008100f4c3067021ded62e70c6258398

Sharing

Copy URL Twitter E-mail

General

Target

008100f4c3067021ded62e70c6258398
Size

1.2MB
MD5

008100f4c3067021ded62e70c6258398
SHA1

2b40744ef76d161460eec91d1cfb2317f96a970b
SHA256

df3e0701475b071f6ab01b6eca1cab609821059dfc5993e1c7464db4537890f3
SHA512

06d2f81cbc402b0d17a715f402742d34fdca99bb60738931c9a01f77988db1bd1b9396b12d4ea427e3b6c0093559449e940d15c09a4632103d6c57f8bba993fd
SSDEEP

24576:3ASGqK1eLQauFFpl04Ai8V8VyZ4yrgnPcPSgDNxBRu5cH3ysz:3pqeSHldGuyZ4kgnTgDzB45gVz

Score

1^/10

Malware Config

Signatures

Files

008100f4c3067021ded62e70c6258398
.rar
admin/Admin_Ads.asp
.vbs
admin/Admin_Area.asp
.vbs
admin/Admin_Article.asp
.vbs
admin/Admin_Article_type.asp
.vbs
admin/Admin_BatchReplace.asp
.vbs
admin/Admin_Cache.asp
admin/Admin_Cj.asp
.vbs
admin/Admin_Comment.asp
.vbs
admin/Admin_Config.asp
.vbs
admin/Admin_DataBase.asp
.vbs
admin/Admin_DimLabels.asp
.vbs
admin/Admin_DownPic.asp
.vbs
admin/Admin_Error.asp
.vbs
admin/Admin_JapaneseOverflow.asp
.vbs
admin/Admin_Language.asp
.vbs
admin/Admin_Link.asp
.vbs
admin/Admin_MakeHtml.asp
.vbs
admin/Admin_Manager.asp
.vbs
admin/Admin_Movie.asp
.vbs
admin/Admin_Movie_Operation.asp
.vbs
admin/Admin_Pic.asp
.vbs
admin/Admin_PicChk.asp
.vbs
admin/Admin_Ppt.asp
.vbs
admin/Admin_Right.asp
admin/Admin_Serverinfo.asp
.vbs
admin/Admin_Sql.asp
.vbs
admin/Admin_Templates.asp
.vbs
admin/Admin_Tj.asp
.vbs
admin/Admin_Top.asp
.html
admin/Admin_Topic.asp
.vbs
admin/Admin_Type.asp
.vbs
admin/Admin_Update.asp
.vbs
admin/Admin_Upimg.asp
.vbs
admin/Admin_User.asp
.vbs
admin/Admin_left_article.asp
.html .js polyglot
admin/Admin_left_ggyl.asp
.html .js polyglot
admin/Admin_left_makehtml.asp
.html .js polyglot
admin/Admin_left_movie.asp
.html .js polyglot
admin/Admin_left_other.asp
.html .js polyglot
admin/Admin_left_system.asp
.html .js polyglot
admin/Admin_left_template.asp
.html .js polyglot
admin/Admin_left_union.asp
.html .js polyglot
admin/Admin_left_user.asp
.html .js polyglot
admin/Check.asp
admin/Conn.asp
.vbs
admin/HTMLtoJS.html
.html
admin/Index.asp
.vbs
admin/JStoHTML.html
.html
admin/Version.asp
.vbs
admin/collect/CustomArea.asp
.vbs
admin/collect/CustomClass.asp
.vbs
admin/collect/admin_FilterAdd.asp
.vbs
admin/collect/admin_Filters.asp
.vbs
admin/collect/admin_collect.asp
.vbs
admin/collect/admin_intolib.asp
.vbs
admin/collect/admin_rules.asp
.js
admin/collect/collect.asp
.vbs
admin/collect/collecttemp.mdb
admin/collect/inc/collectDatabase.mdb
admin/collect/inc/conn.asp
.vbs
admin/collect/inc/function.asp
.vbs
admin/editor/ColorSelect.htm
.html .js polyglot
admin/editor/FontFaceSelect.htm
.html
admin/editor/FontSizeSelect.htm
.html
admin/editor/blankpage.htm
.html
admin/editor/colorSelect.js
.js
admin/editor/editfunc.js
.js
admin/editor/editorArea.css
admin/editor/images/1.gif
.gif
admin/editor/images/10.gif
.gif
admin/editor/images/11.gif
.gif
admin/editor/images/12.gif
.gif
admin/editor/images/13.gif
.gif
admin/editor/images/14.gif
.gif
admin/editor/images/15.gif
.gif
admin/editor/images/16.gif
.gif
admin/editor/images/17.gif
.gif
admin/editor/images/18.gif
.gif
admin/editor/images/19.gif
.gif
admin/editor/images/2.gif
.gif
admin/editor/images/20.gif
.gif
admin/editor/images/3.gif
.gif
admin/editor/images/4.gif
.gif
admin/editor/images/5.gif
.gif
admin/editor/images/6.gif
.gif
admin/editor/images/7.gif
.gif
admin/editor/images/8.gif
.gif
admin/editor/images/9.gif
.gif
admin/editor/images/bg.gif
.gif
admin/editor/images/line.gif
.gif
admin/editor/index.html
.html .js polyglot
admin/editor/portraitSelect.js
.js
admin/images/Thumbs.db
admin/images/User_Login.css
admin/images/admin.js
.js
admin/images/admin_tlogo.jpg
.gif
admin/images/ajaxrequest.js
.js
admin/images/asp.gif
.gif
admin/images/body_title_bg.gif
.gif
admin/images/body_title_cen.gif
.gif
admin/images/body_title_left.gif
.gif
admin/images/body_title_right.gif
.gif
admin/images/btn_bg.gif
.gif
admin/images/calendar.gif
.gif
admin/images/close.gif
.gif
admin/images/css.css
admin/images/css_body.css
admin/images/css_login.css
admin/images/css_menu.css
admin/images/css_top.css
admin/images/dir.gif
.gif
admin/images/dir2.gif
.gif
admin/images/html_no.gif
.gif
admin/images/html_ok.gif
.gif
admin/images/ico_1.gif
.gif
admin/images/ico_2.gif
.gif
admin/images/ico_3.gif
.gif
admin/images/icon_01.gif
.gif
admin/images/icon_02.gif
.gif
admin/images/inputbut_bg.gif
.gif
admin/images/loadings.gif
.gif
admin/images/login_input_bg.gif
.gif
admin/images/login_input_hr.gif
.gif
admin/images/login_submit.gif
.gif
admin/images/login_toptitle.jpg
.jpg
admin/images/menu_title_bg.jpg
.jpg
admin/images/movie.js
.js
admin/images/right.gif
.gif
admin/images/titleIco.gif
.gif
admin/images/title_bg_left.gif
.gif
admin/images/title_bg_right.gif
.gif
admin/images/tobbg.gif
.gif
admin/images/top_bg_hr.jpg
.jpg
admin/images/top_nav_bg.jpg
.jpg
admin/images/top_nav_left.jpg
.jpg
admin/images/top_nav_on.gif
.gif
admin/images/top_nav_right.jpg
.jpg
admin/images/top_nav_sr.gif
.gif
admin/images/user_all_bg.gif
.gif
admin/images/user_bottom_c.gif
.gif
admin/images/user_bottom_l.gif
.gif
admin/images/user_bottom_r.gif
.gif
admin/images/user_botton.gif
.gif
admin/images/user_login_name.gif
.gif
admin/images/user_login_password.gif
.gif
admin/images/user_login_validatecode.gif
.gif
admin/images/user_main_c.gif
.gif
admin/images/user_main_l.gif
.gif
admin/images/user_main_r.gif
.gif
admin/images/user_top_c.gif
.gif
admin/images/user_top_l.gif
.gif
admin/images/user_top_r.gif
.gif
admin/inc/function.asp
.vbs
admin/inc/movie.asp
.vbs
admin/up/UpLoad.asp
.vbs
admin/up/upload.htm
admin/up/upsave.inc
.vbs
admin/新云软件.url
.url
allmovie.asp
.vbs
article/index.asp
.vbs
comment/comment.js
.js
comment/index.asp
.vbs
database/datas.mdb
gbook.asp
.vbs
gbook/gbook.css
gbook/gbook.js
gbook/index.asp
.vbs
images/Thumbs.db
images/loading.gif
.gif
images/tu/Thumbs.db
images/tu/admin.gif
.gif
images/tu/m01.gif
.gif
images/tu/m02.gif
.gif
images/tu/m03.gif
.gif
images/tu/m04.gif
.gif
images/tu/m05.gif
.gif
images/tu/m06.gif
.gif
images/tu/m07.gif
.gif
images/tu/w01.gif
.gif
images/tu/w02.gif
.gif
images/tu/w03.gif
.gif
images/tu/w04.gif
.gif
images/tu/w05.gif
.gif
images/tu/w06.gif
.gif
images/tu/w07.gif
.gif
inc/base64.asp
inc/cache.asp
.vbs
inc/config.asp
.asp
inc/conn.asp
.vbs
inc/database.asp
.vbs
inc/fso.asp
.vbs
inc/function.asp
.vbs
inc/label.asp
.vbs
inc/labelsInterface.asp
.vbs
inc/md5.asp
.vbs
inc/playfun.asp
.vbs
inc/service.asp
.vbs
inc/stream.asp
.vbs
inc/template.asp
.vbs
index.asp
.vbs
install.asp
.vbs
install/mssql.sql
js/ajax.js
.js
js/autocheck.js
.js
js/base64.js
.js
js/function.js
.js
js/function原精简播放器.js
.js
js/gg/foot.js
js/gg/head.js
js/gg/index1.js
js/gg/index2.js
js/gg/left.js
js/gg/play1.js
js/gg/play2.js
js/gg/top.js
js/gg/view1.js
js/gg/view2.js
js/hot/0.jpg
.jpg
js/hot/1.jpg
.jpg
js/hot/2.jpg
.jpg
js/hot/3.jpg
.jpg
js/hot/4.jpg
.jpg
js/hot/JS.JS
.js
js/hot/Thumbs.db
js/hot/pic.swf
js/hot/pic.xml
.xml
js/loading.htm
.html .js polyglot
js/tj.js
list/index.asp
.vbs
play/index.asp
.vbs
player/56.html
.html .js polyglot
player/56_play.html
.html .js polyglot
player/56hd.Html
.js
player/6RooMs.html
.html .js polyglot
player/BOBO.html
.html .js polyglot
player/BoBo_ActiveX_V3.ocx
.dll regsvr32 windows:4 windows x86 arch:x86

2fac2c774f80aa6d798282fb732b2d15

Code Sign

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

17/05/2005, 00:00

Not After

16/05/2010, 23:59

Subject

CN=Comodo Time Stamping Signer,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09/07/1999, 18:31

Not After

09/07/2019, 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

6c:37:f9:e2:52:42:96:0f:b8:b7:fa:f4:aa:9f:cd:da
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

02/02/2007, 00:00

Not After

02/02/2008, 23:59

Subject

CN=Guangzhou Yi Bo Information Technology Co.\, Ltd.,O=Guangzhou Yi Bo Information Technology Co.\, Ltd.,POSTALCODE=510000,STREET=Yuexiu District+STREET=No.18\,Rd.Siyouyi+STREET=Room 1416,L=Guangzhou,ST=Guangdong,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetFilePointer
WriteFile
GetLocalTime
GetProcessHeap
GetExitCodeThread
GetVersionExA
GetFileAttributesA
CreateDirectoryA
CreateProcessA
DeleteFileA
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
FindClose
FindNextFileA
RemoveDirectoryA
FindFirstFileA
GetFileSizeEx
CreateFileA
GetCurrentProcessId
CreateToolhelp32Snapshot
Process32First
Process32Next
GetProcAddress
CreateEventA
ResetEvent
SetEvent
FormatMessageA
CreateMutexA
Sleep
ReleaseMutex
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
FindResourceA
SetStdHandle
ReadFile
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
FlushFileBuffers
GetStartupInfoA
GetFileType
SetHandleCount
GetConsoleMode
GetConsoleCP
GetStdHandle
HeapCreate
LCMapStringW
LCMapStringA
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
ExitProcess
GetSystemTimeAsFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualProtect
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
InterlockedCompareExchange
GetLocaleInfoA
GetACP
HeapFree
GetFileSize
QueryPerformanceCounter
LoadResource
SizeofResource
FreeLibrary
IsDBCSLeadByte
GetModuleFileNameA
lstrcmpiA
lstrlenA
MultiByteToWideChar
InterlockedExchange
GlobalHandle
GlobalFree
GetSystemDirectoryA
GlobalLock
GlobalUnlock
lstrcmpA
SetLastError
LoadLibraryA
GetCurrentThreadId
CreateThread
GlobalAlloc
GlobalMemoryStatus
GetTickCount
GetCurrentProcess
FlushInstructionCache
WaitForSingleObject
TerminateThread
CloseHandle
MulDiv
FindResourceExA
LockResource
GetThreadLocale
SetThreadLocale
GetModuleHandleA
LoadLibraryExA
InterlockedDecrement
InterlockedIncrement
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
WriteConsoleA

user32

SetWindowPos
RedrawWindow
SetTimer
KillTimer
ReleaseDC
GetDC
GetClientRect
SystemParametersInfoA
DestroyWindow
GetSysColor
GetDialogBaseUnits
DefWindowProcA
MoveWindow
UnregisterClassA
GetTopWindow
InflateRect
GetWindowLongA
SetWindowLongA
GetSystemMetrics
CharNextA
DrawTextA
UnhookWindowsHookEx
GetNextDlgTabItem
SetWindowRgn
OffsetRect
EqualRect
IntersectRect
PtInRect
UnionRect
IsDialogMessageA
CopyAcceleratorTableA
LoadImageA
SetCursor
GetCursorPos
ShowWindow
GetParent
CallWindowProcA
FillRect
IsWindow
SendDlgItemMessageA
GetWindow
SetWindowContextHelpId
SendMessageA
EndDialog
MapDialogRect
CreateWindowExA
IsChild
GetDlgItem
GetFocus
SetFocus
GetKeyState
ClientToScreen
ScreenToClient
InvalidateRect
InvalidateRgn
SetCapture
GetClassNameA
ReleaseCapture
EndPaint
BeginPaint
GetDesktopWindow
DestroyAcceleratorTable
GetClassInfoExA
LoadCursorA
RegisterClassExA
CreateAcceleratorTableA
LoadIconA
CallNextHookEx
SetWindowsHookExA
GetWindowThreadProcessId
FindWindowExA
GetAncestor
SetParent
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
RegisterWindowMessageA
DialogBoxIndirectParamA
CreateDialogIndirectParamA
EnumChildWindows
GetActiveWindow
IsWindowVisible
MapWindowPoints
SetActiveWindow
EnableWindow
GetWindowRect
GetMessageA
TranslateMessage
DispatchMessageA
PostMessageA
MessageBoxA

gdi32

CreateMetaFileA
SetWindowExtEx
CloseMetaFile
DeleteMetaFile
CreateRectRgnIndirect
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
LPtoDP
SaveDC
SetMapMode
SetWindowOrgEx
SetViewportOrgEx
RestoreDC
CreateDCA
GetObjectA
SetBkColor
CreateSolidBrush
CreateFontIndirectA
GetTextMetricsA
GetTextExtentPointA
GetStockObject
Rectangle
SetTextColor
SetBkMode
SelectObject
DeleteObject
DeleteDC
GetDeviceCaps
CreateFontA
CreatePatternBrush
CreatePen
MoveToEx
LineTo
Polyline
CreateDIBitmap
CreateDIBSection
SetStretchBltMode
StretchDIBits

advapi32

CryptCreateHash
CryptReleaseContext
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
CryptAcquireContextA
CryptHashData
CryptGetHashParam
CloseServiceHandle
OpenServiceA
OpenSCManagerA
CryptDestroyHash

shell32

ShellExecuteA
SHGetSpecialFolderPathA

ole32

CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
StringFromGUID2
CoCreateInstance
OleLockRunning
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CreateStreamOnHGlobal
OleLoadFromStream
CreateOleAdviseHolder
OleRegEnumVerbs
OleRegGetUserType
OleRegGetMiscStatus
CreateDataAdviseHolder
WriteClassStm
OleSaveToStream
OleInitialize
OleUninitialize
OleRun
StringFromCLSID
CoUninitialize
CoInitialize

oleaut32

GetErrorInfo
DispCallFunc
OleTranslateColor
OleCreatePropertyFrame
VariantChangeType
SysAllocStringByteLen
LoadRegTypeLi
OleCreateFontIndirect
SysStringByteLen
SysAllocStringLen
VariantClear
VariantInit
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
SysStringLen

shlwapi

UrlUnescapeA
UrlGetPartA
PathFileExistsA

msimg32

GradientFill
TransparentBlt

wininet

InternetConnectA
InternetOpenA
InternetCloseHandle
HttpSendRequestA
InternetReadFile
HttpQueryInfoA
HttpOpenRequestA
InternetSetOptionA

ws2_32

WSAAccept
ntohs
WSACloseEvent
WSACreateEvent
WSAResetEvent
WSAEventSelect
WSASetEvent
WSAConnect
WSAEnumNetworkEvents
select
gethostname
ioctlsocket
htonl
listen
recv
gethostbyname
WSAGetLastError
WSAAsyncSelect
shutdown
WSAStartup
send
connect
accept
ntohl
setsockopt
WSAIoctl
recvfrom
getpeername
inet_ntoa
bind
closesocket
inet_addr
htons
socket
sendto

netapi32

NetWkstaTransportEnum
NetApiBufferFree
Netbios

iphlpapi

GetAdaptersInfo

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

winmm

mixerGetControlDetailsA
mixerGetLineControlsA
mixerGetLineInfoA
mixerClose
mixerGetNumDevs
mixerOpen
mixerSetControlDetails

Exports

Exports

??0CxFile@@QAE@ABV0@@Z
??0CxFile@@QAE@XZ
??0CxIOFile@@QAE@ABV0@@Z
??0CxIOFile@@QAE@PAU_iobuf@@@Z
??0CxMemFile@@QAE@ABV0@@Z
??1CxFile@@UAE@XZ
??1CxIOFile@@UAE@XZ
??1CxImage@@UAE@XZ
??4CxFile@@QAEAAV0@ABV0@@Z
??4CxIOFile@@QAEAAV0@ABV0@@Z
??4CxMemFile@@QAEAAV0@ABV0@@Z
??_7CxFile@@6B@
??_7CxIOFile@@6B@
??_7CxImage@@6B@
??_7CxMemFile@@6B@
??_FCxIOFile@@QAEXXZ
??_FCxImage@@QAEXXZ
??_FCxMemFile@@QAEXXZ
??_OCxImage@@QAEXAAV0@@Z
?Close@CxIOFile@@UAE_NXZ
?Eof@CxIOFile@@UAE_NXZ
?Error@CxIOFile@@UAEJXZ
?Flush@CxIOFile@@UAE_NXZ
?GetC@CxIOFile@@UAEJXZ
?Open@CxIOFile@@QAE_NPBD0@Z
?PutC@CxFile@@UAE_NE@Z
?PutC@CxIOFile@@UAE_NE@Z
?Read@CxIOFile@@UAEIPAXII@Z
?Seek@CxIOFile@@UAE_NJH@Z
?Size@CxIOFile@@UAEJXZ
?Tell@CxIOFile@@UAEJXZ
?Write@CxIOFile@@UAEIPBXII@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 516KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
player/Flv.Html
.html
player/Gvod.html
.html
player/Media.html
.html .js polyglot
player/QQ.Html
.html .js polyglot
player/Qvod.Html
.html .js polyglot
player/QvodAd.Html
player/QvodXz.Html
player/Real.html
.html
player/SoHu.html
.html .js polyglot
player/TuDou.Html
.html .js polyglot
player/TuDouhd.Html
.html .js polyglot
player/YouKu.html
.html
player/css/Thumbs.db
player/css/pic_01.jpg
.gif
player/css/pic_02.jpg
.jpg
player/css/style.css
player/iask.html
.html .js polyglot
player/ku6.html
.html
player/ku6hd.html
.html .js polyglot
player/openv.Html
.html .js polyglot
player/play.swf
player/qvod/LOGO.gif
.gif
player/qvod/qvod1.jpg
.jpg
player/qvod/qvod2.jpg
.jpg
player/qvod/qvod3.jpg
.jpg
player/qvod/sloading.gif
.gif
player/sinahd.Html
.html .js polyglot
player/sohuhd.Html
.html .js polyglot
player/swf.html
.html .js polyglot
player/webplay.html
.html
search.asp
.vbs
template/default/html/10man.html
.html
template/default/html/article.html
.html
template/default/html/foot.html
template/default/html/head.html
.js
template/default/html/index.html
.html
template/default/html/list.html
.html
template/default/html/map.html
.html
template/default/html/play.html
.html
template/default/html/search.html
.html
template/default/html/topic.html
.html
template/default/html/view.html
.html
template/default/images/Thumbs.db
template/default/images/album_bg1.gif
.gif
template/default/images/block2_bl.gif
.gif
template/default/images/block2_br.gif
.gif
template/default/images/block2_tl.gif
.gif
template/default/images/block2_tr.gif
.gif
template/default/images/block_bl.gif
.gif
template/default/images/block_br.gif
.gif
template/default/images/block_tl.gif
.gif
template/default/images/block_tr.gif
.gif
template/default/images/btn_search2.gif
.gif
template/default/images/catebg.gif
.gif
template/default/images/close.gif
.gif
template/default/images/common.js
.js
template/default/images/dashed.gif
.gif
template/default/images/exe.gif
.gif
template/default/images/h2_bg.gif
.gif
template/default/images/head_bg.gif
.gif
template/default/images/icon_video.gif
.gif
template/default/images/left_nav_btm.gif
.gif
template/default/images/left_nav_middle.gif
.gif
template/default/images/left_nav_top.gif
.gif
template/default/images/list_ico.png
.png
template/default/images/logo.gif
.gif
template/default/images/menu_l1_bg.gif
.gif
template/default/images/menu_l1_ge.gif
.gif
template/default/images/menu_l1_now_bg-66px.gif
.gif
template/default/images/menu_l1_now_bg.gif
.gif
template/default/images/menu_l2_bg.gif
.gif
template/default/images/minmax.js
.js
template/default/images/more.gif
.gif
template/default/images/new.png
.png
template/default/images/nopic.gif
.gif
template/default/images/nuli.gif
.gif
template/default/images/num15.png
.png
template/default/images/nums.jpg
.jpg
template/default/images/rem.png
.png
template/default/images/repno.gif
.gif
template/default/images/slogan.gif
.gif
template/default/images/sousou.gif
.gif
template/default/images/special.css
template/default/images/specialbg.png
.png
template/default/images/star_1.gif
.gif
template/default/images/star_2.gif
.gif
template/default/images/star_3.gif
.gif
template/default/images/style.css
template/default/images/title_dot.gif
.gif
template/default/images/videosort_bg2.gif
.gif
template/default/images/viewtype_bg.gif
.gif
template/default/images/viewtype_bgl.gif
.gif
template/模版安装说明.txt
topic/index.asp
.vbs
user/images/Bar.gif
.gif
user/images/Dot_Info.gif
.gif
user/images/Edit.gif
.gif
user/images/Explain.gif
.gif
user/images/Login_line.gif
.gif
user/images/Login_tit.gif
.gif
user/images/Menu_BG.gif
.gif
user/images/Menu_BG1.gif
.gif
user/images/SoftKey.gif
.gif
user/images/Survey.gif
.gif
user/images/SysLeft_bg.gif
.gif
user/images/Thumbs.db
user/images/arrow.gif
.gif
user/images/banner.gif
.gif
user/images/bg2.gif
.gif
user/images/dot.gif
.gif
user/images/help_icon.gif
.gif
user/images/icon_01.gif
.gif
user/images/left.gif
.gif
user/images/left_bg.gif
.gif
user/images/left_menu_bg.gif
.gif
user/images/login.css
user/images/logo.gif
.gif
user/images/logo_up.gif
.gif
user/images/menu01.gif
.gif
user/images/menu01_right.gif
.gif
user/images/minus.gif
.gif
user/images/paymentsby_01.gif
.gif
user/images/plus.gif
.gif
user/images/qqonline.gif
.gif
user/images/right.gif
.gif
user/images/spacer.gif
.gif
user/images/style.css
user/images/teble_bottom_left.gif
.gif
user/images/teble_bottom_right.gif
.gif
user/images/teble_top_left.gif
.gif
user/images/teble_top_right.gif
.gif
user/images/top_bg.gif
.gif
user/images/top_table_leftbg.gif
.gif
user/index.asp
.vbs
user/user.js
.js
view/index.asp
.vbs
功能调用说明.txt
.js
安装说明..txt
模板标签调用方法.txt

Sharing

General

Malware Config

Signatures

Files

2fac2c774f80aa6d798282fb732b2d15

Code Sign

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89Certificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

6c:37:f9:e2:52:42:96:0f:b8:b7:fa:f4:aa:9f:cd:daCertificate

Extended Key Usages

Key Usages

Signer

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

msimg32

wininet

ws2_32

netapi32

iphlpapi

version

winmm

Exports

Exports

Sections

.text Size: 516KB - Virtual size: 512KB

.rdata Size: 128KB - Virtual size: 127KB

.data Size: 36KB - Virtual size: 44KB

.rsrc Size: 36KB - Virtual size: 34KB

.reloc Size: 48KB - Virtual size: 45KB

4f:63:d0:30:f8:15:a3:a5:b3:44:69:40:06:3d:16:89
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

6c:37:f9:e2:52:42:96:0f:b8:b7:fa:f4:aa:9f:cd:da
Certificate

.text
Size: 516KB - Virtual size: 512KB

.rdata
Size: 128KB - Virtual size: 127KB

.data
Size: 36KB - Virtual size: 44KB

.rsrc
Size: 36KB - Virtual size: 34KB

.reloc
Size: 48KB - Virtual size: 45KB