9bc8d6ecb78d11b7fe655d29db635b3a

Sharing

Copy URL Twitter E-mail

General

Target

9bc8d6ecb78d11b7fe655d29db635b3a
Size

1.6MB
MD5

9bc8d6ecb78d11b7fe655d29db635b3a
SHA1

543639915f5cd3d86a3a6ede1d8db10e2b98310e
SHA256

289ffb4d8eb7d635925f060bce83789a2221d1c1d11a1a06bef8a127e5b7ca1d
SHA512

d09ebefc2513a9cac6d9a16eeb2c07819ec8adf0064e07e2299718027fc11ba059ab04a025b2ad285392d5aeb328570e87806167f233f612884c3c4b034b3c7a
SSDEEP

24576:9vrwiiq3jIzkQzt49BMPHJSWgV1IbrsiJQ8tsw5bcy9hsiLqNDtGoXK+zJazaqHy:9vEiczlS9+vm1grNOYhjxuNDtpXK+9qS

Score

1^/10

Malware Config

Signatures

Files

9bc8d6ecb78d11b7fe655d29db635b3a
.rar
Admin/Article_Code.asp
.asp .js polyglot
Admin/Article_Edit.asp
.asp .js polyglot
Admin/Article_List.asp
.asp .js polyglot
Admin/Article_Move.asp
.asp .vbs polyglot
Admin/Class_Manage.asp
.asp .vbs polyglot
Admin/Guest_Edit.asp
.asp
Admin/Guest_List.asp
.asp .js polyglot
Admin/Pl_List.asp
.asp .js polyglot
Admin/Soft_Code.asp
.asp .js polyglot
Admin/Soft_Config.asp
.asp
Admin/Soft_Edit.asp
.asp .js polyglot
Admin/Soft_List.asp
.asp .js polyglot
Admin/Sys_Ads.asp
.asp .vbs polyglot
Admin/Sys_Config.asp
.asp .vbs polyglot
Admin/Sys_ConfigSiteUserDengji.asp
.asp
Admin/Sys_Vote.asp
.asp
Admin/Sys_Votelog.asp
.asp
Admin/Sys_admin.asp
.asp .vbs polyglot
Admin/Sys_db.asp
.asp .vbs polyglot
Admin/Sys_link.asp
.asp .vbs polyglot
Admin/User_Edit.asp
.asp .vbs polyglot
Admin/User_List.asp
.asp .js polyglot
Admin/ad_index.html
.html
Admin/ad_left.asp
.asp .vbs polyglot
Admin/ad_login.asp
.asp .js polyglot
Admin/ad_right.asp
.asp .vbs polyglot
Admin/ad_weblog.asp
.asp .vbs polyglot
Admin/chk.asp
.vbs
Admin/images/Style.css
Admin/images/Thumbs.db
Admin/images/Tminus.png
.png
Admin/images/ad_help.gif
.gif
Admin/images/admin_login.jpg
.jpg
Admin/images/arrow.gif
.gif
Admin/images/bookclose.gif
.gif
Admin/images/bookopen.gif
.gif
Admin/images/copy.gif
.gif
Admin/images/css.css
Admin/images/delete.gif
.gif
Admin/images/formcheckbox.gif
.gif
Admin/images/i.png
.png
Admin/images/jiantou-Control-a1.jpg
.jpg
Admin/images/jiantou-Control-b2.jpg
.jpg
Admin/images/js.js
.js
Admin/images/login_admin1.gif
.gif
Admin/images/login_admin2.gif
.gif
Admin/images/login_admin3.gif
.gif
Admin/images/nofollow.gif
.gif
Admin/images/plus.gif
.gif
Admin/images/save.gif
.gif
Admin/images/seebutton3.gif
.gif
Admin/images/tab_active_bg.gif
.gif
Admin/images/tab_active_left.gif
.gif
Admin/images/tab_active_right.gif
.gif
Admin/images/tab_bg.gif
.gif
Admin/images/tab_top_bg.gif
.gif
Admin/images/top-bj3.jpg
.jpg
Admin/images/undo.gif
.gif
Admin/images/zoommenu.gif
.gif
Admin/index.asp
Admin/myCaiji/Data/ItemTemp.asp
Admin/myCaiji/Data/Ok3w_Caiji_Data.asp
Admin/myCaiji/Inc/Common.js
.js
Admin/myCaiji/Inc/SK_Funcls.asp
.vbs
Admin/myCaiji/Inc/SelectColor.asp
.html .js polyglot
Admin/myCaiji/Inc/cj_cls.asp
.vbs
Admin/myCaiji/Inc/clsCache.asp
.vbs
Admin/myCaiji/Inc/code.asp
.vbs
Admin/myCaiji/Inc/conn.asp
.vbs
Admin/myCaiji/Inc/function.asp
.vbs
Admin/myCaiji/Inc/setup.asp
.vbs
Admin/myCaiji/Inc/ubbcode.asp
.vbs
Admin/myCaiji/SK_Collect_Help.asp
Admin/myCaiji/SK_Config.asp
.vbs
Admin/myCaiji/SK_GetArticle.asp
.vbs
Admin/myCaiji/SK_Timing.asp
.vbs
Admin/myCaiji/SK_Top.asp
.html
Admin/myCaiji/SK_checkDatabase.asp
.vbs
Admin/myCaiji/SK_class.asp
.js
Admin/myCaiji/SK_menu.asp
.js
Admin/myCaiji/Sk_Channel.asp
.vbs
Admin/myCaiji/Sk_CleanCache.asp
.asp .vbs polyglot
Admin/myCaiji/Sk_Collection.asp
.vbs
Admin/myCaiji/Sk_CollectionFast.asp
.vbs
Admin/myCaiji/Sk_Err.asp
.vbs
Admin/myCaiji/Sk_ItemDatabase.asp
.vbs
Admin/myCaiji/Sk_ItemFilters.asp
.vbs
Admin/myCaiji/Sk_ItemHistroly.asp
.vbs
Admin/myCaiji/Sk_Session.asp
Admin/myCaiji/css/admin_style.css
Admin/myCaiji/css/images/admin_bg_1.gif
.gif
Admin/myCaiji/css/images/admin_bg_2.gif
.gif
Admin/myCaiji/css/images/admin_bg_3.gif
.gif
Admin/myCaiji/css/images/admin_left_9.gif
.gif
Admin/myCaiji/css/images/admin_top_bg.gif
.gif
Admin/myCaiji/css/images/bar1.gif
.gif
Admin/myCaiji/css/images/bullet.gif
.gif
Admin/myCaiji/css/images/help.gif
.gif
Admin/myCaiji/css/images/i_home.gif
.gif
Admin/myCaiji/css/images/input.gif
.gif
Admin/myCaiji/css/images/menu-02.gif
.gif
Admin/myCaiji/css/images/menu-03.gif
.gif
Admin/myCaiji/css/images/tbdown.gif
.gif
Admin/myCaiji/css/images/tbover.gif
.gif
Admin/myCaiji/css/images/title.gif
.gif
Admin/myCaiji/css/images/title_bg_hide.gif
.gif
Admin/myCaiji/css/images/title_bg_quit.gif
.gif
Admin/myCaiji/css/images/title_bg_show.gif
.gif
Admin/myCaiji/css/images/toleft.gif
.gif
Admin/myCaiji/css/images/toleft2.gif
.gif
Admin/myCaiji/css/images/top_bt1.gif
.gif
Admin/myCaiji/css/images/top_bt2.gif
.gif
Admin/myCaiji/css/images/top_bt3.gif
.gif
Admin/myCaiji/css/images/toright.gif
.gif
Admin/myCaiji/css/images/toright2.gif
.gif
Admin/myCaiji/css/images/viewpic.gif
.gif
Admin/myCaiji/images/dl.gif
.gif
Admin/myCaiji/images/fh.gif
.gif
Admin/myCaiji/images/left_bg01.gif
.gif
Admin/myCaiji/images/left_bg02.gif
.gif
Admin/myCaiji/images/login.gif
.gif
Admin/myCaiji/images/tophelp.gif
.gif
Admin/myCaiji/index.asp
Admin/myCaiji/show.asp
.vbs
Admin/ok.asp
.asp
Admin/pass.asp
.asp
Admin/quit.asp
Admin/top.asp
.html .js polyglot
AppCode/Class/Ok3w_AdSense.asp
.vbs
AppCode/Class/Ok3w_Admin.asp
.vbs
AppCode/Class/Ok3w_Article.asp
.vbs
AppCode/Class/Ok3w_Channel.asp
.vbs
AppCode/Class/Ok3w_Class.asp
.vbs
AppCode/Class/Ok3w_Guest.asp
.vbs
AppCode/Class/Ok3w_SiteConfig.asp
.vbs
AppCode/Class/Ok3w_Soft.asp
.vbs
AppCode/Class/Ok3w_User.asp
.vbs
AppCode/Class/Ok3w_Vote.asp
.vbs
AppCode/Conn.asp
.vbs
AppCode/ConnStr.asp
.vbs
AppCode/GetCode.asp
.vbs
AppCode/Pager.asp
.vbs
AppCode/fun/CreateHtml.asp
AppCode/fun/function.asp
.vbs
AppCode/fun/html-js.asp
.html
AppCode/fun/inc_file.asp
.vbs
AppCode/fun/md5.asp
.vbs
Db/Ok3w.Net_v5.0.ASP
a2j/astr.js
a2j/class.js
.js
a2j/新云软件.url
.url
about.asp
.asp .js polyglot
book.asp
.asp
css/common.css
css/index.css
css/list.css
css/text.css
editor/asp/browse.asp
.vbs
editor/asp/config.asp
editor/asp/upfileclass.asp
.vbs
editor/asp/upload.asp
.vbs
editor/dialog/about.htm
.html .js polyglot
editor/dialog/anchor.htm
.html .js polyglot
editor/dialog/art.htm
.html .js polyglot
editor/dialog/backimage.htm
.html .js polyglot
editor/dialog/browse.htm
.html .js polyglot
editor/dialog/dialog.js
.js
editor/dialog/eWebEditorClient.CAB
.cab
eWebEditorClient.INF
eWebEditorClient.dll
.dll regsvr32 windows:4 windows x86 arch:x86

075408aabeacabe90c51dddc4557f964

Code Sign

ea:42:f4:0c:a4:cd:ac:6f:82:d8:54:f9:be:21:30:6d
Certificate

Issuer

CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US

Not Before

23/08/2007, 00:00

Not After

22/08/2008, 23:59

Subject

CN=High-point Software Ltd.,OU=WoSign Class 3 Code Signing,O=High-point Software Ltd.,L=Fuzhou,ST=Fujian,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageDigitalSignature

42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

25/04/2007, 00:00

Not After

09/07/2019, 18:40

Subject

CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09/07/1999, 18:31

Not After

09/07/2019, 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0d
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

30/04/2007, 00:00

Not After

29/04/2012, 23:59

Subject

CN=WoSign Time Stamping Signer,O=WoSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6c:1a:02:a1:2b:d9:fb:97:04:d1:5b:40:ba:da:b2:90:84:fe:b3:cf
Signer

Actual PE Digest

6c:1a:02:a1:2b:d9:fb:97:04:d1:5b:40:ba:da:b2:90:84:fe:b3:cf

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

__vbaVarTstGt
__vbaVarSub
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaAptOffset
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
__vbaNextEachVar
__vbaFreeObjList
ord516
_adj_fprem1
ord518
__vbaForEachCollAd
__vbaStrCat
__vbaVarCmpNe
ord660
__vbaSetSystemError
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
__vbaAryDestruct
__vbaLateMemSt
ord593
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
__vbaBoolVarNull
_CIsin
ord631
ord709
__vbaErase
ord632
__vbaChkstk
ord526
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaStrCmp
ord529
__vbaVarTstEq
__vbaGet4
__vbaI2I4
__vbaObjVar
DllFunctionCall
__vbaVarLateMemSt
__vbaLbound
__vbaRedimPreserve
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
__vbaNew
__vbaUI1I2
_CIsqrt
__vbaObjIs
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
__vbaStrToUnicode
ord606
_adj_fprem
_adj_fdivr_m64
ord716
ord531
__vbaFPException
__vbaInStrVar
ord532
__vbaUbound
__vbaStrVarVal
__vbaVarCat
__vbaI2Var
ord537
ord645
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaInStr
__vbaVarLateMemCallLdRf
__vbaNew2
ord570
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord685
__vbaVarTstNe
ord579
ord101
__vbaVarSetVar
ord102
__vbaI4Var
ord103
ord104
ord105
__vbaAryLock
__vbaLateMemCall
__vbaVarAdd
__vbaVarDup
__vbaStrToAnsi
ord616
__vbaFpI4
__vbaVarLateMemCallLd
__vbaVarCopy
__vbaVarSetObjAddref
ord617
__vbaLateMemCallLd
_CIatan
__vbaStrMove
__vbaCastObj
__vbaForEachVar
__vbaStrVarCopy
ord619
_allmul
_CItan
__vbaNextEachCollAd
__vbaAryUnlock
_CIexp
__vbaFreeStr
__vbaFreeObj
ord580

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
editor/dialog/eWebEditorClientInstall.exe
.exe windows:1 windows x86 arch:x86

Code Sign

ea:42:f4:0c:a4:cd:ac:6f:82:d8:54:f9:be:21:30:6d
Certificate

Issuer

CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US

Not Before

23/08/2007, 00:00

Not After

22/08/2008, 23:59

Subject

CN=High-point Software Ltd.,OU=WoSign Class 3 Code Signing,O=High-point Software Ltd.,L=Fuzhou,ST=Fujian,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageDigitalSignature

42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

25/04/2007, 00:00

Not After

09/07/2019, 18:40

Subject

CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09/07/1999, 18:31

Not After

09/07/2019, 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0d
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

30/04/2007, 00:00

Not After

29/04/2012, 23:59

Subject

CN=WoSign Time Stamping Signer,O=WoSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

78:98:f8:e5:49:1b:e3:78:ac:ba:26:cb:07:bc:70:b7:05:f8:bd:fe
Signer

Actual PE Digest

78:98:f8:e5:49:1b:e3:78:ac:ba:26:cb:07:bc:70:b7:05:f8:bd:fe

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
editor/dialog/emot.htm
.html .js polyglot
editor/dialog/eq.htm
.html .js polyglot
editor/dialog/fieldset.htm
.html .js polyglot
editor/dialog/file.htm
.html .js polyglot
editor/dialog/findreplace.htm
.html .js polyglot
editor/dialog/flash.htm
.html .js polyglot
editor/dialog/fullscreen.htm
.html .js polyglot
editor/dialog/hyperlink.htm
.html .js polyglot
editor/dialog/i_upload.htm
.html .js polyglot
editor/dialog/iframe.htm
.html .js polyglot
editor/dialog/img.htm
.html .js polyglot
editor/dialog/importexcel.htm
.html .js polyglot
editor/dialog/importword.htm
.html .js polyglot
editor/dialog/installactivex.htm
.html .js polyglot
editor/dialog/map.htm
.html .js polyglot
editor/dialog/marquee.htm
.html .js polyglot
editor/dialog/media.htm
.html .js polyglot
editor/dialog/owcexcel.htm
.html .js polyglot
editor/dialog/paragraph.htm
.html .js polyglot
editor/dialog/selcolor.htm
.html .js polyglot
editor/dialog/symbol.htm
.html .js polyglot
editor/dialog/table.htm
.html .js polyglot
editor/dialog/tablecell.htm
.html .js polyglot
editor/dialog/tablecellsplit.htm
.html .js polyglot
editor/dialog/template.htm
.html .js polyglot
editor/ewebeditor.htm
.html .js polyglot
editor/js/buttons.js
.js
editor/js/ewebeditor.js
.js
editor/js/zh-cn.js
editor/popup.htm
.html .js polyglot
editor/sharefile/image/Thumbs.db
editor/sharefile/image/back_48.jpg
.jpg
editor/sharefile/image/book_48.jpg
.jpg
editor/sharefile/image/book_lock_48.jpg
.jpg
editor/sharefile/image/book_pencil_48.jpg
.jpg
editor/sharefile/image/bullet_arrow_48.jpg
.jpg
editor/sharefile/image/bullet_arrow_v48.jpg
.jpg
editor/sharefile/image/bullet_email_48.jpg
.jpg
editor/sharefile/image/bullet_info_48.jpg
.jpg
editor/sharefile/image/cd_gray_48.jpg
.jpg
editor/sharefile/image/cd_green_48.jpg
.jpg
editor/sharefile/image/cd_yellow_48.jpg
.jpg
editor/sharefile/image/copy_48.jpg
.jpg
editor/sharefile/image/doc_48.jpg
.jpg
editor/sharefile/image/doc_faq_48.jpg
.jpg
editor/sharefile/image/doc_important_48.jpg
.jpg
editor/sharefile/image/doc_remove_48.jpg
.jpg
editor/sharefile/image/email_48.jpg
.jpg
editor/sharefile/image/email_delete_48.jpg
.jpg
editor/sharefile/image/email_new_48.jpg
.jpg
editor/sharefile/image/email_open_48.jpg
.jpg
editor/sharefile/image/email_sent_48.jpg
.jpg
editor/sharefile/image/folder_48.jpg
.jpg
editor/sharefile/image/folder_info_48.jpg
.jpg
editor/sharefile/image/folder_lock_48.jpg
.jpg
editor/sharefile/image/folder_move_48.jpg
.jpg
editor/sharefile/image/forward_48.jpg
.jpg
editor/sharefile/image/mix_clock_48.jpg
.jpg
editor/sharefile/image/mix_money_48.jpg
.jpg
editor/sharefile/image/mix_pencil_48.jpg
.jpg
editor/sharefile/image/mix_world_48.jpg
.jpg
editor/sharefile/image/paste_48.jpg
.jpg
editor/sharefile/image/stop_48.jpg
.jpg
editor/sharefile/image/symbol_faq_48.jpg
.jpg
editor/sharefile/image/symbols_download_48.jpg
.jpg
editor/sharefile/image/symbols_info_48.jpg
.jpg
editor/sharefile/image/symbols_stop_48.jpg
.jpg
editor/sharefile/image/toolbar_back_48.jpg
.jpg
editor/sharefile/image/toolbar_buy_48.jpg
.jpg
editor/sharefile/image/toolbar_calendar_48.jpg
.jpg
editor/sharefile/image/toolbar_edit_48.jpg
.jpg
editor/sharefile/image/toolbar_help_48.jpg
.jpg
editor/sharefile/image/toolbar_login_48.jpg
.jpg
editor/sharefile/image/toolbar_manual_48.jpg
.jpg
editor/sharefile/image/toolbar_open_48.jpg
.jpg
editor/sharefile/image/toolbar_print_48.jpg
.jpg
editor/sharefile/image/toolbar_remove_48.jpg
.jpg
editor/sharefile/image/toolbar_save_48.jpg
.jpg
editor/sharefile/image/toolbar_search_48.jpg
.jpg
editor/sharefile/image/trash_48.jpg
.jpg
editor/sharefile/image/trash_arrow_48.jpg
.jpg
editor/sharefile/image/trash_full_48.jpg
.jpg
editor/sharefile/image/user_48.jpg
.jpg
editor/sharefile/image/user_add_48.jpg
.jpg
editor/sharefile/image/user_delete_48.jpg
.jpg
editor/sharefile/image/user_info_48.jpg
.jpg
editor/sharefile/image/weather_clouds_48.jpg
.jpg
editor/sharefile/image/weather_ray_48.jpg
.jpg
editor/sharefile/image/weather_sun_48.jpg
.jpg
editor/sharefile/image/weather_sunny_48.jpg
.jpg
editor/skin/blue1/btnchecked.gif
.gif
editor/skin/blue1/btndown.gif
.gif
editor/skin/blue1/btnover.gif
.gif
editor/skin/blue1/buttons.gif
.gif
editor/skin/blue1/dialog.css
editor/skin/blue1/editor.css
editor/skin/blue1/editorarea.code.css
editor/skin/blue1/editorarea.css
editor/skin/blue1/editorarea.edit.css
editor/skin/blue1/editorarea.text.css
editor/skin/blue1/menuarea.css
editor/skin/blue1/tbbg.gif
.gif
editor/skin/blue2/btnchecked.gif
.gif
editor/skin/blue2/btndown.gif
.gif
editor/skin/blue2/btnover.gif
.gif
editor/skin/blue2/buttons.gif
.gif
editor/skin/blue2/dialog.css
editor/skin/blue2/editor.css
editor/skin/blue2/editorarea.code.css
editor/skin/blue2/editorarea.css
editor/skin/blue2/editorarea.edit.css
editor/skin/blue2/editorarea.text.css
editor/skin/blue2/menuarea.css
editor/skin/blue2/menubg.gif
.gif
editor/skin/green1/btnchecked.gif
.gif
editor/skin/green1/btndown.gif
.gif
editor/skin/green1/btnover.gif
.gif
editor/skin/green1/buttons.gif
.gif
editor/skin/green1/dialog.css
editor/skin/green1/editor.css
editor/skin/green1/editorarea.code.css
editor/skin/green1/editorarea.css
editor/skin/green1/editorarea.edit.css
editor/skin/green1/editorarea.text.css
editor/skin/green1/menuarea.css
editor/skin/green1/menubg.gif
.gif
editor/skin/light1/btnchecked.gif
.gif
editor/skin/light1/btndown.gif
.gif
editor/skin/light1/btnover.gif
.gif
editor/skin/light1/buttons.gif
.gif
editor/skin/light1/dialog.css
editor/skin/light1/editor.css
editor/skin/light1/editorarea.code.css
editor/skin/light1/editorarea.css
editor/skin/light1/editorarea.edit.css
editor/skin/light1/editorarea.text.css
editor/skin/light1/menuarea.css
editor/skin/light1/menubg.gif
.gif
editor/skin/office2000/btnchecked.gif
.gif
editor/skin/office2000/buttons.gif
.gif
editor/skin/office2000/dialog.css
editor/skin/office2000/editor.css
editor/skin/office2000/editorarea.code.css
editor/skin/office2000/editorarea.css
editor/skin/office2000/editorarea.edit.css
editor/skin/office2000/editorarea.text.css
editor/skin/office2000/menuarea.css
editor/skin/office2000/tbbg.gif
.gif
editor/skin/office2000/tbleft.gif
.gif
editor/skin/office2000/tbright.gif
.gif
editor/skin/office2003/btnchecked.gif
.gif
editor/skin/office2003/btndown.gif
.gif
editor/skin/office2003/btnover.gif
.gif
editor/skin/office2003/buttons.gif
.gif
editor/skin/office2003/dialog.css
editor/skin/office2003/editor.css
editor/skin/office2003/editorarea.code.css
editor/skin/office2003/editorarea.css
editor/skin/office2003/editorarea.edit.css
editor/skin/office2003/editorarea.text.css
editor/skin/office2003/menuarea.css
editor/skin/office2003/menubg.gif
.gif
editor/skin/office2003/tbbg.gif
.gif
editor/skin/office2003/tbhandle.gif
.gif
editor/skin/office2003/tbleft.gif
.gif
editor/skin/office2003/tbright.gif
.gif
editor/skin/officexp/buttons.gif
.gif
editor/skin/officexp/dialog.css
editor/skin/officexp/editor.css
editor/skin/officexp/editorarea.code.css
editor/skin/officexp/editorarea.css
editor/skin/officexp/editorarea.edit.css
editor/skin/officexp/editorarea.text.css
editor/skin/officexp/menuarea.css
editor/skin/officexp/menubg.gif
.gif
editor/skin/officexp/tbbg.gif
.gif
editor/skin/officexp/tbleft.gif
.gif
editor/skin/officexp/tbright.gif
.gif
editor/skin/red1/btnchecked.gif
.gif
editor/skin/red1/btndown.gif
.gif
editor/skin/red1/btnover.gif
.gif
editor/skin/red1/buttons.gif
.gif
editor/skin/red1/dialog.css
editor/skin/red1/editor.css
editor/skin/red1/editorarea.code.css
editor/skin/red1/editorarea.css
editor/skin/red1/editorarea.edit.css
editor/skin/red1/editorarea.text.css
editor/skin/red1/menuarea.css
editor/skin/red1/menubg.gif
.gif
editor/skin/vista1/btnchecked.gif
.gif
editor/skin/vista1/btndown.gif
.gif
editor/skin/vista1/btnover.gif
.gif
editor/skin/vista1/buttons.gif
.gif
editor/skin/vista1/dialog.css
editor/skin/vista1/editor.css
editor/skin/vista1/editorarea.code.css
editor/skin/vista1/editorarea.css
editor/skin/vista1/editorarea.edit.css
editor/skin/vista1/editorarea.text.css
editor/skin/vista1/menuarea.css
editor/skin/vista1/menubg.gif
.gif
editor/skin/vista1/sb_btn_bg.gif
.gif
editor/skin/vista1/sb_btn_bg2.gif
.gif
editor/skin/vista1/sb_btn_left.gif
.gif
editor/skin/vista1/sb_btn_left2.gif
.gif
editor/skin/vista1/sb_btn_right.gif
.gif
editor/skin/vista1/sb_btn_right2.gif
.gif
editor/skin/vista1/tbbg.gif
.gif
editor/skin/yellow1/btnchecked.gif
.gif
editor/skin/yellow1/btndown.gif
.gif
editor/skin/yellow1/btnover.gif
.gif
editor/skin/yellow1/buttons.gif
.gif
editor/skin/yellow1/dialog.css
editor/skin/yellow1/editor.css
editor/skin/yellow1/editorarea.code.css
editor/skin/yellow1/editorarea.css
editor/skin/yellow1/editorarea.edit.css
editor/skin/yellow1/editorarea.text.css
editor/skin/yellow1/menuarea.css
editor/skin/yellow1/menubg.gif
.gif
editor/style/ok3w.js
editor/style/user.js
editor/sysimage/bg/birthday.gif
.gif
editor/sysimage/bg/christmas.gif
.gif
editor/sysimage/bg/citrus.gif
.gif
editor/sysimage/bg/clear.jpg
.jpg
editor/sysimage/bg/fiesta.jpg
.jpg
editor/sysimage/bg/flower.gif
.gif
editor/sysimage/bg/gathering.jpg
.jpg
editor/sysimage/bg/glacier.jpg
.jpg
editor/sysimage/bg/grid.gif
.gif
editor/sysimage/bg/hearts.gif
.gif
editor/sysimage/bg/ivy.gif
.gif
editor/sysimage/bg/maize.jpg
.jpg
editor/sysimage/bg/nature.jpg
.jpg
editor/sysimage/bg/snow.gif
.gif
editor/sysimage/bg/tech.gif
.gif
editor/sysimage/bold.gif
.gif
editor/sysimage/emot/01.gif
.gif
editor/sysimage/emot/02.gif
.gif
editor/sysimage/emot/03.gif
.gif
editor/sysimage/emot/04.gif
.gif
editor/sysimage/emot/05.gif
.gif
editor/sysimage/emot/06.gif
.gif
editor/sysimage/emot/07.gif
.gif
editor/sysimage/emot/08.gif
.gif
editor/sysimage/emot/09.gif
.gif
editor/sysimage/emot/10.gif
.gif
editor/sysimage/emot/11.gif
.gif
editor/sysimage/emot/12.gif
.gif
editor/sysimage/emot/13.gif
.gif
editor/sysimage/emot/14.gif
.gif
editor/sysimage/emot/15.gif
.gif
editor/sysimage/emot/16.gif
.gif
editor/sysimage/emot/17.gif
.gif
editor/sysimage/emot/18.gif
.gif
editor/sysimage/emot/19.gif
.gif
editor/sysimage/emot/20.gif
.gif
editor/sysimage/emot/21.gif
.gif
editor/sysimage/emot/22.gif
.gif
editor/sysimage/emot/23.gif
.gif
editor/sysimage/emot/24.gif
.gif
editor/sysimage/emot/25.gif
.gif
editor/sysimage/emot/26.gif
.gif
editor/sysimage/emot/27.gif
.gif
editor/sysimage/emot/28.gif
.gif
editor/sysimage/emot/29.gif
.gif
editor/sysimage/emot/30.gif
.gif
editor/sysimage/emot/31.gif
.gif
editor/sysimage/emot/32.gif
.gif
editor/sysimage/emot/33.gif
.gif
editor/sysimage/emot/34.gif
.gif
editor/sysimage/emot/35.gif
.gif
editor/sysimage/emot/36.gif
.gif
editor/sysimage/emot/37.gif
.gif
editor/sysimage/emot/38.gif
.gif
editor/sysimage/emot/39.gif
.gif
editor/sysimage/emot/40.gif
.gif
editor/sysimage/emot/41.gif
.gif
editor/sysimage/emot/42.gif
.gif
editor/sysimage/emot/43.gif
.gif
editor/sysimage/emot/44.gif
.gif
editor/sysimage/emot/45.gif
.gif
editor/sysimage/emot/46.gif
.gif
editor/sysimage/emot/47.gif
.gif
editor/sysimage/emot/48.gif
.gif
editor/sysimage/emot/49.gif
.gif
editor/sysimage/emot/50.gif
.gif
editor/sysimage/ewebeditor.gif
.gif
editor/sysimage/file/audio.gif
.gif
editor/sysimage/file/avi.gif
.gif
editor/sysimage/file/bmp.gif
.gif
editor/sysimage/file/closedfolder.gif
.gif
editor/sysimage/file/code.gif
.gif
editor/sysimage/file/doc.gif
.gif
editor/sysimage/file/exe.gif
.gif
editor/sysimage/file/folder.gif
.gif
editor/sysimage/file/folderback.gif
.gif
editor/sysimage/file/gif.gif
.gif
editor/sysimage/file/hlp.gif
.gif
editor/sysimage/file/htm.gif
.gif
editor/sysimage/file/jpg.gif
.gif
editor/sysimage/file/mdb.gif
.gif
editor/sysimage/file/mid.gif
.gif
editor/sysimage/file/mp.gif
.gif
editor/sysimage/file/mp3.gif
.gif
editor/sysimage/file/openfolder.gif
.gif
editor/sysimage/file/parentfolder.gif
.gif
editor/sysimage/file/pdf.gif
.gif
editor/sysimage/file/pic.gif
.gif
editor/sysimage/file/ppt.gif
.gif
editor/sysimage/file/rar.gif
.gif
editor/sysimage/file/rm.gif
.gif
editor/sysimage/file/swf.gif
.gif
editor/sysimage/file/txt.gif
.gif
editor/sysimage/file/unknow.gif
.gif
editor/sysimage/file/xls.gif
.gif
editor/sysimage/file/zip.gif
.gif
editor/sysimage/icon16/aspx.gif
.gif
editor/sysimage/icon16/audio.gif
.gif
editor/sysimage/icon16/avi.gif
.gif
editor/sysimage/icon16/bmp.gif
.gif
editor/sysimage/icon16/chm.gif
.gif
editor/sysimage/icon16/code.gif
.gif
editor/sysimage/icon16/doc.gif
.gif
editor/sysimage/icon16/exe.gif
.gif
editor/sysimage/icon16/gif.gif
.gif
editor/sysimage/icon16/hlp.gif
.gif
editor/sysimage/icon16/htm.gif
.gif
editor/sysimage/icon16/ico.gif
.gif
editor/sysimage/icon16/jpg.gif
.gif
editor/sysimage/icon16/js.gif
.gif
editor/sysimage/icon16/mdb.gif
.gif
editor/sysimage/icon16/mid.gif
.gif
editor/sysimage/icon16/mp.gif
.gif
editor/sysimage/icon16/mp3.gif
.gif
editor/sysimage/icon16/pdf.gif
.gif
editor/sysimage/icon16/png.gif
.gif
editor/sysimage/icon16/ppt.gif
.gif
editor/sysimage/icon16/rar.gif
.gif
editor/sysimage/icon16/rm.gif
.gif
editor/sysimage/icon16/swf.gif
.gif
editor/sysimage/icon16/txt.gif
.gif
editor/sysimage/icon16/unknow.gif
.gif
editor/sysimage/icon16/xls.gif
.gif
editor/sysimage/icon16/xml.gif
.gif
editor/sysimage/icon16/zip.gif
.gif
editor/sysimage/icon32/aspx.gif
.gif
editor/sysimage/icon32/audio.gif
.gif
editor/sysimage/icon32/avi.gif
.gif
editor/sysimage/icon32/bmp.gif
.gif
editor/sysimage/icon32/chm.gif
.gif
editor/sysimage/icon32/code.gif
.gif
editor/sysimage/icon32/doc.gif
.gif
editor/sysimage/icon32/exe.gif
.gif
editor/sysimage/icon32/gif.gif
.gif
editor/sysimage/icon32/hlp.gif
.gif
editor/sysimage/icon32/htm.gif
.gif
editor/sysimage/icon32/ico.gif
.gif
editor/sysimage/icon32/jpg.gif
.gif
editor/sysimage/icon32/js.gif
.gif
editor/sysimage/icon32/mdb.gif
.gif
editor/sysimage/icon32/mid.gif
.gif
editor/sysimage/icon32/mp.gif
.gif
editor/sysimage/icon32/mp3.gif
.gif
editor/sysimage/icon32/pdf.gif
.gif
editor/sysimage/icon32/png.gif
.gif
editor/sysimage/icon32/ppt.gif
.gif
editor/sysimage/icon32/rar.gif
.gif
editor/sysimage/icon32/rm.gif
.gif
editor/sysimage/icon32/swf.gif
.gif
editor/sysimage/icon32/txt.gif
.gif
editor/sysimage/icon32/unknow.gif
.gif
editor/sysimage/icon32/xls.gif
.gif
editor/sysimage/icon32/xml.gif
.gif
editor/sysimage/icon32/zip.gif
.gif
editor/sysimage/italic.gif
.gif
editor/sysimage/loading.gif
.gif
editor/sysimage/rect.gif
.gif
editor/sysimage/rectimg.gif
.gif
editor/sysimage/space.gif
.gif
editor/sysimage/tree/arrowdown.gif
.gif
editor/sysimage/tree/arrowup.gif
.gif
editor/sysimage/tree/blank.gif
.gif
editor/sysimage/tree/branch1.gif
.gif
editor/sysimage/tree/branch2.gif
.gif
editor/sysimage/tree/dirclose.gif
.gif
editor/sysimage/tree/diropen.gif
.gif
editor/sysimage/tree/folderclose.gif
.gif
editor/sysimage/tree/folderopen.gif
.gif
editor/sysimage/tree/folderparent.gif
.gif
editor/sysimage/tree/line.gif
.gif
editor/sysimage/tree/minus1.gif
.gif
editor/sysimage/tree/minus2.gif
.gif
editor/sysimage/tree/plus1.gif
.gif
editor/sysimage/tree/plus2.gif
.gif
editor/sysimage/tree/root.gif
.gif
editor/template/0.gif
.gif
editor/template/01.htm
editor/template/02.htm
editor/template/03.htm
editor/template/04.htm
editor/template/05.htm
editor/template/06.htm
editor/template/template.js
editor/upload_class.asp
.html .vbs polyglot
editor/upload_files.asp
.asp .vbs polyglot
editor/upload_soft.asp
.html
editor/upload_upsoft.asp
.asp .vbs polyglot
images/1bj.jpg
.jpg
images/ampie/amcharts_key.txt
images/ampie/ampie.swf
images/ampie/ampie_data.asp
.xml .vbs polyglot
images/ampie/ampie_settings.xml
.xml
images/ampie/swfobject.js
.js
images/bb_bold.gif
.gif
images/bb_center.gif
.gif
images/bb_code.gif
.gif
images/bb_email.gif
.gif
images/bb_image.gif
.gif
images/bb_italicize.gif
.gif
images/bb_quote.gif
.gif
images/bb_underline.gif
.gif
images/bb_url.gif
.gif
images/book/0.jpg
.jpg
images/book/1.jpg
.jpg
images/book/10.jpg
.jpg
images/book/11.jpg
.jpg
images/book/12.jpg
.jpg
images/book/13.jpg
.jpg
images/book/14.jpg
.jpg
images/book/15.jpg
.jpg
images/book/16.jpg
.jpg
images/book/17.jpg
.jpg
images/book/18.jpg
.jpg
images/book/2.jpg
.jpg
images/book/3.jpg
.jpg
images/book/4.jpg
.jpg
images/book/5.jpg
.jpg
images/book/6.jpg
.jpg
images/book/7.jpg
.jpg
images/book/8.jpg
.jpg
images/book/9.jpg
.jpg
images/cai.gif
.gif
images/ding.gif
.gif
images/dot.gif
.gif
images/down.gif
.gif
images/favorite.gif
.gif
images/feedback.gif
.gif
images/foot_img1.jpg
.jpg
images/foot_img2.jpg
.jpg
images/foot_img3.jpg
.jpg
images/foot_img4.jpg
.jpg
images/help.gif
.gif
images/img0.gif
.gif
images/img_1.jpg
.jpg
images/img_2.jpg
.jpg
images/img_3.jpg
.jpg
images/level/1.gif
.gif
images/level/2.gif
.gif
images/level/3.gif
.gif
images/level/4.gif
.gif
images/list_bj.gif
.gif
images/logo.gif
.gif
images/mainr_dot.gif
.gif
images/mood/1.gif
.gif
images/mood/100.gif
.gif
images/mood/101.gif
.gif
images/mood/2.gif
.gif
images/mood/3.gif
.gif
images/mood/4.gif
.gif
images/mood/5.gif
.gif
images/mood/6.gif
.gif
images/mood/7.gif
.gif
images/mood/8.gif
.gif
images/more.gif
.gif
images/nav_bj.jpg
.jpg
images/nav_img.jpg
.jpg
images/nav_line.jpg
.jpg
images/news_bj.gif
.gif
images/news_title.gif
.gif
images/news_title1.jpg
.jpg
images/pic_down.gif
.gif
images/pic_down_flashget.gif
.gif
images/pic_down_xunlei.gif
.gif
images/product_title.jpg
.jpg
images/right_bj.gif
.gif
images/right_dot.gif
.gif
images/search_dot.jpg
.jpg
images/search_dot1.jpg
.jpg
images/title1.gif
.gif
images/title2.jpg
.jpg
images/top_bj.jpg
.jpg
images/top_img.jpg
.jpg
inc/Flashget_base64.asp
.html .vbs polyglot
inc/ads.asp
.asp .vbs polyglot
inc/ajax.asp
.asp .vbs polyglot
inc/download.asp
.asp .vbs polyglot
inc/excalla.asp
.asp
inc/excallb.asp
.asp
inc/foot.asp
inc/guest_ubb.asp
.html
inc/head.asp
inc/islogin.asp
.vbs
inc/pla.asp
.asp
inc/plb.asp
.asp
inc/pview.asp
.asp
inc/right.asp
inc/rss.asp
.asp
inc/soft_right.asp
inc/soft_rss.asp
.asp
inc/ssa.asp
.asp
inc/ssb.asp
.asp
inc/validcode.asp
inc/vbs.asp
.vbs
inc/vote.asp
.asp .js polyglot
inc/xunlei_base64.asp
.vbs
index.asp
.asp .vbs polyglot
js/ajax.js
.js
js/calendar.js
.js
js/date.js
.js
js/flash.js
.js
js/focus.swf
js/guest_ubb.js
.js
js/js.css
js/js.js
.js
js/js.txt
js/sinaflash.js
.js
js/swfobjectopt.js
.js
js/vote_a.js
.js
js/vote_s.js
.js
list.asp
.asp
show.asp
.asp .js polyglot
soft_index.asp
.asp .vbs polyglot
soft_list.asp
.asp
soft_show.asp
.asp .js polyglot
upfiles/file/201003/20100324173754880.rar
.rar
1250126380202.jpg
.jpg
upfiles/file/201003/20100324173828361.gif
.gif
upfiles/file/201003/2010324173841724.gif
.gif
upfiles/file/201003/2010326183539789.jpg
.jpg
upfiles/file/201003/2010326183635157.jpg
.jpg
upfiles/file/201003/2010326183652954.jpg
.jpg
upfiles/file/201003/2010326183718781.jpg
.jpg
upfiles/file/201003/201032618375571.jpg
.jpg
upfiles/file/201004/201043164440773.jpg
.jpg
upfiles/file/201004/201043164927893.gif
.gif
upfiles/file/201004/201043165021114.jpg
.jpg
upfiles/file/201004/201043165936541.jpg
.jpg
upfiles/file/201004/20104317023933.jpg
.jpg
upfiles/soft/201003/1250126380202.rar
.rar
1250126380202.jpg
.jpg
upfiles/soft/201003/24/1250126380202.rar
.rar
1250126380202.jpg
.jpg
user/index.asp
.asp .js polyglot
user/login.asp
.asp
user/reg.asp
.asp
user/style.css
在线咨询.url
.url
演示网站.url
.url

Sharing

General

Malware Config

Signatures

Files

075408aabeacabe90c51dddc4557f964

Code Sign

ea:42:f4:0c:a4:cd:ac:6f:82:d8:54:f9:be:21:30:6dCertificate

Extended Key Usages

Key Usages

42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04Certificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0dCertificate

Extended Key Usages

Key Usages

6c:1a:02:a1:2b:d9:fb:97:04:d1:5b:40:ba:da:b2:90:84:fe:b3:cfSigner

Headers

File Characteristics

Imports

msvbvm60

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 73KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 8KB - Virtual size: 4KB

.reloc Size: 8KB - Virtual size: 7KB

Code Sign

ea:42:f4:0c:a4:cd:ac:6f:82:d8:54:f9:be:21:30:6dCertificate

Extended Key Usages

Key Usages

42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04Certificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0dCertificate

Extended Key Usages

Key Usages

78:98:f8:e5:49:1b:e3:78:ac:ba:26:cb:07:bc:70:b7:05:f8:bd:feSigner

Headers

DLL Characteristics

File Characteristics

Sections

CODE Size: 36KB - Virtual size: 36KB

DATA Size: 1024B - Virtual size: 588B

BSS Size: - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: - Virtual size: 2KB

.rsrc Size: 14KB - Virtual size: 14KB

ea:42:f4:0c:a4:cd:ac:6f:82:d8:54:f9:be:21:30:6d
Certificate

42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0d
Certificate

6c:1a:02:a1:2b:d9:fb:97:04:d1:5b:40:ba:da:b2:90:84:fe:b3:cf
Signer

.text
Size: 76KB - Virtual size: 73KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 8KB - Virtual size: 4KB

.reloc
Size: 8KB - Virtual size: 7KB

ea:42:f4:0c:a4:cd:ac:6f:82:d8:54:f9:be:21:30:6d
Certificate

42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0d
Certificate

78:98:f8:e5:49:1b:e3:78:ac:ba:26:cb:07:bc:70:b7:05:f8:bd:fe
Signer

CODE
Size: 36KB - Virtual size: 36KB

DATA
Size: 1024B - Virtual size: 588B

BSS
Size: - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 2KB

.rsrc
Size: 14KB - Virtual size: 14KB