2e89529eef8befd9fe328aa6fdfda294_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2e89529eef8befd9fe328aa6fdfda294_JaffaCakes118
Size

830KB
MD5

2e89529eef8befd9fe328aa6fdfda294
SHA1

801cd2ccb62dc7c3e0def68a02ab544c21263688
SHA256

204aef1f66d747032be378394423219ea840458eb2afb5595200b6df0a760532
SHA512

7210596ce78186eabd68c65bd838fac7bb47b72d93e79e5db03acf39ac1f6c6d7180234572b4f484011803bf2fbc75a2ae3818913c80bcdc4c415b6dd22277de
SSDEEP

24576:yoWvyv678dLpErOLPxosGlO604+dvRdfOuOjXaG:Vv6MVErcPqHl904+jBojXaG

Score

3^/10

Malware Config

Signatures

Unsigned PE 8 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ASPNET_Wiki_Access/bin/App_Code.dll
unpack001/ASPNET_Wiki_Access/bin/App_Web_8yxviutv.dll
unpack001/ASPNET_Wiki_Access/bin/App_Web_9ngtn1vl.dll
unpack001/ASPNET_Wiki_Access/bin/App_Web_tuadxnal.dll
unpack001/ASPNET_Wiki_Access/bin/App_Web_umaz4whx.dll
unpack001/ASPNET_Wiki_Access/bin/App_Web_wqyitl01.dll
unpack001/ASPNET_Wiki_Access/bin/FreeTextBox.dll
unpack001/ASPNET_Wiki_Access/bin/Microsoft.Web.Atlas.dll

Files

2e89529eef8befd9fe328aa6fdfda294_JaffaCakes118
.rar
ASPNET_Wiki_Access/App_Data/aspnetwiki.mdb
ASPNET_Wiki_Access/App_Themes/css.css
ASPNET_Wiki_Access/App_Themes/style.css
ASPNET_Wiki_Access/App_Themes/wiki.css
ASPNET_Wiki_Access/Basic_Operate/Src_Manage.aspx
ASPNET_Wiki_Access/Basic_Operate/Src_Zi_Manage.aspx
ASPNET_Wiki_Access/MasterPage.master
.asp
ASPNET_Wiki_Access/PrecompiledApp.config
ASPNET_Wiki_Access/UploadFile/20070324014328{7EA0AEDD-34E6-452C-BCAF-C8029AA25566}0.jpg
.jpg
ASPNET_Wiki_Access/Web.config
.xml
ASPNET_Wiki_Access/Web.sitemap
.xml
ASPNET_Wiki_Access/add.aspx
ASPNET_Wiki_Access/addzi.aspx
ASPNET_Wiki_Access/admin/admin_add_admin.aspx
ASPNET_Wiki_Access/admin/admin_add_kind.aspx
ASPNET_Wiki_Access/admin/admin_index.aspx
ASPNET_Wiki_Access/admin/admin_login.aspx
ASPNET_Wiki_Access/admin/admin_user.aspx
ASPNET_Wiki_Access/bin/App_Code.compiled
ASPNET_Wiki_Access/bin/App_Code.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ASPNET_Wiki_Access/bin/App_Web_8yxviutv.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ASPNET_Wiki_Access/bin/App_Web_9ngtn1vl.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ASPNET_Wiki_Access/bin/App_Web_tuadxnal.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ASPNET_Wiki_Access/bin/App_Web_umaz4whx.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ASPNET_Wiki_Access/bin/App_Web_wqyitl01.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ASPNET_Wiki_Access/bin/FreeTextBox.dll
.dll .js windows:4 windows x86 arch:x86 polyglot

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\FTBv1-6-3-Source\obj\Debug\FreeTextBox.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 144KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ASPNET_Wiki_Access/bin/Microsoft.Web.Atlas.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\dd\atlas\main\src\Server\AtlasWeb\obj\Release\Microsoft.Web.Atlas.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ASPNET_Wiki_Access/city.js
.js
ASPNET_Wiki_Access/editshow.aspx
.asp
ASPNET_Wiki_Access/editshowzi.aspx
ASPNET_Wiki_Access/error.aspx
ASPNET_Wiki_Access/eula.rtf
.rtf
ASPNET_Wiki_Access/ftb.colorpicker.aspx
.asp .js polyglot
ASPNET_Wiki_Access/ftb.imagegallery.aspx
.asp .js polyglot
ASPNET_Wiki_Access/ftb.inserttable.aspx
.asp .js polyglot
ASPNET_Wiki_Access/history.aspx
ASPNET_Wiki_Access/historyshow.aspx
ASPNET_Wiki_Access/images/069121432095591.jpg
.jpg
ASPNET_Wiki_Access/images/admin_bg.gif
.gif
ASPNET_Wiki_Access/images/admin_bg_1.gif
.gif
ASPNET_Wiki_Access/images/aspnet2.gif
.gif
ASPNET_Wiki_Access/images/ftb/folder.big.gif
.gif
ASPNET_Wiki_Access/images/ftb/folder.small.gif
.gif
ASPNET_Wiki_Access/images/ftb/folder.up.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/bold.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/bullets.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/center.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/copy.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/createlink.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/cut.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/deletetablecolumn.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/deletetablerow.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/fontbackcolorpicker.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/fontforecolorpicker.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/indent.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/insertdate.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/insertimage.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/insertimagefromgallery.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/insertrule.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/inserttable.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/inserttablecolumn.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/inserttablerow.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/inserttime.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/italic.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/justifycenter.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/justifyfull.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/justifyleft.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/justifyright.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/link.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/mode.design.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/mode.html.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/numberedlist.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/numbers.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/outdent.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/paste.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/print.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/redo.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/removeformat.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/save.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/separator.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/spellcheck.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/strikethrough.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/subscript.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/superscript.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/table.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/toolbar.end.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/toolbar.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/toolbar.start.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/underline.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/undo.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/unlink.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/wordclean.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2000/wordcount.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/bold.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/bullets.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/copy.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/createlink.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/cut.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/delete.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/deletetablecolumn.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/deletetablerow.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/fontbackcolorpicker.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/fontforecolorpicker.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/indent.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/insertdate.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/insertimage.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/insertimagefromgallery.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/insertrule.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/inserttable.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/inserttablecolumn.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/inserttablerow.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/inserttime.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/italic.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/justifycenter.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/justifyfull.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/justifyleft.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/justifyright.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/mode.design.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/mode.html.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/numberedlist.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/outdent.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/paste.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/print.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/redo.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/removeformat.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/save.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/separator.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/spellcheck.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/strikethrough.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/subscript.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/superscript.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/toolbar.background.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/toolbar.end.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/toolbar.start.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/toolbarbutton.down.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/toolbarbutton.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/underline.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/undo.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/unlink.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/wordclean.gif
.gif
ASPNET_Wiki_Access/images/ftb/office2003/wordcount.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/bgcolor.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/bold.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/bold.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/borders.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/bullets.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/bullets.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/changecase.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/changecase.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/copy.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/copy.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/createlink.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/createlink.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/cut.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/cut.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/delete.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/delete.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/deletetablecolumn.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/deletetablecolumn.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/deletetablerow.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/deletetablerow.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/details.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/find.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/find.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/fontbackcolorpicker.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/fontbackcolorpicker.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/fontforecolorpicker.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/fontforecolorpicker.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/help.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/help.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/indent.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/indent.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/insertdate.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/insertdate.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/insertemail.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/insertemail.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/insertimage.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/insertimage.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/insertimagefromgallery.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/insertimagefromgallery.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/insertrule.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/insertrule.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/inserttable.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/inserttable.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/inserttablecolumn.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/inserttablecolumn.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/inserttablerow.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/inserttablerow.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/inserttime.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/inserttime.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/italic.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/italic.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/justifycenter.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/justifycenter.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/justifyfull.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/justifyfull.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/justifyleft.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/justifyleft.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/justifyright.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/justifyright.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/mode.design.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/mode.html.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/numberedlist.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/numberedlist.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/outdent.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/outdent.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/paste.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/paste.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/print.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/print.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/redo.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/redo.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/removeformat.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/removeformat.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/save.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/save.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/separator.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/spellcheck.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/spellcheck.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/strikethrough.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/strikethrough.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/subscript.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/subscript.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/superscript.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/superscript.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/toggleborders.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/toggledetails.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/toggledetails.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/toolbar.end.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/toolbar.start.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/underline.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/underline.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/undo.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/undo.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/unlink.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/unlink.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/verse.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/verse.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/wordclean.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/wordclean.over.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/wordcount.gif
.gif
ASPNET_Wiki_Access/images/ftb/officeXP/wordcount.over.gif
.gif
ASPNET_Wiki_Access/images/gg.gif
.gif
ASPNET_Wiki_Access/images/h1.jpg
.jpg
ASPNET_Wiki_Access/images/ico_help.gif
.gif
ASPNET_Wiki_Access/images/index.css
ASPNET_Wiki_Access/images/logbg.jpg
.jpg
ASPNET_Wiki_Access/images/login_img_newyear.gif
.gif
ASPNET_Wiki_Access/images/login_txt_newyear.gif
.gif
ASPNET_Wiki_Access/images/login_txt_newyear.psd
ASPNET_Wiki_Access/images/logo.gif
.gif
ASPNET_Wiki_Access/images/logo.psd
ASPNET_Wiki_Access/images/logo_s.png
.png
ASPNET_Wiki_Access/images/m.gif
.gif
ASPNET_Wiki_Access/images/nav.css
ASPNET_Wiki_Access/images/netease_logo.gif
.gif
ASPNET_Wiki_Access/images/selcolor.gif
.gif
ASPNET_Wiki_Access/images/style.css
ASPNET_Wiki_Access/images/top4.jpg
.jpg
ASPNET_Wiki_Access/images/wiki01.jpg
.jpg
ASPNET_Wiki_Access/images/wiki02.gif
.gif
ASPNET_Wiki_Access/images/wiki02.psd
ASPNET_Wiki_Access/images/wiki03.gif
.gif
ASPNET_Wiki_Access/images/wiki05.gif
.gif
ASPNET_Wiki_Access/images/wiki11[1].gif
.gif
ASPNET_Wiki_Access/images/wiki12[1].gif
.gif
ASPNET_Wiki_Access/images/wiki13.gif
.gif
ASPNET_Wiki_Access/images/wiki14.gif
.gif
ASPNET_Wiki_Access/images/wiki15.gif
.gif
ASPNET_Wiki_Access/inc/logout.aspx
ASPNET_Wiki_Access/index.aspx
ASPNET_Wiki_Access/list_my.aspx
ASPNET_Wiki_Access/list_my_edit.aspx
ASPNET_Wiki_Access/list_px.aspx
ASPNET_Wiki_Access/listtag.aspx
ASPNET_Wiki_Access/login.aspx
ASPNET_Wiki_Access/my_user.aspx
ASPNET_Wiki_Access/readme.txt
ASPNET_Wiki_Access/reg.aspx
ASPNET_Wiki_Access/search.aspx
ASPNET_Wiki_Access/srcshow.aspx
ASPNET_Wiki_Access/tags.aspx
ASPNET_Wiki_Access/下载说明.htm
.html .js polyglot
ASPNET_Wiki_Access/新云软件.url
.url

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 36KB - Virtual size: 35KB

.rsrc Size: 4KB - Virtual size: 680B

.reloc Size: 4KB - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 712B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 7KB - Virtual size: 7KB

.rsrc Size: 1024B - Virtual size: 712B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 28KB - Virtual size: 26KB

.rsrc Size: 4KB - Virtual size: 712B

.reloc Size: 4KB - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 5KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 712B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 9KB - Virtual size: 9KB

.rsrc Size: 1024B - Virtual size: 712B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 144KB - Virtual size: 142KB

.rsrc Size: 4KB - Virtual size: 952B

.reloc Size: 4KB - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

.text
Size: 36KB - Virtual size: 35KB

.rsrc
Size: 4KB - Virtual size: 680B

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 712B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 1024B - Virtual size: 712B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 28KB - Virtual size: 26KB

.rsrc
Size: 4KB - Virtual size: 712B

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 712B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 1024B - Virtual size: 712B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 144KB - Virtual size: 142KB

.rsrc
Size: 4KB - Virtual size: 952B

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 1.8MB - Virtual size: 1.8MB

.rsrc
Size: 4KB - Virtual size: 992B

.reloc
Size: 4KB - Virtual size: 12B