Overview

overview

3

Static

static

1

fyblogs/ad...ss.vbs

windows7-x64

1

fyblogs/ad...ss.vbs

windows10-2004-x64

1

fyblogs/ad...ql.vbs

windows7-x64

1

fyblogs/ad...ql.vbs

windows10-2004-x64

1

fyblogs/ad...ss.vbs

windows7-x64

1

fyblogs/ad...ss.vbs

windows10-2004-x64

1

fyblogs/ad...et.vbs

windows7-x64

1

fyblogs/ad...et.vbs

windows10-2004-x64

1

fyblogs/ad...ck.vbs

windows7-x64

1

fyblogs/ad...ck.vbs

windows10-2004-x64

1

fyblogs/ad...nn.vbs

windows7-x64

1

fyblogs/ad...nn.vbs

windows10-2004-x64

1

fyblogs/ad...ck.vbs

windows7-x64

1

fyblogs/ad...ck.vbs

windows10-2004-x64

1

fyblogs/ad...et.vbs

windows7-x64

1

fyblogs/ad...et.vbs

windows10-2004-x64

1

fyblogs/ad...wn.vbs

windows7-x64

1

fyblogs/ad...wn.vbs

windows10-2004-x64

1

fyblogs/ad...ror.js

windows7-x64

3

fyblogs/ad...ror.js

windows10-2004-x64

3

fyblogs/ad...nk.vbs

windows7-x64

1

fyblogs/ad...nk.vbs

windows10-2004-x64

1

fyblogs/ad...ok.vbs

windows7-x64

1

fyblogs/ad...ok.vbs

windows10-2004-x64

1

fyblogs/ad...Alt.js

windows7-x64

3

fyblogs/ad...Alt.js

windows10-2004-x64

3

fyblogs/ad...dex.js

windows7-x64

3

fyblogs/ad...dex.js

windows10-2004-x64

3

fyblogs/ad...ad.vbs

windows7-x64

1

fyblogs/ad...ad.vbs

windows10-2004-x64

1

fyblogs/ad...nk.vbs

windows7-x64

1

fyblogs/ad...nk.vbs

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    ebe337385201e5ff46b5433e25ef6f5e_JaffaCakes118

  • Size

    882KB

  • MD5

    ebe337385201e5ff46b5433e25ef6f5e

  • SHA1

    aa4d5155cd1ed5db2d5b17c8a2434a7d5e80bf00

  • SHA256

    e263be38e4011771d44ec61c4515019f6a095aaf67316a0a529ad5d93bb16fab

  • SHA512

    b0ab5ba624735da93f2e82a852ea03705322fac987c9e23d8cb8c9e09912120df9e481abb9ffe4be13e9994dc7f417afb586799d14dfe939e65986cd3a7d9993

  • SSDEEP

    24576:kwf1TTdDrTPzi1kCquo/2JmdC+3qjtV50/a:X1T01kF2+C+6xX0/a

Score
1/10

Malware Config

Signatures

Files

  • ebe337385201e5ff46b5433e25ef6f5e_JaffaCakes118
    .rar
  • fyblogs/admin/UpLoad_Class.inc
    .vbs
  • fyblogs/admin/admin_sql.asp
    .vbs
  • fyblogs/admin/bigclass.asp
    .vbs
  • fyblogs/admin/bigclass_set.asp
    .vbs
  • fyblogs/admin/check.asp
    .vbs
  • fyblogs/admin/conn.asp
    .vbs
  • fyblogs/admin/databack.asp
    .vbs
  • fyblogs/admin/databack_set.asp
    .vbs
  • fyblogs/admin/down.asp
    .vbs
  • fyblogs/admin/error.asp
    .js
  • fyblogs/admin/friendlink.asp
    .vbs
  • fyblogs/admin/gbook.asp
    .vbs
  • fyblogs/admin/images/Alt.js
    .js
  • fyblogs/admin/images/admin.css
  • fyblogs/admin/images/cate_fold.gif
    .gif
  • fyblogs/admin/images/cate_open.gif
    .gif
  • fyblogs/admin/images/css.css
  • fyblogs/admin/images/dir.gif
    .gif
  • fyblogs/admin/images/li.gif
    .gif
  • fyblogs/admin/images/list.gif
    .gif
  • fyblogs/admin/images/login.jpg
    .jpg
  • fyblogs/admin/images/login_input.gif
    .gif
  • fyblogs/admin/images/mail.gif
    .gif
  • fyblogs/admin/images/menu1.gif
    .gif
  • fyblogs/admin/images/minus.gif
    .gif
  • fyblogs/admin/images/nav1.gif
    .gif
  • fyblogs/admin/images/parentDir.gif
    .gif
  • fyblogs/admin/images/password.gif
    .gif
  • fyblogs/admin/images/plus.gif
    .gif
  • fyblogs/admin/images/see.gif
    .gif
  • fyblogs/admin/images/text.jpg
    .jpg
  • fyblogs/admin/images/username.gif
    .gif
  • fyblogs/admin/images/warning.gif
    .gif
  • fyblogs/admin/index.asp
    .js
  • fyblogs/admin/kupload.asp
    .vbs
  • fyblogs/admin/link.asp
    .vbs
  • fyblogs/admin/link_set.asp
    .vbs
  • fyblogs/admin/login.asp
    .html
  • fyblogs/admin/loginout.asp
  • fyblogs/admin/news_add.asp
    .js
  • fyblogs/admin/news_edit.asp
    .vbs
  • fyblogs/admin/news_set.asp
    .vbs
  • fyblogs/admin/newslist.asp
    .vbs
  • fyblogs/admin/pass.asp
    .vbs
  • fyblogs/admin/piclist.asp
    .vbs
  • fyblogs/admin/piclist_edit.asp
    .vbs
  • fyblogs/admin/piclist_set.asp
    .vbs
  • fyblogs/admin/picupload.asp
    .vbs
  • fyblogs/admin/smallclass.asp
    .vbs
  • fyblogs/admin/system.asp
    .vbs
  • fyblogs/admin/type.asp
    .vbs
  • fyblogs/admin/type_set.asp
    .vbs
  • fyblogs/admin/uploadfile.asp
    .vbs
  • fyblogs/admin/user_set.asp
    .vbs
  • fyblogs/admin/useredit.asp
    .asp .vbs polyglot
  • fyblogs/admin/userlist.asp
    .vbs
  • fyblogs/admin/zhuanti.asp
    .asp .vbs polyglot
  • fyblogs/admin/zhuanti_set.asp
    .vbs
  • fyblogs/bigclass.asp
    .vbs
  • fyblogs/bottom.asp
  • fyblogs/conn.asp
    .vbs
  • fyblogs/database/#data.mdb
  • fyblogs/download.asp
    .vbs
  • fyblogs/download_ok.asp
    .vbs
  • fyblogs/guestbook.asp
    .vbs
  • fyblogs/guestbook_add.asp
  • fyblogs/guestbook_add_ok.asp
    .vbs
  • fyblogs/head.asp
    .js
  • fyblogs/images/2010062110524112.jpg
    .jpg
  • fyblogs/images/arrow_right1.gif
    .gif
  • fyblogs/images/author.gif
    .gif
  • fyblogs/images/bottombg.jpg
    .jpg
  • fyblogs/images/column_news_title.gif
    .gif
  • fyblogs/images/column_title_icon.gif
    .gif
  • fyblogs/images/divide.png
    .png
  • fyblogs/images/divide2.png
    .png
  • fyblogs/images/download.gif
    .gif
  • fyblogs/images/index_21.png
    .png
  • fyblogs/images/index_23.jpg
    .jpg
  • fyblogs/images/index_2411.jpg
    .jpg
  • fyblogs/images/index_27.jpg
    .jpg
  • fyblogs/images/index_28.jpg
    .jpg
  • fyblogs/images/index_28_1.jpg
    .jpg
  • fyblogs/images/index_column_title_bg.gif
    .gif
  • fyblogs/images/list_icon.gif
    .gif
  • fyblogs/images/list_icon1.gif
    .gif
  • fyblogs/images/menubg.jpg
    .jpg
  • fyblogs/images/menubg.png
    .png
  • fyblogs/images/menulibg.jpg
    .jpg
  • fyblogs/images/middlebg.png
    .png
  • fyblogs/images/newscenter.png
    .png
  • fyblogs/images/notice.png
    .png
  • fyblogs/images/notices1.jpg
    .jpg
  • fyblogs/images/page_btn.gif
    .gif
  • fyblogs/images/pic.gif
    .gif
  • fyblogs/images/piczoom/controlbar.png
    .png
  • fyblogs/images/piczoom/zoomin.cur
  • fyblogs/images/piczoom/zoomout.cur
  • fyblogs/images/siderBar_bg1.gif
    .gif
  • fyblogs/images/siderBar_bg2.jpg
    .jpg
  • fyblogs/images/siderBar_btn_bg.gif
    .gif
  • fyblogs/images/siderBar_btn_on_bg.gif
    .gif
  • fyblogs/images/top.jpg
    .jpg
  • fyblogs/include/class_page.asp
    .vbs
  • fyblogs/include/conn.asp
    .vbs
  • fyblogs/include/form.asp
    .html
  • fyblogs/include/function.asp
    .vbs
  • fyblogs/include/getcode.asp
  • fyblogs/include/indexpic.asp
    .html .js polyglot
  • fyblogs/include/indexpicnew.asp
    .js
  • fyblogs/include/magicthumb.css
  • fyblogs/include/md5.asp
    .vbs
  • fyblogs/include/message.asp
    .asp .vbs polyglot
  • fyblogs/include/public.asp
    .vbs
  • fyblogs/index.asp
    .vbs
  • fyblogs/jquery/jquery.cycle.js
    .js
  • fyblogs/jquery/jquery.js
    .js
  • fyblogs/jquery/jquery.validationEngine.js
    .js
  • fyblogs/jquery/magicthumb-packed.js
    .js
  • fyblogs/jquery/validationEngine.jquery.css
  • fyblogs/kindeditor/asp/JSON_2.0.4.asp
    .vbs
  • fyblogs/kindeditor/asp/file_manager_json.asp
    .asp .vbs polyglot
  • fyblogs/kindeditor/kindeditor-min.js
    .js
  • fyblogs/kindeditor/kindeditor.js
    .js
  • fyblogs/kindeditor/plugins/about.html
    .html .js polyglot
  • fyblogs/kindeditor/plugins/advtable/advtable.html
    .html .js polyglot
  • fyblogs/kindeditor/plugins/emoticons/0.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/1.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/10.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/100.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/101.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/102.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/103.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/104.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/105.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/106.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/107.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/108.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/109.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/11.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/110.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/111.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/112.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/113.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/114.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/115.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/116.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/117.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/118.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/119.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/12.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/120.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/121.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/122.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/123.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/124.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/125.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/126.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/127.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/128.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/129.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/13.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/130.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/131.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/132.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/133.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/134.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/14.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/15.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/16.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/17.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/18.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/19.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/2.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/20.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/21.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/22.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/23.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/24.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/25.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/26.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/27.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/28.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/29.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/3.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/30.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/31.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/32.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/33.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/34.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/35.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/36.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/37.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/38.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/39.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/4.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/40.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/41.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/42.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/43.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/44.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/45.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/46.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/47.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/48.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/49.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/5.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/50.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/51.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/52.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/53.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/54.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/55.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/56.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/57.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/58.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/59.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/6.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/60.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/61.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/62.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/63.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/64.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/65.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/66.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/67.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/68.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/69.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/7.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/70.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/71.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/72.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/73.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/74.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/75.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/76.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/77.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/78.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/79.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/8.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/80.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/81.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/82.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/83.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/84.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/85.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/86.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/87.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/88.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/89.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/9.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/90.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/91.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/92.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/93.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/94.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/95.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/96.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/97.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/98.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/99.gif
    .gif
  • fyblogs/kindeditor/plugins/emoticons/qq.gif
    .gif
  • fyblogs/kindeditor/plugins/file_manager/file_manager.css
  • fyblogs/kindeditor/plugins/file_manager/file_manager.html
    .html
  • fyblogs/kindeditor/plugins/file_manager/file_manager.js
    .js
  • fyblogs/kindeditor/plugins/file_manager/images/file-16.gif
    .gif
  • fyblogs/kindeditor/plugins/file_manager/images/file-64.gif
    .gif
  • fyblogs/kindeditor/plugins/file_manager/images/folder-16.gif
    .gif
  • fyblogs/kindeditor/plugins/file_manager/images/folder-64.gif
    .gif
  • fyblogs/kindeditor/plugins/file_manager/images/go-up.gif
    .gif
  • fyblogs/kindeditor/plugins/flash.html
    .html .js polyglot
  • fyblogs/kindeditor/plugins/image/image.html
    .html .js polyglot
  • fyblogs/kindeditor/plugins/image/image1.html
    .html
  • fyblogs/kindeditor/plugins/image/images/align_left.gif
    .gif
  • fyblogs/kindeditor/plugins/image/images/align_right.gif
    .gif
  • fyblogs/kindeditor/plugins/image/images/align_top.gif
    .gif
  • fyblogs/kindeditor/plugins/image/images/refresh.gif
    .gif
  • fyblogs/kindeditor/plugins/link/link.html
    .html .js polyglot
  • fyblogs/kindeditor/plugins/media.html
    .html .js polyglot
  • fyblogs/kindeditor/plugins/plainpaste.html
    .html .js polyglot
  • fyblogs/kindeditor/plugins/wordpaste.html
    .html .js polyglot
  • fyblogs/kindeditor/skins/common/blank.gif
    .gif
  • fyblogs/kindeditor/skins/common/editor.css
  • fyblogs/kindeditor/skins/common/flash.gif
    .gif
  • fyblogs/kindeditor/skins/common/loading.gif
    .gif
  • fyblogs/kindeditor/skins/common/media.gif
    .gif
  • fyblogs/kindeditor/skins/common/rm.gif
    .gif
  • fyblogs/kindeditor/skins/default.css
  • fyblogs/kindeditor/skins/default/default.gif
    .gif
  • fyblogs/kindeditor/skins/default/default.psd
  • fyblogs/kindeditor/skins/default/preview.gif
    .gif
  • fyblogs/kindeditor/skins/editor.css
  • fyblogs/main.css
  • fyblogs/menu.asp
    .js
  • fyblogs/neiye.css
  • fyblogs/piclist.asp
    .vbs
  • fyblogs/readnews.asp
    .vbs
  • fyblogs/result.asp
    .asp .vbs polyglot
  • fyblogs/sql.asp
    .vbs
  • fyblogs/type.asp
    .vbs
  • fyblogs/upfiles/news/20110311213253921.jpg
    .jpg
  • fyblogs/upfiles/news/20110311213934956.jpg
    .jpg
  • fyblogs/upfiles/news/20110311214258672.jpg
    .jpg
  • fyblogs/upfiles/news/20110311214844229.png
    .png
  • fyblogs/zhuanti.asp
    .vbs
  • fyblogs/关于Fyblogs网站管理系统.txt
  • fyblogs/新云软件.url
    .url