Overview

overview

3

Static

static

3

Down.asp

windows7-x64

3

Down.asp

windows10-2004-x64

3

jdzcn_net/freeiis.dll

windows7-x64

3

jdzcn_net/freeiis.dll

windows10-2004-x64

3

jdzcn_net/...r2.dll

windows7-x64

3

jdzcn_net/...r2.dll

windows10-2004-x64

3

jdzcn_net/...��.cmd

windows7-x64

3

jdzcn_net/...��.cmd

windows10-2004-x64

3

jdzcn_net/...��.cmd

windows7-x64

1

jdzcn_net/...��.cmd

windows10-2004-x64

1

rm.js

windows7-x64

3

rm.js

windows10-2004-x64

3

url.vbs

windows7-x64

1

url.vbs

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    ee96fd41340b7739bd2a3b0763f22afb_JaffaCakes118

  • Size

    21KB

  • MD5

    ee96fd41340b7739bd2a3b0763f22afb

  • SHA1

    2a04138ac257e2d190b19dd1318fc7c4b563970c

  • SHA256

    106e518c3a26065a8614a8369fbe699013449c68b701348b768c99a0a2b28b1e

  • SHA512

    9da9822e64cd0e558e1e71cba869099d881edafdf4299a40d88e975b415ab1e6478e0d0a844e52a8c00ef3bc40d84c3e9ebccd1b887d0412ba40705933588e44

  • SSDEEP

    384:BWL5IPiPaRI3yFwIHRoh32TzC+ftEhzDbnHkk+T3cr7FThK0Guuqv:BWtIPiPaRUhCgGnfeEx7cJrGuuqv

Score
3/10

Malware Config

Signatures

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • ee96fd41340b7739bd2a3b0763f22afb_JaffaCakes118
    .rar
  • Down.asp
    .asp .vbs polyglot
  • jdzcn_net/freeiis.dll
    .dll windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • jdzcn_net/freeiis.ini
  • jdzcn_net/freeiisver2.dll
    .dll regsvr32 windows:4 windows x86 arch:x86

    4215988beda77c364bc263e2c9852249


    Headers

    Imports

    Exports

    Sections

  • jdzcn_net/下载说明.htm
    .html .js polyglot
  • jdzcn_net/卸载IIS防盗.cmd
  • jdzcn_net/安装IIS防盗.cmd
  • rm.asp
    .js
  • url.asp
    .vbs
  • 下载说明.htm
    .html .js polyglot
  • 天天网络IIS防盗连ISAPI插件使用说明.txt