Overview
overview
3Static
static
1091_cc_lad...ex.asp
windows7-x64
3091_cc_lad...ex.asp
windows10-2004-x64
3091_cc_lad...nn.vbs
windows7-x64
1091_cc_lad...nn.vbs
windows10-2004-x64
1091_cc_lad...ds.asp
windows7-x64
3091_cc_lad...ds.asp
windows10-2004-x64
3091_cc_lad...ig.vbs
windows7-x64
1091_cc_lad...ig.vbs
windows10-2004-x64
1091_cc_lad...ex.asp
windows7-x64
3091_cc_lad...ex.asp
windows10-2004-x64
3091_cc_lad...nk.asp
windows7-x64
3091_cc_lad...nk.asp
windows10-2004-x64
3091_cc_lad...er.asp
windows7-x64
3091_cc_lad...er.asp
windows10-2004-x64
3091_cc_lad...ck.vbs
windows7-x64
1091_cc_lad...ck.vbs
windows10-2004-x64
1091_cc_lad...ut.asp
windows7-x64
3091_cc_lad...ut.asp
windows10-2004-x64
3091_cc_lad...ds.asp
windows7-x64
3091_cc_lad...ds.asp
windows10-2004-x64
3091_cc_lad...og.asp
windows7-x64
3091_cc_lad...og.asp
windows10-2004-x64
3091_cc_lad...sm.asp
windows7-x64
3091_cc_lad...sm.asp
windows10-2004-x64
3091_cc_lad...ss.asp
windows7-x64
3091_cc_lad...ss.asp
windows10-2004-x64
3091_cc_lad...wu.asp
windows7-x64
3091_cc_lad...wu.asp
windows10-2004-x64
3091_cc_lad...lc.asp
windows7-x64
3091_cc_lad...lc.asp
windows10-2004-x64
3091_cc_lad...lc.asp
windows7-x64
3091_cc_lad...lc.asp
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
091_cc_lady2011_free_v4.3.6/album_list/index.asp
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
091_cc_lady2011_free_v4.3.6/album_list/index.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/Conn.vbs
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/Conn.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/admin_ads.asp
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/admin_ads.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/admin_config.vbs
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/admin_config.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/admin_index.asp
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/admin_index.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/admin_link.asp
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/admin_link.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/admin_webmaster.asp
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/admin_webmaster.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/check.vbs
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/check.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_about.asp
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_about.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_ads.asp
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_ads.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_blog.asp
Resource
win7-20240729-en
Behavioral task
behavioral22
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_blog.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_bqsm.asp
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_bqsm.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_class.asp
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_class.asp
Resource
win10v2004-20240910-en
Behavioral task
behavioral27
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_fuwu.asp
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_fuwu.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_fzlc.asp
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_fzlc.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_gmlc.asp
Resource
win7-20240729-en
Behavioral task
behavioral32
Sample
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_gmlc.asp
Resource
win10v2004-20240802-en
General
-
Target
eacbf11102314807176d6fbb246faef7_JaffaCakes118
-
Size
217KB
-
MD5
eacbf11102314807176d6fbb246faef7
-
SHA1
ea7c9afb38c434be9132a8d113d46398686d3b90
-
SHA256
176aa163ee317ab39a613117b7d66a391e6d56af9e92697cd01a486c2261a27f
-
SHA512
015f7bcf8312e4ffb6af90694d0a630750338a474ccb1325a079ead0998e7d0d66e65d5af1d397defd4b722dc34e61463f665bc68293b7b286f01f01ccb00749
-
SSDEEP
6144:HZD9+L+OxnvGyJqeO80aINdXCzQlIMGueZe1g4:HV9+LvnuyJqxd6Qm5V8O4
Malware Config
Signatures
Files
-
eacbf11102314807176d6fbb246faef7_JaffaCakes118.rar
-
091_cc_lady2011_free_v4.3.6/album_list/index.asp.asp
-
091_cc_lady2011_free_v4.3.6/cfss_admin/Conn.asp.vbs
-
091_cc_lady2011_free_v4.3.6/cfss_admin/admin.css
-
091_cc_lady2011_free_v4.3.6/cfss_admin/admin_ads.asp.asp
-
091_cc_lady2011_free_v4.3.6/cfss_admin/admin_config.asp.vbs
-
091_cc_lady2011_free_v4.3.6/cfss_admin/admin_index.asp.asp .vbs polyglot
-
091_cc_lady2011_free_v4.3.6/cfss_admin/admin_link.asp.asp .vbs polyglot
-
091_cc_lady2011_free_v4.3.6/cfss_admin/admin_webmaster.asp.asp .js polyglot
-
091_cc_lady2011_free_v4.3.6/cfss_admin/check.asp.vbs
-
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_about.asp.asp
-
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_ads.asp.asp
-
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_blog.asp.asp
-
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_bqsm.asp.asp
-
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_class.asp
-
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_fuwu.asp.asp
-
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_fzlc.asp.asp
-
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_gmlc.asp.asp
-
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_help.asp.asp
-
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_host.asp.asp
-
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_link.asp.asp
-
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_lmbz.asp.asp
-
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_lxwm.asp.asp
-
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_mzsm.asp.asp
-
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_pay.asp.asp
-
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_syfw.asp.asp
-
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_tool.asp.asp
-
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_union.asp.asp
-
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_vip.asp.asp
-
091_cc_lady2011_free_v4.3.6/cfss_admin/fjqq_yhhd.asp.asp
-
091_cc_lady2011_free_v4.3.6/cfss_admin/htmltojs.html.html
-
091_cc_lady2011_free_v4.3.6/cfss_admin/images/login_bg.png.png
-
091_cc_lady2011_free_v4.3.6/cfss_admin/images/login_foot.png.png
-
091_cc_lady2011_free_v4.3.6/cfss_admin/images/login_input.png.png
-
091_cc_lady2011_free_v4.3.6/cfss_admin/images/login_left_bg.png.png
-
091_cc_lady2011_free_v4.3.6/cfss_admin/images/login_logo.png.png
-
091_cc_lady2011_free_v4.3.6/cfss_admin/images/login_main_bg.png.png
-
091_cc_lady2011_free_v4.3.6/cfss_admin/images/login_right_bg.png.png
-
091_cc_lady2011_free_v4.3.6/cfss_admin/images/manage/admin_bg.gif.gif
-
091_cc_lady2011_free_v4.3.6/cfss_admin/images/manage/admin_bg_1.gif.gif
-
091_cc_lady2011_free_v4.3.6/cfss_admin/images/manage/admin_left_1.gif.gif
-
091_cc_lady2011_free_v4.3.6/cfss_admin/images/manage/admin_left_2.gif.gif
-
091_cc_lady2011_free_v4.3.6/cfss_admin/images/manage/admin_title.gif.gif
-
091_cc_lady2011_free_v4.3.6/cfss_admin/images/manage/bullet.gif.gif
-
091_cc_lady2011_free_v4.3.6/cfss_admin/images/manage/close.gif
-
091_cc_lady2011_free_v4.3.6/cfss_admin/images/manage/color.js.js
-
091_cc_lady2011_free_v4.3.6/cfss_admin/images/manage/html_no.gif.gif
-
091_cc_lady2011_free_v4.3.6/cfss_admin/images/manage/html_ok.gif.gif
-
091_cc_lady2011_free_v4.3.6/cfss_admin/images/manage/key.gif.gif
-
091_cc_lady2011_free_v4.3.6/cfss_admin/images/manage/minus.gif.gif
-
091_cc_lady2011_free_v4.3.6/cfss_admin/images/manage/name.gif.gif
-
091_cc_lady2011_free_v4.3.6/cfss_admin/images/manage/plus.gif.gif
-
091_cc_lady2011_free_v4.3.6/cfss_admin/images/manage/title_bg_hide.gif.gif
-
091_cc_lady2011_free_v4.3.6/cfss_admin/images/manage/title_bg_quit.gif.gif
-
091_cc_lady2011_free_v4.3.6/cfss_admin/images/manage/title_bg_show.gif.gif
-
091_cc_lady2011_free_v4.3.6/cfss_admin/images/style.css
-
091_cc_lady2011_free_v4.3.6/cfss_admin/index.asp
-
091_cc_lady2011_free_v4.3.6/cfss_admin/jstohtml.html.html
-
091_cc_lady2011_free_v4.3.6/cfss_admin/login.asp.asp
-
091_cc_lady2011_free_v4.3.6/cfss_admin/serverinfo.asp.asp .vbs polyglot
-
091_cc_lady2011_free_v4.3.6/class/index.asp.asp
-
091_cc_lady2011_free_v4.3.6/fjqq.cn.asp.asp
-
091_cc_lady2011_free_v4.3.6/fjqq.cn/index.asp.asp
-
091_cc_lady2011_free_v4.3.6/foot.asp
-
091_cc_lady2011_free_v4.3.6/head.asp
-
091_cc_lady2011_free_v4.3.6/images/1.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/2.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/base.css
-
091_cc_lady2011_free_v4.3.6/images/bjtj_bg.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/black_ico.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/clfs_head.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/clsp_head.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/details.css
-
091_cc_lady2011_free_v4.3.6/images/function_bg.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/hot_bt.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/hs_ico.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/index.asp.asp
-
091_cc_lady2011_free_v4.3.6/images/index.css
-
091_cc_lady2011_free_v4.3.6/images/jczt_bg.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/jjye_head.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/jrsc.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/list.css
-
091_cc_lady2011_free_v4.3.6/images/list_ico.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/logo.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/look_button.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/mrhf_head.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/mtjf_head.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/nav_bg.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/qgkj_head.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/search.css
-
091_cc_lady2011_free_v4.3.6/images/search_button.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/search_ico.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/swsy.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/tag_ico.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/test_head.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/xzwy_head.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/ysjk_head.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/zcsh_head.gif.gif
-
091_cc_lady2011_free_v4.3.6/images/zj_ico.gif.gif
-
091_cc_lady2011_free_v4.3.6/inc/#fjqq_cn_lady_free_v4.0.asp
-
091_cc_lady2011_free_v4.3.6/inc/Config.asp
-
091_cc_lady2011_free_v4.3.6/inc/Function.asp
-
091_cc_lady2011_free_v4.3.6/inc/fjqq.asp.vbs
-
091_cc_lady2011_free_v4.3.6/inc/fso.asp.vbs
-
091_cc_lady2011_free_v4.3.6/inc/md5.asp.vbs
-
091_cc_lady2011_free_v4.3.6/index.asp.asp .js polyglot
-
091_cc_lady2011_free_v4.3.6/js/46860.js
-
091_cc_lady2011_free_v4.3.6/js/AC_RunActiveContent.js.js
-
091_cc_lady2011_free_v4.3.6/js/Pic.js.js
-
091_cc_lady2011_free_v4.3.6/js/count.js
-
091_cc_lady2011_free_v4.3.6/js/gundong.js
-
091_cc_lady2011_free_v4.3.6/js/images/365key.gif.gif
-
091_cc_lady2011_free_v4.3.6/js/images/baidu.gif.gif
-
091_cc_lady2011_free_v4.3.6/js/images/bokee.gif.gif
-
091_cc_lady2011_free_v4.3.6/js/images/bolaa.gif.gif
-
091_cc_lady2011_free_v4.3.6/js/images/bytemen.gif.gif
-
091_cc_lady2011_free_v4.3.6/js/images/cn3.gif.gif
-
091_cc_lady2011_free_v4.3.6/js/images/delicious.gif.gif
-
091_cc_lady2011_free_v4.3.6/js/images/firend.gif.gif
-
091_cc_lady2011_free_v4.3.6/js/images/google.gif.gif
-
091_cc_lady2011_free_v4.3.6/js/images/hexun.gif.gif
-
091_cc_lady2011_free_v4.3.6/js/images/i2key.gif.gif
-
091_cc_lady2011_free_v4.3.6/js/images/igooi.gif.gif
-
091_cc_lady2011_free_v4.3.6/js/images/local.gif.gif
-
091_cc_lady2011_free_v4.3.6/js/images/poco.gif.gif
-
091_cc_lady2011_free_v4.3.6/js/images/qq.gif.gif
-
091_cc_lady2011_free_v4.3.6/js/images/sohuz.gif.gif
-
091_cc_lady2011_free_v4.3.6/js/images/vivi.gif.gif
-
091_cc_lady2011_free_v4.3.6/js/images/wozhai.gif.gif
-
091_cc_lady2011_free_v4.3.6/js/images/yahoo.gif.gif
-
091_cc_lady2011_free_v4.3.6/js/images/yeeyoo.gif.gif
-
091_cc_lady2011_free_v4.3.6/js/images/yesky.gif.gif
-
091_cc_lady2011_free_v4.3.6/js/images/younote.gif.gif
-
091_cc_lady2011_free_v4.3.6/js/language.js.js
-
091_cc_lady2011_free_v4.3.6/js/link.txt
-
091_cc_lady2011_free_v4.3.6/js/list_foot.js
-
091_cc_lady2011_free_v4.3.6/js/list_right.js
-
091_cc_lady2011_free_v4.3.6/js/list_top.js
-
091_cc_lady2011_free_v4.3.6/js/main.js
-
091_cc_lady2011_free_v4.3.6/js/main_1.js
-
091_cc_lady2011_free_v4.3.6/js/main_2.js
-
091_cc_lady2011_free_v4.3.6/js/news_foot.js
-
091_cc_lady2011_free_v4.3.6/js/news_right_1.js
-
091_cc_lady2011_free_v4.3.6/js/news_right_2.js
-
091_cc_lady2011_free_v4.3.6/js/news_tan.js
-
091_cc_lady2011_free_v4.3.6/js/news_top.js
-
091_cc_lady2011_free_v4.3.6/js/public.js.js
-
091_cc_lady2011_free_v4.3.6/js/sc.js.js
-
091_cc_lady2011_free_v4.3.6/js/top.js
-
091_cc_lady2011_free_v4.3.6/js/txt.js
-
091_cc_lady2011_free_v4.3.6/js/ver.js
-
091_cc_lady2011_free_v4.3.6/js/wangzhai.js
-
091_cc_lady2011_free_v4.3.6/js/weather.js.js
-
091_cc_lady2011_free_v4.3.6/search.asp.asp
-
091_cc_lady2011_free_v4.3.6/viewer.swf
-
091_cc_lady2011_free_v4.3.6/使用说明.txt
-
091_cc_lady2011_free_v4.3.6/新云软件.url.url
-
091_cc_lady2011_free_v4.3.6/服务购买.url.url
-
091_cc_lady2011_free_v4.3.6/程序官网.url.url