Overview
overview
3Static
static
1admin/admin_admin.vbs
windows7-x64
1admin/admin_admin.vbs
windows10-2004-x64
1admin/admi...he.vbs
windows7-x64
1admin/admi...he.vbs
windows10-2004-x64
1admin/admi...dd.asp
windows7-x64
3admin/admi...dd.asp
windows10-2004-x64
3admin/admi...it.vbs
windows7-x64
1admin/admi...it.vbs
windows10-2004-x64
1admin/admi...ve.vbs
windows7-x64
1admin/admi...ve.vbs
windows10-2004-x64
1admin/admin_all.vbs
windows7-x64
1admin/admin_all.vbs
windows10-2004-x64
1admin/admi...in.vbs
windows7-x64
1admin/admi...in.vbs
windows10-2004-x64
1admin/admin_class.asp
windows7-x64
3admin/admin_class.asp
windows10-2004-x64
3admin/admin_data.vbs
windows7-x64
1admin/admin_data.vbs
windows10-2004-x64
1admin/admin_head.asp
windows7-x64
3admin/admin_head.asp
windows10-2004-x64
3admin/admin_index.asp
windows7-x64
3admin/admin_index.asp
windows10-2004-x64
3admin/admi...ft.asp
windows7-x64
3admin/admi...ft.asp
windows10-2004-x64
3admin/admi...in.asp
windows7-x64
3admin/admi...in.asp
windows10-2004-x64
3admin/admi...op.asp
windows7-x64
3admin/admi...op.asp
windows10-2004-x64
3admin/admin_login.js
windows7-x64
3admin/admin_login.js
windows10-2004-x64
3admin/admi...ut.asp
windows7-x64
3admin/admi...ut.asp
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
admin/admin_admin.vbs
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
admin/admin_admin.vbs
Resource
win10v2004-20240910-en
Behavioral task
behavioral3
Sample
admin/admin_affiche.vbs
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
admin/admin_affiche.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
admin/admin_affiche_add.asp
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
admin/admin_affiche_add.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
admin/admin_affiche_edit.vbs
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
admin/admin_affiche_edit.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
admin/admin_affiche_save.vbs
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
admin/admin_affiche_save.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
admin/admin_all.vbs
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
admin/admin_all.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
admin/admin_chklogin.vbs
Resource
win7-20240729-en
Behavioral task
behavioral14
Sample
admin/admin_chklogin.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
admin/admin_class.asp
Resource
win7-20240708-en
Behavioral task
behavioral16
Sample
admin/admin_class.asp
Resource
win10v2004-20240910-en
Behavioral task
behavioral17
Sample
admin/admin_data.vbs
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
admin/admin_data.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
admin/admin_head.asp
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
admin/admin_head.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
admin/admin_index.asp
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
admin/admin_index.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
admin/admin_index_left.asp
Resource
win7-20240708-en
Behavioral task
behavioral24
Sample
admin/admin_index_left.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
admin/admin_index_main.asp
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
admin/admin_index_main.asp
Resource
win10v2004-20240910-en
Behavioral task
behavioral27
Sample
admin/admin_index_top.asp
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
admin/admin_index_top.asp
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
admin/admin_login.js
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
admin/admin_login.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
admin/admin_logout.asp
Resource
win7-20240729-en
Behavioral task
behavioral32
Sample
admin/admin_logout.asp
Resource
win10v2004-20240802-en
General
-
Target
fab81023364b7048cbd8edd161c7cbf3_JaffaCakes118
-
Size
3.6MB
-
MD5
fab81023364b7048cbd8edd161c7cbf3
-
SHA1
ec249897bcc468ec021f790c2fbf020acef2216b
-
SHA256
e080ac50f51dc72f2eb04c79766afe28b60ecfb0123ddf344deecbfa7461654f
-
SHA512
d2fd2c7bf3eb0eba5202116d9f127ddd03a8499ed520135016b6e166650b8661c4f80f060c7876c2e7665e799f786347e5db8a714106c67415bd4fef0695e6d8
-
SSDEEP
49152:4Kj7O3gVwv3oL+MI8yWKdPNZ4ZlBXITnn8RLKiNtQ+qnzxyRitxLg16jP6RBXapz:S3+7KQLSPfn8RL9N940EtdxREiNgyCEv
Malware Config
Signatures
Files
-
fab81023364b7048cbd8edd161c7cbf3_JaffaCakes118.rar
-
admin/admin_admin.asp.vbs
-
admin/admin_affiche.asp.vbs
-
admin/admin_affiche_add.asp
-
admin/admin_affiche_edit.asp.vbs
-
admin/admin_affiche_save.asp.vbs
-
admin/admin_all.asp.vbs
-
admin/admin_chklogin.asp.vbs
-
admin/admin_class.asp.asp .vbs polyglot
-
admin/admin_data.asp.vbs
-
admin/admin_head.asp
-
admin/admin_index.asp.asp
-
admin/admin_index_left.asp.asp .js polyglot
-
admin/admin_index_main.asp.asp .vbs polyglot
-
admin/admin_index_top.asp.asp .js polyglot
-
admin/admin_login.asp.js
-
admin/admin_logout.asp
-
admin/admin_move.asp.vbs
-
admin/admin_picadd.asp.vbs
-
admin/admin_picadd2.asp.vbs
-
admin/admin_picedit.asp.vbs
-
admin/admin_reviewdel.asp.vbs
-
admin/admin_reviewview.asp.vbs
-
admin/admin_saveadmintype.asp.asp .vbs polyglot
-
admin/admin_savepic.asp.vbs
-
admin/admin_serverinfo.asp.asp .vbs polyglot
-
admin/admin_session.asp.vbs
-
admin/admin_system.asp.vbs
-
admin/checkcode.asp.vbs
-
admin/conn.asp.vbs
-
admin/copyright.asp
-
admin/images/admin_left_1.gif.gif
-
admin/images/admin_left_2.gif.gif
-
admin/images/admin_left_3.gif.gif
-
admin/images/admin_left_4.gif.gif
-
admin/images/admin_style.css
-
admin/images/admin_top_bg.gif.gif
-
admin/images/admin_top_close.gif.gif
-
admin/images/admin_top_icon_1.gif.gif
-
admin/images/admin_top_open.gif.gif
-
admin/images/bar1.gif.gif
-
admin/images/bar10.gif.gif
-
admin/images/bar2.gif.gif
-
admin/images/bar3.gif.gif
-
admin/images/bar4.gif.gif
-
admin/images/bar5.gif.gif
-
admin/images/bar6.gif.gif
-
admin/images/bar7.gif.gif
-
admin/images/bar8.gif.gif
-
admin/images/bar9.gif.gif
-
admin/images/table_bg.gif.gif
-
admin/images/title.gif.gif
-
admin/images/title_bg_quit.gif.gif
-
admin/images/tree_folder3.gif.gif
-
admin/images/tree_folder4.gif.gif
-
admin/images/ubbcode/bb_bold.gif.gif
-
admin/images/ubbcode/bb_center.gif.gif
-
admin/images/ubbcode/bb_code.gif.gif
-
admin/images/ubbcode/bb_email.gif.gif
-
admin/images/ubbcode/bb_flash.gif.gif
-
admin/images/ubbcode/bb_image.gif.gif
-
admin/images/ubbcode/bb_italicize.gif.gif
-
admin/images/ubbcode/bb_list.gif.gif
-
admin/images/ubbcode/bb_quote.gif.gif
-
admin/images/ubbcode/bb_underline.gif.gif
-
admin/images/ubbcode/bb_url.gif.gif
-
admin/images/ubbcode/bb_wma.gif.gif
-
admin/images/ubbcode/bb_wmv.gif.gif
-
admin/index.asp.asp
-
admin/info.asp.vbs
-
admin/sql_erro.asp.vbs
-
admin/upload.asp.asp .vbs polyglot
-
admin/新云软件.url.url
-
class.asp.vbs
-
conn.asp.vbs
-
display.asp.js
-
images/1.jpg.jpg
-
images/2.jpg.jpg
-
images/3.jpg.jpg
-
images/4.jpg
-
images/5.jpg
-
images/6.jpg
-
images/Thumbs.db
-
images/affiche.gif.gif
-
images/em/Thumbs.db
-
images/em/em01.gif
-
images/em/em02.gif.gif
-
images/em/em03.gif.gif
-
images/em/em04.gif.gif
-
images/em/em05.gif.gif
-
images/em/em06.gif.gif
-
images/em/em07.gif.gif
-
images/em/em08.gif.gif
-
images/em/em09.gif.gif
-
images/em/em10.gif.gif
-
images/em/em11.gif.gif
-
images/em/em12.gif.gif
-
images/em/em13.gif.gif
-
images/em/em14.gif.gif
-
images/em/em15.gif.gif
-
images/em/em16.gif.gif
-
images/em/em17.gif.gif
-
images/em/em18.gif.gif
-
images/em/em19.gif.gif
-
images/em/em20.gif.gif
-
images/em/em21.gif.gif
-
images/em/em22.gif.gif
-
images/em/em23.gif.gif
-
images/em/em24.gif.gif
-
images/em/em25.gif.gif
-
images/em/em26.gif.gif
-
images/em/em27.gif.gif
-
images/em/em28.gif.gif
-
images/em/em39.gif.gif
-
images/em/em40.gif.gif
-
images/em/em41.gif.gif
-
images/em/em42.gif.gif
-
images/em/em43.gif.gif
-
images/em/em44.gif.gif
-
images/em/em45.gif.gif
-
images/em/em46.gif.gif
-
images/em/em47.gif.gif
-
images/em/em48.gif.gif
-
images/em/em49.gif.gif
-
images/em/em50.gif.gif
-
images/em/em51.gif.gif
-
images/em/em52.gif.gif
-
images/em/em53.gif.gif
-
images/hp.gif.gif
-
images/js/pica.js.js
-
images/js/picview.js.js
-
images/js/pop.js.js
-
images/js/showbannerpic.js.js
-
images/left_bj.jpg.jpg
-
images/left_bj_2.jpg.jpg
-
images/loading.gif.gif
-
images/lr_bj.jpg.jpg
-
images/main.css
-
images/playswfnew.swf
-
images/review/1star.gif.gif
-
images/review/2star.gif.gif
-
images/review/3star.gif.gif
-
images/review/4star.gif.gif
-
images/review/5star.gif.gif
-
images/review/Thumbs.db
-
images/review/user_on.gif.gif
-
images/right_bj.jpg.jpg
-
images/right_bj_2.jpg.jpg
-
images/style.css
-
images/t_15.jpg.jpg
-
images/top_bj.jpg.jpg
-
images/total.gif.gif
-
images/ubb/Thumbs.db
-
images/ubb/email.gif.gif
-
images/ubb/email1.gif.gif
-
images/ubb/homepage.gif.gif
-
images/ubb/msn.gif.gif
-
images/ubb/qq.gif.gif
-
images/ubb/url.gif.gif
-
inc/body.fix
-
inc/char.asp.vbs
-
inc/config.asp
-
inc/function.asp.vbs
-
inc/functionupload.asp.vbs
-
inc/head.fix
-
inc/md5.asp.vbs
-
inc/pagelist.asp.vbs
-
inc/pagenum.asp.vbs
-
inc/ubb.asp
-
inc/ubbcode.asp.vbs
-
inc/ubbcode.js.js
-
inc/ubbhelp.js.js
-
inc/upload.inc.vbs
-
index.asp.asp .vbs polyglot
-
info.asp.vbs
-
infoot.asp
-
intop.asp.html
-
js.asp.vbs
-
js.htm.js
-
js/count.js
-
js/foot.js
-
js/hot.js
-
js/toplink.js
-
jspic.asp.vbs
-
lym888.cn#$%@/data#$#@%$#%.asp
-
newimg/Thumbs.db
-
newimg/ad1.jpg.jpg
-
newimg/ad2.jpg.jpg
-
newimg/bg1.gif.gif
-
newimg/bg1.jpg.jpg
-
newimg/bg2.gif.gif
-
newimg/copy.gif.gif
-
newimg/gif.gif.gif
-
newimg/gif1.gif.gif
-
newimg/gif2.gif.gif
-
newimg/gif3.gif.gif
-
newimg/gif4.gif.gif
-
newimg/gif5.gif.gif
-
newimg/l1.gif.gif
-
newimg/line_xu.gif.gif
-
newimg/logo.gif.gif
-
newimg/n1.gif.gif
-
newimg/n2.gif.gif
-
newimg/nav1_1.gif.gif
-
newimg/nav1_2.gif.gif
-
newimg/top1.swf
-
photo.asp.vbs
-
pic.asp.vbs
-
picintop.asp.html
-
search.asp.vbs
-
showimg.asp.vbs
-
tv.asp.vbs
-
type.asp.vbs
-
upload/files/nopic.gif.gif
-
upload/files/nopic.jpg.jpg
-
upload/month_0904/85wa_2009429213156.jpg.jpg
-
upload/month_0904/b91e_200942915639.jpg.jpg
-
upload/month_0904/b91f_2009429213046.jpg.jpg
-
upload/month_0904/da3g_200942822404.jpg.jpg
-
upload/month_0904/fc5i_2009429184639.jpg.jpg
-
upload/month_0904/if8l_200942821437.swf
-
upload/month_0904/mjbp_2009429184624.jpg.jpg
-
upload/month_0904/zwo3_200942915422.jpg.jpg
-
upload/month_0904/山歌好比春江水.jpg.jpg
-
upload/month_0904/山歌好比春江水.swf
-
upload/month_0905/jg9m_200951103525.jpg.jpg
-
viewaffiche.asp.vbs
-
votesend.asp.vbs
-
说明.txt