Static task
static1
Behavioral task
behavioral1
Sample
login/Drive_Pdf/geoplugin.class.js
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
login/Drive_Pdf/geoplugin.class.js
Resource
win10v2004-20240910-en
Behavioral task
behavioral3
Sample
login/Drive_Pdf/login.js
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
login/Drive_Pdf/login.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
login/Drive_Pdf/tk/login.js
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
login/Drive_Pdf/tk/login.js
Resource
win10v2004-20240802-en
General
-
Target
fc2cd08fa12bf4e86a9b74a45ef10abb_JaffaCakes118
-
Size
457KB
-
MD5
fc2cd08fa12bf4e86a9b74a45ef10abb
-
SHA1
52202e1148b59a7c5d7963afa914d0c3575ec133
-
SHA256
64ac03e743e38ed5e76bf867b32b4b28964e7b1bc78a219b85ae92498a0f3f3e
-
SHA512
087c1a100468e4d5c4dc181334646b49d9825b3e20c99c758c5be6d95b74510ad848faed9b6b841aaff8712290fc62abc044821e400467cd50cac6c8823b4eb2
-
SSDEEP
12288:oJ+YFF0vcHe86CcKIdHpAd/+APF0vcHe8ZCGKgdHpXlzv:oJj5ACcJ9pAd/L5DCGt9pXlr
Malware Config
Signatures
Files
-
fc2cd08fa12bf4e86a9b74a45ef10abb_JaffaCakes118.zip
-
login/Drive_Pdf/.htaccess
-
login/Drive_Pdf/action.php
-
login/Drive_Pdf/error_log
-
login/Drive_Pdf/geoplugin.class.php.js
-
login/Drive_Pdf/images/100Secure.jpg.jpg
-
login/Drive_Pdf/images/AOL_Eraser.svg.png.png
-
login/Drive_Pdf/images/Cap.png.png
-
login/Drive_Pdf/images/Office_365_logo.png.png
-
login/Drive_Pdf/images/bg.png.png
-
login/Drive_Pdf/images/bg1.jpg.jpg
-
login/Drive_Pdf/images/download.png.png
-
login/Drive_Pdf/images/email-logo.png.png
-
login/Drive_Pdf/images/images.jpg.jpg
-
login/Drive_Pdf/images/ng.PNG.png
-
login/Drive_Pdf/images/outlook-logo.jpg.jpg
-
login/Drive_Pdf/images/pdf-logo.png.png
-
login/Drive_Pdf/images/smallpdf.png.png
-
login/Drive_Pdf/images/webmail-logo.gif.gif
-
login/Drive_Pdf/images/yahoo-logo.png.png
-
login/Drive_Pdf/index.php
-
login/Drive_Pdf/kancha.php
-
login/Drive_Pdf/login.php.js
-
login/Drive_Pdf/phone.php
-
login/Drive_Pdf/robots.txt
-
login/Drive_Pdf/tk/action.php
-
login/Drive_Pdf/tk/error_log
-
login/Drive_Pdf/tk/images/100Secure.jpg.jpg
-
login/Drive_Pdf/tk/images/AOL_Eraser.svg.png.png
-
login/Drive_Pdf/tk/images/Cap.png.png
-
login/Drive_Pdf/tk/images/Office_365_logo.png.png
-
login/Drive_Pdf/tk/images/bg.png.png
-
login/Drive_Pdf/tk/images/bg1.jpg.jpg
-
login/Drive_Pdf/tk/images/download.png.png
-
login/Drive_Pdf/tk/images/email-logo.png.png
-
login/Drive_Pdf/tk/images/ng.PNG.png
-
login/Drive_Pdf/tk/images/outlook-logo.jpg.jpg
-
login/Drive_Pdf/tk/images/pdf-logo.png.png
-
login/Drive_Pdf/tk/images/smallpdf.png.png
-
login/Drive_Pdf/tk/images/webmail-logo.gif.gif
-
login/Drive_Pdf/tk/images/yahoo-logo.png.png
-
login/Drive_Pdf/tk/login.php.js
-
login/Drive_Pdf/ver.pdf.php.html .js polyglot