F:\FTBv1-6-3-Source\obj\Debug\FreeTextBox.pdb
Overview
overview
4Static
static
3CloseSite.asp
windows7-x64
3CloseSite.asp
windows10-2004-x64
3Help.asp
windows7-x64
3Help.asp
windows10-2004-x64
3MyWeb影�...��.doc
windows7-x64
4MyWeb影�...��.doc
windows10-2004-x64
1NetBar.asp
windows7-x64
3NetBar.asp
windows10-2004-x64
3NetBarShow.asp
windows7-x64
3NetBarShow.asp
windows10-2004-x64
3UserContrl...er.asp
windows7-x64
3UserContrl...er.asp
windows10-2004-x64
3UserContrls/Help.asp
windows7-x64
3UserContrls/Help.asp
windows10-2004-x64
3UserContrl...ic.asp
windows7-x64
3UserContrl...ic.asp
windows10-2004-x64
3UserContrl...lm.asp
windows7-x64
3UserContrl...lm.asp
windows10-2004-x64
3UserContrl...ad.asp
windows7-x64
3UserContrl...ad.asp
windows10-2004-x64
3UserContrl...al.asp
windows7-x64
3UserContrl...al.asp
windows10-2004-x64
3admin/Film...te.asp
windows7-x64
3admin/Film...te.asp
windows10-2004-x64
3admin/GuestBook.asp
windows7-x64
3admin/GuestBook.asp
windows10-2004-x64
3admin/Manage_Menu.asp
windows7-x64
3admin/Manage_Menu.asp
windows10-2004-x64
3admin/Mb_down.asp
windows7-x64
3admin/Mb_down.asp
windows10-2004-x64
3admin/Mb_kf.asp
windows7-x64
3admin/Mb_kf.asp
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
CloseSite.asp
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
CloseSite.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
Help.asp
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
Help.asp
Resource
win10v2004-20240704-en
Behavioral task
behavioral5
Sample
MyWeb影视系统说明书.doc
Resource
win7-20240705-en
Behavioral task
behavioral6
Sample
MyWeb影视系统说明书.doc
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
NetBar.asp
Resource
win7-20240704-en
Behavioral task
behavioral8
Sample
NetBar.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
NetBarShow.asp
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
NetBarShow.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
UserContrls/DriverForUser.asp
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
UserContrls/DriverForUser.asp
Resource
win10v2004-20240704-en
Behavioral task
behavioral13
Sample
UserContrls/Help.asp
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
UserContrls/Help.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
UserContrls/MonthTopic.asp
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
UserContrls/MonthTopic.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
UserContrls/NewestFilm.asp
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
UserContrls/NewestFilm.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
UserContrls/SoftDownLoad.asp
Resource
win7-20240704-en
Behavioral task
behavioral20
Sample
UserContrls/SoftDownLoad.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
UserContrls/Spical.asp
Resource
win7-20240705-en
Behavioral task
behavioral22
Sample
UserContrls/Spical.asp
Resource
win10v2004-20240704-en
Behavioral task
behavioral23
Sample
admin/FilmCard_Create.asp
Resource
win7-20240705-en
Behavioral task
behavioral24
Sample
admin/FilmCard_Create.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
admin/GuestBook.asp
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
admin/GuestBook.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
admin/Manage_Menu.asp
Resource
win7-20240704-en
Behavioral task
behavioral28
Sample
admin/Manage_Menu.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
admin/Mb_down.asp
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
admin/Mb_down.asp
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
admin/Mb_kf.asp
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
admin/Mb_kf.asp
Resource
win10v2004-20240709-en
General
-
Target
340e12833ff57c280989ef1c20a6edaf_JaffaCakes118
-
Size
3.3MB
-
MD5
340e12833ff57c280989ef1c20a6edaf
-
SHA1
5ea45efe143842a09f2eb229f2c6724a75f8b33a
-
SHA256
0ac39cef0b5c3493c57f84c2e25996de8fe8bd4b5b3ab39777f04dff1e82bfe0
-
SHA512
0eafac596962fba96103415e711a93700d65a42e10941cb2489f26098c329a82b8f1297ebde227e3c78e2aeed8946b9ca593fc7d5710e02be850e5b6f59e0264
-
SSDEEP
98304:9nnjZu8dLqpi2gC5L74C6/BE0cpPtepkYe:1n9rdLq42jl74rB4pPtepkN
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/bin/FreeTextBox.dll unpack001/bin/Myweb.Data.dll unpack001/bin/vod.dll
Files
-
340e12833ff57c280989ef1c20a6edaf_JaffaCakes118.rar
-
001.jpg.jpg
-
002.jpg.jpg
-
003.jpg.jpg
-
004.jpg.jpg
-
1.swf
-
CloseSite.aspx.asp
-
Database/vod.mdb
-
GoodToday.aspx.asp .js polyglot
-
Help.aspx.asp
-
MyWeb影视系统说明书.doc.doc windows office2003
-
NetBar.aspx.asp
-
NetBarShow.aspx.asp
-
UserContrls/DriverForUser.ascx.asp
-
UserContrls/Help.ascx.asp
-
UserContrls/Login.ascx.asp .js polyglot
-
UserContrls/MonthTopic.ascx.asp
-
UserContrls/NewestFilm.ascx.asp
-
UserContrls/ServiceOnline.ascx
-
UserContrls/SoftDownLoad.ascx.asp
-
UserContrls/Spical.ascx.asp
-
Web.config.xml
-
admin/Admin.css
-
admin/FilmCard_Create.aspx.asp
-
admin/FilmCard_List.aspx.asp .js polyglot
-
admin/GuestBook.aspx.asp
-
admin/HelpAddEdit.aspx.asp .js polyglot
-
admin/HelpList.aspx.asp .js polyglot
-
admin/Interface.aspx
-
admin/Manage_Menu.aspx.asp
-
admin/Mb_down.aspx.asp
-
admin/Mb_kf.aspx.asp
-
admin/NetBarAddEdit.aspx.asp .js polyglot
-
admin/NetBarList.aspx.asp .js polyglot
-
admin/ZhuanTi.aspx.asp
-
admin/admin_index.aspx.asp
-
admin/admin_login.aspx.asp
-
admin/film.aspx.asp
-
admin/film_add.aspx.asp
-
admin/film_class.aspx.asp
-
admin/film_classAddEdit.aspx.asp
-
admin/film_edit.aspx.asp
-
admin/film_from.aspx.asp
-
admin/film_ip.aspx.asp
-
admin/film_ipay.aspx.asp
-
admin/guestbook_edit.aspx.asp
-
admin/hy.aspx.asp
-
admin/hy_ClassAddEdit.aspx.asp
-
admin/hy_class.aspx.asp
-
admin/hy_edit.aspx.asp
-
admin/images/admin.js.js
-
admin/images/admin_bg_1.gif.gif
-
admin/images/admin_bg_2.gif.gif
-
admin/images/admin_bg_3.gif.gif
-
admin/images/admin_bg_3b.gif.gif
-
admin/images/admin_left_1.gif.gif
-
admin/images/admin_left_10.gif.gif
-
admin/images/admin_left_2.gif.gif
-
admin/images/admin_left_3.gif.gif
-
admin/images/admin_left_4.gif.gif
-
admin/images/admin_left_5.gif.gif
-
admin/images/admin_left_6.gif.gif
-
admin/images/admin_left_7.gif.gif
-
admin/images/admin_left_8.gif.gif
-
admin/images/admin_left_9.gif.gif
-
admin/images/admin_top_bg.gif.gif
-
admin/images/admin_top_close.gif.gif
-
admin/images/admin_top_icon_1.gif.gif
-
admin/images/admin_top_icon_5.gif.gif
-
admin/images/admin_top_open.gif.gif
-
admin/images/bullet.gif.gif
-
admin/images/calendar.js.js
-
admin/images/css.css
-
admin/images/dvbbs.jpg.jpg
-
admin/images/forumHeaderBackground.gif.gif
-
admin/images/ftb/folder.big.gif.gif
-
admin/images/ftb/folder.small.gif.gif
-
admin/images/ftb/folder.up.gif.gif
-
admin/images/ftb/office2000/bold.gif.gif
-
admin/images/ftb/office2000/bullets.gif.gif
-
admin/images/ftb/office2000/center.gif.gif
-
admin/images/ftb/office2000/copy.gif.gif
-
admin/images/ftb/office2000/createlink.gif.gif
-
admin/images/ftb/office2000/cut.gif.gif
-
admin/images/ftb/office2000/deletetablecolumn.gif.gif
-
admin/images/ftb/office2000/deletetablerow.gif.gif
-
admin/images/ftb/office2000/fontbackcolorpicker.gif.gif
-
admin/images/ftb/office2000/fontforecolorpicker.gif.gif
-
admin/images/ftb/office2000/indent.gif.gif
-
admin/images/ftb/office2000/insertdate.gif.gif
-
admin/images/ftb/office2000/insertimage.gif.gif
-
admin/images/ftb/office2000/insertimagefromgallery.gif.gif
-
admin/images/ftb/office2000/insertrule.gif.gif
-
admin/images/ftb/office2000/inserttable.gif.gif
-
admin/images/ftb/office2000/inserttablecolumn.gif.gif
-
admin/images/ftb/office2000/inserttablerow.gif.gif
-
admin/images/ftb/office2000/inserttime.gif.gif
-
admin/images/ftb/office2000/italic.gif.gif
-
admin/images/ftb/office2000/justifycenter.gif.gif
-
admin/images/ftb/office2000/justifyfull.gif.gif
-
admin/images/ftb/office2000/justifyleft.gif.gif
-
admin/images/ftb/office2000/justifyright.gif.gif
-
admin/images/ftb/office2000/link.gif.gif
-
admin/images/ftb/office2000/mode.design.gif.gif
-
admin/images/ftb/office2000/mode.html.gif.gif
-
admin/images/ftb/office2000/numberedlist.gif.gif
-
admin/images/ftb/office2000/numbers.gif.gif
-
admin/images/ftb/office2000/outdent.gif.gif
-
admin/images/ftb/office2000/paste.gif.gif
-
admin/images/ftb/office2000/print.gif.gif
-
admin/images/ftb/office2000/redo.gif.gif
-
admin/images/ftb/office2000/removeformat.gif.gif
-
admin/images/ftb/office2000/save.gif.gif
-
admin/images/ftb/office2000/separator.gif.gif
-
admin/images/ftb/office2000/spellcheck.gif.gif
-
admin/images/ftb/office2000/strikethrough.gif.gif
-
admin/images/ftb/office2000/subscript.gif.gif
-
admin/images/ftb/office2000/superscript.gif.gif
-
admin/images/ftb/office2000/table.gif.gif
-
admin/images/ftb/office2000/toolbar.end.gif.gif
-
admin/images/ftb/office2000/toolbar.gif.gif
-
admin/images/ftb/office2000/toolbar.start.gif.gif
-
admin/images/ftb/office2000/underline.gif.gif
-
admin/images/ftb/office2000/undo.gif.gif
-
admin/images/ftb/office2000/unlink.gif.gif
-
admin/images/ftb/office2000/wordclean.gif.gif
-
admin/images/ftb/office2000/wordcount.gif.gif
-
admin/images/ftb/office2003/bold.gif.gif
-
admin/images/ftb/office2003/bullets.gif.gif
-
admin/images/ftb/office2003/copy.gif.gif
-
admin/images/ftb/office2003/createlink.gif.gif
-
admin/images/ftb/office2003/cut.gif.gif
-
admin/images/ftb/office2003/delete.gif.gif
-
admin/images/ftb/office2003/deletetablecolumn.gif.gif
-
admin/images/ftb/office2003/deletetablerow.gif.gif
-
admin/images/ftb/office2003/fontbackcolorpicker.gif.gif
-
admin/images/ftb/office2003/fontforecolorpicker.gif.gif
-
admin/images/ftb/office2003/indent.gif.gif
-
admin/images/ftb/office2003/insertdate.gif.gif
-
admin/images/ftb/office2003/insertimage.gif.gif
-
admin/images/ftb/office2003/insertimagefromgallery.gif.gif
-
admin/images/ftb/office2003/insertrule.gif.gif
-
admin/images/ftb/office2003/inserttable.gif.gif
-
admin/images/ftb/office2003/inserttablecolumn.gif.gif
-
admin/images/ftb/office2003/inserttablerow.gif.gif
-
admin/images/ftb/office2003/inserttime.gif.gif
-
admin/images/ftb/office2003/italic.gif.gif
-
admin/images/ftb/office2003/justifycenter.gif.gif
-
admin/images/ftb/office2003/justifyfull.gif.gif
-
admin/images/ftb/office2003/justifyleft.gif.gif
-
admin/images/ftb/office2003/justifyright.gif.gif
-
admin/images/ftb/office2003/mode.design.gif.gif
-
admin/images/ftb/office2003/mode.html.gif.gif
-
admin/images/ftb/office2003/numberedlist.gif.gif
-
admin/images/ftb/office2003/outdent.gif.gif
-
admin/images/ftb/office2003/paste.gif.gif
-
admin/images/ftb/office2003/print.gif.gif
-
admin/images/ftb/office2003/redo.gif.gif
-
admin/images/ftb/office2003/removeformat.gif.gif
-
admin/images/ftb/office2003/save.gif.gif
-
admin/images/ftb/office2003/separator.gif.gif
-
admin/images/ftb/office2003/spellcheck.gif.gif
-
admin/images/ftb/office2003/strikethrough.gif.gif
-
admin/images/ftb/office2003/subscript.gif.gif
-
admin/images/ftb/office2003/superscript.gif.gif
-
admin/images/ftb/office2003/toolbar.background.gif.gif
-
admin/images/ftb/office2003/toolbar.end.gif.gif
-
admin/images/ftb/office2003/toolbar.start.gif.gif
-
admin/images/ftb/office2003/toolbarbutton.down.gif.gif
-
admin/images/ftb/office2003/toolbarbutton.over.gif.gif
-
admin/images/ftb/office2003/underline.gif.gif
-
admin/images/ftb/office2003/undo.gif.gif
-
admin/images/ftb/office2003/unlink.gif.gif
-
admin/images/ftb/office2003/wordclean.gif.gif
-
admin/images/ftb/office2003/wordcount.gif.gif
-
admin/images/ftb/officeXP/bgcolor.gif.gif
-
admin/images/ftb/officeXP/bold.gif.gif
-
admin/images/ftb/officeXP/bold.over.gif.gif
-
admin/images/ftb/officeXP/borders.gif.gif
-
admin/images/ftb/officeXP/bullets.gif.gif
-
admin/images/ftb/officeXP/bullets.over.gif.gif
-
admin/images/ftb/officeXP/changecase.gif.gif
-
admin/images/ftb/officeXP/changecase.over.gif.gif
-
admin/images/ftb/officeXP/copy.gif.gif
-
admin/images/ftb/officeXP/copy.over.gif.gif
-
admin/images/ftb/officeXP/createlink.gif.gif
-
admin/images/ftb/officeXP/createlink.over.gif.gif
-
admin/images/ftb/officeXP/cut.gif.gif
-
admin/images/ftb/officeXP/cut.over.gif.gif
-
admin/images/ftb/officeXP/delete.gif.gif
-
admin/images/ftb/officeXP/delete.over.gif.gif
-
admin/images/ftb/officeXP/deletetablecolumn.gif.gif
-
admin/images/ftb/officeXP/deletetablecolumn.over.gif.gif
-
admin/images/ftb/officeXP/deletetablerow.gif.gif
-
admin/images/ftb/officeXP/deletetablerow.over.gif.gif
-
admin/images/ftb/officeXP/details.gif.gif
-
admin/images/ftb/officeXP/find.gif.gif
-
admin/images/ftb/officeXP/find.over.gif.gif
-
admin/images/ftb/officeXP/fontbackcolorpicker.gif.gif
-
admin/images/ftb/officeXP/fontbackcolorpicker.over.gif.gif
-
admin/images/ftb/officeXP/fontforecolorpicker.gif.gif
-
admin/images/ftb/officeXP/fontforecolorpicker.over.gif.gif
-
admin/images/ftb/officeXP/help.gif.gif
-
admin/images/ftb/officeXP/help.over.gif.gif
-
admin/images/ftb/officeXP/indent.gif.gif
-
admin/images/ftb/officeXP/indent.over.gif.gif
-
admin/images/ftb/officeXP/insertdate.gif.gif
-
admin/images/ftb/officeXP/insertdate.over.gif.gif
-
admin/images/ftb/officeXP/insertemail.gif.gif
-
admin/images/ftb/officeXP/insertemail.over.gif.gif
-
admin/images/ftb/officeXP/insertimage.gif.gif
-
admin/images/ftb/officeXP/insertimage.over.gif.gif
-
admin/images/ftb/officeXP/insertimagefromgallery.gif.gif
-
admin/images/ftb/officeXP/insertimagefromgallery.over.gif.gif
-
admin/images/ftb/officeXP/insertrule.gif.gif
-
admin/images/ftb/officeXP/insertrule.over.gif.gif
-
admin/images/ftb/officeXP/inserttable.gif.gif
-
admin/images/ftb/officeXP/inserttable.over.gif.gif
-
admin/images/ftb/officeXP/inserttablecolumn.gif.gif
-
admin/images/ftb/officeXP/inserttablecolumn.over.gif.gif
-
admin/images/ftb/officeXP/inserttablerow.gif.gif
-
admin/images/ftb/officeXP/inserttablerow.over.gif.gif
-
admin/images/ftb/officeXP/inserttime.gif.gif
-
admin/images/ftb/officeXP/inserttime.over.gif.gif
-
admin/images/ftb/officeXP/italic.gif.gif
-
admin/images/ftb/officeXP/italic.over.gif.gif
-
admin/images/ftb/officeXP/justifycenter.gif.gif
-
admin/images/ftb/officeXP/justifycenter.over.gif.gif
-
admin/images/ftb/officeXP/justifyfull.gif.gif
-
admin/images/ftb/officeXP/justifyfull.over.gif.gif
-
admin/images/ftb/officeXP/justifyleft.gif.gif
-
admin/images/ftb/officeXP/justifyleft.over.gif.gif
-
admin/images/ftb/officeXP/justifyright.gif.gif
-
admin/images/ftb/officeXP/justifyright.over.gif.gif
-
admin/images/ftb/officeXP/mode.design.gif.gif
-
admin/images/ftb/officeXP/mode.html.gif.gif
-
admin/images/ftb/officeXP/numberedlist.gif.gif
-
admin/images/ftb/officeXP/numberedlist.over.gif.gif
-
admin/images/ftb/officeXP/outdent.gif.gif
-
admin/images/ftb/officeXP/outdent.over.gif.gif
-
admin/images/ftb/officeXP/paste.gif.gif
-
admin/images/ftb/officeXP/paste.over.gif.gif
-
admin/images/ftb/officeXP/print.gif.gif
-
admin/images/ftb/officeXP/print.over.gif.gif
-
admin/images/ftb/officeXP/redo.gif.gif
-
admin/images/ftb/officeXP/redo.over.gif.gif
-
admin/images/ftb/officeXP/removeformat.gif.gif
-
admin/images/ftb/officeXP/removeformat.over.gif.gif
-
admin/images/ftb/officeXP/save.gif.gif
-
admin/images/ftb/officeXP/save.over.gif.gif
-
admin/images/ftb/officeXP/separator.gif.gif
-
admin/images/ftb/officeXP/spellcheck.gif.gif
-
admin/images/ftb/officeXP/spellcheck.over.gif.gif
-
admin/images/ftb/officeXP/strikethrough.gif.gif
-
admin/images/ftb/officeXP/strikethrough.over.gif.gif
-
admin/images/ftb/officeXP/subscript.gif.gif
-
admin/images/ftb/officeXP/subscript.over.gif.gif
-
admin/images/ftb/officeXP/superscript.gif.gif
-
admin/images/ftb/officeXP/superscript.over.gif.gif
-
admin/images/ftb/officeXP/toggleborders.gif.gif
-
admin/images/ftb/officeXP/toggledetails.gif.gif
-
admin/images/ftb/officeXP/toggledetails.over.gif.gif
-
admin/images/ftb/officeXP/toolbar.end.gif.gif
-
admin/images/ftb/officeXP/toolbar.start.gif.gif
-
admin/images/ftb/officeXP/underline.gif.gif
-
admin/images/ftb/officeXP/underline.over.gif.gif
-
admin/images/ftb/officeXP/undo.gif.gif
-
admin/images/ftb/officeXP/undo.over.gif.gif
-
admin/images/ftb/officeXP/unlink.gif.gif
-
admin/images/ftb/officeXP/unlink.over.gif.gif
-
admin/images/ftb/officeXP/verse.gif.gif
-
admin/images/ftb/officeXP/verse.over.gif.gif
-
admin/images/ftb/officeXP/wordclean.gif.gif
-
admin/images/ftb/officeXP/wordclean.over.gif.gif
-
admin/images/ftb/officeXP/wordcount.gif.gif
-
admin/images/ftb/officeXP/wordcount.over.gif.gif
-
admin/images/gotop.gif.gif
-
admin/images/help.gif.gif
-
admin/images/i_home.gif.gif
-
admin/images/login_admin1.jpg.jpg
-
admin/images/login_admin2.jpg.jpg
-
admin/images/login_admin3.jpg.jpg
-
admin/images/login_admin4.jpg.jpg
-
admin/images/loginbg.jpg.jpg
-
admin/images/loginbg2.jpg.jpg
-
admin/images/minus.gif.gif
-
admin/images/pagelist/First.gif.gif
-
admin/images/pagelist/Last.gif.gif
-
admin/images/pagelist/Next.gif.gif
-
admin/images/pagelist/Previous.gif.gif
-
admin/images/plus.gif.gif
-
admin/images/title.gif.gif
-
admin/images/title_bg_hide.gif.gif
-
admin/images/title_bg_quit.gif.gif
-
admin/images/title_bg_show.gif.gif
-
admin/images/top_bg.gif.gif
-
admin/images/top_logo.gif.gif
-
admin/images/viewpic.gif.gif
-
admin/index_set.aspx.asp .js polyglot
-
admin/left.aspx.asp .js polyglot
-
admin/logout.aspx.asp
-
admin/main.aspx
-
admin/order.aspx.asp
-
admin/order_add.aspx.asp
-
admin/set.aspx.asp
-
admin/top.aspx.asp
-
admin/新云软件.url.url
-
bin/FreeTextBox.dll.dll .js windows:4 windows x86 arch:x86 polyglot
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 144KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
bin/Myweb.Data.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.textxc Size: 132KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 82B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 964B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
bin/vod.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.textxc Size: 400KB - Virtual size: 396KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 82B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 700B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
film.aspx.asp .js polyglot
-
filmdown.aspx.asp
-
foot.ascx.asp
-
help/fl_d1.aspx.asp
-
help/fl_d2.aspx.asp
-
help/fl_d3.aspx.asp
-
help/fl_d4.aspx.asp
-
help/fl_f1.aspx.asp
-
help/fl_f3.aspx.asp
-
help/fl_f4.aspx.asp
-
help/fl_q1.aspx.asp
-
help/fl_q2.aspx.asp
-
help/fl_q3.aspx.asp
-
help/fl_q4.aspx.asp
-
help/fl_q5.aspx.asp
-
help/left.ascx.asp
-
images/1.gif.gif
-
images/10.gif.gif
-
images/1star.gif.gif
-
images/2.gif.gif
-
images/2star.gif.gif
-
images/3.gif.gif
-
images/3star.gif.gif
-
images/4.gif.gif
-
images/4star.gif.gif
-
images/5.gif.gif
-
images/5star.gif.gif
-
images/6.gif.gif
-
images/7.gif.gif
-
images/8.gif.gif
-
images/9.gif.gif
-
images/AD.jpg.jpg
-
images/CloseSite.gif.gif
-
images/DVD_r4_c8.jpg.jpg
-
images/FilmAction.gif.gif
-
images/FilmAction1.gif.gif
-
images/FilmAction2.gif.gif
-
images/List/TT_AREA_01.gif.gif
-
images/List/TT_AREA_02.gif.gif
-
images/List/TT_AREA_03.gif.gif
-
images/List/TT_AREA_04.gif.gif
-
images/List/TT_AREA_06.gif.gif
-
images/List/TT_List01.gif.gif
-
images/List/TT_List02.gif.gif
-
images/List/TT_List02.png.png
-
images/List/TT_List03.gif.gif
-
images/List/TT_List04.gif.gif
-
images/List/TT_List05.gif.gif
-
images/List/TT_List06.gif.gif
-
images/List/TT_List07.gif.gif
-
images/List/TT_List08.gif.gif
-
images/List/TT_List09.gif.gif
-
images/List/TT_List10.gif.gif
-
images/List/TT_List11.gif.gif
-
images/List/TT_List_ALL.gif.gif
-
images/List/TT_List_SEARCH.gif.gif
-
images/List/TT_List_free.gif.gif
-
images/List/Thumbs.db
-
images/List/_notes/TT_AREA_01.gif.mno
-
images/List/_notes/TT_AREA_02.gif.mno
-
images/List/_notes/TT_AREA_03.gif.mno
-
images/List/_notes/TT_AREA_04.gif.mno
-
images/List/_notes/TT_AREA_06.gif.mno
-
images/List/_notes/TT_List01.gif.mno
-
images/List/_notes/TT_List02.gif.mno
-
images/List/_notes/TT_List03.gif.mno
-
images/List/_notes/TT_List04.gif.mno
-
images/List/_notes/TT_List05.gif.mno
-
images/List/_notes/TT_List06.gif.mno
-
images/List/_notes/TT_List07.gif.mno
-
images/List/_notes/TT_List08.gif.mno
-
images/List/_notes/TT_List09.gif.mno
-
images/List/_notes/TT_List10.gif.mno
-
images/List/_notes/TT_List11.gif.mno
-
images/List/_notes/TT_List_ALL.gif.mno
-
images/List/_notes/TT_List_SEARCH.gif.mno
-
images/List/title22.png.png
-
images/Thumbs.db
-
images/Top/Thumbs.db
-
images/Top/_notes/top_r11_c18.jpg.mno
-
images/Top/_notes/top_r3_c10.jpg.mno
-
images/Top/_notes/top_r3_c20.jpg.mno
-
images/Top/_notes/top_r3_c8.jpg.mno
-
images/Top/_notes/top_r9_c18.jpg.mno
-
images/Top/spacer.gif.gif
-
images/Top/top_r11_c18.jpg.jpg
-
images/Top/top_r13_c3.jpg.jpg
-
images/Top/top_r2_c2.jpg.jpg
-
images/Top/top_r2_c8.jpg.jpg
-
images/Top/top_r3_c10.jpg.jpg
-
images/Top/top_r3_c12.jpg.jpg
-
images/Top/top_r3_c16.jpg.jpg
-
images/Top/top_r3_c20.jpg.jpg
-
images/Top/top_r3_c22.jpg.jpg
-
images/Top/top_r3_c24.jpg.jpg
-
images/Top/top_r3_c26.jpg.jpg
-
images/Top/top_r3_c30.jpg.jpg
-
images/Top/top_r3_c35.jpg.jpg
-
images/Top/top_r3_c38.jpg.jpg
-
images/Top/top_r3_c8.jpg.jpg
-
images/Top/top_r4_c11.jpg.jpg
-
images/Top/top_r4_c14.jpg.jpg
-
images/Top/top_r4_c15.jpg.jpg
-
images/Top/top_r4_c16.jpg.jpg
-
images/Top/top_r4_c17.jpg.jpg
-
images/Top/top_r4_c19.jpg.jpg
-
images/Top/top_r4_c23.jpg.jpg
-
images/Top/top_r4_c9.jpg.jpg
-
images/Top/top_r6_c3.jpg.jpg
-
images/Top/top_r6_c4.jpg.jpg
-
images/Top/top_r8_c7.jpg.jpg
-
images/Top/top_r9_c18.jpg.jpg
-
images/Top/top_r9_c20.jpg.jpg
-
images/Top/top_r9_c22.jpg.jpg
-
images/add_fav.jpg.jpg
-
images/bang3.gif.gif
-
images/bank1.gif.gif
-
images/bank2.gif.gif
-
images/barwa.swf
-
images/bg01.gif.gif
-
images/bg02.gif.gif
-
images/bg03.gif.gif
-
images/bg05.gif.gif
-
images/bg06.gif.gif
-
images/bg07.gif.gif
-
images/bg09.gif.gif
-
images/bg10.gif.gif
-
images/bg11.gif.gif
-
images/bg12.gif.gif
-
images/bg13.gif.gif
-
images/bg14.gif.gif
-
images/bg16.gif.gif
-
images/bg17.gif.gif
-
images/bmore.gif.gif
-
images/bt01.gif.gif
-
images/bt02.gif.gif
-
images/bt03.gif.gif
-
images/bt04.gif.gif
-
images/bt05.gif.gif
-
images/bt10.gif.gif
-
images/bt17.gif.gif
-
images/bt18.gif.gif
-
images/bt19.gif.gif
-
images/bt20.gif.gif
-
images/bul_05.gif.gif
-
images/clear_1.gif.gif
-
images/clear_2.gif.gif
-
images/clear_3.gif.gif
-
images/clear_4.gif.gif
-
images/clear_5.gif.gif
-
images/css.css
-
images/dongzou.gif.gif
-
images/down_real.jpg.jpg
-
images/down_wm.jpg.jpg
-
images/happy.gif.gif
-
images/help/DirectX.gif
-
images/help/Thumbs.db
-
images/help/down_wm.jpg.jpg
-
images/help/jt02.gif.gif
-
images/help/line01.gif.gif
-
images/help/mympc.GIF.gif
-
images/help/pm34.gif.gif
-
images/help/pm35.gif.gif
-
images/help/realoneplayer_download.gif.gif
-
images/help/title01.jpg.jpg
-
images/help/title03.jpg.jpg
-
images/help/title04.jpg.jpg
-
images/help/title05.jpg.jpg
-
images/help/title07.jpg.jpg
-
images/help/title08.jpg.jpg
-
images/help/title09.jpg.jpg
-
images/help/title10.jpg.jpg
-
images/help/title11.jpg.jpg
-
images/help/title12.jpg.jpg
-
images/help/tu1.gif.gif
-
images/help/tu2.gif.gif
-
images/help/tu3.gif.gif
-
images/help/tu4.gif.gif
-
images/help/tu7.gif.gif
-
images/help/tu8.gif.gif
-
images/help/us01.gif.gif
-
images/help/us02.gif.gif
-
images/help/us03.gif.gif
-
images/help/us04.gif.gif
-
images/help/us05.gif.gif
-
images/help/us06.gif.gif
-
images/help/us07.gif.gif
-
images/help/us08.gif.gif
-
images/help/us09.gif.gif
-
images/help/us10.gif.gif
-
images/help/winrar.gif.gif
-
images/img10.gif.gif
-
images/img11.gif.gif
-
images/indexIMG/Thumbs.db
-
images/indexIMG/title01.gif.gif
-
images/indexIMG/title02.gif.gif
-
images/indexIMG/title03.gif.gif
-
images/indexIMG/title04.gif.gif
-
images/indexIMG/title05.gif.gif
-
images/indexIMG/title06.gif.gif
-
images/indexIMG/title07.gif.gif
-
images/indexIMG/title08.gif.gif
-
images/indexIMG/title09.gif.gif
-
images/jt01.gif.gif
-
images/jt02.gif.gif
-
images/jt03.gif.gif
-
images/kehuan.gif.gif
-
images/kf1.gif.gif
-
images/login/Thumbs.db
-
images/login/login_bg.gif.gif
-
images/login/login_bt.gif.gif
-
images/login/login_bt2.gif.gif
-
images/login/login_bt2_2.gif.gif
-
images/login/login_bt3.gif.gif
-
images/login/login_bt30.gif.gif
-
images/login/login_bt30_2.gif.gif
-
images/login/login_tit.gif.gif
-
images/login/login_tit2.gif.gif
-
images/login/logout_bt.gif.gif
-
images/login_bg.gif.gif
-
images/logo.jpg.jpg
-
images/love.gif.gif
-
images/main_title_top_left.jpg.jpg
-
images/media.jpg.jpg
-
images/media1.jpg.jpg
-
images/menu_bar.gif.gif
-
images/menu_down.gif.gif
-
images/menu_help.gif.gif
-
images/menu_hy.gif.gif
-
images/menu_nopay.gif.gif
-
images/menu_pay.gif.gif
-
images/menu_reg.gif.gif
-
images/menu_top_r1_c1.gif.gif
-
images/menu_top_r1_c2.gif.gif
-
images/menu_top_r1_c9.gif.gif
-
images/moveshow.gif.gif
-
images/nav1.gif.gif
-
images/nav2.gif.gif
-
images/nav3.gif.gif
-
images/nav4.gif.gif
-
images/new_nav_r1_c1.gif.gif
-
images/pagelist/First.gif.gif
-
images/pagelist/Last.gif.gif
-
images/pagelist/Next.gif.gif
-
images/pagelist/Previous.gif.gif
-
images/pagelist/Thumbs.db
-
images/player/Thumbs.db
-
images/player/ctrl-fullscreen.gif.gif
-
images/player/plyer_r2_c2.jpg.jpg
-
images/player/plyer_r2_c3.jpg.jpg
-
images/player/plyer_r2_c5.jpg.jpg
-
images/player/plyer_r3_c2.jpg.jpg
-
images/player/plyer_r5_c2.jpg.jpg
-
images/player/realplayer.jpg.jpg
-
images/player/spacer.gif.gif
-
images/player/vod_mf_r17_c7.jpg.jpg
-
images/player/vod_mf_r20_c7.jpg.jpg
-
images/player/vod_mf_r21_c7.jpg.jpg
-
images/player/vod_mf_r5_c10.jpg.jpg
-
images/player/vod_mf_r5_c12.jpg.jpg
-
images/player/vod_mf_r7_c7.jpg.jpg
-
images/player/vod_r8_c7.jpg.jpg
-
images/player/复件 realplayer.jpg.jpg
-
images/qq.bmp
-
images/real.jpg.jpg
-
images/regsiter/102.jpg.jpg
-
images/regsiter/43.png.png
-
images/regsiter/43_r3_c2.jpg.jpg
-
images/regsiter/Thumbs.db
-
images/regsiter/regsiter.png.png
-
images/regsiter/regsiter_r2_c2.jpg.jpg
-
images/regsiter/regsiter_r2_c4.jpg.jpg
-
images/regsiter/tu3.gif.gif
-
images/search_02.jpg.jpg
-
images/search_03.jpg.jpg
-
images/search_04.jpg.jpg
-
images/search_bg.jpg.gif
-
images/search_button_ad.gif.gif
-
images/search_button_go.gif.gif
-
images/search_t.gif.gif
-
images/sort_bg_02.gif.gif
-
images/sort_movie_01.gif.gif
-
images/sort_movie_02.gif.gif
-
images/style.css
-
images/title01.gif.gif
-
images/title02.gif.gif
-
images/title03.gif.gif
-
images/title04.gif.gif
-
images/title05.gif.gif
-
images/title09.gif.gif
-
images/title10.gif.gif
-
images/title11.gif.gif
-
images/title12.gif.gif
-
images/title13.gif.gif
-
images/title20.gif.gif
-
images/title20.png.png
-
images/title22.gif.gif
-
images/title23.gif.gif
-
images/title25.gif.gif
-
images/tl_01.gif.gif
-
images/tl_08.gif.gif
-
images/today/Thumbs.db
-
images/today/today_01.gif.gif
-
images/today/today_011.gif.gif
-
images/today/today_02.gif.gif
-
images/today/today_021.gif.gif
-
images/today/today_03.gif.gif
-
images/today/today_031.gif.gif
-
images/today/today_04.gif.gif
-
images/today/today_041.gif.gif
-
images/today/today_bg.gif.gif
-
images/today/today_tit.gif.gif
-
images/top.jpg.jpg
-
images/top10_01.gif.gif
-
images/top10_02.gif.gif
-
images/top10_03.gif.gif
-
images/top10_04.gif.gif
-
images/top10_05.gif.gif
-
images/top10_06.gif.gif
-
images/top10_07.gif.gif
-
images/top10_08.gif.gif
-
images/top10_09.gif.gif
-
images/top10_10.gif.gif
-
images/top_1.jpg.jpg
-
images/top_10.jpg.jpg
-
images/top_11.jpg.jpg
-
images/top_12.jpg.jpg
-
images/top_13.jpg.jpg
-
images/top_14.jpg.jpg
-
images/top_15.jpg.jpg
-
images/top_16.jpg.jpg
-
images/top_17.jpg.jpg
-
images/top_bg.gif.gif
-
images/top_gr.gif.gif
-
images/top_link1.gif.gif
-
images/top_link2.gif.gif
-
images/top_link3.gif.gif
-
images/top_link4.gif.gif
-
images/top_search1.gif.gif
-
images/top_search_bt.gif.gif
-
images/vip/1.gif.gif
-
images/vip/10.gif.gif
-
images/vip/11.gif.gif
-
images/vip/12.gif.gif
-
images/vip/2.gif.gif
-
images/vip/3.gif.gif
-
images/vip/4.gif.gif
-
images/vip/5.gif.gif
-
images/vip/6.gif.gif
-
images/vip/7.gif.gif
-
images/vip/8.gif.gif
-
images/vip/9.gif.gif
-
images/vip/Thumbs.db
-
images/vip/bar_bg2.gif.gif
-
images/vip/login.gif.gif
-
images/vip/loginbg.jpg.jpg
-
images/vip/mb01.gif.gif
-
images/vip/mb01.gif.psd
-
images/vip/mb02.gif.gif
-
images/vip/mb03.gif.gif
-
images/vip/mb04.gif.gif
-
images/vip/mb05.gif.gif
-
images/vip/mb06.gif.gif
-
images/vip/mb07.gif.gif
-
images/vip/mb08.gif.gif
-
images/vip/mb11.gif.gif
-
images/vip/mb12.gif.gif
-
images/vip/mb_01.gif.gif
-
images/vip/mb_02.gif.gif
-
images/vip/mb_03.gif.gif
-
images/vip/mb_04_3.gif.gif
-
images/vip/mb_04_3.gif.psd
-
images/vip/mb_04_4.gif.gif
-
images/vip/mb_04_5.gif.gif
-
images/vip/mb_04_8.gif.gif
-
images/vip/mb_05.gif.gif
-
images/vip/mb_06.gif.gif
-
images/vip/mb_07.gif.gif
-
images/vip/mb_08.gif.gif
-
index.aspx.asp
-
list.aspx.asp
-
login.aspx.asp
-
player.aspx.asp .js polyglot
-
reg.aspx.asp
-
test.aspx.asp
-
top.ascx.asp
-
vip/chang_pwd.aspx.asp
-
vip/ipay.aspx.asp
-
vip/ipay_bank.aspx.asp
-
vip/ipay_ok.aspx.asp
-
vip/ipay_point.aspx.asp
-
vip/left.ascx.asp
-
vip/my_info.aspx.asp
-
vip/my_log.aspx.asp
-
vip/my_mail.aspx.asp
-
vip/my_pay.aspx.asp
-
vip/my_zf.aspx.asp
-
zhuanti.aspx.asp
-
zhuanti/pic/1.jpg.jpg
-
zhuanti/pic/2.jpg.jpg
-
zhuanti/pic/3.jpg.jpg
-
安装说明.txt