19d3692df5bf016b0e2f2cab30df4d07

Sharing

Copy URL Twitter E-mail

General

Target

19d3692df5bf016b0e2f2cab30df4d07
Size

1.9MB
MD5

19d3692df5bf016b0e2f2cab30df4d07
SHA1

45bb9cf694dd9fb773fd1c79ad06e7de9692da2a
SHA256

655a60b7badca0d5700d0aa7f32b3cf546841e693a0e1f9df57ac2eec2de5dc7
SHA512

70ace7f8d8aa8822fa8eee4fa4a54a59168c961186dd5d3826b26f45e032c849028d02e98328e73cb7d0ed995a8d1083c11b52f138f6c1b5b9c690808642d9d8
SSDEEP

49152:CPB8uFRSZiIZw0p8onKoBqEjc+hYhphUg8KOQnIxT:CPB/FRSZ7w0uAcZHOQIV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack002/uvswf.vio

Files

19d3692df5bf016b0e2f2cab30df4d07
.rar
dfc3.0/PSD源文件/fo.psd
dfc3.0/about.asp
.js
dfc3.0/ad/flash/focus.swf
dfc3.0/ad/images/bfzy.jpg
.jpg
dfc3.0/ad/images/dyds.jpg
.jpg
dfc3.0/ad/images/gxpt.jpg
.jpg
dfc3.0/ad/images/hx.jpg
.jpg
dfc3.0/ad/images/jjp.jpg
.jpg
dfc3.0/addgbook.asp
.js
dfc3.0/admin/Admin_ArticleDel.asp
dfc3.0/admin/Admin_ArticleModify.asp
.vbs
dfc3.0/admin/Article/Admin_ArticleContent.asp
.asp .vbs polyglot
dfc3.0/admin/Article/Admin_ArticleDel.asp
dfc3.0/admin/Article/Admin_ArticleManage.asp
.vbs
dfc3.0/admin/Article/Admin_ArticleModify.asp
.vbs
dfc3.0/admin/Article/Admin_ArticleSave.asp
.asp .vbs polyglot
dfc3.0/admin/Article/Admin_STYLE.CSS
dfc3.0/admin/Article/Admin_editsave.asp
.asp .vbs polyglot
dfc3.0/admin/Article/Edit/editor.htm
.html .js polyglot
dfc3.0/admin/Article/Edit/editor/UpLoadClass.asp
.vbs
dfc3.0/admin/Article/Edit/editor/attach.htm
.html .js polyglot
dfc3.0/admin/Article/Edit/editor/base.css
dfc3.0/admin/Article/Edit/editor/editor.js
.js
dfc3.0/admin/Article/Edit/editor/img.htm
.html .js polyglot
dfc3.0/admin/Article/Edit/editor/link.htm
.html .js polyglot
dfc3.0/admin/Article/Edit/editor/table.htm
.html .js polyglot
dfc3.0/admin/Article/Edit/editor/upload.asp
.asp .vbs polyglot
dfc3.0/admin/Article/Edit/face/001.gif
.gif
dfc3.0/admin/Article/Edit/face/002.gif
.gif
dfc3.0/admin/Article/Edit/face/003.gif
.gif
dfc3.0/admin/Article/Edit/face/004.gif
.gif
dfc3.0/admin/Article/Edit/face/005.gif
.gif
dfc3.0/admin/Article/Edit/face/006.gif
.gif
dfc3.0/admin/Article/Edit/face/007.gif
.gif
dfc3.0/admin/Article/Edit/face/008.gif
.gif
dfc3.0/admin/Article/Edit/face/009.gif
.gif
dfc3.0/admin/Article/Edit/face/010.gif
.gif
dfc3.0/admin/Article/Edit/face/011.gif
.gif
dfc3.0/admin/Article/Edit/face/012.gif
.gif
dfc3.0/admin/Article/Edit/face/013.gif
.gif
dfc3.0/admin/Article/Edit/face/014.gif
.gif
dfc3.0/admin/Article/Edit/face/015.gif
.gif
dfc3.0/admin/Article/Edit/face/016.gif
.gif
dfc3.0/admin/Article/Edit/face/017.gif
.gif
dfc3.0/admin/Article/Edit/face/018.gif
.gif
dfc3.0/admin/Article/Edit/face/019.gif
.gif
dfc3.0/admin/Article/Edit/face/020.gif
.gif
dfc3.0/admin/Article/Edit/face/021.gif
.gif
dfc3.0/admin/Article/Edit/face/022.gif
.gif
dfc3.0/admin/Article/Edit/face/023.gif
.gif
dfc3.0/admin/Article/Edit/face/024.gif
.gif
dfc3.0/admin/Article/Edit/face/025.gif
.gif
dfc3.0/admin/Article/Edit/face/026.gif
.gif
dfc3.0/admin/Article/Edit/face/027.gif
.gif
dfc3.0/admin/Article/Edit/face/028.gif
.gif
dfc3.0/admin/Article/Edit/face/029.gif
.gif
dfc3.0/admin/Article/Edit/face/030.gif
.gif
dfc3.0/admin/Article/Edit/face/031.gif
.gif
dfc3.0/admin/Article/Edit/face/032.gif
.gif
dfc3.0/admin/Article/Edit/face/033.gif
.gif
dfc3.0/admin/Article/Edit/face/034.gif
.gif
dfc3.0/admin/Article/Edit/face/035.gif
.gif
dfc3.0/admin/Article/Edit/face/036.gif
.gif
dfc3.0/admin/Article/Edit/face/037.gif
.gif
dfc3.0/admin/Article/Edit/face/038.gif
.gif
dfc3.0/admin/Article/Edit/face/039.gif
.gif
dfc3.0/admin/Article/Edit/face/040.gif
.gif
dfc3.0/admin/Article/Edit/images/arrow_down.gif
.gif
dfc3.0/admin/Article/Edit/images/arrow_up.gif
.gif
dfc3.0/admin/Article/Edit/images/bg.gif
.gif
dfc3.0/admin/Article/Edit/images/blue_sline.gif
.gif
dfc3.0/admin/Article/Edit/images/box_vsplit.gif
.gif
dfc3.0/admin/Article/Edit/images/common.gif
.gif
dfc3.0/admin/Article/Edit/images/del_btn.gif
.gif
dfc3.0/admin/Article/Edit/images/dilog_bt_cancel.gif
.gif
dfc3.0/admin/Article/Edit/images/dilog_bt_ok.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/ParaFormatting.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/ParaFormatting_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/attach.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/attach_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/blank.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/bold.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/bold_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/copy.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/copy_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/cut.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/cut_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/editor_foot.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/face.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/face_bg.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/face_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/forecolor.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/forecolor_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/guage.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/hilitecolor.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/hilitecolor_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/iask.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/iask_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/img.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/img_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/indent.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/indent_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/inserthorizontalrule.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/inserthorizontalrule_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/insertorderedlist.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/insertorderedlist_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/insertunorderedlist.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/insertunorderedlist_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/italic.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/italic_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/justifycenter.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/justifycenter_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/justifyformat.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/justifyformat_bg.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/justifyformat_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/justifyfull.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/justifyfull_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/justifyleft.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/justifyleft_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/justifyright.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/justifyright_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/link.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/link_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/menu_bg.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/menu_foot.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/menu_title.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/outdent.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/outdent_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/paste.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/paste_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/redo.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/redo_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/rsave.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/table.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/table_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/title_bg.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/toolbar_bg.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/underline.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/underline_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/undo.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/undo_over.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/view.gif
.gif
dfc3.0/admin/Article/Edit/images/editor/view_over.gif
.gif
dfc3.0/admin/Article/Edit/images/guage.gif
.gif
dfc3.0/admin/Article/Edit/images/smb_btn_bg.gif
.gif
dfc3.0/admin/Article/Edit/images/srch_btn.gif
.gif
dfc3.0/admin/Article/Edit/images/tmpl_btn_bg.gif
.gif
dfc3.0/admin/Article/Edit/images/update_btn1.gif
.gif
dfc3.0/admin/Article/Edit/images/update_btn2.gif
.gif
dfc3.0/admin/Article/Images/Editor/Acenter.gif
.gif
dfc3.0/admin/Article/Images/Editor/Aleft.gif
.gif
dfc3.0/admin/Article/Images/Editor/Aright.gif
.gif
dfc3.0/admin/Article/Images/Editor/Editor.gif
.gif
dfc3.0/admin/Article/Images/Editor/Editor2.gif
.gif
dfc3.0/admin/Article/Images/Editor/arrow.gif
.gif
dfc3.0/admin/Article/Images/Editor/bold.gif
.gif
dfc3.0/admin/Article/Images/Editor/browse.gif
.gif
dfc3.0/admin/Article/Images/Editor/browse2.gif
.gif
dfc3.0/admin/Article/Images/Editor/calculator.gif
.gif
dfc3.0/admin/Article/Images/Editor/chars.gif
.gif
dfc3.0/admin/Article/Images/Editor/chars1.gif
.gif
dfc3.0/admin/Article/Images/Editor/chars2.gif
.gif
dfc3.0/admin/Article/Images/Editor/chars3.gif
.gif
dfc3.0/admin/Article/Images/Editor/chars4.gif
.gif
dfc3.0/admin/Article/Images/Editor/chars5.gif
.gif
dfc3.0/admin/Article/Images/Editor/chars6.gif
.gif
dfc3.0/admin/Article/Images/Editor/chars7.gif
.gif
dfc3.0/admin/Article/Images/Editor/chars8.gif
.gif
dfc3.0/admin/Article/Images/Editor/clear.gif
.gif
dfc3.0/admin/Article/Images/Editor/copy.gif
.gif
dfc3.0/admin/Article/Images/Editor/cut.gif
.gif
dfc3.0/admin/Article/Images/Editor/date.gif
.gif
dfc3.0/admin/Article/Images/Editor/del.gif
.gif
dfc3.0/admin/Article/Images/Editor/eq.gif
.gif
dfc3.0/admin/Article/Images/Editor/eq1.gif
.gif
dfc3.0/admin/Article/Images/Editor/eq2.gif
.gif
dfc3.0/admin/Article/Images/Editor/excel.gif
.gif
dfc3.0/admin/Article/Images/Editor/fgbgcolor.gif
.gif
dfc3.0/admin/Article/Images/Editor/fgcolor.gif
.gif
dfc3.0/admin/Article/Images/Editor/fgcolor2.gif
.gif
dfc3.0/admin/Article/Images/Editor/fieldset.gif
.gif
dfc3.0/admin/Article/Images/Editor/find.gif
.gif
dfc3.0/admin/Article/Images/Editor/flash.gif
.gif
dfc3.0/admin/Article/Images/Editor/help.gif
.gif
dfc3.0/admin/Article/Images/Editor/hend.gif
.gif
dfc3.0/admin/Article/Images/Editor/hend2.gif
.gif
dfc3.0/admin/Article/Images/Editor/htm.gif
.gif
dfc3.0/admin/Article/Images/Editor/html.gif
.gif
dfc3.0/admin/Article/Images/Editor/html2.gif
.gif
dfc3.0/admin/Article/Images/Editor/img.gif
.gif
dfc3.0/admin/Article/Images/Editor/indent.gif
.gif
dfc3.0/admin/Article/Images/Editor/italic.gif
.gif
dfc3.0/admin/Article/Images/Editor/line.gif
.gif
dfc3.0/admin/Article/Images/Editor/list.gif
.gif
dfc3.0/admin/Article/Images/Editor/nourl.gif
.gif
dfc3.0/admin/Article/Images/Editor/outdent.gif
.gif
dfc3.0/admin/Article/Images/Editor/page.gif
.gif
dfc3.0/admin/Article/Images/Editor/paste.gif
.gif
dfc3.0/admin/Article/Images/Editor/redo.gif
.gif
dfc3.0/admin/Article/Images/Editor/rm.gif
.gif
dfc3.0/admin/Article/Images/Editor/s.gif
.gif
dfc3.0/admin/Article/Images/Editor/save.gif
.gif
dfc3.0/admin/Article/Images/Editor/selectall.gif
.gif
dfc3.0/admin/Article/Images/Editor/sline.gif
.gif
dfc3.0/admin/Article/Images/Editor/sub.gif
.gif
dfc3.0/admin/Article/Images/Editor/sup.gif
.gif
dfc3.0/admin/Article/Images/Editor/table.gif
.gif
dfc3.0/admin/Article/Images/Editor/table_cf.gif
.gif
dfc3.0/admin/Article/Images/Editor/table_cr.gif
.gif
dfc3.0/admin/Article/Images/Editor/table_hbx.gif
.gif
dfc3.0/admin/Article/Images/Editor/table_hby.gif
.gif
dfc3.0/admin/Article/Images/Editor/table_sx.gif
.gif
dfc3.0/admin/Article/Images/Editor/table_sx2.gif
.gif
dfc3.0/admin/Article/Images/Editor/table_td.gif
.gif
dfc3.0/admin/Article/Images/Editor/table_tddel.gif
.gif
dfc3.0/admin/Article/Images/Editor/table_tr.gif
.gif
dfc3.0/admin/Article/Images/Editor/table_trdel.gif
.gif
dfc3.0/admin/Article/Images/Editor/time.gif
.gif
dfc3.0/admin/Article/Images/Editor/underline.gif
.gif
dfc3.0/admin/Article/Images/Editor/undo.gif
.gif
dfc3.0/admin/Article/Images/Editor/url.gif
.gif
dfc3.0/admin/Article/Images/Editor/wmv.gif
.gif
dfc3.0/admin/Article/Images/Editor/wordpaste.gif
.gif
dfc3.0/admin/Article/Inc/IE5.5+/ubbcode.asp
.vbs
dfc3.0/admin/Article/Inc/admin_code_article.asp
.vbs
dfc3.0/admin/Article/Inc/checkcode.asp
.vbs
dfc3.0/admin/Article/Inc/configf.asp
dfc3.0/admin/Article/Inc/function.asp
.vbs
dfc3.0/admin/Article/Inc/md5.asp
.vbs
dfc3.0/admin/Article/Inc/syscode_Article.asp
.asp .vbs polyglot
dfc3.0/admin/Article/Inc/ubbcode.asp
.vbs
dfc3.0/admin/Article/Inc/upfile_class.asp
.vbs
dfc3.0/admin/Article/STYLE.CSS
dfc3.0/admin/Article/Upfile_AdPic.asp
.asp .vbs polyglot
dfc3.0/admin/Article/Upfile_Article.asp
.asp .vbs polyglot
dfc3.0/admin/Article/Upfile_Dialog.asp
.asp .vbs polyglot
dfc3.0/admin/Article/Upload_AdPic.asp
.js
dfc3.0/admin/Article/Upload_Article.asp
.js
dfc3.0/admin/Article/Upload_Dialog.asp
.js
dfc3.0/admin/Article/add.asp
.asp .vbs polyglot
dfc3.0/admin/Article/add_lm.asp
dfc3.0/admin/Article/addspecial.asp
.asp
dfc3.0/admin/Article/admin_ml.asp
.vbs
dfc3.0/admin/Article/conn.asp
.asp .vbs polyglot
dfc3.0/admin/Article/del_lm.asp
dfc3.0/admin/Article/edit_lm.asp
.vbs
dfc3.0/admin/Article/editor.asp
.html .js polyglot
dfc3.0/admin/Article/editor.css
dfc3.0/admin/Article/editor_InsertEQ.asp
.asp
dfc3.0/admin/Article/editor_InsertFlash.asp
.asp .js polyglot
dfc3.0/admin/Article/editor_InsertHR.asp
.html .js polyglot
dfc3.0/admin/Article/editor_InsertIframe.asp
.html .js polyglot
dfc3.0/admin/Article/editor_InsertMedia.asp
.asp .js polyglot
dfc3.0/admin/Article/editor_InsertPic.asp
.asp .js polyglot
dfc3.0/admin/Article/editor_InsertRM.asp
.asp .js polyglot
dfc3.0/admin/Article/editor_InsertTable.asp
.html .js polyglot
dfc3.0/admin/Article/editor_SelectUpFile.asp
.asp .vbs polyglot
dfc3.0/admin/Article/editor_calculator.asp
.html .js polyglot
dfc3.0/admin/Article/editor_cellprops.asp
.asp .js polyglot
dfc3.0/admin/Article/editor_color.asp
.html
dfc3.0/admin/Article/editor_dialog.CSS
dfc3.0/admin/Article/editor_fieldset.asp
.html .js polyglot
dfc3.0/admin/Article/editor_find.asp
.html .js polyglot
dfc3.0/admin/Article/editor_help.asp
.html
dfc3.0/admin/Article/editor_selcolor.asp
.html .js polyglot
dfc3.0/admin/Article/editor_tableprops.asp
.asp .js polyglot
dfc3.0/admin/Article/editor_ubbhelp.asp
dfc3.0/admin/Article/saveml.asp
dfc3.0/admin/Article/special.asp
.vbs
dfc3.0/admin/Article/specialSave.asp
.asp .vbs polyglot
dfc3.0/admin/ad.asp
.asp .vbs polyglot
dfc3.0/admin/ad83upload.asp
.vbs
dfc3.0/admin/add_edit.asp
.vbs
dfc3.0/admin/add_hao.asp
.js
dfc3.0/admin/addfilm.asp
.vbs
dfc3.0/admin/addgg.asp
.vbs
dfc3.0/admin/admin.asp
dfc3.0/admin/adstyle.css
dfc3.0/admin/blgl.asp
.vbs
dfc3.0/admin/del_gbook.asp
.vbs
dfc3.0/admin/delete.asp
.vbs
dfc3.0/admin/deletegg.asp
.vbs
dfc3.0/admin/edit.asp
dfc3.0/admin/editfilm.asp
.vbs
dfc3.0/admin/editgg.asp
.vbs
dfc3.0/admin/editsave.asp
.vbs
dfc3.0/admin/etype.asp
.vbs
dfc3.0/admin/gbookgl.asp
.vbs
dfc3.0/admin/gg.asp
.vbs
dfc3.0/admin/images/MOOD1.GIF
.gif
dfc3.0/admin/images/MOOD10.GIF
.gif
dfc3.0/admin/images/MOOD11.GIF
.gif
dfc3.0/admin/images/MOOD12.GIF
.gif
dfc3.0/admin/images/MOOD2.GIF
.gif
dfc3.0/admin/images/MOOD3.GIF
.gif
dfc3.0/admin/images/MOOD4.GIF
.gif
dfc3.0/admin/images/MOOD5.GIF
.gif
dfc3.0/admin/images/MOOD6.GIF
.gif
dfc3.0/admin/images/MOOD7.GIF
.gif
dfc3.0/admin/images/MOOD8.GIF
.gif
dfc3.0/admin/images/MOOD9.GIF
.gif
dfc3.0/admin/inc.asp
.vbs
dfc3.0/admin/left.asp
dfc3.0/admin/lei.asp
.vbs
dfc3.0/admin/linkgl.asp
.vbs
dfc3.0/admin/login83.asp
.html
dfc3.0/admin/login_dfc.asp
.vbs
dfc3.0/admin/ls3fc.asp
.html .js polyglot
dfc3.0/admin/ls3fc2.asp
.vbs
dfc3.0/admin/ls3fc_inc.asp
.html .vbs polyglot
dfc3.0/admin/mimi.asp
.vbs
dfc3.0/admin/min.asp
dfc3.0/admin/pil.asp
.vbs
dfc3.0/admin/reply.asp
.vbs
dfc3.0/admin/replysave.asp
.vbs
dfc3.0/admin/saveeditfilm.asp
.vbs
dfc3.0/admin/saveeditgg.asp
.vbs
dfc3.0/admin/savefilm.asp
.vbs
dfc3.0/admin/savegg.asp
.vbs
dfc3.0/admin/savexinxi.asp
.vbs
dfc3.0/admin/top.asp
.html
dfc3.0/admin/wei.asp
dfc3.0/admin/xinxi.asp
.asp .vbs polyglot
dfc3.0/bom.asp
dfc3.0/cert/bazs.cert
dfc3.0/config.asp
.vbs
dfc3.0/conn/adconn.asp
.vbs
dfc3.0/conn/conn.asp
.vbs
dfc3.0/conn/conn1.asp
.vbs
dfc3.0/conn/conn11.asp
.vbs
dfc3.0/conn/conn2.asp
.vbs
dfc3.0/css/addfavio.js
.js
dfc3.0/css/basic.css
dfc3.0/css/css.css
dfc3.0/css/css0.css
dfc3.0/css/min.css
dfc3.0/css/style.CSS
dfc3.0/date/date3f.asp
dfc3.0/dfc.asp
.js
dfc3.0/down/uvswf.rar
.rar
uvswf.vio
.dll windows:4 windows x86 arch:x86

8cad4e609305d05b43c1c454cdcec56a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentThreadId
MultiByteToWideChar
CloseHandle
GetFileTime
GetFileSize
CreateFileA
InterlockedIncrement
InterlockedDecrement
GlobalFree
GlobalHandle
GlobalUnlock
GlobalLock
GlobalAlloc
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetPrivateProfileIntA
lstrcatA

user32

LoadStringA

viorc

viorcGetResInstance

msvcrt

_ftol
_adjust_fdiv
malloc
_initterm
??3@YAXPAX@Z
_mbsicmp
??2@YAPAXI@Z
__CxxFrameHandler
__dllonexit
_onexit
free

swfrender

SWFRenderInit
SWFRenderUninit
CreateSWFRenderObj

u32comm

u32GetAppIni
u32GetAppDataFolder
c32SetDLLErrInfo

Exports

Exports

uvCheckFormat
uvExit
uvFreeFileInfo
uvGetFileFmtNum
uvGetFileInfo
uvGetFormatInfo
uvGetMiscData
uvGetPreview
uvInit
uvInit2
uvReadVideo
uvReadVideoBegin
uvReadVideoEnd
uvReadVideoEx

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dfc3.0/dv.asp
.js
dfc3.0/dvshow.asp
.vbs
dfc3.0/dvshow2.asp
.js
dfc3.0/film.asp
.js
dfc3.0/flash.asp
.html .js polyglot
dfc3.0/fo.asp
.js
dfc3.0/gb.asp
.js
dfc3.0/gg.asp
.js
dfc3.0/guestbook.asp
.js
dfc3.0/image/dv.jpg
.jpg
dfc3.0/image/ggwj.jpg
.jpg
dfc3.0/image/hx.jpg
.jpg
dfc3.0/image/hx2.jpg
.jpg
dfc3.0/image/itn0.jpg
.jpg
dfc3.0/image/itn2.jpg
.jpg
dfc3.0/image/itn_3.jpg
.jpg
dfc3.0/image/itn_4.jpg
.jpg
dfc3.0/image/km.jpg
.jpg
dfc3.0/image/news_20081030113557.jpg
.jpg
dfc3.0/image/news_20081114152717.jpg
.jpg
dfc3.0/image/news_2008113001157.jpg
.jpg
dfc3.0/image/news_200812111745.jpg
.jpg
dfc3.0/image/news_200842291857.jpg
.jpg
dfc3.0/image/news_200993113310.jpg
.jpg
dfc3.0/image/news_20101118215034.jpg
.jpg
dfc3.0/image/news_20101118215322.jpg
.jpg
dfc3.0/image/news_2010130153442.jpg
.jpg
dfc3.0/image/news_201075101921.jpg
.jpg
dfc3.0/image/news_201113122261.jpg
.jpg
dfc3.0/image/sjb.jpg
.jpg
dfc3.0/image/xl.jpg
.jpg
dfc3.0/image/xlx.jpg
.jpg
dfc3.0/image/zttx.jpg
.jpg
dfc3.0/image/zxxqzj.jpg
.jpg
dfc3.0/images/3081532.gif
.gif
dfc3.0/images/3081532.jpg
.jpg
dfc3.0/images/3081602.gif
.gif
dfc3.0/images/3081829.gif
.gif
dfc3.0/images/3081830.gif
.gif
dfc3.0/images/3081831.gif
.gif
dfc3.0/images/8321570.jpg
.jpg
dfc3.0/images/8321739.gif
.gif
dfc3.0/images/8321761.gif
.gif
dfc3.0/images/about.gif
.gif
dfc3.0/images/an.gif
.gif
dfc3.0/images/b1.gif
.gif
dfc3.0/images/b51a.gif
.gif
dfc3.0/images/b52a.gif
.gif
dfc3.0/images/b53a.gif
.gif
dfc3.0/images/b54.gif
.gif
dfc3.0/images/blank.gif
.gif
dfc3.0/images/bt01.gif
.gif
dfc3.0/images/c11.gif
.gif
dfc3.0/images/c110.gif
.gif
dfc3.0/images/c11a.gif
.gif
dfc3.0/images/c11b.gif
.gif
dfc3.0/images/c11c.gif
.gif
dfc3.0/images/c11m.gif
.gif
dfc3.0/images/c11n.gif
.gif
dfc3.0/images/c12.gif
.gif
dfc3.0/images/c13.gif
.gif
dfc3.0/images/c14.gif
.gif
dfc3.0/images/c15.gif
.gif
dfc3.0/images/c16.gif
.gif
dfc3.0/images/c17.gif
.gif
dfc3.0/images/c18.gif
.gif
dfc3.0/images/c19bg.gif
.gif
dfc3.0/images/c21.gif
.gif
dfc3.0/images/c21a.gif
.gif
dfc3.0/images/c22.gif
.gif
dfc3.0/images/c23.gif
.gif
dfc3.0/images/c24.gif
.gif
dfc3.0/images/c25.gif
.gif
dfc3.0/images/c26.gif
.gif
dfc3.0/images/c28.gif
.gif
dfc3.0/images/c29.gif
.gif
dfc3.0/images/c34.gif
.gif
dfc3.0/images/c37.gif
.gif
dfc3.0/images/c38.gif
.gif
dfc3.0/images/c39.gif
.gif
dfc3.0/images/c52.gif
.gif
dfc3.0/images/c53.gif
.gif
dfc3.0/images/c54.gif
.gif
dfc3.0/images/c_nav2.gif
.gif
dfc3.0/images/c_navline.gif
.gif
dfc3.0/images/card1.gif
.gif
dfc3.0/images/card2.gif
.gif
dfc3.0/images/card3.gif
.gif
dfc3.0/images/card4.gif
.gif
dfc3.0/images/card5.gif
.gif
dfc3.0/images/chuli.gif
.gif
dfc3.0/images/cm01.gif
.gif
dfc3.0/images/cm02.gif
.gif
dfc3.0/images/css1.css
dfc3.0/images/css2.css
dfc3.0/images/denglu.gif
.gif
dfc3.0/images/dfc.gif
.gif
dfc3.0/images/dfc.jpg
.jpg
dfc3.0/images/dv.gif
.gif
dfc3.0/images/dvdv.gif
.gif
dfc3.0/images/egao.gif
.gif
dfc3.0/images/film.gif
.gif
dfc3.0/images/flash/piantou778.swf
dfc3.0/images/flash/piantou900.swf
dfc3.0/images/flash/xinnian.swf
dfc3.0/images/flash_02.gif
.gif
dfc3.0/images/flash_03.gif
.gif
dfc3.0/images/flash_05.gif
.gif
dfc3.0/images/flash_06.gif
.gif
dfc3.0/images/flash_12.gif
.gif
dfc3.0/images/flash_13.gif
.gif
dfc3.0/images/flash_14.gif
.gif
dfc3.0/images/fo.gif
.gif
dfc3.0/images/gbook/CSS.GIF
.gif
dfc3.0/images/gbook/EMAIL.GIF
.gif
dfc3.0/images/gbook/HOMEPAGE.GIF
.gif
dfc3.0/images/gbook/ip.gif
.gif
dfc3.0/images/gbook/liu.jpg
.jpg
dfc3.0/images/gbook/qq.gif
.gif
dfc3.0/images/gg.gif
.gif
dfc3.0/images/hz.gif
.gif
dfc3.0/images/jia.gif
.gif
dfc3.0/images/jlb.gif
.gif
dfc3.0/images/line.gif
.gif
dfc3.0/images/link/logo.gif
.gif
dfc3.0/images/liu.gif
.gif
dfc3.0/images/logo.jpg
.jpg
dfc3.0/images/m.gif
.gif
dfc3.0/images/mark01.gif
.gif
dfc3.0/images/mark02a.gif
.gif
dfc3.0/images/mark04.gif
.gif
dfc3.0/images/mark05.gif
.gif
dfc3.0/images/mv.gif
.gif
dfc3.0/images/nav_lb.gif
.gif
dfc3.0/images/s.gif
.gif
dfc3.0/images/search.gif
.gif
dfc3.0/images/today.js
.js
dfc3.0/images/topbg06.gif
.gif
dfc3.0/images/topdot06.gif
.gif
dfc3.0/images/ubbpic/Shockwave.gif
.gif
dfc3.0/images/ubbpic/bold.gif
.gif
dfc3.0/images/ubbpic/center.gif
.gif
dfc3.0/images/ubbpic/email.gif
.gif
dfc3.0/images/ubbpic/fly.gif
.gif
dfc3.0/images/ubbpic/glow.gif
.gif
dfc3.0/images/ubbpic/icon_editor_url.gif
.gif
dfc3.0/images/ubbpic/image.gif
.gif
dfc3.0/images/ubbpic/italicize.gif
.gif
dfc3.0/images/ubbpic/move.gif
.gif
dfc3.0/images/ubbpic/mp.gif
.gif
dfc3.0/images/ubbpic/qt.gif
.gif
dfc3.0/images/ubbpic/quote.gif
.gif
dfc3.0/images/ubbpic/rm.gif
.gif
dfc3.0/images/ubbpic/shadow.gif
.gif
dfc3.0/images/ubbpic/swf.gif
.gif
dfc3.0/images/ubbpic/underline.gif
.gif
dfc3.0/images/vcastr22.swf
dfc3.0/images/wbg.gif
.gif
dfc3.0/images/wen.gif
.gif
dfc3.0/images/you.gif
.gif
dfc3.0/inc/ad.js
.js
dfc3.0/inc/articleCHAR.INC
.vbs
dfc3.0/inc/checkcode.asp
.vbs
dfc3.0/inc/formsubmit.asp
.html .js polyglot
dfc3.0/inc/md5.asp
.vbs
dfc3.0/inc/ubbcode.asp
.vbs
dfc3.0/inc/ubbcode.js
.js
dfc3.0/inc/ubbcode1.asp
.vbs
dfc3.0/index.asp
.vbs
dfc3.0/link.asp
.vbs
dfc3.0/mv.asp
.js
dfc3.0/savegbook.asp
.vbs
dfc3.0/savelink.asp
.vbs
dfc3.0/search.asp
.vbs
dfc3.0/show.asp
.vbs
dfc3.0/top.asp
.html
dfc3.0/videosearch.asp
.js
dfc3.0/wen.asp
.vbs
dfc3.0/wenlist.asp
.vbs
dfc3.0/wensearch.asp
.js
dfc3.0/安装说明.txt
dfc3.0/新云软件.url
.url

Sharing

General

Malware Config

Signatures

Files

8cad4e609305d05b43c1c454cdcec56a

Headers

File Characteristics

Imports

kernel32

user32

viorc

msvcrt

swfrender

u32comm

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 4KB - Virtual size: 584B

.rsrc Size: 4KB - Virtual size: 16B

.reloc Size: 4KB - Virtual size: 524B

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 584B

.rsrc
Size: 4KB - Virtual size: 16B

.reloc
Size: 4KB - Virtual size: 524B