Overview
overview
3Static
static
1jp01/aadmin.vbs
windows7-x64
1jp01/aadmin.vbs
windows10-2004-x64
1jp01/aboutus.asp
windows7-x64
3jp01/aboutus.asp
windows10-2004-x64
3jp01/admin.vbs
windows7-x64
1jp01/admin.vbs
windows10-2004-x64
1jp01/admin/admin.asp
windows7-x64
3jp01/admin/admin.asp
windows10-2004-x64
3jp01/admin...ta.vbs
windows7-x64
1jp01/admin...ta.vbs
windows10-2004-x64
1jp01/admin...ta.vbs
windows7-x64
1jp01/admin...ta.vbs
windows10-2004-x64
1jp01/admin...ta.vbs
windows7-x64
1jp01/admin...ta.vbs
windows10-2004-x64
1jp01/admin...er.vbs
windows7-x64
1jp01/admin...er.vbs
windows10-2004-x64
1jp01/admin...ql.vbs
windows7-x64
1jp01/admin...ql.vbs
windows10-2004-x64
1jp01/admin...it.vbs
windows7-x64
1jp01/admin...it.vbs
windows10-2004-x64
1jp01/admin...ge.vbs
windows7-x64
1jp01/admin...ge.vbs
windows10-2004-x64
1jp01/admin...in.vbs
windows7-x64
1jp01/admin...in.vbs
windows10-2004-x64
1jp01/admin/config.vbs
windows7-x64
1jp01/admin/config.vbs
windows10-2004-x64
1jp01/admin...in.vbs
windows7-x64
1jp01/admin...in.vbs
windows10-2004-x64
1jp01/admin/delfl.vbs
windows7-x64
1jp01/admin/delfl.vbs
windows10-2004-x64
1jp01/admin...nk.vbs
windows7-x64
1jp01/admin...nk.vbs
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
jp01/aadmin.vbs
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
jp01/aadmin.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
jp01/aboutus.asp
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
jp01/aboutus.asp
Resource
win10v2004-20240910-en
Behavioral task
behavioral5
Sample
jp01/admin.vbs
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
jp01/admin.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
jp01/admin/admin.asp
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
jp01/admin/admin.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
jp01/admin/admin_Compressdata.vbs
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
jp01/admin/admin_Compressdata.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
jp01/admin/admin_Redata.vbs
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
jp01/admin/admin_Redata.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
jp01/admin/admin_backupdata.vbs
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
jp01/admin/admin_backupdata.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
jp01/admin/admin_server.vbs
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
jp01/admin/admin_server.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
jp01/admin/admin_sql.vbs
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
jp01/admin/admin_sql.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
jp01/admin/adminedit.vbs
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
jp01/admin/adminedit.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
jp01/admin/amanage.vbs
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
jp01/admin/amanage.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
jp01/admin/chklogin.vbs
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
jp01/admin/chklogin.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
jp01/admin/config.vbs
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
jp01/admin/config.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
jp01/admin/deladmin.vbs
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
jp01/admin/deladmin.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
jp01/admin/delfl.vbs
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
jp01/admin/delfl.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
jp01/admin/dellink.vbs
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
jp01/admin/dellink.vbs
Resource
win10v2004-20240802-en
General
-
Target
faa832a670e95f30fd39739d41cebfbe_JaffaCakes118
-
Size
527KB
-
MD5
faa832a670e95f30fd39739d41cebfbe
-
SHA1
ddbaa3620128957f3a56c899a3ad6809c7960544
-
SHA256
ebe1d08d4fecbf1474718b9c92dcdc5abb64dfe7e0dfea044238a776375dbd90
-
SHA512
07230c06e82df2f87726fce33d8f1762f75303c7c3db99ae79dad030d814acec9b5d78fd86e95f5728f9050fc052f739f0bc1ab67024754ac2a5595ca3d075ff
-
SSDEEP
12288:bqYtwChd/thcEEp0uCxZ0e6ifvbBXV+Vo5aQlLpMX8SYQa:GHCX/tnEp0v2etlV136s/Qa
Malware Config
Signatures
Files
-
faa832a670e95f30fd39739d41cebfbe_JaffaCakes118.rar
-
jp01/aadmin.asp.vbs
-
jp01/aboutus.asp
-
jp01/admin.asp.vbs
-
jp01/admin/admin.asp
-
jp01/admin/admin_Compressdata.asp.vbs
-
jp01/admin/admin_Redata.asp.vbs
-
jp01/admin/admin_backupdata.asp.vbs
-
jp01/admin/admin_server.asp.vbs
-
jp01/admin/admin_sql.asp.vbs
-
jp01/admin/adminedit.asp.vbs
-
jp01/admin/amanage.asp.vbs
-
jp01/admin/chklogin.asp.vbs
-
jp01/admin/config.asp.vbs
-
jp01/admin/deladmin.asp.vbs
-
jp01/admin/delfl.asp.vbs
-
jp01/admin/dellink.asp.vbs
-
jp01/admin/delweb.asp.vbs
-
jp01/admin/delwz.asp.vbs
-
jp01/admin/downcode.com.txt
-
jp01/admin/editfl.asp.vbs
-
jp01/admin/editlink.asp.vbs
-
jp01/admin/editweb.asp.vbs
-
jp01/admin/editwz.asp.vbs
-
jp01/admin/end.asp
-
jp01/admin/errlink.asp.vbs
-
jp01/admin/error.asp
-
jp01/admin/errwz.asp.vbs
-
jp01/admin/fl.asp.vbs
-
jp01/admin/index.asp
-
jp01/admin/lanmu.asp.vbs
-
jp01/admin/link.asp.vbs
-
jp01/admin/linkvip.asp.vbs
-
jp01/admin/logout.asp
-
jp01/admin/manage.asp.vbs
-
jp01/admin/menu.asp.js
-
jp01/admin/newfl.asp.vbs
-
jp01/admin/newlink.asp.vbs
-
jp01/admin/newwz.asp.vbs
-
jp01/admin/shenfl.asp.vbs
-
jp01/admin/shenlink.asp.vbs
-
jp01/admin/shenwz.asp.vbs
-
jp01/admin/top.asp.html .js polyglot
-
jp01/admin/url_add.asp.vbs
-
jp01/admin/user_manager.asp.vbs
-
jp01/admin/web.asp.vbs
-
jp01/admin/welcome.asp.vbs
-
jp01/admin/wz.asp.vbs
-
jp01/contact.asp
-
jp01/data/@ffffff.cn.asp
-
jp01/data/@ffffff.cn1.asp
-
jp01/errlink.asp.vbs
-
jp01/errwz.asp.vbs
-
jp01/guestbook.asp.vbs
-
jp01/images/10(1).gif.gif
-
jp01/images/10.gif.gif
-
jp01/images/11(1).gif.gif
-
jp01/images/11.gif.gif
-
jp01/images/2008.gif.gif
-
jp01/images/468_60.gif.gif
-
jp01/images/Delete.gif.gif
-
jp01/images/IE6.0.gif.gif
-
jp01/images/Style.css
-
jp01/images/Thumbs.db
-
jp01/images/bg(1).gif.gif
-
jp01/images/bg.gif.gif
-
jp01/images/bg1.gif.gif
-
jp01/images/bg_01.gif.gif
-
jp01/images/bg_0101.gif.gif
-
jp01/images/bg_011.gif.gif
-
jp01/images/bg_02.gif.gif
-
jp01/images/bg_03(1).gif.gif
-
jp01/images/bg_03.gif
-
jp01/images/bg_10.gif.gif
-
jp01/images/bg_gao.gif.gif
-
jp01/images/biaoshi(1).gif.gif
-
jp01/images/biaoshi.gif.gif
-
jp01/images/bj.gif.gif
-
jp01/images/boy.gif.gif
-
jp01/images/bt1(1).gif.gif
-
jp01/images/bt1.gif.gif
-
jp01/images/bt1a(1).gif.gif
-
jp01/images/bt1a.gif.gif
-
jp01/images/bt1b(1).gif.gif
-
jp01/images/bt1b.gif.gif
-
jp01/images/bt2(1).gif.gif
-
jp01/images/bt2.gif.gif
-
jp01/images/bt2a(1).gif.gif
-
jp01/images/bt2a.gif.gif
-
jp01/images/bt3(1).gif.gif
-
jp01/images/bt3.gif.gif
-
jp01/images/bt3a(1).gif.gif
-
jp01/images/bt3a.gif.gif
-
jp01/images/bt4(1).gif.gif
-
jp01/images/bt4.gif.gif
-
jp01/images/calogo(1).gif.gif
-
jp01/images/calogo.gif.gif
-
jp01/images/cha.gif.gif
-
jp01/images/city.gif.gif
-
jp01/images/commend_arrow.gif.gif
-
jp01/images/commend_round.gif.gif
-
jp01/images/css.js.js
-
jp01/images/dj_bg.gif.gif
-
jp01/images/edit.gif.gif
-
jp01/images/email.gif.gif
-
jp01/images/first(1).gif.gif
-
jp01/images/first.gif.gif
-
jp01/images/fu.gif.gif
-
jp01/images/girl.gif.gif
-
jp01/images/gsyh.gif.gif
-
jp01/images/gt.gif.gif
-
jp01/images/home.gif.gif
-
jp01/images/index_1x.gif.gif
-
jp01/images/ip.gif.gif
-
jp01/images/jsyh.gif.gif
-
jp01/images/jtyh.gif
-
jp01/images/left.js.js
-
jp01/images/left_01(1).gif.gif
-
jp01/images/left_01.gif.gif
-
jp01/images/left_011.gif.gif
-
jp01/images/link2.gif.gif
-
jp01/images/logo.jpg.gif
-
jp01/images/lt.gif.gif
-
jp01/images/more.3.gif.gif
-
jp01/images/nav.gif.gif
-
jp01/images/none.gif.gif
-
jp01/images/nyyh.gif
-
jp01/images/pic_arrow_01(1).gif.gif
-
jp01/images/pic_arrow_01.gif.gif
-
jp01/images/qq.gif.gif
-
jp01/images/qq1.gif.gif
-
jp01/images/reply.gif.gif
-
jp01/images/right_01(1).gif.gif
-
jp01/images/right_01.gif.gif
-
jp01/images/right_02(1).gif.gif
-
jp01/images/right_02.gif.gif
-
jp01/images/right_03(1).gif.gif
-
jp01/images/right_03.gif.gif
-
jp01/images/top1_bg.gif.gif
-
jp01/images/top_bg.gif.gif
-
jp01/images/top_close.gif.gif
-
jp01/images/top_index.gif.gif
-
jp01/images/top_lianxi.gif.gif
-
jp01/images/top_open.gif.gif
-
jp01/images/top_shoucang.gif.gif
-
jp01/images/url/Thumbs.db
-
jp01/images/url/more.3.gif.gif
-
jp01/images/web.gif.gif
-
jp01/images/wnl.js.js
-
jp01/images/xs01(1).gif.gif
-
jp01/images/xs01.gif.gif
-
jp01/images/xs010.gif.gif
-
jp01/images/xs02(1).gif.gif
-
jp01/images/xs02.gif.gif
-
jp01/images/xs03(1).gif.gif
-
jp01/images/xs03.gif.gif
-
jp01/images/xs04(1).gif.gif
-
jp01/images/xs04.gif.gif
-
jp01/images/xs05(1).gif.gif
-
jp01/images/xs05.gif.gif
-
jp01/images/xs06(1).gif.gif
-
jp01/images/xs06.gif.gif
-
jp01/images/xs07.gif.gif
-
jp01/images/xs08(1).gif.gif
-
jp01/images/xs08.gif.gif
-
jp01/images/xs09(1).gif.gif
-
jp01/images/xs09.gif.gif
-
jp01/images/xu_bg.gif.gif
-
jp01/images/xyyh.gif
-
jp01/images/yao.gif.gif
-
jp01/images/yule1.gif.gif
-
jp01/images/zgyh.gif
-
jp01/images/zsyh.gif.gif
-
jp01/inc/config.asp.vbs
-
jp01/inc/djcss.css
-
jp01/inc/link_body.asp.vbs
-
jp01/inc/linkadd_body.asp.vbs
-
jp01/inc/linkvip_body.asp.vbs
-
jp01/inc/qsc_body.asp.vbs
-
jp01/inc/sc_body.asp.vbs
-
jp01/inc/wzadd_body.asp.vbs
-
jp01/index.asp
-
jp01/index2.asp
-
jp01/link.asp
-
jp01/linkadd.asp
-
jp01/linkvip.asp
-
jp01/lmeng.asp
-
jp01/mdb.asp.vbs
-
jp01/qsc.asp
-
jp01/sc.asp
-
jp01/service.asp.vbs
-
jp01/showlink.asp.vbs
-
jp01/showurl.asp.vbs
-
jp01/web/img/Thumbs.db
-
jp01/web/img/click.htm.js
-
jp01/web/webbj.htm.html .js polyglot
-
jp01/web/womansafe.htm.html .js polyglot
-
jp01/wzadd.asp
-
jp01/新云软件.url.url
-
四方简介.txt