160af6ab1e79bb01f04e3aa0f18d61f8_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

160af6ab1e79bb01f04e3aa0f18d61f8_JaffaCakes118
Size

820KB
MD5

160af6ab1e79bb01f04e3aa0f18d61f8
SHA1

0e9449eeca045f7a040aebd020e7ccfb1cb0db7d
SHA256

f048d64f2e189c5dbe87ec29eb015fc41854d5a44f796e53717e3acc522286a4
SHA512

4ea6e92263e507133c805e62228a134b8f422148a163f507b93bb9491dd5ccf34ebadca3d6007d11dcc650173e3997427541e9a438a107f8aed4c56b2e9870e2
SSDEEP

24576:ORkfRHoAUrsXlJM5tN2uO3ahwHGKaC6IGF5:QkJHr6Ml0NJ/h4cv

Score

1^/10

Malware Config

Signatures

Files

160af6ab1e79bb01f04e3aa0f18d61f8_JaffaCakes118
.rar
Admin/Admin.asp
.vbs
Admin/Admin_Add.asp
Admin/Admin_Do.asp
.vbs
Admin/Admin_Edit.asp
Admin/Foot.asp
Admin/Guest.asp
.vbs
Admin/Guest_Do.asp
.vbs
Admin/Head.asp
.vbs
Admin/Helps.asp
.vbs
Admin/Helps_Add.asp
Admin/Helps_Category.asp
.vbs
Admin/Helps_Category_Add.asp
Admin/Helps_Category_Do.asp
.vbs
Admin/Helps_Category_Edit.asp
Admin/Helps_Do.asp
.vbs
Admin/Helps_Edit.asp
Admin/Html.asp
Admin/Html_Do.asp
.vbs
Admin/Images/Style.css
Admin/Images/bar.gif
.gif
Admin/Images/bg_body_bottom.png
.png
Admin/Images/bg_body_top.png
.png
Admin/Images/bg_button.png
.png
Admin/Images/bg_dashboard_header.png
.png
Admin/Images/bg_dashboard_header2.png
.png
Admin/Images/bg_header.png
.png
Admin/Images/bg_login.png
.png
Admin/Images/bg_login_border.png
.png
Admin/Images/bg_menu.png
.png
Admin/Images/bg_menu_divider.gif
.gif
Admin/Images/bg_menu_selected.png
.png
Admin/Images/bg_submenu_divider.png
.png
Admin/Images/bg_title_left.gif
.gif
Admin/Images/bg_title_right.gif
.gif
Admin/Images/icon_newPost.gif
.gif
Admin/Images/img_helper.gif
.gif
Admin/Images/img_logout.gif
.gif
Admin/Images/img_to_my_blog.gif
.gif
Admin/Images/line.GIF
.gif
Admin/Images/logo.png
.png
Admin/Images/logo_tattertools.png
.png
Admin/Images/menuIndicate.gif
.gif
Admin/Include.asp
Admin/Index.asp
Admin/Logout.asp
Admin/Main.asp
Admin/Pic/aurl.gif
.gif
Admin/Pic/class.gif
.gif
Admin/Pic/cms_01.gif
.gif
Admin/Pic/dl.gif
.gif
Admin/Pic/file.gif
.gif
Admin/Pic/folder.gif
.gif
Admin/Pic/g_t1.gif
.gif
Admin/Pic/g_t2.gif
.gif
Admin/Pic/g_t3.gif
.gif
Admin/Pic/g_t4.gif
.gif
Admin/Pic/head.jpg
.jpg
Admin/Pic/input.gif
.gif
Admin/Pic/login.jpg
.jpg
Admin/Pic/logo.gif
.gif
Admin/Pic/reset.gif
.gif
Admin/Pic/submit.gif
.gif
Admin/Pic/title.gif
.gif
Admin/Show_Go.asp
Admin/Site.asp
Admin/Templet.asp
.vbs
Admin/Templet_Case.asp
.vbs
Admin/Templet_Edit.asp
.vbs
Admin/css/css.css
Admin/新云软件.url
.url
Da%2fta/Data.mdb
Guest.asp
.vbs
Guest_Do.asp
Inc/CheckCode.asp
.vbs
Inc/Cls_Templet.asp
.vbs
Inc/Config.asp
.vbs
Inc/Conn.asp
.vbs
Inc/Md5.asp
.vbs
Inc/Templet.asp
.vbs
Include.asp
Index.asp
Js/Form.js
.js
Js/Function.js
.js
Js/Jquery.js
.js
List.asp
.vbs
Search.asp
.vbs
Show.asp
Skin/Skin1/Css/Style.css
Skin/Skin1/Guest.html
Skin/Skin1/Images/Ico_1.gif
.gif
Skin/Skin1/Images/Img_Top.jpg
.jpg
Skin/Skin1/Images/Logo.gif
.gif
Skin/Skin1/Images/Thumbs.db
Skin/Skin1/Index.html
Skin/Skin1/List.html
.html
Skin/Skin1/Search.html
.html
Skin/Skin1/Show.html
.html
Skin/Skin1/show.png
.png
edit/asp/browse.asp
.vbs
edit/asp/config.asp
edit/asp/upfileclass.asp
.vbs
edit/asp/upload.asp
.vbs
edit/dialog/about.htm
.html .js polyglot
edit/dialog/anchor.htm
.html .js polyglot
edit/dialog/art.htm
.html .js polyglot
edit/dialog/backimage.htm
.html .js polyglot
edit/dialog/browse.htm
.html .js polyglot
edit/dialog/dialog.js
.js
edit/dialog/eWebEditorClient.CAB
.cab
eWebEditorClient.INF
eWebEditorClient.dll
.dll regsvr32 windows:4 windows x86 arch:x86

075408aabeacabe90c51dddc4557f964

Code Sign

ea:42:f4:0c:a4:cd:ac:6f:82:d8:54:f9:be:21:30:6d
Certificate

Issuer

CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US

Not Before

23/08/2007, 00:00

Not After

22/08/2008, 23:59

Subject

CN=High-point Software Ltd.,OU=WoSign Class 3 Code Signing,O=High-point Software Ltd.,L=Fuzhou,ST=Fujian,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageDigitalSignature

42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

25/04/2007, 00:00

Not After

09/07/2019, 18:40

Subject

CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09/07/1999, 18:31

Not After

09/07/2019, 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0d
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

30/04/2007, 00:00

Not After

29/04/2012, 23:59

Subject

CN=WoSign Time Stamping Signer,O=WoSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6c:1a:02:a1:2b:d9:fb:97:04:d1:5b:40:ba:da:b2:90:84:fe:b3:cf
Signer

Actual PE Digest

6c:1a:02:a1:2b:d9:fb:97:04:d1:5b:40:ba:da:b2:90:84:fe:b3:cf

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

__vbaVarTstGt
__vbaVarSub
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaAptOffset
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
__vbaNextEachVar
__vbaFreeObjList
ord516
_adj_fprem1
ord518
__vbaForEachCollAd
__vbaStrCat
__vbaVarCmpNe
ord660
__vbaSetSystemError
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
__vbaAryDestruct
__vbaLateMemSt
ord593
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
__vbaBoolVarNull
_CIsin
ord631
ord709
__vbaErase
ord632
__vbaChkstk
ord526
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaStrCmp
ord529
__vbaVarTstEq
__vbaGet4
__vbaI2I4
__vbaObjVar
DllFunctionCall
__vbaVarLateMemSt
__vbaLbound
__vbaRedimPreserve
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
__vbaNew
__vbaUI1I2
_CIsqrt
__vbaObjIs
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
__vbaStrToUnicode
ord606
_adj_fprem
_adj_fdivr_m64
ord716
ord531
__vbaFPException
__vbaInStrVar
ord532
__vbaUbound
__vbaStrVarVal
__vbaVarCat
__vbaI2Var
ord537
ord645
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaInStr
__vbaVarLateMemCallLdRf
__vbaNew2
ord570
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord685
__vbaVarTstNe
ord579
ord101
__vbaVarSetVar
ord102
__vbaI4Var
ord103
ord104
ord105
__vbaAryLock
__vbaLateMemCall
__vbaVarAdd
__vbaVarDup
__vbaStrToAnsi
ord616
__vbaFpI4
__vbaVarLateMemCallLd
__vbaVarCopy
__vbaVarSetObjAddref
ord617
__vbaLateMemCallLd
_CIatan
__vbaStrMove
__vbaCastObj
__vbaForEachVar
__vbaStrVarCopy
ord619
_allmul
_CItan
__vbaNextEachCollAd
__vbaAryUnlock
_CIexp
__vbaFreeStr
__vbaFreeObj
ord580

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
edit/dialog/emot.htm
.html .js polyglot
edit/dialog/eq.htm
.html .js polyglot
edit/dialog/fieldset.htm
.html .js polyglot
edit/dialog/file.htm
.html .js polyglot
edit/dialog/findreplace.htm
.html .js polyglot
edit/dialog/flash.htm
.html .js polyglot
edit/dialog/fullscreen.htm
.html .js polyglot
edit/dialog/hyperlink.htm
.html .js polyglot
edit/dialog/iframe.htm
.html .js polyglot
edit/dialog/img.htm
.html .js polyglot
edit/dialog/importexcel.htm
.html .js polyglot
edit/dialog/importword.htm
.html .js polyglot
edit/dialog/installactivex.htm
.html .js polyglot
edit/dialog/marquee.htm
.html .js polyglot
edit/dialog/media.htm
.html .js polyglot
edit/dialog/owcexcel.htm
.html .js polyglot
edit/dialog/selcolor.htm
.html .js polyglot
edit/dialog/table.htm
.html .js polyglot
edit/dialog/template.htm
.html .js polyglot
edit/ewebeditor.htm
.js
edit/images/clip_image001.htm
.html
edit/js/buttons.js
.js
edit/js/ewebeditor.js
.js
edit/language/zh-cn.css
edit/language/zh-cn.editorarea.css
edit/language/zh-cn.js
edit/sharefile/image/trash_arrow_48.jpg
.jpg
edit/sharefile/image/trash_full_48.jpg
.jpg
edit/sharefile/image/user_48.jpg
.jpg
edit/sharefile/image/user_add_48.jpg
.jpg
edit/sharefile/image/user_delete_48.jpg
.jpg
edit/sharefile/image/user_info_48.jpg
.jpg
edit/sharefile/image/weather_clouds_48.jpg
.jpg
edit/sharefile/image/weather_ray_48.jpg
.jpg
edit/sharefile/image/weather_sun_48.jpg
.jpg
edit/sharefile/image/weather_sunny_48.jpg
.jpg
edit/skin/office2003/btnover.gif
.gif
edit/skin/office2003/buttons.gif
.gif
edit/skin/office2003/dialog.css
edit/skin/office2003/editor.css
edit/skin/office2003/editorarea.css
edit/skin/office2003/editorarea.zh-cn.edit.css
edit/skin/office2003/menuarea.css
edit/skin/office2003/menubg.gif
.gif
edit/skin/office2003/tbbg.gif
.gif
edit/skin/office2003/tbleft.gif
.gif
edit/skin/office2003/tbright.gif
.gif
edit/style/full650.js
edit/style/menu400.js
edit/style/standard550.js
edit/style/standard600.js
edit/style/standard650.js
edit/sysimage/actualsize.gif
.gif
edit/sysimage/bestfit.gif
.gif
edit/sysimage/bg/Thumbs.db
edit/sysimage/bg/birthday.gif
.gif
edit/sysimage/bg/christmas.gif
.gif
edit/sysimage/bg/citrus.gif
.gif
edit/sysimage/bg/clear.jpg
.jpg
edit/sysimage/bg/fiesta.jpg
.jpg
edit/sysimage/bg/flower.gif
.gif
edit/sysimage/bg/gathering.jpg
.jpg
edit/sysimage/bg/glacier.jpg
.jpg
edit/sysimage/bg/grid.gif
.gif
edit/sysimage/bg/hearts.gif
.gif
edit/sysimage/bg/ivy.gif
.gif
edit/sysimage/bg/maize.jpg
.jpg
edit/sysimage/bg/nature.jpg
.jpg
edit/sysimage/bg/snow.gif
.gif
edit/sysimage/bg/tech.gif
.gif
edit/sysimage/bold.gif
.gif
edit/sysimage/contextmenu.gif
.gif
edit/sysimage/emot/01.gif
.gif
edit/sysimage/emot/02.gif
.gif
edit/sysimage/emot/03.gif
.gif
edit/sysimage/emot/04.gif
.gif
edit/sysimage/emot/05.gif
.gif
edit/sysimage/emot/06.gif
.gif
edit/sysimage/emot/07.gif
.gif
edit/sysimage/emot/08.gif
.gif
edit/sysimage/emot/09.gif
.gif
edit/sysimage/emot/10.gif
.gif
edit/sysimage/emot/11.gif
.gif
edit/sysimage/emot/12.gif
.gif
edit/sysimage/emot/13.gif
.gif
edit/sysimage/emot/14.gif
.gif
edit/sysimage/emot/15.gif
.gif
edit/sysimage/emot/16.gif
.gif
edit/sysimage/emot/17.gif
.gif
edit/sysimage/emot/18.gif
.gif
edit/sysimage/emot/19.gif
.gif
edit/sysimage/emot/20.gif
.gif
edit/sysimage/emot/21.gif
.gif
edit/sysimage/emot/22.gif
.gif
edit/sysimage/emot/23.gif
.gif
edit/sysimage/emot/24.gif
.gif
edit/sysimage/emot/25.gif
.gif
edit/sysimage/emot/26.gif
.gif
edit/sysimage/emot/27.gif
.gif
edit/sysimage/emot/28.gif
.gif
edit/sysimage/emot/29.gif
.gif
edit/sysimage/emot/30.gif
.gif
edit/sysimage/emot/31.gif
.gif
edit/sysimage/emot/32.gif
.gif
edit/sysimage/emot/33.gif
.gif
edit/sysimage/emot/34.gif
.gif
edit/sysimage/emot/35.gif
.gif
edit/sysimage/emot/36.gif
.gif
edit/sysimage/emot/37.gif
.gif
edit/sysimage/emot/38.gif
.gif
edit/sysimage/emot/39.gif
.gif
edit/sysimage/emot/40.gif
.gif
edit/sysimage/emot/41.gif
.gif
edit/sysimage/emot/42.gif
.gif
edit/sysimage/emot/43.gif
.gif
edit/sysimage/emot/44.gif
.gif
edit/sysimage/emot/45.gif
.gif
edit/sysimage/emot/46.gif
.gif
edit/sysimage/emot/47.gif
.gif
edit/sysimage/emot/48.gif
.gif
edit/sysimage/emot/49.gif
.gif
edit/sysimage/emot/50.gif
.gif
edit/sysimage/emot/Thumbs.db
edit/sysimage/ewebeditor.gif
.gif
edit/sysimage/file/audio.gif
.gif
edit/sysimage/file/avi.gif
.gif
edit/sysimage/file/bmp.gif
.gif
edit/sysimage/file/closedfolder.gif
.gif
edit/sysimage/file/code.gif
.gif
edit/sysimage/file/doc.gif
.gif
edit/sysimage/file/exe.gif
.gif
edit/sysimage/file/folder.gif
.gif
edit/sysimage/file/folderback.gif
.gif
edit/sysimage/file/gif.gif
.gif
edit/sysimage/file/hlp.gif
.gif
edit/sysimage/file/htm.gif
.gif
edit/sysimage/file/jpg.gif
.gif
edit/sysimage/file/mdb.gif
.gif
edit/sysimage/file/mid.gif
.gif
edit/sysimage/file/mp.gif
.gif
edit/sysimage/file/mp3.gif
.gif
edit/sysimage/file/openfolder.gif
.gif
edit/sysimage/file/parentfolder.gif
.gif
edit/sysimage/file/pdf.gif
.gif
edit/sysimage/file/pic.gif
.gif
edit/sysimage/file/ppt.gif
.gif
edit/sysimage/file/rar.gif
.gif
edit/sysimage/file/rm.gif
.gif
edit/sysimage/file/swf.gif
.gif
edit/sysimage/file/txt.gif
.gif
edit/sysimage/file/unknow.gif
.gif
edit/sysimage/file/xls.gif
.gif
edit/sysimage/file/zip.gif
.gif
edit/sysimage/icon16/Thumbs.db
edit/sysimage/icon16/aspx.gif
.gif
edit/sysimage/icon16/audio.gif
.gif
edit/sysimage/icon16/avi.gif
.gif
edit/sysimage/icon16/bmp.gif
.gif
edit/sysimage/icon16/chm.gif
.gif
edit/sysimage/icon16/closedfolder.gif
.gif
edit/sysimage/icon16/code.gif
.gif
edit/sysimage/icon16/doc.gif
.gif
edit/sysimage/icon16/exe.gif
.gif
edit/sysimage/icon16/folder.gif
.gif
edit/sysimage/icon16/folderback.gif
.gif
edit/sysimage/icon16/gif.gif
.gif
edit/sysimage/icon16/hlp.gif
.gif
edit/sysimage/icon16/htm.gif
.gif
edit/sysimage/icon16/ico.gif
.gif
edit/sysimage/icon16/jpg.gif
.gif
edit/sysimage/icon16/js.gif
.gif
edit/sysimage/icon16/mdb.gif
.gif
edit/sysimage/icon16/mid.gif
.gif
edit/sysimage/icon16/mp.gif
.gif
edit/sysimage/icon16/mp3.gif
.gif
edit/sysimage/icon16/openfolder.gif
.gif
edit/sysimage/icon16/parentfolder.gif
.gif
edit/sysimage/icon16/pdf.gif
.gif
edit/sysimage/icon16/pic.gif
.gif
edit/sysimage/icon16/png.gif
.gif
edit/sysimage/icon16/ppt(1).gif
.gif
edit/sysimage/icon16/ppt.gif
.gif
edit/sysimage/icon16/rar.gif
.gif
edit/sysimage/icon16/rm.gif
.gif
edit/sysimage/icon16/swf.gif
.gif
edit/sysimage/icon16/txt.gif
.gif
edit/sysimage/icon16/unknow.gif
.gif
edit/sysimage/icon16/xls.gif
.gif
edit/sysimage/icon16/xml.gif
.gif
edit/sysimage/icon16/zip.gif
.gif
edit/sysimage/icon32/aspx.gif
.gif
edit/sysimage/icon32/audio.gif
.gif
edit/sysimage/icon32/avi.gif
.gif
edit/sysimage/icon32/bmp.gif
.gif
edit/sysimage/icon32/chm.gif
.gif
edit/sysimage/icon32/code.gif
.gif
edit/sysimage/icon32/doc.gif
.gif
edit/sysimage/icon32/exe.gif
.gif
edit/sysimage/icon32/gif.gif
.gif
edit/sysimage/icon32/hlp.gif
.gif
edit/sysimage/icon32/htm.gif
.gif
edit/sysimage/icon32/ico.gif
.gif
edit/sysimage/icon32/jpg.gif
.gif
edit/sysimage/icon32/js.gif
.gif
edit/sysimage/icon32/mdb.gif
.gif
edit/sysimage/icon32/mid.gif
.gif
edit/sysimage/icon32/mp.gif
.gif
edit/sysimage/icon32/mp3.gif
.gif
edit/sysimage/icon32/pdf.gif
.gif
edit/sysimage/icon32/png.gif
.gif
edit/sysimage/icon32/ppt.gif
.gif
edit/sysimage/icon32/rar.gif
.gif
edit/sysimage/icon32/rm.gif
.gif
edit/sysimage/icon32/swf.gif
.gif
edit/sysimage/icon32/txt.gif
.gif
edit/sysimage/icon32/unknow.gif
.gif
edit/sysimage/icon32/xls.gif
.gif
edit/sysimage/icon32/xml.gif
.gif
edit/sysimage/icon32/zip.gif
.gif
edit/sysimage/italic.gif
.gif
edit/sysimage/rect.gif
.gif
edit/sysimage/rectimg.gif
.gif
edit/sysimage/space.gif
.gif
edit/sysimage/tree/Thumbs.db
edit/sysimage/tree/arrowdown.gif
.gif
edit/sysimage/tree/arrowup.gif
.gif
edit/sysimage/tree/blank.gif
.gif
edit/sysimage/tree/branch1.gif
.gif
edit/sysimage/tree/branch2.gif
.gif
edit/sysimage/tree/dirclose.gif
.gif
edit/sysimage/tree/diropen.gif
.gif
edit/sysimage/tree/folderclose.gif
.gif
edit/sysimage/tree/folderopen.gif
.gif
edit/sysimage/tree/folderparent.gif
.gif
edit/sysimage/tree/line.gif
.gif
edit/sysimage/tree/minus1.gif
.gif
edit/sysimage/tree/minus2.gif
.gif
edit/sysimage/tree/plus.gif
.gif
edit/sysimage/tree/plus1.gif
.gif
edit/sysimage/tree/plus2.gif
.gif
edit/sysimage/tree/root.gif
.gif
edit/sysimage/zoomin.gif
.gif
edit/sysimage/zoomout.gif
.gif
edit/template/0.gif
.gif
edit/template/01.htm
edit/template/02.htm
edit/template/03.htm
edit/template/04.htm
edit/template/05.htm
edit/template/06.htm
edit/template/template.js
edit/uploadfile/IMAGE/2008-10-24/20081024155513306.jpg
.jpg
edit/uploadfile/IMAGE/2008-10-24/20081024160958308.jpg
.jpg
edit/uploadfile/IMAGE/2008-10-24/20081024161427968.jpg
.jpg
edit/uploadfile/IMAGE/2008-10-24/20081024161921758.jpg
.jpg
edit/uploadfile/IMAGE/2008-10-24/20081024162426450.jpg
.jpg
edit/uploadfile/IMAGE/2008-10-24/20081024162604873.jpg
.jpg
edit/uploadfile/IMAGE/2008-10-25/20081025185327628.jpg
.jpg
edit/uploadfile/IMAGE/2008-10-25/20081025190410732.jpg
.jpg
edit/uploadfile/IMAGE/2008-10-25/20081025190916149.jpg
.jpg
edit/uploadfile/IMAGE/2008-10-25/20081025191701702.jpg
.jpg
edit/uploadfile/IMAGE/2008-10-25/20081025192326835.jpg
.jpg
edit/uploadfile/IMAGE/2008-10-25/20081025201413255.jpg
.jpg
说明.txt

Sharing

General

Malware Config

Signatures

Files

075408aabeacabe90c51dddc4557f964

Code Sign

ea:42:f4:0c:a4:cd:ac:6f:82:d8:54:f9:be:21:30:6dCertificate

Extended Key Usages

Key Usages

42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04Certificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0dCertificate

Extended Key Usages

Key Usages

6c:1a:02:a1:2b:d9:fb:97:04:d1:5b:40:ba:da:b2:90:84:fe:b3:cfSigner

Headers

File Characteristics

Imports

msvbvm60

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 73KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 8KB - Virtual size: 4KB

.reloc Size: 8KB - Virtual size: 7KB

ea:42:f4:0c:a4:cd:ac:6f:82:d8:54:f9:be:21:30:6d
Certificate

42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0d
Certificate

6c:1a:02:a1:2b:d9:fb:97:04:d1:5b:40:ba:da:b2:90:84:fe:b3:cf
Signer

.text
Size: 76KB - Virtual size: 73KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 8KB - Virtual size: 4KB

.reloc
Size: 8KB - Virtual size: 7KB