ip_files/54.php
-
inc/ip_files/55.php
-
inc/ip_files/56.php
-
inc/ip_files/57.php
-
inc/ip_files/58.php
-
inc/ip_files/59.php
-
inc/ip_files/6.php
-
inc/ip_files/60.php
-
inc/ip_files/61.php
-
inc/ip_files/62.php
-
inc/ip_files/63.php
-
inc/ip_files/64.php
-
inc/ip_files/65.php
-
inc/ip_files/66.php
-
inc/ip_files/67.php
-
inc/ip_files/68.php
-
inc/ip_files/69.php
-
inc/ip_files/7.php
-
inc/ip_files/70.php
-
inc/ip_files/71.php
-
inc/ip_files/72.php
-
inc/ip_files/73.php
-
inc/ip_files/74.php
-
inc/ip_files/75.php
-
inc/ip_files/76.php
-
inc/ip_files/77.php
-
inc/ip_files/78.php
-
inc/ip_files/79.php
-
inc/ip_files/8.php
-
inc/ip_files/80.php
-
inc/ip_files/81.php
-
inc/ip_files/82.php
-
inc/ip_files/83.php
-
inc/ip_files/84.php
-
inc/ip_files/85.php
-
inc/ip_files/86.php
-
inc/ip_files/87.php
-
inc/ip_files/88.php
-
inc/ip_files/89.php
-
inc/ip_files/9.php
-
inc/ip_files/90.php
-
inc/ip_files/91.php
-
inc/ip_files/92.php
-
inc/ip_files/93.php
-
inc/ip_files/94.php
-
inc/ip_files/95.php
-
inc/ip_files/96.php
-
inc/ip_files/97.php
-
inc/ip_files/98.php
-
inc/ip_files/99.php
-
inc/ip_files/countries.php
-
inc/logs.php
-
inc/reports.php
-
inc/session.php
-
inc/spm.php
-
inc/stayontop.js.js
-
index.php
-
install.php
-
js/colapse.js
-
js/gscript.js.js
-
js/init.js.js
-
js/jquery.packed.js.js
-
js/placeholder.js.js
-
js/popup.js
-
js/prefixfree.min.js.js
-
js/skel.min.js.js
-
js/thickbox.packed.js.js
-
plugins/POS.p.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 77KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
plugins/ddos.p
-
plugins/ftp.p
-
plugins/homepage.p
-
plugins/ins.p
-
plugins/keylogger.p
-
plugins/mail.p
-
plugins/passwords.p
-
plugins/proc.p
-
plugins/rdp.p
-
plugins/screenshot.p
-
plugins/social.p
-
plugins/spam.p
-
post.php
-
reports.php.js
-
statistics.php.js
-
tasks.php.js