69d57ad449c855745b412c5182ac7372_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

69d57ad449c855745b412c5182ac7372_JaffaCakes118
Size

5.9MB
MD5

69d57ad449c855745b412c5182ac7372
SHA1

4d71cb039c52b1d5e76bbd71cdc0ec293aa97c75
SHA256

81bcbdc28b2b73e9ae2b33518f114c7f39295adbaa0dc8aaab193d8a72ad1ea1
SHA512

d19ecd2e6bfcf140b0aed479684b060751deb2eb15a9b5b5f897e5e698cdf14fa51072a20c0c1c345d0aba8d39bb68509bb5addb599252af12487b448df39e05
SSDEEP

98304:BDbJfAqZ7GnPQegUFPmzi5brLI9xnLg4OJ8rjoEOd8Wa9bvPgeG1DiOzFtYVn8:BvFnegUFukLIDMXIoEOWvp3gFDnzFtK8

Score

6^/10

pdf evasion

Malware Config

Signatures

Malformed or missing cross-reference table in PDF
Malformed or missing cross-reference tables are often used to evade detection
pdf evasion

Unsigned PE 12 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Bleeding Life v2/ioncube/ioncube_loader_win_4.1.dll
unpack001/Bleeding Life v2/ioncube/ioncube_loader_win_4.2.dll
unpack001/Bleeding Life v2/ioncube/ioncube_loader_win_4.3.dll
unpack001/Bleeding Life v2/ioncube/ioncube_loader_win_4.4.dll
unpack001/Bleeding Life v2/ioncube/ioncube_loader_win_5.0.dll
unpack001/Bleeding Life v2/ioncube/ioncube_loader_win_5.1.dll
unpack001/BleedingLife2/Bleeding Life v2/ioncube/ioncube_loader_win_4.1.dll
unpack001/BleedingLife2/Bleeding Life v2/ioncube/ioncube_loader_win_4.2.dll
unpack001/BleedingLife2/Bleeding Life v2/ioncube/ioncube_loader_win_4.3.dll
unpack001/BleedingLife2/Bleeding Life v2/ioncube/ioncube_loader_win_4.4.dll
unpack001/BleedingLife2/Bleeding Life v2/ioncube/ioncube_loader_win_5.0.dll
unpack001/BleedingLife2/Bleeding Life v2/ioncube/ioncube_loader_win_5.1.dll

Files

69d57ad449c855745b412c5182ac7372_JaffaCakes118
.zip

Password: infected
Bleeding Life v2/config.php
Bleeding Life v2/drop.php
Bleeding Life v2/exploits/Adobe-2008-2992.php
Bleeding Life v2/exploits/Adobe-2010-1297.php
Bleeding Life v2/exploits/Adobe-2010-1297.swf
Bleeding Life v2/exploits/Adobe-2010-2884.php
Bleeding Life v2/exploits/Adobe-2010-2884.swf
Bleeding Life v2/exploits/Adobe-80-2010-0188.php
Bleeding Life v2/exploits/Adobe-90-2010-0188.php
Bleeding Life v2/exploits/IC_Header.bin
Bleeding Life v2/exploits/IC_body.bin
.pdf
Bleeding Life v2/exploits/Java-2010-0842.jar
.jar
Bleeding Life v2/exploits/Java-2010-0842.php
Bleeding Life v2/exploits/Java-2010-0842Helper.php
Bleeding Life v2/exploits/Java-2010-3552.php
Bleeding Life v2/exploits/JavaSignedApplet.jar
.jar
Bleeding Life v2/exploits/JavaSignedApplet.php
Bleeding Life v2/exploits/UnBase64-Raw.bin
Bleeding Life v2/exploits/index.php
Bleeding Life v2/include/PluginDetect.js
.js
Bleeding Life v2/include/ascii85.php
Bleeding Life v2/include/browser.php
Bleeding Life v2/include/getJavaInfo.jar
.zip
A.class
Bleeding Life v2/include/index.php
Bleeding Life v2/include/ip-to-country.bin
Bleeding Life v2/include/ip2c.php
Bleeding Life v2/include/shellcode.php
Bleeding Life v2/include/sql.php
Bleeding Life v2/include/util.php
Bleeding Life v2/include/visitors.php
.js
Bleeding Life v2/index.php
Bleeding Life v2/install/index.php
Bleeding Life v2/ioncube/ioncube-encoded-file.php
Bleeding Life v2/ioncube/ioncube-install-assistant.php
Bleeding Life v2/ioncube/ioncube-loader-helper.php
Bleeding Life v2/ioncube/ioncube-rtl-tester.php
Bleeding Life v2/ioncube/ioncube-sysinfo.php
Bleeding Life v2/ioncube/ioncube_loader_lin_4.0.so
.elf linux x86
Bleeding Life v2/ioncube/ioncube_loader_lin_4.1.so
.elf linux x86
Bleeding Life v2/ioncube/ioncube_loader_lin_4.2.so
.elf linux x86
Bleeding Life v2/ioncube/ioncube_loader_lin_4.2_ts.so
.elf linux x86
Bleeding Life v2/ioncube/ioncube_loader_lin_4.3.so
.elf linux x86
Bleeding Life v2/ioncube/ioncube_loader_lin_4.3_ts.so
.elf linux x86
Bleeding Life v2/ioncube/ioncube_loader_lin_4.4.so
.elf linux x86
Bleeding Life v2/ioncube/ioncube_loader_lin_4.4_ts.so
.elf linux x86
Bleeding Life v2/ioncube/ioncube_loader_lin_5.0.so
.elf linux x86
Bleeding Life v2/ioncube/ioncube_loader_lin_5.0_ts.so
.elf linux x86
Bleeding Life v2/ioncube/ioncube_loader_lin_5.1.so
.elf linux x86
Bleeding Life v2/ioncube/ioncube_loader_lin_5.1_ts.so
.elf linux x86
Bleeding Life v2/ioncube/ioncube_loader_win_4.1.dll
.dll windows:4 windows x86 arch:x86

137e31cb892c72918f2fa263374a33cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

php4ts

is_smaller_or_equal_function
is_smaller_function
is_not_equal_function
is_equal_function
is_not_identical_function
is_identical_function
concat_function
shift_right_function
shift_left_function
mod_function
div_function
mul_function
sub_function
add_function
zend_timeout
zend_hash_num_elements
zend_str_tolower
boolean_xor_function
_object_init
zend_llist_destroy
zend_execute
execute
zend_register_long_constant
zend_register_ini_entries
module_registry
zend_llist_count
bitwise_or_function
zend_unregister_ini_entries
zend_ini_string
expand_filepath
php_fopen_wrapper
tsrm_thread_id
get_unary_op
increment_function
decrement_function
zend_print_variable
zend_is_true
add_char_to_string
add_string_to_string
zend_make_printable_zval
zend_ptr_stack_n_push
_convert_to_string
zend_llist_init
zend_llist_add_element
zval_used_for_init
_zval_ptr_dtor
zend_hash_init
zend_hash_clean
zend_ptr_stack_n_pop
get_active_function_name
bitwise_and_function
bitwise_xor_function
zend_extensions
zval_update_constant
convert_to_long
_object_init_ex
zend_get_constant
zend_hash_index_update_or_next_insert
convert_to_null
convert_to_boolean
convert_to_double
convert_to_array
convert_to_object
zend_fopen
zend_compile_file
zend_destroy_file_handle
zend_message_dispatcher
compile_filename
zend_make_compiled_string_description
compile_string
destroy_op_array
zend_hash_del_key_or_index
zend_hash_internal_pointer_reset_ex
zend_hash_get_current_data_ex
zend_hash_get_current_key_ex
zend_hash_move_forward_ex
zend_hash_exists
empty_string
do_bind_function_or_class
zend_ticks_function
_erealloc
add_next_index_zval
zend_parse_parameters
core_globals_id
zend_get_executed_filename
php_body_write
_zend_bailout
_estrdup
add_next_index_string
_estrndup
_array_init
zend_wrong_param_count
zend_startup_module
executor_globals_id
_zval_dtor
alloc_globals_id
_zval_copy_ctor
destroy_zend_function
zend_error
_emalloc
_efree
zend_hash_destroy
compiler_globals_id
zend_hash_find
zend_hash_add_or_update
function_add_ref
ts_resource_ex
zend_hash_index_find
ts_allocate_id

kernel32

CloseHandle
CreateFileMappingA
GetFileSize
GetLastError
CreateFileA
UnmapViewOfFile
LocalFree
FormatMessageA
GetProcAddress
DisableThreadLibraryCalls
SetLastError
GlobalAlloc
GlobalFree
FreeLibrary
GetTickCount
LoadLibraryA
MapViewOfFile

ws2_32

WSAStartup
htonl

msvcrt

strftime
fputs
tolower
_setjmp3
toupper
_getpid
_iob
strncmp
_vsnprintf
vsprintf
_ftol
exit
longjmp
sprintf
strstr
time
localtime
atoi
_errno
fclose
fwrite
fread
fopen
__mb_cur_max
_isctype
_pctype
strchr
rand
malloc
realloc
free
atof
clock
calloc
_initterm
_adjust_fdiv
_fstat
_fileno
_unlink
_strdup
srand
_isatty
_stat

Exports

Exports

extension_version_info
get_module
zend_extension_entry

Sections

.text
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bleeding Life v2/ioncube/ioncube_loader_win_4.2.dll
.dll windows:4 windows x86 arch:x86

c3b7dc31d200b9d632e59bd7c52aa380

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

php4ts

is_smaller_function
is_not_equal_function
is_equal_function
is_not_identical_function
is_identical_function
concat_function
shift_right_function
shift_left_function
mod_function
div_function
mul_function
sub_function
add_function
zend_timeout
zend_hash_num_elements
zend_str_tolower
bitwise_xor_function
_object_init
zend_llist_destroy
zend_execute
execute
zend_register_long_constant
zend_register_ini_entries
module_registry
zend_llist_count
is_smaller_or_equal_function
zend_unregister_ini_entries
zend_ini_string
expand_filepath
php_fopen_wrapper
tsrm_thread_id
boolean_xor_function
_zval_dtor
get_unary_op
zend_error
_zval_copy_ctor
increment_function
decrement_function
zend_print_variable
zend_is_true
add_char_to_string
add_string_to_string
zend_make_printable_zval
zend_ptr_stack_n_push
_convert_to_string
zend_llist_init
zend_llist_add_element
zval_used_for_init
_zval_ptr_dtor
bitwise_or_function
zend_extensions
bitwise_and_function
zend_hash_init
zend_hash_clean
zend_ptr_stack_n_pop
get_active_function_name
zval_update_constant
convert_to_long
_object_init_ex
zend_get_constant
zend_hash_index_update_or_next_insert
convert_to_null
convert_to_boolean
convert_to_double
convert_to_array
convert_to_object
zend_fopen
zend_compile_file
zend_destroy_file_handle
zend_message_dispatcher
compile_filename
zend_make_compiled_string_description
compile_string
destroy_op_array
zend_hash_del_key_or_index
zend_hash_internal_pointer_reset_ex
zend_hash_get_current_data_ex
zend_hash_get_current_key_ex
zend_hash_move_forward_ex
zend_hash_exists
empty_string
do_bind_function_or_class
zend_ticks_function
_erealloc
add_next_index_zval
zend_parse_parameters
core_globals_id
zend_get_executed_filename
php_body_write
_zend_bailout
_estrdup
add_next_index_string
_estrndup
_array_init
zend_wrong_param_count
zend_startup_module
destroy_zend_function
executor_globals_id
_emalloc
_efree
zend_hash_destroy
compiler_globals_id
zend_hash_find
zend_hash_add_or_update
function_add_ref
ts_resource_ex
zend_hash_index_find
ts_allocate_id

kernel32

CloseHandle
CreateFileMappingA
GetFileSize
GetLastError
CreateFileA
UnmapViewOfFile
LocalFree
FormatMessageA
GetProcAddress
DisableThreadLibraryCalls
SetLastError
GlobalAlloc
GlobalFree
FreeLibrary
GetTickCount
LoadLibraryA
MapViewOfFile

ws2_32

htonl
WSAStartup

msvcrt

strftime
fputs
tolower
_setjmp3
toupper
_getpid
_iob
strncmp
_vsnprintf
vsprintf
_ftol
exit
longjmp
sprintf
strstr
time
localtime
atoi
_errno
fclose
fwrite
fread
fopen
__mb_cur_max
_isctype
_pctype
strchr
rand
malloc
realloc
free
atof
clock
calloc
_initterm
_adjust_fdiv
_fstat
_fileno
_unlink
_strdup
srand
_isatty
_stat

Exports

Exports

extension_version_info
get_module
zend_extension_entry

Sections

.text
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bleeding Life v2/ioncube/ioncube_loader_win_4.3.dll
.dll windows:4 windows x86 arch:x86

a2b82152f2de706df1b6efcfdf7dc5e2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

php4ts

is_smaller_or_equal_function
is_smaller_function
is_not_equal_function
is_equal_function
is_not_identical_function
is_identical_function
concat_function
shift_right_function
shift_left_function
mod_function
div_function
mul_function
sub_function
add_function
zend_timeout
zend_execute_internal
zend_hash_num_elements
boolean_xor_function
zend_hash_index_find
_object_init
zend_llist_destroy
zend_execute
execute
zend_register_long_constant
zend_register_ini_entries
module_registry
bitwise_or_function
zend_extensions
zend_unregister_ini_entries
zend_ini_string
expand_filepath
_php_stream_open_wrapper_as_file
tsrm_thread_id
_zval_dtor
get_unary_op
zend_error
_zval_copy_ctor
increment_function
decrement_function
zend_print_variable
zend_is_true
add_char_to_string
add_string_to_string
zend_make_printable_zval
zend_ptr_stack_n_push
_convert_to_string
zend_llist_init
zend_llist_add_element
zval_used_for_init
_zval_ptr_dtor
zend_hash_init
bitwise_and_function
bitwise_xor_function
zend_llist_count
zend_hash_clean
zend_ptr_stack_n_pop
get_active_function_name
zval_update_constant
convert_to_long
_object_init_ex
zend_get_constant
zend_hash_index_update_or_next_insert
convert_to_null
convert_to_boolean
convert_to_double
convert_to_array
convert_to_object
zend_fopen
zend_compile_file
zend_destroy_file_handle
zend_message_dispatcher
compile_filename
zend_make_compiled_string_description
compile_string
destroy_op_array
zend_hash_del_key_or_index
zend_hash_internal_pointer_reset_ex
zend_hash_get_current_data_ex
zend_hash_get_current_key_ex
zend_hash_move_forward_ex
zend_hash_exists
empty_string
zend_alter_ini_entry
do_bind_function_or_class
zend_ticks_function
_erealloc
add_next_index_zval
zend_parse_parameters
core_globals_id
zend_get_executed_filename
php_body_write
_zend_bailout
_estrdup
add_next_index_string
_estrndup
_array_init
zend_wrong_param_count
zend_startup_module
destroy_zend_function
executor_globals_id
_emalloc
_efree
zend_hash_destroy
compiler_globals_id
zend_hash_find
zend_hash_add_or_update
function_add_ref
ts_resource_ex
zend_str_tolower
ts_allocate_id

kernel32

CloseHandle
CreateFileMappingA
GetFileSize
GetLastError
CreateFileA
UnmapViewOfFile
LocalFree
FormatMessageA
GetProcAddress
DisableThreadLibraryCalls
SetLastError
GlobalAlloc
GlobalFree
FreeLibrary
GetTickCount
LoadLibraryA
MapViewOfFile

ws2_32

WSAStartup
htonl

msvcrt

strftime
fputs
tolower
_setjmp3
toupper
_getpid
_iob
strncmp
_vsnprintf
vsprintf
_ftol
exit
longjmp
sprintf
strstr
time
localtime
atoi
_errno
fclose
fwrite
fread
fopen
__mb_cur_max
_isctype
_pctype
strchr
rand
malloc
realloc
free
atof
clock
calloc
_initterm
_adjust_fdiv
_fstat
_fileno
_unlink
_strdup
srand
_isatty
_stat

Exports

Exports

extension_version_info
get_module
zend_extension_entry

Sections

.text
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bleeding Life v2/ioncube/ioncube_loader_win_4.4.dll
.dll windows:4 windows x86 arch:x86

a2b82152f2de706df1b6efcfdf7dc5e2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

php4ts

is_smaller_or_equal_function
is_smaller_function
is_not_equal_function
is_equal_function
is_not_identical_function
is_identical_function
concat_function
shift_right_function
shift_left_function
mod_function
div_function
mul_function
sub_function
add_function
zend_timeout
zend_execute_internal
zend_hash_num_elements
boolean_xor_function
zend_hash_index_find
_object_init
zend_llist_destroy
zend_execute
execute
zend_register_long_constant
zend_register_ini_entries
module_registry
bitwise_or_function
zend_extensions
zend_unregister_ini_entries
zend_ini_string
expand_filepath
_php_stream_open_wrapper_as_file
tsrm_thread_id
_zval_dtor
get_unary_op
zend_error
_zval_copy_ctor
increment_function
decrement_function
zend_print_variable
zend_is_true
add_char_to_string
add_string_to_string
zend_make_printable_zval
zend_ptr_stack_n_push
_convert_to_string
zend_llist_init
zend_llist_add_element
zval_used_for_init
_zval_ptr_dtor
zend_hash_init
bitwise_and_function
bitwise_xor_function
zend_llist_count
zend_hash_clean
zend_ptr_stack_n_pop
get_active_function_name
zval_update_constant
convert_to_long
_object_init_ex
zend_get_constant
zend_hash_index_update_or_next_insert
convert_to_null
convert_to_boolean
convert_to_double
convert_to_array
convert_to_object
zend_fopen
zend_compile_file
zend_destroy_file_handle
zend_message_dispatcher
compile_filename
zend_make_compiled_string_description
compile_string
destroy_op_array
zend_hash_del_key_or_index
zend_hash_internal_pointer_reset_ex
zend_hash_get_current_data_ex
zend_hash_get_current_key_ex
zend_hash_move_forward_ex
zend_hash_exists
empty_string
zend_alter_ini_entry
do_bind_function_or_class
zend_ticks_function
_erealloc
add_next_index_zval
zend_parse_parameters
core_globals_id
zend_get_executed_filename
php_body_write
_zend_bailout
_estrdup
add_next_index_string
_estrndup
_array_init
zend_wrong_param_count
zend_startup_module
destroy_zend_function
executor_globals_id
_emalloc
_efree
zend_hash_destroy
compiler_globals_id
zend_hash_find
zend_hash_add_or_update
function_add_ref
ts_resource_ex
zend_str_tolower
ts_allocate_id

kernel32

CloseHandle
CreateFileMappingA
GetFileSize
GetLastError
CreateFileA
UnmapViewOfFile
LocalFree
FormatMessageA
GetProcAddress
DisableThreadLibraryCalls
SetLastError
GlobalAlloc
GlobalFree
FreeLibrary
GetTickCount
LoadLibraryA
MapViewOfFile

ws2_32

WSAStartup
htonl

msvcrt

strftime
fputs
tolower
_setjmp3
toupper
_getpid
_iob
strncmp
_vsnprintf
vsprintf
_ftol
exit
longjmp
sprintf
strstr
time
localtime
atoi
_errno
fclose
fwrite
fread
fopen
__mb_cur_max
_isctype
_pctype
strchr
rand
malloc
realloc
free
atof
clock
calloc
_initterm
_adjust_fdiv
_fstat
_fileno
_unlink
_strdup
srand
_isatty
_stat

Exports

Exports

extension_version_info
get_module
zend_extension_entry

Sections

.text
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bleeding Life v2/ioncube/ioncube_loader_win_5.0.dll
.dll windows:4 windows x86 arch:x86

32c4a2fa0ad7aa287a131e7ec5219f86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

php5ts

zend_llist_add_element
zend_unregister_ini_entries
zend_ini_string
zend_is_auto_global
expand_filepath
zend_hash_apply_with_argument
zend_hash_merge_ex
_zend_hash_merge
zval_add_ref
zend_do_inherit_interfaces
function_add_ref
zend_unmangle_property_name
module_registry
_zend_hash_quick_add_or_update
zend_hash_quick_find
zend_strndup
zend_hash_exists
zend_opcode_handlers
zend_fopen
zend_hash_get_current_key_ex
ap_php_vsnprintf
tsrm_thread_id
zend_hash_get_current_data_ex
zend_hash_move_forward_ex
zend_register_ini_entries
zend_register_long_constant
_erealloc
add_next_index_zval
zend_parse_parameters
core_globals_id
zend_get_executed_filename
php_body_write
_zend_bailout
_estrdup
add_next_index_string
php_sprintf
zend_wrong_param_count
zend_startup_module
_safe_emalloc
zend_timeout
zend_extensions
_php_stream_open_wrapper_as_file
zend_llist_count
execute
zend_execute
zend_iterator_wrap
zend_hash_internal_pointer_reset_ex
zend_fetch_class
zend_get_class_entry
instanceof_function
zend_hash_clean
zend_object_store_ctor_failed
zend_ptr_stack_n_pop
zend_std_unset_static_property
_zend_hash_init
zend_std_get_static_property
zval_update_constant
zend_print_variable
compiler_globals_id
_array_init
_zend_hash_index_update_or_next_insert
decrement_function
increment_function
convert_to_long
zend_throw_exception_hook
zend_stream_open
zend_compile_file
zend_destroy_file_handle
zend_file_handle_dtor
zend_message_dispatcher
compile_filename
zend_make_compiled_string_description
compile_string
_zval_ptr_dtor
destroy_op_array
zval_used_for_init
zend_hash_del_key_or_index
_zend_hash_add_or_update
do_bind_class
_object_init_ex
_estrndup
empty_string
zend_str_tolower
zend_str_tolower_copy
executor_globals_id
zend_ptr_stack_n_push
zend_initialize_class_data
zend_function_dtor
_zval_copy_ctor
_convert_to_string
zend_hash_find
zend_error
zend_std_get_static_method
_zval_dtor
_emalloc
zend_hash_destroy
_efree
ts_resource_ex
zend_mangle_property_name
ts_allocate_id

kernel32

CloseHandle
CreateFileMappingA
GetFileSize
GetLastError
CreateFileA
UnmapViewOfFile
LocalFree
FormatMessageA
GetProcAddress
DisableThreadLibraryCalls
SetLastError
GlobalAlloc
GlobalFree
FreeLibrary
GetTickCount
LoadLibraryA
MapViewOfFile

ws2_32

htonl
WSAStartup

msvcrt

atof
localtime
strftime
fputs
tolower
_setjmp3
toupper
_getpid
_iob
strncmp
vsprintf
exit
longjmp
strtol
_ftol
strstr
clock
srand
atoi
_errno
fclose
fwrite
fread
fopen
__mb_cur_max
_isctype
_pctype
strchr
rand
malloc
realloc
free
abort
calloc
_initterm
_adjust_fdiv
_stricmp
_fstat
_fileno
_unlink
_strdup
time
_isatty
_stat

Exports

Exports

extension_version_info
get_module
zend_extension_entry

Sections

.text
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bleeding Life v2/ioncube/ioncube_loader_win_5.1.dll
.dll windows:4 windows x86 arch:x86

d9b28e2769e09ff015c763a1503943cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

php5ts

mul_function
div_function
mod_function
shift_left_function
shift_right_function
concat_function
is_identical_function
is_not_identical_function
is_equal_function
is_not_equal_function
is_smaller_function
is_smaller_or_equal_function
bitwise_or_function
bitwise_and_function
bitwise_xor_function
boolean_xor_function
_zend_hash_index_update_or_next_insert
_array_init
zend_hash_index_find
add_char_to_string
add_string_to_string
increment_function
decrement_function
zend_unmangle_property_name_ex
zend_hash_get_current_data_ex
zend_iterator_unwrap
_object_init
zend_get_constant
zend_throw_exception_hook
compiler_globals_id
zend_ptr_stack_n_push
zend_str_tolower
zend_execute
execute
zend_timeout
_safe_emalloc
_zend_bailout
zend_wrong_param_count
php_sprintf
add_next_index_string
_estrdup
php_body_write
zend_get_executed_filename
core_globals_id
sub_function
add_next_index_zval
zend_register_long_constant
zend_register_ini_entries
module_registry
zend_llist_count
ap_php_vsnprintf
zend_llist_add_element
zend_unregister_ini_entries
zend_ini_string
zend_is_auto_global
expand_filepath
zend_hash_apply_with_argument
zend_hash_merge_ex
_zend_hash_merge
zval_add_ref
zend_do_inherit_interfaces
function_add_ref
zend_unmangle_property_name
zend_mangle_property_name
zend_strndup
zend_hash_exists
zend_vm_set_opcode_handler
zend_fopen
_php_stream_open_wrapper_as_file
tsrm_thread_id
zend_iterator_wrap
zend_throw_exception_ex
zend_hash_internal_pointer_reset_ex
zend_hash_get_current_key_type_ex
zend_objects_get_address
zend_hash_move_forward_ex
zend_hash_get_current_key_ex
zend_check_property_access
zend_std_unset_static_property
zend_hash_del_key_or_index
zend_stream_open
zend_compile_file
zend_destroy_file_handle
zend_file_handle_dtor
zend_message_dispatcher
compile_filename
zend_make_compiled_string_description
compile_string
add_function
zend_parse_parameters
zend_ticks_function
destroy_op_array
convert_to_null
convert_to_boolean
convert_to_double
zend_make_printable_zval
convert_to_array
convert_to_object
zend_check_protected
zend_throw_exception_object
zend_hash_num_elements
zend_std_get_static_property
zend_std_cast_object_tostring
zend_print_variable
boolean_not_function
bitwise_not_function
_estrndup
convert_to_long
zval_update_constant
zend_str_tolower_copy
zend_std_get_static_method
_convert_to_string
zend_do_implement_interface
zend_hash_find
do_bind_inherited_class
do_bind_class
zend_extensions
zend_llist_apply_with_argument
zend_alter_ini_entry
_object_init_ex
zend_get_object_classname
_zval_copy_ctor_func
_zend_hash_quick_add_or_update
zend_hash_quick_find
_zval_dtor_func
get_active_class_name
get_active_function_name
_zend_hash_add_or_update
zend_fetch_class
zend_get_class_entry
instanceof_function
_erealloc
zend_error
executor_globals_id
zend_initialize_class_data
zend_get_hash_value
zend_function_dtor
zval_used_for_init
_zval_ptr_dtor
_zend_hash_init
zend_hash_clean
zend_object_store_ctor_failed
_emalloc
zend_hash_destroy
_efree
ts_free_id
ts_resource_ex
zend_startup_module
ts_allocate_id

kernel32

CloseHandle
CreateFileMappingA
GetFileSize
GetLastError
CreateFileA
UnmapViewOfFile
LocalFree
FormatMessageA
GetProcAddress
DisableThreadLibraryCalls
SetLastError
GlobalAlloc
GlobalFree
FreeLibrary
GetTickCount
LoadLibraryA
MapViewOfFile

ws2_32

htonl
WSAStartup

msvcrt

atof
localtime
strftime
fputs
tolower
_setjmp3
toupper
_getpid
_iob
strncmp
vsprintf
exit
longjmp
strtol
_ftol
strstr
clock
srand
atoi
_errno
fclose
fwrite
fread
fopen
__mb_cur_max
_isctype
_pctype
strchr
rand
malloc
realloc
free
abort
calloc
_initterm
_adjust_fdiv
_stricmp
_fstat
_fileno
_unlink
_strdup
time
_isatty
_stat

Exports

Exports

extension_version_info
get_module
zend_extension_entry

Sections

.text
Size: 336KB - Virtual size: 335KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bleeding Life v2/ioncube/license.txt
Bleeding Life v2/ioncube/readme.txt
Bleeding Life v2/load.php
Bleeding Life v2/statistics/clear.php
Bleeding Life v2/statistics/css/styles.css
Bleeding Life v2/statistics/images/clear.png
.png
Bleeding Life v2/statistics/images/clear_hover.png
.png
Bleeding Life v2/statistics/images/logo.png
.png
Bleeding Life v2/statistics/images/logout.png
.png
Bleeding Life v2/statistics/images/logout_hover.png
.png
Bleeding Life v2/statistics/images/middlebar.png
.png
Bleeding Life v2/statistics/images/spacer.png
.png
Bleeding Life v2/statistics/images/spacer2.png
.png
Bleeding Life v2/statistics/index.php
Bleeding Life v2/statistics/login.php
Bleeding Life v2/statistics/logout.php
Bleeding Life v2/statistics/statistics.php
Bleeding Life v2/statistics/update.php
Bleeding Life v2/visitor.php
BleedingLife2/Bleeding Life v2/config.php
BleedingLife2/Bleeding Life v2/drop.php
BleedingLife2/Bleeding Life v2/exploits/Adobe-2008-2992.php
BleedingLife2/Bleeding Life v2/exploits/Adobe-2010-1297.php
BleedingLife2/Bleeding Life v2/exploits/Adobe-2010-1297.swf
BleedingLife2/Bleeding Life v2/exploits/Adobe-2010-2884.php
BleedingLife2/Bleeding Life v2/exploits/Adobe-2010-2884.swf
BleedingLife2/Bleeding Life v2/exploits/Adobe-80-2010-0188.php
BleedingLife2/Bleeding Life v2/exploits/Adobe-90-2010-0188.php
BleedingLife2/Bleeding Life v2/exploits/IC_Header.bin
BleedingLife2/Bleeding Life v2/exploits/IC_body.bin
.pdf
BleedingLife2/Bleeding Life v2/exploits/Java-2010-0842.jar
.jar
BleedingLife2/Bleeding Life v2/exploits/Java-2010-0842.php
BleedingLife2/Bleeding Life v2/exploits/Java-2010-0842Helper.php
BleedingLife2/Bleeding Life v2/exploits/Java-2010-3552.php
BleedingLife2/Bleeding Life v2/exploits/JavaSignedApplet.jar
.jar
BleedingLife2/Bleeding Life v2/exploits/JavaSignedApplet.php
BleedingLife2/Bleeding Life v2/exploits/UnBase64-Raw.bin
BleedingLife2/Bleeding Life v2/exploits/index.php
BleedingLife2/Bleeding Life v2/include/PluginDetect.js
.js
BleedingLife2/Bleeding Life v2/include/ascii85.php
BleedingLife2/Bleeding Life v2/include/browser.php
BleedingLife2/Bleeding Life v2/include/getJavaInfo.jar
.zip
A.class
BleedingLife2/Bleeding Life v2/include/index.php
BleedingLife2/Bleeding Life v2/include/ip-to-country.bin
BleedingLife2/Bleeding Life v2/include/ip2c.php
BleedingLife2/Bleeding Life v2/include/shellcode.php
BleedingLife2/Bleeding Life v2/include/sql.php
BleedingLife2/Bleeding Life v2/include/util.php
BleedingLife2/Bleeding Life v2/include/visitors.php
.js
BleedingLife2/Bleeding Life v2/index.php
BleedingLife2/Bleeding Life v2/install/index.php
BleedingLife2/Bleeding Life v2/ioncube/ioncube-encoded-file.php
BleedingLife2/Bleeding Life v2/ioncube/ioncube-install-assistant.php
BleedingLife2/Bleeding Life v2/ioncube/ioncube-loader-helper.php
BleedingLife2/Bleeding Life v2/ioncube/ioncube-rtl-tester.php
BleedingLife2/Bleeding Life v2/ioncube/ioncube-sysinfo.php
BleedingLife2/Bleeding Life v2/ioncube/ioncube_loader_lin_4.0.so
.elf linux x86
BleedingLife2/Bleeding Life v2/ioncube/ioncube_loader_lin_4.1.so
.elf linux x86
BleedingLife2/Bleeding Life v2/ioncube/ioncube_loader_lin_4.2.so
.elf linux x86
BleedingLife2/Bleeding Life v2/ioncube/ioncube_loader_lin_4.2_ts.so
.elf linux x86
BleedingLife2/Bleeding Life v2/ioncube/ioncube_loader_lin_4.3.so
.elf linux x86
BleedingLife2/Bleeding Life v2/ioncube/ioncube_loader_lin_4.3_ts.so
.elf linux x86
BleedingLife2/Bleeding Life v2/ioncube/ioncube_loader_lin_4.4.so
.elf linux x86
BleedingLife2/Bleeding Life v2/ioncube/ioncube_loader_lin_4.4_ts.so
.elf linux x86
BleedingLife2/Bleeding Life v2/ioncube/ioncube_loader_lin_5.0.so
.elf linux x86
BleedingLife2/Bleeding Life v2/ioncube/ioncube_loader_lin_5.0_ts.so
.elf linux x86
BleedingLife2/Bleeding Life v2/ioncube/ioncube_loader_lin_5.1.so
.elf linux x86
BleedingLife2/Bleeding Life v2/ioncube/ioncube_loader_lin_5.1_ts.so
.elf linux x86
BleedingLife2/Bleeding Life v2/ioncube/ioncube_loader_win_4.1.dll
.dll windows:4 windows x86 arch:x86

137e31cb892c72918f2fa263374a33cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

php4ts

is_smaller_or_equal_function
is_smaller_function
is_not_equal_function
is_equal_function
is_not_identical_function
is_identical_function
concat_function
shift_right_function
shift_left_function
mod_function
div_function
mul_function
sub_function
add_function
zend_timeout
zend_hash_num_elements
zend_str_tolower
boolean_xor_function
_object_init
zend_llist_destroy
zend_execute
execute
zend_register_long_constant
zend_register_ini_entries
module_registry
zend_llist_count
bitwise_or_function
zend_unregister_ini_entries
zend_ini_string
expand_filepath
php_fopen_wrapper
tsrm_thread_id
get_unary_op
increment_function
decrement_function
zend_print_variable
zend_is_true
add_char_to_string
add_string_to_string
zend_make_printable_zval
zend_ptr_stack_n_push
_convert_to_string
zend_llist_init
zend_llist_add_element
zval_used_for_init
_zval_ptr_dtor
zend_hash_init
zend_hash_clean
zend_ptr_stack_n_pop
get_active_function_name
bitwise_and_function
bitwise_xor_function
zend_extensions
zval_update_constant
convert_to_long
_object_init_ex
zend_get_constant
zend_hash_index_update_or_next_insert
convert_to_null
convert_to_boolean
convert_to_double
convert_to_array
convert_to_object
zend_fopen
zend_compile_file
zend_destroy_file_handle
zend_message_dispatcher
compile_filename
zend_make_compiled_string_description
compile_string
destroy_op_array
zend_hash_del_key_or_index
zend_hash_internal_pointer_reset_ex
zend_hash_get_current_data_ex
zend_hash_get_current_key_ex
zend_hash_move_forward_ex
zend_hash_exists
empty_string
do_bind_function_or_class
zend_ticks_function
_erealloc
add_next_index_zval
zend_parse_parameters
core_globals_id
zend_get_executed_filename
php_body_write
_zend_bailout
_estrdup
add_next_index_string
_estrndup
_array_init
zend_wrong_param_count
zend_startup_module
executor_globals_id
_zval_dtor
alloc_globals_id
_zval_copy_ctor
destroy_zend_function
zend_error
_emalloc
_efree
zend_hash_destroy
compiler_globals_id
zend_hash_find
zend_hash_add_or_update
function_add_ref
ts_resource_ex
zend_hash_index_find
ts_allocate_id

kernel32

CloseHandle
CreateFileMappingA
GetFileSize
GetLastError
CreateFileA
UnmapViewOfFile
LocalFree
FormatMessageA
GetProcAddress
DisableThreadLibraryCalls
SetLastError
GlobalAlloc
GlobalFree
FreeLibrary
GetTickCount
LoadLibraryA
MapViewOfFile

ws2_32

WSAStartup
htonl

msvcrt

strftime
fputs
tolower
_setjmp3
toupper
_getpid
_iob
strncmp
_vsnprintf
vsprintf
_ftol
exit
longjmp
sprintf
strstr
time
localtime
atoi
_errno
fclose
fwrite
fread
fopen
__mb_cur_max
_isctype
_pctype
strchr
rand
malloc
realloc
free
atof
clock
calloc
_initterm
_adjust_fdiv
_fstat
_fileno
_unlink
_strdup
srand
_isatty
_stat

Exports

Exports

extension_version_info
get_module
zend_extension_entry

Sections

.text
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BleedingLife2/Bleeding Life v2/ioncube/ioncube_loader_win_4.2.dll
.dll windows:4 windows x86 arch:x86

c3b7dc31d200b9d632e59bd7c52aa380

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

php4ts

is_smaller_function
is_not_equal_function
is_equal_function
is_not_identical_function
is_identical_function
concat_function
shift_right_function
shift_left_function
mod_function
div_function
mul_function
sub_function
add_function
zend_timeout
zend_hash_num_elements
zend_str_tolower
bitwise_xor_function
_object_init
zend_llist_destroy
zend_execute
execute
zend_register_long_constant
zend_register_ini_entries
module_registry
zend_llist_count
is_smaller_or_equal_function
zend_unregister_ini_entries
zend_ini_string
expand_filepath
php_fopen_wrapper
tsrm_thread_id
boolean_xor_function
_zval_dtor
get_unary_op
zend_error
_zval_copy_ctor
increment_function
decrement_function
zend_print_variable
zend_is_true
add_char_to_string
add_string_to_string
zend_make_printable_zval
zend_ptr_stack_n_push
_convert_to_string
zend_llist_init
zend_llist_add_element
zval_used_for_init
_zval_ptr_dtor
bitwise_or_function
zend_extensions
bitwise_and_function
zend_hash_init
zend_hash_clean
zend_ptr_stack_n_pop
get_active_function_name
zval_update_constant
convert_to_long
_object_init_ex
zend_get_constant
zend_hash_index_update_or_next_insert
convert_to_null
convert_to_boolean
convert_to_double
convert_to_array
convert_to_object
zend_fopen
zend_compile_file
zend_destroy_file_handle
zend_message_dispatcher
compile_filename
zend_make_compiled_string_description
compile_string
destroy_op_array
zend_hash_del_key_or_index
zend_hash_internal_pointer_reset_ex
zend_hash_get_current_data_ex
zend_hash_get_current_key_ex
zend_hash_move_forward_ex
zend_hash_exists
empty_string
do_bind_function_or_class
zend_ticks_function
_erealloc
add_next_index_zval
zend_parse_parameters
core_globals_id
zend_get_executed_filename
php_body_write
_zend_bailout
_estrdup
add_next_index_string
_estrndup
_array_init
zend_wrong_param_count
zend_startup_module
destroy_zend_function
executor_globals_id
_emalloc
_efree
zend_hash_destroy
compiler_globals_id
zend_hash_find
zend_hash_add_or_update
function_add_ref
ts_resource_ex
zend_hash_index_find
ts_allocate_id

kernel32

CloseHandle
CreateFileMappingA
GetFileSize
GetLastError
CreateFileA
UnmapViewOfFile
LocalFree
FormatMessageA
GetProcAddress
DisableThreadLibraryCalls
SetLastError
GlobalAlloc
GlobalFree
FreeLibrary
GetTickCount
LoadLibraryA
MapViewOfFile

ws2_32

htonl
WSAStartup

msvcrt

strftime
fputs
tolower
_setjmp3
toupper
_getpid
_iob
strncmp
_vsnprintf
vsprintf
_ftol
exit
longjmp
sprintf
strstr
time
localtime
atoi
_errno
fclose
fwrite
fread
fopen
__mb_cur_max
_isctype
_pctype
strchr
rand
malloc
realloc
free
atof
clock
calloc
_initterm
_adjust_fdiv
_fstat
_fileno
_unlink
_strdup
srand
_isatty
_stat

Exports

Exports

extension_version_info
get_module
zend_extension_entry

Sections

.text
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BleedingLife2/Bleeding Life v2/ioncube/ioncube_loader_win_4.3.dll
.dll windows:4 windows x86 arch:x86

a2b82152f2de706df1b6efcfdf7dc5e2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

php4ts

is_smaller_or_equal_function
is_smaller_function
is_not_equal_function
is_equal_function
is_not_identical_function
is_identical_function
concat_function
shift_right_function
shift_left_function
mod_function
div_function
mul_function
sub_function
add_function
zend_timeout
zend_execute_internal
zend_hash_num_elements
boolean_xor_function
zend_hash_index_find
_object_init
zend_llist_destroy
zend_execute
execute
zend_register_long_constant
zend_register_ini_entries
module_registry
bitwise_or_function
zend_extensions
zend_unregister_ini_entries
zend_ini_string
expand_filepath
_php_stream_open_wrapper_as_file
tsrm_thread_id
_zval_dtor
get_unary_op
zend_error
_zval_copy_ctor
increment_function
decrement_function
zend_print_variable
zend_is_true
add_char_to_string
add_string_to_string
zend_make_printable_zval
zend_ptr_stack_n_push
_convert_to_string
zend_llist_init
zend_llist_add_element
zval_used_for_init
_zval_ptr_dtor
zend_hash_init
bitwise_and_function
bitwise_xor_function
zend_llist_count
zend_hash_clean
zend_ptr_stack_n_pop
get_active_function_name
zval_update_constant
convert_to_long
_object_init_ex
zend_get_constant
zend_hash_index_update_or_next_insert
convert_to_null
convert_to_boolean
convert_to_double
convert_to_array
convert_to_object
zend_fopen
zend_compile_file
zend_destroy_file_handle
zend_message_dispatcher
compile_filename
zend_make_compiled_string_description
compile_string
destroy_op_array
zend_hash_del_key_or_index
zend_hash_internal_pointer_reset_ex
zend_hash_get_current_data_ex
zend_hash_get_current_key_ex
zend_hash_move_forward_ex
zend_hash_exists
empty_string
zend_alter_ini_entry
do_bind_function_or_class
zend_ticks_function
_erealloc
add_next_index_zval
zend_parse_parameters
core_globals_id
zend_get_executed_filename
php_body_write
_zend_bailout
_estrdup
add_next_index_string
_estrndup
_array_init
zend_wrong_param_count
zend_startup_module
destroy_zend_function
executor_globals_id
_emalloc
_efree
zend_hash_destroy
compiler_globals_id
zend_hash_find
zend_hash_add_or_update
function_add_ref
ts_resource_ex
zend_str_tolower
ts_allocate_id

kernel32

CloseHandle
CreateFileMappingA
GetFileSize
GetLastError
CreateFileA
UnmapViewOfFile
LocalFree
FormatMessageA
GetProcAddress
DisableThreadLibraryCalls
SetLastError
GlobalAlloc
GlobalFree
FreeLibrary
GetTickCount
LoadLibraryA
MapViewOfFile

ws2_32

WSAStartup
htonl

msvcrt

strftime
fputs
tolower
_setjmp3
toupper
_getpid
_iob
strncmp
_vsnprintf
vsprintf
_ftol
exit
longjmp
sprintf
strstr
time
localtime
atoi
_errno
fclose
fwrite
fread
fopen
__mb_cur_max
_isctype
_pctype
strchr
rand
malloc
realloc
free
atof
clock
calloc
_initterm
_adjust_fdiv
_fstat
_fileno
_unlink
_strdup
srand
_isatty
_stat

Exports

Exports

extension_version_info
get_module
zend_extension_entry

Sections

.text
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BleedingLife2/Bleeding Life v2/ioncube/ioncube_loader_win_4.4.dll
.dll windows:4 windows x86 arch:x86

a2b82152f2de706df1b6efcfdf7dc5e2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

php4ts

is_smaller_or_equal_function
is_smaller_function
is_not_equal_function
is_equal_function
is_not_identical_function
is_identical_function
concat_function
shift_right_function
shift_left_function
mod_function
div_function
mul_function
sub_function
add_function
zend_timeout
zend_execute_internal
zend_hash_num_elements
boolean_xor_function
zend_hash_index_find
_object_init
zend_llist_destroy
zend_execute
execute
zend_register_long_constant
zend_register_ini_entries
module_registry
bitwise_or_function
zend_extensions
zend_unregister_ini_entries
zend_ini_string
expand_filepath
_php_stream_open_wrapper_as_file
tsrm_thread_id
_zval_dtor
get_unary_op
zend_error
_zval_copy_ctor
increment_function
decrement_function
zend_print_variable
zend_is_true
add_char_to_string
add_string_to_string
zend_make_printable_zval
zend_ptr_stack_n_push
_convert_to_string
zend_llist_init
zend_llist_add_element
zval_used_for_init
_zval_ptr_dtor
zend_hash_init
bitwise_and_function
bitwise_xor_function
zend_llist_count
zend_hash_clean
zend_ptr_stack_n_pop
get_active_function_name
zval_update_constant
convert_to_long
_object_init_ex
zend_get_constant
zend_hash_index_update_or_next_insert
convert_to_null
convert_to_boolean
convert_to_double
convert_to_array
convert_to_object
zend_fopen
zend_compile_file
zend_destroy_file_handle
zend_message_dispatcher
compile_filename
zend_make_compiled_string_description
compile_string
destroy_op_array
zend_hash_del_key_or_index
zend_hash_internal_pointer_reset_ex
zend_hash_get_current_data_ex
zend_hash_get_current_key_ex
zend_hash_move_forward_ex
zend_hash_exists
empty_string
zend_alter_ini_entry
do_bind_function_or_class
zend_ticks_function
_erealloc
add_next_index_zval
zend_parse_parameters
core_globals_id
zend_get_executed_filename
php_body_write
_zend_bailout
_estrdup
add_next_index_string
_estrndup
_array_init
zend_wrong_param_count
zend_startup_module
destroy_zend_function
executor_globals_id
_emalloc
_efree
zend_hash_destroy
compiler_globals_id
zend_hash_find
zend_hash_add_or_update
function_add_ref
ts_resource_ex
zend_str_tolower
ts_allocate_id

kernel32

CloseHandle
CreateFileMappingA
GetFileSize
GetLastError
CreateFileA
UnmapViewOfFile
LocalFree
FormatMessageA
GetProcAddress
DisableThreadLibraryCalls
SetLastError
GlobalAlloc
GlobalFree
FreeLibrary
GetTickCount
LoadLibraryA
MapViewOfFile

ws2_32

WSAStartup
htonl

msvcrt

strftime
fputs
tolower
_setjmp3
toupper
_getpid
_iob
strncmp
_vsnprintf
vsprintf
_ftol
exit
longjmp
sprintf
strstr
time
localtime
atoi
_errno
fclose
fwrite
fread
fopen
__mb_cur_max
_isctype
_pctype
strchr
rand
malloc
realloc
free
atof
clock
calloc
_initterm
_adjust_fdiv
_fstat
_fileno
_unlink
_strdup
srand
_isatty
_stat

Exports

Exports

extension_version_info
get_module
zend_extension_entry

Sections

.text
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BleedingLife2/Bleeding Life v2/ioncube/ioncube_loader_win_5.0.dll
.dll windows:4 windows x86 arch:x86

32c4a2fa0ad7aa287a131e7ec5219f86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

php5ts

zend_llist_add_element
zend_unregister_ini_entries
zend_ini_string
zend_is_auto_global
expand_filepath
zend_hash_apply_with_argument
zend_hash_merge_ex
_zend_hash_merge
zval_add_ref
zend_do_inherit_interfaces
function_add_ref
zend_unmangle_property_name
module_registry
_zend_hash_quick_add_or_update
zend_hash_quick_find
zend_strndup
zend_hash_exists
zend_opcode_handlers
zend_fopen
zend_hash_get_current_key_ex
ap_php_vsnprintf
tsrm_thread_id
zend_hash_get_current_data_ex
zend_hash_move_forward_ex
zend_register_ini_entries
zend_register_long_constant
_erealloc
add_next_index_zval
zend_parse_parameters
core_globals_id
zend_get_executed_filename
php_body_write
_zend_bailout
_estrdup
add_next_index_string
php_sprintf
zend_wrong_param_count
zend_startup_module
_safe_emalloc
zend_timeout
zend_extensions
_php_stream_open_wrapper_as_file
zend_llist_count
execute
zend_execute
zend_iterator_wrap
zend_hash_internal_pointer_reset_ex
zend_fetch_class
zend_get_class_entry
instanceof_function
zend_hash_clean
zend_object_store_ctor_failed
zend_ptr_stack_n_pop
zend_std_unset_static_property
_zend_hash_init
zend_std_get_static_property
zval_update_constant
zend_print_variable
compiler_globals_id
_array_init
_zend_hash_index_update_or_next_insert
decrement_function
increment_function
convert_to_long
zend_throw_exception_hook
zend_stream_open
zend_compile_file
zend_destroy_file_handle
zend_file_handle_dtor
zend_message_dispatcher
compile_filename
zend_make_compiled_string_description
compile_string
_zval_ptr_dtor
destroy_op_array
zval_used_for_init
zend_hash_del_key_or_index
_zend_hash_add_or_update
do_bind_class
_object_init_ex
_estrndup
empty_string
zend_str_tolower
zend_str_tolower_copy
executor_globals_id
zend_ptr_stack_n_push
zend_initialize_class_data
zend_function_dtor
_zval_copy_ctor
_convert_to_string
zend_hash_find
zend_error
zend_std_get_static_method
_zval_dtor
_emalloc
zend_hash_destroy
_efree
ts_resource_ex
zend_mangle_property_name
ts_allocate_id

kernel32

CloseHandle
CreateFileMappingA
GetFileSize
GetLastError
CreateFileA
UnmapViewOfFile
LocalFree
FormatMessageA
GetProcAddress
DisableThreadLibraryCalls
SetLastError
GlobalAlloc
GlobalFree
FreeLibrary
GetTickCount
LoadLibraryA
MapViewOfFile

ws2_32

htonl
WSAStartup

msvcrt

atof
localtime
strftime
fputs
tolower
_setjmp3
toupper
_getpid
_iob
strncmp
vsprintf
exit
longjmp
strtol
_ftol
strstr
clock
srand
atoi
_errno
fclose
fwrite
fread
fopen
__mb_cur_max
_isctype
_pctype
strchr
rand
malloc
realloc
free
abort
calloc
_initterm
_adjust_fdiv
_stricmp
_fstat
_fileno
_unlink
_strdup
time
_isatty
_stat

Exports

Exports

extension_version_info
get_module
zend_extension_entry

Sections

.text
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BleedingLife2/Bleeding Life v2/ioncube/ioncube_loader_win_5.1.dll
.dll windows:4 windows x86 arch:x86

d9b28e2769e09ff015c763a1503943cb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

php5ts

mul_function
div_function
mod_function
shift_left_function
shift_right_function
concat_function
is_identical_function
is_not_identical_function
is_equal_function
is_not_equal_function
is_smaller_function
is_smaller_or_equal_function
bitwise_or_function
bitwise_and_function
bitwise_xor_function
boolean_xor_function
_zend_hash_index_update_or_next_insert
_array_init
zend_hash_index_find
add_char_to_string
add_string_to_string
increment_function
decrement_function
zend_unmangle_property_name_ex
zend_hash_get_current_data_ex
zend_iterator_unwrap
_object_init
zend_get_constant
zend_throw_exception_hook
compiler_globals_id
zend_ptr_stack_n_push
zend_str_tolower
zend_execute
execute
zend_timeout
_safe_emalloc
_zend_bailout
zend_wrong_param_count
php_sprintf
add_next_index_string
_estrdup
php_body_write
zend_get_executed_filename
core_globals_id
sub_function
add_next_index_zval
zend_register_long_constant
zend_register_ini_entries
module_registry
zend_llist_count
ap_php_vsnprintf
zend_llist_add_element
zend_unregister_ini_entries
zend_ini_string
zend_is_auto_global
expand_filepath
zend_hash_apply_with_argument
zend_hash_merge_ex
_zend_hash_merge
zval_add_ref
zend_do_inherit_interfaces
function_add_ref
zend_unmangle_property_name
zend_mangle_property_name
zend_strndup
zend_hash_exists
zend_vm_set_opcode_handler
zend_fopen
_php_stream_open_wrapper_as_file
tsrm_thread_id
zend_iterator_wrap
zend_throw_exception_ex
zend_hash_internal_pointer_reset_ex
zend_hash_get_current_key_type_ex
zend_objects_get_address
zend_hash_move_forward_ex
zend_hash_get_current_key_ex
zend_check_property_access
zend_std_unset_static_property
zend_hash_del_key_or_index
zend_stream_open
zend_compile_file
zend_destroy_file_handle
zend_file_handle_dtor
zend_message_dispatcher
compile_filename
zend_make_compiled_string_description
compile_string
add_function
zend_parse_parameters
zend_ticks_function
destroy_op_array
convert_to_null
convert_to_boolean
convert_to_double
zend_make_printable_zval
convert_to_array
convert_to_object
zend_check_protected
zend_throw_exception_object
zend_hash_num_elements
zend_std_get_static_property
zend_std_cast_object_tostring
zend_print_variable
boolean_not_function
bitwise_not_function
_estrndup
convert_to_long
zval_update_constant
zend_str_tolower_copy
zend_std_get_static_method
_convert_to_string
zend_do_implement_interface
zend_hash_find
do_bind_inherited_class
do_bind_class
zend_extensions
zend_llist_apply_with_argument
zend_alter_ini_entry
_object_init_ex
zend_get_object_classname
_zval_copy_ctor_func
_zend_hash_quick_add_or_update
zend_hash_quick_find
_zval_dtor_func
get_active_class_name
get_active_function_name
_zend_hash_add_or_update
zend_fetch_class
zend_get_class_entry
instanceof_function
_erealloc
zend_error
executor_globals_id
zend_initialize_class_data
zend_get_hash_value
zend_function_dtor
zval_used_for_init
_zval_ptr_dtor
_zend_hash_init
zend_hash_clean
zend_object_store_ctor_failed
_emalloc
zend_hash_destroy
_efree
ts_free_id
ts_resource_ex
zend_startup_module
ts_allocate_id

kernel32

CloseHandle
CreateFileMappingA
GetFileSize
GetLastError
CreateFileA
UnmapViewOfFile
LocalFree
FormatMessageA
GetProcAddress
DisableThreadLibraryCalls
SetLastError
GlobalAlloc
GlobalFree
FreeLibrary
GetTickCount
LoadLibraryA
MapViewOfFile

ws2_32

htonl
WSAStartup

msvcrt

atof
localtime
strftime
fputs
tolower
_setjmp3
toupper
_getpid
_iob
strncmp
vsprintf
exit
longjmp
strtol
_ftol
strstr
clock
srand
atoi
_errno
fclose
fwrite
fread
fopen
__mb_cur_max
_isctype
_pctype
strchr
rand
malloc
realloc
free
abort
calloc
_initterm
_adjust_fdiv
_stricmp
_fstat
_fileno
_unlink
_strdup
time
_isatty
_stat

Exports

Exports

extension_version_info
get_module
zend_extension_entry

Sections

.text
Size: 336KB - Virtual size: 335KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
BleedingLife2/Bleeding Life v2/ioncube/license.txt
BleedingLife2/Bleeding Life v2/ioncube/readme.txt
BleedingLife2/Bleeding Life v2/load.php
BleedingLife2/Bleeding Life v2/statistics/clear.php
BleedingLife2/Bleeding Life v2/statistics/css/styles.css
BleedingLife2/Bleeding Life v2/statistics/images/clear.png
.png
BleedingLife2/Bleeding Life v2/statistics/images/clear_hover.png
.png
BleedingLife2/Bleeding Life v2/statistics/images/logo.png
.png
BleedingLife2/Bleeding Life v2/statistics/images/logout.png
.png
BleedingLife2/Bleeding Life v2/statistics/images/logout_hover.png
.png
BleedingLife2/Bleeding Life v2/statistics/images/middlebar.png
.png
BleedingLife2/Bleeding Life v2/statistics/images/spacer.png
.png
BleedingLife2/Bleeding Life v2/statistics/images/spacer2.png
.png
BleedingLife2/Bleeding Life v2/statistics/index.php
BleedingLife2/Bleeding Life v2/statistics/login.php
BleedingLife2/Bleeding Life v2/statistics/logout.php
BleedingLife2/Bleeding Life v2/statistics/statistics.php
BleedingLife2/Bleeding Life v2/statistics/update.php
BleedingLife2/Bleeding Life v2/visitor.php

Sharing

General

Malware Config

Signatures

Files

Password: infected

137e31cb892c72918f2fa263374a33cd

Headers

File Characteristics

Imports

php4ts

kernel32

ws2_32

msvcrt

Exports

Exports

Sections

.text Size: 132KB - Virtual size: 130KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 28KB - Virtual size: 33KB

.reloc Size: 12KB - Virtual size: 8KB

c3b7dc31d200b9d632e59bd7c52aa380

Headers

File Characteristics

Imports

php4ts

kernel32

ws2_32

msvcrt

Exports

Exports

Sections

.text Size: 132KB - Virtual size: 128KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 28KB - Virtual size: 33KB

.reloc Size: 8KB - Virtual size: 7KB

a2b82152f2de706df1b6efcfdf7dc5e2

Headers

File Characteristics

Imports

php4ts

kernel32

ws2_32

msvcrt

Exports

Exports

Sections

.text Size: 132KB - Virtual size: 128KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 28KB - Virtual size: 33KB

.reloc Size: 8KB - Virtual size: 7KB

a2b82152f2de706df1b6efcfdf7dc5e2

Headers

File Characteristics

Imports

php4ts

kernel32

ws2_32

msvcrt

Exports

Exports

Sections

.text Size: 132KB - Virtual size: 128KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 28KB - Virtual size: 33KB

.reloc Size: 8KB - Virtual size: 7KB

32c4a2fa0ad7aa287a131e7ec5219f86

Headers

File Characteristics

Imports

php5ts

kernel32

ws2_32

msvcrt

Exports

Exports

Sections

.text Size: 132KB - Virtual size: 129KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 28KB - Virtual size: 34KB

.text
Size: 132KB - Virtual size: 130KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 28KB - Virtual size: 33KB

.reloc
Size: 12KB - Virtual size: 8KB

.text
Size: 132KB - Virtual size: 128KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 28KB - Virtual size: 33KB

.reloc
Size: 8KB - Virtual size: 7KB

.text
Size: 132KB - Virtual size: 128KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 28KB - Virtual size: 33KB

.reloc
Size: 8KB - Virtual size: 7KB

.text
Size: 132KB - Virtual size: 128KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 28KB - Virtual size: 33KB

.reloc
Size: 8KB - Virtual size: 7KB

.text
Size: 132KB - Virtual size: 129KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 28KB - Virtual size: 34KB

.reloc
Size: 8KB - Virtual size: 7KB

.text
Size: 336KB - Virtual size: 335KB

.rdata
Size: 32KB - Virtual size: 30KB

.data
Size: 32KB - Virtual size: 38KB

.reloc
Size: 28KB - Virtual size: 25KB

.text
Size: 132KB - Virtual size: 130KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 28KB - Virtual size: 33KB

.reloc
Size: 12KB - Virtual size: 8KB

.text
Size: 132KB - Virtual size: 128KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 28KB - Virtual size: 33KB

.reloc
Size: 8KB - Virtual size: 7KB

.text
Size: 132KB - Virtual size: 128KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 28KB - Virtual size: 33KB

.reloc
Size: 8KB - Virtual size: 7KB