5f832a72507819e54555930cca13bed6_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

5f832a72507819e54555930cca13bed6_JaffaCakes118
Size

3.0MB
MD5

5f832a72507819e54555930cca13bed6
SHA1

9ea0fff217ae04e35b68c9f101e2c02292dd5b07
SHA256

960904216f8699d774fd89d0025d5f0f8c7691a0aaf3e54adf7bea3114148d76
SHA512

c141e80b99e5f80db02abafd3bf15d204194fdd37fbe2b07675a12d1332006845c9cd7f2e72d2244d8dea7fad2eaa312d881c8b5017304f7f1dc2f5e8e8ab4ea
SSDEEP

98304:KW8npRbZKejX3WG+rnolho73Wr5AS66YnBHX2zx:r8pRbZKS3WG+4hKmr5z6NnBHX2t

Score

1^/10

Malware Config

Signatures

Files

5f832a72507819e54555930cca13bed6_JaffaCakes118
.rar
Admin_Index.asp
.js
Common/Common.js
.js
Common/Dialog.js
.js
Common/DivDialog.js
.js
Common/Flash.js
.js
Common/InitPage.js
.js
Common/Jquery.js
.js
Common/Menu.js
.js
Common/MenuOnclickEvent.js
.js
Common/PopCalender.js
.js
Common/Prototype.js
.js
Common/Utils.js
.js
Editor/asp/browse.asp
.vbs
Editor/asp/config.asp
Editor/asp/upfileclass.asp
.vbs
Editor/asp/upload.asp
.vbs
Editor/dialog/about.htm
.html .js polyglot
Editor/dialog/anchor.htm
.html .js polyglot
Editor/dialog/art.htm
.html .js polyglot
Editor/dialog/backimage.htm
.html .js polyglot
Editor/dialog/browse.htm
.html .js polyglot
Editor/dialog/dialog.js
.js
Editor/dialog/eWebEditorClient.CAB
.cab
eWebEditorClient.INF
eWebEditorClient.dll
.dll regsvr32 windows:4 windows x86 arch:x86

075408aabeacabe90c51dddc4557f964

Code Sign

ea:42:f4:0c:a4:cd:ac:6f:82:d8:54:f9:be:21:30:6d
Certificate

Issuer

CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US

Not Before

23/08/2007, 00:00

Not After

22/08/2008, 23:59

Subject

CN=High-point Software Ltd.,OU=WoSign Class 3 Code Signing,O=High-point Software Ltd.,L=Fuzhou,ST=Fujian,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageDigitalSignature

42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

25/04/2007, 00:00

Not After

09/07/2019, 18:40

Subject

CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09/07/1999, 18:31

Not After

09/07/2019, 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0d
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

30/04/2007, 00:00

Not After

29/04/2012, 23:59

Subject

CN=WoSign Time Stamping Signer,O=WoSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

6c:1a:02:a1:2b:d9:fb:97:04:d1:5b:40:ba:da:b2:90:84:fe:b3:cf
Signer

Actual PE Digest

6c:1a:02:a1:2b:d9:fb:97:04:d1:5b:40:ba:da:b2:90:84:fe:b3:cf

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvbvm60

__vbaVarTstGt
__vbaVarSub
_CIcos
_adj_fptan
__vbaVarMove
__vbaFreeVar
__vbaAptOffset
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
__vbaNextEachVar
__vbaFreeObjList
ord516
_adj_fprem1
ord518
__vbaForEachCollAd
__vbaStrCat
__vbaVarCmpNe
ord660
__vbaSetSystemError
__vbaHresultCheckObj
__vbaLenVar
_adj_fdiv_m32
__vbaAryDestruct
__vbaLateMemSt
ord593
__vbaOnError
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
ord598
__vbaBoolVarNull
_CIsin
ord631
ord709
__vbaErase
ord632
__vbaChkstk
ord526
__vbaFileClose
EVENT_SINK_AddRef
__vbaGenerateBoundsError
__vbaStrCmp
ord529
__vbaVarTstEq
__vbaGet4
__vbaI2I4
__vbaObjVar
DllFunctionCall
__vbaVarLateMemSt
__vbaLbound
__vbaRedimPreserve
_adj_fpatan
__vbaRedim
EVENT_SINK_Release
__vbaNew
__vbaUI1I2
_CIsqrt
__vbaObjIs
__vbaVarAnd
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord712
__vbaStrToUnicode
ord606
_adj_fprem
_adj_fdivr_m64
ord716
ord531
__vbaFPException
__vbaInStrVar
ord532
__vbaUbound
__vbaStrVarVal
__vbaVarCat
__vbaI2Var
ord537
ord645
_CIlog
__vbaErrorOverflow
__vbaFileOpen
__vbaInStr
__vbaVarLateMemCallLdRf
__vbaNew2
ord570
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord685
__vbaVarTstNe
ord579
ord101
__vbaVarSetVar
ord102
__vbaI4Var
ord103
ord104
ord105
__vbaAryLock
__vbaLateMemCall
__vbaVarAdd
__vbaVarDup
__vbaStrToAnsi
ord616
__vbaFpI4
__vbaVarLateMemCallLd
__vbaVarCopy
__vbaVarSetObjAddref
ord617
__vbaLateMemCallLd
_CIatan
__vbaStrMove
__vbaCastObj
__vbaForEachVar
__vbaStrVarCopy
ord619
_allmul
_CItan
__vbaNextEachCollAd
__vbaAryUnlock
_CIexp
__vbaFreeStr
__vbaFreeObj
ord580

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Editor/dialog/eWebEditorClientInstall.exe
.exe windows:1 windows x86 arch:x86

Code Sign

ea:42:f4:0c:a4:cd:ac:6f:82:d8:54:f9:be:21:30:6d
Certificate

Issuer

CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US

Not Before

23/08/2007, 00:00

Not After

22/08/2008, 23:59

Subject

CN=High-point Software Ltd.,OU=WoSign Class 3 Code Signing,O=High-point Software Ltd.,L=Fuzhou,ST=Fujian,C=CN

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageDigitalSignature

42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

25/04/2007, 00:00

Not After

09/07/2019, 18:40

Subject

CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
ExtKeyUsageClientAuth

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

09/07/1999, 18:31

Not After

09/07/2019, 18:40

Subject

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment
KeyUsageCertSign
KeyUsageCRLSign

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0d
Certificate

Issuer

CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US

Not Before

30/04/2007, 00:00

Not After

29/04/2012, 23:59

Subject

CN=WoSign Time Stamping Signer,O=WoSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

78:98:f8:e5:49:1b:e3:78:ac:ba:26:cb:07:bc:70:b7:05:f8:bd:fe
Signer

Actual PE Digest

78:98:f8:e5:49:1b:e3:78:ac:ba:26:cb:07:bc:70:b7:05:f8:bd:fe

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Editor/dialog/emot.htm
.html .js polyglot
Editor/dialog/eq.htm
.html .js polyglot
Editor/dialog/fieldset.htm
.html .js polyglot
Editor/dialog/file.htm
.html .js polyglot
Editor/dialog/findreplace.htm
.html .js polyglot
Editor/dialog/flash.htm
.html .js polyglot
Editor/dialog/fullscreen.htm
.html .js polyglot
Editor/dialog/hyperlink.htm
.html .js polyglot
Editor/dialog/i_upload.htm
.html .js polyglot
Editor/dialog/iframe.htm
.html .js polyglot
Editor/dialog/img.htm
.html .js polyglot
Editor/dialog/importexcel.htm
.html .js polyglot
Editor/dialog/importword.htm
.html .js polyglot
Editor/dialog/installactivex.htm
.html .js polyglot
Editor/dialog/map.htm
.html .js polyglot
Editor/dialog/marquee.htm
.html .js polyglot
Editor/dialog/media.htm
.html .js polyglot
Editor/dialog/owcexcel.htm
.html .js polyglot
Editor/dialog/paragraph.htm
.html .js polyglot
Editor/dialog/selcolor.htm
.html .js polyglot
Editor/dialog/symbol.htm
.html .js polyglot
Editor/dialog/table.htm
.html .js polyglot
Editor/dialog/tablecell.htm
.html .js polyglot
Editor/dialog/tablecellsplit.htm
.html .js polyglot
Editor/dialog/template.htm
.html .js polyglot
Editor/ewebeditor.htm
.html .js polyglot
Editor/js/_vti_cnf/buttons.js
Editor/js/_vti_cnf/ewebeditor.js
Editor/js/buttons.js
.js
Editor/js/ewebeditor.js
.js
Editor/js/zh-cn.js
Editor/popup.htm
.html .js polyglot
Editor/sharefile/image/back_48.jpg
.jpg
Editor/sharefile/image/book_48.jpg
.jpg
Editor/sharefile/image/book_lock_48.jpg
.jpg
Editor/sharefile/image/book_pencil_48.jpg
.jpg
Editor/sharefile/image/bullet_arrow_48.jpg
.jpg
Editor/sharefile/image/bullet_arrow_v48.jpg
.jpg
Editor/sharefile/image/bullet_email_48.jpg
.jpg
Editor/sharefile/image/bullet_info_48.jpg
.jpg
Editor/sharefile/image/cd_gray_48.jpg
.jpg
Editor/sharefile/image/cd_green_48.jpg
.jpg
Editor/sharefile/image/cd_yellow_48.jpg
.jpg
Editor/sharefile/image/copy_48.jpg
.jpg
Editor/sharefile/image/doc_48.jpg
.jpg
Editor/sharefile/image/doc_faq_48.jpg
.jpg
Editor/sharefile/image/doc_important_48.jpg
.jpg
Editor/sharefile/image/doc_remove_48.jpg
.jpg
Editor/sharefile/image/email_48.jpg
.jpg
Editor/sharefile/image/email_delete_48.jpg
.jpg
Editor/sharefile/image/email_new_48.jpg
.jpg
Editor/sharefile/image/email_open_48.jpg
.jpg
Editor/sharefile/image/email_sent_48.jpg
.jpg
Editor/sharefile/image/folder_48.jpg
.jpg
Editor/sharefile/image/folder_info_48.jpg
.jpg
Editor/sharefile/image/folder_lock_48.jpg
.jpg
Editor/sharefile/image/folder_move_48.jpg
.jpg
Editor/sharefile/image/forward_48.jpg
.jpg
Editor/sharefile/image/mix_clock_48.jpg
.jpg
Editor/sharefile/image/mix_money_48.jpg
.jpg
Editor/sharefile/image/mix_pencil_48.jpg
.jpg
Editor/sharefile/image/mix_world_48.jpg
.jpg
Editor/sharefile/image/paste_48.jpg
.jpg
Editor/sharefile/image/stop_48.jpg
.jpg
Editor/sharefile/image/symbol_faq_48.jpg
.jpg
Editor/sharefile/image/symbols_download_48.jpg
.jpg
Editor/sharefile/image/symbols_info_48.jpg
.jpg
Editor/sharefile/image/symbols_stop_48.jpg
.jpg
Editor/sharefile/image/toolbar_back_48.jpg
.jpg
Editor/sharefile/image/toolbar_buy_48.jpg
.jpg
Editor/sharefile/image/toolbar_calendar_48.jpg
.jpg
Editor/sharefile/image/toolbar_edit_48.jpg
.jpg
Editor/sharefile/image/toolbar_help_48.jpg
.jpg
Editor/sharefile/image/toolbar_login_48.jpg
.jpg
Editor/sharefile/image/toolbar_manual_48.jpg
.jpg
Editor/sharefile/image/toolbar_open_48.jpg
.jpg
Editor/sharefile/image/toolbar_print_48.jpg
.jpg
Editor/sharefile/image/toolbar_remove_48.jpg
.jpg
Editor/sharefile/image/toolbar_save_48.jpg
.jpg
Editor/sharefile/image/toolbar_search_48.jpg
.jpg
Editor/sharefile/image/trash_48.jpg
.jpg
Editor/sharefile/image/trash_arrow_48.jpg
.jpg
Editor/sharefile/image/trash_full_48.jpg
.jpg
Editor/sharefile/image/user_48.jpg
.jpg
Editor/sharefile/image/user_add_48.jpg
.jpg
Editor/sharefile/image/user_delete_48.jpg
.jpg
Editor/sharefile/image/user_info_48.jpg
.jpg
Editor/sharefile/image/weather_clouds_48.jpg
.jpg
Editor/sharefile/image/weather_ray_48.jpg
.jpg
Editor/sharefile/image/weather_sun_48.jpg
.jpg
Editor/sharefile/image/weather_sunny_48.jpg
.jpg
Editor/skin/blue2/btnchecked.gif
.gif
Editor/skin/blue2/btndown.gif
.gif
Editor/skin/blue2/btnover.gif
.gif
Editor/skin/blue2/buttons.gif
.gif
Editor/skin/blue2/dialog.css
Editor/skin/blue2/editor.css
Editor/skin/blue2/editorarea.code.css
Editor/skin/blue2/editorarea.css
Editor/skin/blue2/editorarea.edit.css
Editor/skin/blue2/editorarea.text.css
Editor/skin/blue2/menuarea.css
Editor/skin/blue2/menubg.gif
.gif
Editor/style/blue.js
Editor/sysimage/bg/birthday.gif
.gif
Editor/sysimage/bg/christmas.gif
.gif
Editor/sysimage/bg/citrus.gif
.gif
Editor/sysimage/bg/clear.jpg
.jpg
Editor/sysimage/bg/fiesta.jpg
.jpg
Editor/sysimage/bg/flower.gif
.gif
Editor/sysimage/bg/gathering.jpg
.jpg
Editor/sysimage/bg/glacier.jpg
.jpg
Editor/sysimage/bg/grid.gif
.gif
Editor/sysimage/bg/hearts.gif
.gif
Editor/sysimage/bg/ivy.gif
.gif
Editor/sysimage/bg/maize.jpg
.jpg
Editor/sysimage/bg/nature.jpg
.jpg
Editor/sysimage/bg/snow.gif
.gif
Editor/sysimage/bg/tech.gif
.gif
Editor/sysimage/bold.gif
.gif
Editor/sysimage/emot/01.gif
.gif
Editor/sysimage/emot/02.gif
.gif
Editor/sysimage/emot/03.gif
.gif
Editor/sysimage/emot/04.gif
.gif
Editor/sysimage/emot/05.gif
.gif
Editor/sysimage/emot/06.gif
.gif
Editor/sysimage/emot/07.gif
.gif
Editor/sysimage/emot/08.gif
.gif
Editor/sysimage/emot/09.gif
.gif
Editor/sysimage/emot/10.gif
.gif
Editor/sysimage/emot/11.gif
.gif
Editor/sysimage/emot/12.gif
.gif
Editor/sysimage/emot/13.gif
.gif
Editor/sysimage/emot/14.gif
.gif
Editor/sysimage/emot/15.gif
.gif
Editor/sysimage/emot/16.gif
.gif
Editor/sysimage/emot/17.gif
.gif
Editor/sysimage/emot/18.gif
.gif
Editor/sysimage/emot/19.gif
.gif
Editor/sysimage/emot/20.gif
.gif
Editor/sysimage/emot/21.gif
.gif
Editor/sysimage/emot/22.gif
.gif
Editor/sysimage/emot/23.gif
.gif
Editor/sysimage/emot/24.gif
.gif
Editor/sysimage/emot/25.gif
.gif
Editor/sysimage/emot/26.gif
.gif
Editor/sysimage/emot/27.gif
.gif
Editor/sysimage/emot/28.gif
.gif
Editor/sysimage/emot/29.gif
.gif
Editor/sysimage/emot/30.gif
.gif
Editor/sysimage/emot/31.gif
.gif
Editor/sysimage/emot/32.gif
.gif
Editor/sysimage/emot/33.gif
.gif
Editor/sysimage/emot/34.gif
.gif
Editor/sysimage/emot/35.gif
.gif
Editor/sysimage/emot/36.gif
.gif
Editor/sysimage/emot/37.gif
.gif
Editor/sysimage/emot/38.gif
.gif
Editor/sysimage/emot/39.gif
.gif
Editor/sysimage/emot/40.gif
.gif
Editor/sysimage/emot/41.gif
.gif
Editor/sysimage/emot/42.gif
.gif
Editor/sysimage/emot/43.gif
.gif
Editor/sysimage/emot/44.gif
.gif
Editor/sysimage/emot/45.gif
.gif
Editor/sysimage/emot/46.gif
.gif
Editor/sysimage/emot/47.gif
.gif
Editor/sysimage/emot/48.gif
.gif
Editor/sysimage/emot/49.gif
.gif
Editor/sysimage/emot/50.gif
.gif
Editor/sysimage/ewebeditor.gif
.gif
Editor/sysimage/file/audio.gif
.gif
Editor/sysimage/file/avi.gif
.gif
Editor/sysimage/file/bmp.gif
.gif
Editor/sysimage/file/closedfolder.gif
.gif
Editor/sysimage/file/code.gif
.gif
Editor/sysimage/file/doc.gif
.gif
Editor/sysimage/file/exe.gif
.gif
Editor/sysimage/file/folder.gif
.gif
Editor/sysimage/file/folderback.gif
.gif
Editor/sysimage/file/gif.gif
.gif
Editor/sysimage/file/hlp.gif
.gif
Editor/sysimage/file/htm.gif
.gif
Editor/sysimage/file/jpg.gif
.gif
Editor/sysimage/file/mdb.gif
.gif
Editor/sysimage/file/mid.gif
.gif
Editor/sysimage/file/mp.gif
.gif
Editor/sysimage/file/mp3.gif
.gif
Editor/sysimage/file/openfolder.gif
.gif
Editor/sysimage/file/parentfolder.gif
.gif
Editor/sysimage/file/pdf.gif
.gif
Editor/sysimage/file/pic.gif
.gif
Editor/sysimage/file/ppt.gif
.gif
Editor/sysimage/file/rar.gif
.gif
Editor/sysimage/file/rm.gif
.gif
Editor/sysimage/file/swf.gif
.gif
Editor/sysimage/file/txt.gif
.gif
Editor/sysimage/file/unknow.gif
.gif
Editor/sysimage/file/xls.gif
.gif
Editor/sysimage/file/zip.gif
.gif
Editor/sysimage/icon16/aspx.gif
.gif
Editor/sysimage/icon16/audio.gif
.gif
Editor/sysimage/icon16/avi.gif
.gif
Editor/sysimage/icon16/bmp.gif
.gif
Editor/sysimage/icon16/chm.gif
.gif
Editor/sysimage/icon16/code.gif
.gif
Editor/sysimage/icon16/doc.gif
.gif
Editor/sysimage/icon16/exe.gif
.gif
Editor/sysimage/icon16/gif.gif
.gif
Editor/sysimage/icon16/hlp.gif
.gif
Editor/sysimage/icon16/htm.gif
.gif
Editor/sysimage/icon16/ico.gif
.gif
Editor/sysimage/icon16/jpg.gif
.gif
Editor/sysimage/icon16/js.gif
.gif
Editor/sysimage/icon16/mdb.gif
.gif
Editor/sysimage/icon16/mid.gif
.gif
Editor/sysimage/icon16/mp.gif
.gif
Editor/sysimage/icon16/mp3.gif
.gif
Editor/sysimage/icon16/pdf.gif
.gif
Editor/sysimage/icon16/png.gif
.gif
Editor/sysimage/icon16/ppt.gif
.gif
Editor/sysimage/icon16/rar.gif
.gif
Editor/sysimage/icon16/rm.gif
.gif
Editor/sysimage/icon16/swf.gif
.gif
Editor/sysimage/icon16/txt.gif
.gif
Editor/sysimage/icon16/unknow.gif
.gif
Editor/sysimage/icon16/xls.gif
.gif
Editor/sysimage/icon16/xml.gif
.gif
Editor/sysimage/icon16/zip.gif
.gif
Editor/sysimage/icon32/aspx.gif
.gif
Editor/sysimage/icon32/audio.gif
.gif
Editor/sysimage/icon32/avi.gif
.gif
Editor/sysimage/icon32/bmp.gif
.gif
Editor/sysimage/icon32/chm.gif
.gif
Editor/sysimage/icon32/code.gif
.gif
Editor/sysimage/icon32/doc.gif
.gif
Editor/sysimage/icon32/exe.gif
.gif
Editor/sysimage/icon32/gif.gif
.gif
Editor/sysimage/icon32/hlp.gif
.gif
Editor/sysimage/icon32/htm.gif
.gif
Editor/sysimage/icon32/ico.gif
.gif
Editor/sysimage/icon32/jpg.gif
.gif
Editor/sysimage/icon32/js.gif
.gif
Editor/sysimage/icon32/mdb.gif
.gif
Editor/sysimage/icon32/mid.gif
.gif
Editor/sysimage/icon32/mp.gif
.gif
Editor/sysimage/icon32/mp3.gif
.gif
Editor/sysimage/icon32/pdf.gif
.gif
Editor/sysimage/icon32/png.gif
.gif
Editor/sysimage/icon32/ppt.gif
.gif
Editor/sysimage/icon32/rar.gif
.gif
Editor/sysimage/icon32/rm.gif
.gif
Editor/sysimage/icon32/swf.gif
.gif
Editor/sysimage/icon32/txt.gif
.gif
Editor/sysimage/icon32/unknow.gif
.gif
Editor/sysimage/icon32/xls.gif
.gif
Editor/sysimage/icon32/xml.gif
.gif
Editor/sysimage/icon32/zip.gif
.gif
Editor/sysimage/italic.gif
.gif
Editor/sysimage/loading.gif
.gif
Editor/sysimage/rect.gif
.gif
Editor/sysimage/rectimg.gif
.gif
Editor/sysimage/space.gif
.gif
Editor/sysimage/tree/arrowdown.gif
.gif
Editor/sysimage/tree/arrowup.gif
.gif
Editor/sysimage/tree/blank.gif
.gif
Editor/sysimage/tree/branch1.gif
.gif
Editor/sysimage/tree/branch2.gif
.gif
Editor/sysimage/tree/dirclose.gif
.gif
Editor/sysimage/tree/diropen.gif
.gif
Editor/sysimage/tree/folderclose.gif
.gif
Editor/sysimage/tree/folderopen.gif
.gif
Editor/sysimage/tree/folderparent.gif
.gif
Editor/sysimage/tree/line.gif
.gif
Editor/sysimage/tree/minus1.gif
.gif
Editor/sysimage/tree/minus2.gif
.gif
Editor/sysimage/tree/plus1.gif
.gif
Editor/sysimage/tree/plus2.gif
.gif
Editor/sysimage/tree/root.gif
.gif
Editor/template/0.gif
.gif
Editor/template/01.htm
Editor/template/02.htm
Editor/template/03.htm
Editor/template/04.htm
Editor/template/05.htm
Editor/template/06.htm
Editor/template/template.js
PCASClass.js
.js
admincheck.asp
adminimg/Buttom-Copy-Bg.gif
.gif
adminimg/Buttom-Left.gif
.gif
adminimg/Buttom-Right.gif
.gif
adminimg/Buttom_Bg1.gif
.gif
adminimg/Calender.gif
.gif
adminimg/Content-Bg-Line.gif
.gif
adminimg/Content-Bg.gif
.gif
adminimg/Exit-Close.gif
.gif
adminimg/Exit-Line.gif
.gif
adminimg/Exit-Title-Bg.gif
.gif
adminimg/Filetype/asp.gif
.gif
adminimg/Filetype/bmp.png
.png
adminimg/Filetype/chm.png
.png
adminimg/Filetype/dotnet.gif
.gif
adminimg/Filetype/exe.gif
.gif
adminimg/Filetype/folder.gif
.gif
adminimg/Filetype/gif.png
.png
adminimg/Filetype/html.gif
.gif
adminimg/Filetype/inc.gif
.gif
adminimg/Filetype/ini.gif
.gif
adminimg/Filetype/jpeg.png
.png
adminimg/Filetype/js.gif
.gif
adminimg/Filetype/mdb.png
.png
adminimg/Filetype/other.png
.png
adminimg/Filetype/pdf.gif
.gif
adminimg/Filetype/ppt.png
.png
adminimg/Filetype/txt.gif
.gif
adminimg/Filetype/up.gif
.gif
adminimg/Filetype/winrar.png
.png
adminimg/Filetype/word.png
.png
adminimg/Ico_IE.gif
.gif
adminimg/Ico_Tif.gif
.gif
adminimg/Icon-Demo.gif
.gif
adminimg/Icon-Index.gif
.gif
adminimg/Icon-Li.gif
.gif
adminimg/Icon-Mail2.gif
.gif
adminimg/Icon-Nav-Close-over.gif
.gif
adminimg/Icon-Nav-Close.gif
.gif
adminimg/Icon-Next.gif
.gif
adminimg/Icon-Other.gif
.gif
adminimg/Icon-Phone.gif
.gif
adminimg/Icon-Pve.gif
.gif
adminimg/Icon9.gif
.gif
adminimg/Image_01.gif
.gif
adminimg/Image_02.gif
.gif
adminimg/Info-List-Bg.gif
.gif
adminimg/Input-Bg.gif
.gif
adminimg/Left-Bg.gif
.gif
adminimg/Left-Menu-Norm.gif
.gif
adminimg/Left-Top-Right.gif
.gif
adminimg/List_01.gif
.gif
adminimg/List_02.gif
.gif
adminimg/Load_LineBGs.gif
.gif
adminimg/Loading.gif
.gif
adminimg/Loading.jpg
.jpg
adminimg/Loading.psd
adminimg/Loading_Bg.gif
.gif
adminimg/Loading_Bg2.gif
.gif
adminimg/Login_Btn.jpg
.jpg
adminimg/Logo.fla
adminimg/Logo.png
.png
adminimg/Logo.swf
adminimg/Menu_Bg.gif
.gif
adminimg/Menu_Bg1.gif
.gif
adminimg/Menu_Bg2.gif
.gif
adminimg/Menu_Bottomimg.gif
.gif
adminimg/Menu_LineBg.gif
.gif
adminimg/Menu_Topimg.gif
.gif
adminimg/Menu_Topline.gif
.gif
adminimg/Nav-Curr-Left.gif
.gif
adminimg/Nav-Curr-Line.gif
.gif
adminimg/Nav-Curr-Right.gif
.gif
adminimg/Nav-Curr-bg.gif
.gif
adminimg/Nav-Right-Bg.gif
.gif
adminimg/News-Title-Bg.gif
.gif
adminimg/Ok1.gif
.gif
adminimg/OnBottom.gif
.gif
adminimg/Out-Bg.gif
.gif
adminimg/Password.gif
.gif
adminimg/Pop_Button.gif
.gif
adminimg/Service.gif
.gif
adminimg/SiteInfo.jpg
.jpg
adminimg/Top-Bg.jpg
.jpg
adminimg/Top-Line.gif
.gif
adminimg/Top-Right.jpg
.jpg
adminimg/UseapProve.gif
.gif
adminimg/da_bg.jpg
.jpg
adminimg/expo.jpg
.jpg
adminimg/expo2.jpg
.jpg
adminimg/icon-login-seaver.gif
.gif
adminqx.asp
bbs/_link.asp
.vbs
bbs/_tel.asp
.vbs
bbs/bbs_admin.asp
.vbs
bbs/bbs_admin_hf.asp
.vbs
bbs/bbs_bj.asp
.vbs
bbs/bbs_ft.asp
.vbs
bbs/bbs_list.asp
.vbs
bbs/bbs_noin.asp
.vbs
bbs/bbs_regedit.asp
.vbs
bbs/bbs_sy.asp
.vbs
bbs/bbs_tj.asp
.vbs
bbs/bbs_type.asp
.vbs
bbs/check.asp
bbs/conn.asp
.vbs
bbs/filesc.asp
.vbs
bbs/index.asp
.html
bbs/js.asp
.html .js polyglot
bbs/kill_keyword.asp
.vbs
bbs/login.asp
.vbs
bbs/md5.asp
.vbs
bbs/sql_noin.asp
.vbs
bbs/style.css
bbs/tb.htm
.html
bbs/tb_dl.asp
.html .vbs polyglot
bbs/tb_dlpm.asp
.vbs
bbs/tb_dlxx.asp
.vbs
bbs/tb_gl.asp
.vbs
bbs/tb_grxx.asp
.vbs
bbs/tb_plsc.asp
.vbs
bbs/tb_sz.asp
.vbs
bbs/tb_zc.asp
.vbs
bbs/upload_5xsoft.inc
.html .vbs polyglot
bbs/zp/ljd1128.jpg
.jpg
city_login.asp
.vbs
css/Layout.css
css/LeftFrame.css
css/Loading.css
css/Login.css
css/Main.css
css/PopCalender.css
css/comm.css
css/gcstyle.css
css/style.css
dbconn.asp
.vbs
guochan.mdb
html/bbs-guochan201161491232.htm
.html
html/bbs-guochan2011615111705.htm
.html
html/bbs201163122721.htm
.html
html/bbs201163125325.htm
.html
html/bbs201163125645.htm
.html
html/bbs201163130210.htm
.html
html/bbs201163132127.htm
.html
html/bbs201163132906.htm
.html
images/1.jpg
.jpg
images/2.jpg
.jpg
images/3.jpg
.jpg
images/4.jpg
.jpg
images/Buttom-Copy-Bg.gif
.gif
images/Buttom-Left.gif
.gif
images/Buttom-Right.gif
.gif
images/Buttom_Bg1.gif
.gif
images/Calender.gif
.gif
images/Content-Bg-Line.gif
.gif
images/Content-Bg.gif
.gif
images/Icon-Next.gif
.gif
images/Icon-Other.gif
.gif
images/Icon-Phone.gif
.gif
images/Icon-Pve.gif
.gif
images/Image_01.gif
.gif
images/Image_02.gif
.gif
images/Info-List-Bg.gif
.gif
images/Input-Bg.gif
.gif
images/Left-Bg.gif
.gif
images/Left-Menu-Norm.gif
.gif
images/Left-Top-Right.gif
.gif
images/List_01.gif
.gif
images/List_02.gif
.gif
images/Load_LineBGs.gif
.gif
images/Loading.gif
.gif
images/Loading.jpg
.jpg
images/Loading.psd
images/Loading_Bg.gif
.gif
images/Loading_Bg2.gif
.gif
images/Login_Btn.jpg
.jpg
images/Logo.fla
images/Logo.png
.png
images/Logo.swf
images/LogoSmall.gif
.gif
images/Menu_Bg1.gif
.gif
images/Menu_Bg2.gif
.gif
images/Menu_Bottomimg.gif
.gif
images/Menu_LineBg.gif
.gif
images/Menu_Topimg.gif
.gif
images/Menu_Topline.gif
.gif
images/Nav-Curr-Left.gif
.gif
images/Nav-Curr-Line.gif
.gif
images/Nav-Curr-Right.gif
.gif
images/Nav-Curr-bg.gif
.gif
images/Nav-Right-Bg.gif
.gif
images/News-Title-Bg.gif
.gif
images/Ok1.gif
.gif
images/OnBottom.gif
.gif
images/Out-Bg.gif
.gif
images/Password.gif
.gif
images/Pop_Button.gif
.gif
images/Rssbg.jpg
.jpg
images/Service.gif
.gif
images/SiteInfo.jpg
.jpg
images/Top-Bg.jpg
.jpg
images/Top-Line.gif
.gif
images/Top-Right.jpg
.jpg
images/UseapProve.gif
.gif
images/WaterMap.gif
.gif
images/arrow.gif
.gif
images/arrow_01.gif
.gif
images/arrow_02.gif
.gif
images/arrow_03.gif
.gif
images/arrow_green.gif
.gif
images/background.jpg
.jpg
images/background1.jpg
.jpg
images/bg_header.png
.png
images/bglogo.gif
.gif
images/body_bg.gif
.gif
images/btn_go.gif
.gif
images/btn_login.gif
.gif
images/btt.gif
.gif
images/center_line.gif
.gif
images/da_bg.jpg
.jpg
images/footer_bg.gif
.gif
images/green_bg.jpg
.jpg
images/guochan.png
.png
images/innerbg.gif
.gif
images/lanternslide.swf
images/left_bg.jpg
.jpg
images/left_bt01.jpg
.jpg
images/left_bt02.jpg
.jpg
images/left_bt03.jpg
.jpg
images/left_head_1px.gif
.gif
images/line.gif
.gif
images/lltj.gif
.gif
images/login.jpg
.jpg
images/login_bg.gif
.gif
images/login_logo.gif
.gif
images/logo.gif
.gif
images/logo.jpg
.jpg
images/logo1.gif
.gif
images/logo2.jpg
.jpg
images/mail.wav
images/menu_bg.gif
.gif
images/more.gif
.gif
images/more_01.gif
.gif
images/nav_bg.gif
.gif
images/nav_bg_1px.gif
.gif
images/nav_bg_hover.gif
.gif
images/nav_div.gif
.gif
images/nopic.jpg
.jpg
images/read_more_bg.gif
.gif
images/right_bt01.jpg
.jpg
images/rsshand.jpg
.jpg
images/serch_bg.gif
.gif
images/style.css
images/submitbg.gif
.gif
images/textbg.jpg
.jpg
images/title.swf
images/title1.swf
images/top_bg.gif
.gif
images/top_bg1.gif
.gif
images/tp_01.gif
.gif
images/tpy.gif
.gif
images/tpy100.gif
.gif
images/videoplayer.swf
images/xhtml_bg.gif
.gif
images/yzm.bmp
images/zhuce.gif
.gif
img/1_1.gif
.gif
img/1_10.gif
.gif
img/1_11.gif
.gif
img/1_12.gif
.gif
img/1_13.gif
.gif
img/1_14.gif
.gif
img/1_15.gif
.gif
img/1_16.gif
.gif
img/1_2.gif
.gif
img/1_3.gif
.gif
img/1_4.gif
.gif
img/1_5.gif
.gif
img/1_6.gif
.gif
img/1_7.gif
.gif
img/1_8.gif
.gif
img/1_9.gif
.gif
img/Ask.gif
.gif
img/Back.gif
.gif
img/Buttom-Copy-Bg.gif
.gif
img/Buttom-Left.gif
.gif
img/Buttom-Right.gif
.gif
img/Buttom_Bg1.gif
.gif
img/Calender.gif
.gif
img/Content-Bg-Line.gif
.gif
img/Content-Bg.gif
.gif
img/Exit-Close.gif
.gif
img/Exit-Line.gif
.gif
img/Exit-Title-Bg.gif
.gif
img/Favorites.gif
.gif
img/Forward.gif
.gif
img/Home.gif
.gif
img/Ico_IE.gif
.gif
img/Ico_Tif.gif
.gif
img/Icon-Demo.gif
.gif
img/Icon-Index.gif
.gif
img/Icon-Li.gif
.gif
img/Icon-Mail2.gif
.gif
img/Icon-Nav-Close-over.gif
.gif
img/Icon-Nav-Close.gif
.gif
img/Icon-Next.gif
.gif
img/Icon-Other.gif
.gif
img/Icon-Phone.gif
.gif
img/Icon-Pve.gif
.gif
img/Icon9.gif
.gif
img/Image_01.gif
.gif
img/Image_02.gif
.gif
img/Info-List-Bg.gif
.gif
img/Input-Bg.gif
.gif
img/Left-Bg.gif
.gif
img/Left-Menu-Norm.gif
.gif
img/Left-Top-Right.gif
.gif
img/List_01.gif
.gif
img/List_02.gif
.gif
img/Load_LineBGs.gif
.gif
img/Loading.gif
.gif
img/Loading.jpg
.jpg
img/Loading.psd
img/Loading_Bg.gif
.gif
img/Loading_Bg2.gif
.gif
img/Login_Btn.jpg
.jpg
img/Logo.fla
img/Logo.png
.png
img/Logo.swf
img/Menu_Bg1.gif
.gif
img/Menu_Bg2.gif
.gif
img/Menu_Bottomimg.gif
.gif
img/Menu_LineBg.gif
.gif
img/Menu_Topimg.gif
.gif
img/Menu_Topline.gif
.gif
img/Nav-Curr-Left.gif
.gif
img/Nav-Curr-Line.gif
.gif
img/Nav-Curr-Right.gif
.gif
img/Nav-Curr-bg.gif
.gif
img/Nav-Right-Bg.gif
.gif
img/News-Title-Bg.gif
.gif
img/Ok1.gif
.gif
img/OnBottom.gif
.gif
img/Out-Bg.gif
.gif
img/Password.gif
.gif
img/Pop_Button.gif
.gif
img/Service.gif
.gif
img/SiteInfo.jpg
.jpg
img/Top-Bg.jpg
.jpg
img/Top-Line.gif
.gif
img/Top-Right.jpg
.jpg
img/UseapProve.gif
.gif
img/a_001.gif
.gif
img/a_002.gif
.gif
img/a_007.gif
.gif
img/a_01.gif
.gif
img/a_02.gif
.gif
img/a_03.gif
.gif
img/a_04.gif
.gif
img/a_05.gif
.gif
img/a_06.gif
.gif
img/a_07.gif
.gif
img/all.gif
.gif
img/arrow01.gif
.gif
img/arrow02.gif
.gif
img/arrow_01.gif
.gif
img/arrow_02.gif
.gif
img/ask.jpg
.jpg
img/banner_01.jpg
.jpg
img/bg.jpg
.jpg
img/bg_header.png
.png
img/bgtop.gif
.gif
img/bgtop_x.gif
.gif
img/bottom_bg.jpg
.jpg
img/contactus.jpg
.jpg
img/da_bg.jpg
.jpg
img/dashed.gif
.gif
img/denglu.jpg
.jpg
img/expo.jpg
.jpg
img/expo2.jpg
.jpg
img/fatie.gif
.gif
img/head_bg.png
.png
img/icon-login-seaver.gif
.gif
img/imgDivider.gif
.gif
img/left_bg.jpg
.jpg
img/left_bg01.jpg
.jpg
img/logo1.gif
.gif
img/menu_bg.gif
.gif
img/menu_bg.jpg
.jpg
img/menu_li_a_hover.jpg
.jpg
img/percent.GIF
img/percent.jpg
.jpg
img/playsystem.gif
.gif
img/qianming.gif
.gif
img/qq.gif
.gif
img/qq_01.gif
.gif
img/qq_02.gif
.gif
img/qq_03.gif
.gif
img/right_01.jpg
.jpg
img/right_bg.jpg
.jpg
img/right_bg01.jpg
.jpg
img/right_bg1.jpg
.jpg
img/right_bgx.jpg
.jpg
img/style.css
img/ta7.gif
.gif
img/tbtopbg.gif
.gif
img/textbg.jpg
.jpg
img/title_bg.gif
.gif
img/top1.jpg
.jpg
img/top1.psd
img/top_logo.jpg
.jpg
img/ued01.gif
.gif
index.htm
.html .js polyglot
indextohtm.asp
js.js
.js
js_read.asp
.vbs
keditor/index.css
keditor/keditor.js
.js
keditor/plugins/about.html
.html
keditor/plugins/emoticons/etc_01.gif
.gif
keditor/plugins/emoticons/etc_02.gif
.gif
keditor/plugins/emoticons/etc_03.gif
.gif
keditor/plugins/emoticons/etc_04.gif
.gif
keditor/plugins/emoticons/etc_05.gif
.gif
keditor/plugins/emoticons/etc_06.gif
.gif
keditor/plugins/emoticons/etc_07.gif
.gif
keditor/plugins/emoticons/etc_08.gif
.gif
keditor/plugins/emoticons/etc_09.gif
.gif
keditor/plugins/emoticons/etc_10.gif
.gif
keditor/plugins/emoticons/etc_11.gif
.gif
keditor/plugins/emoticons/etc_12.gif
.gif
keditor/plugins/emoticons/etc_13.gif
.gif
keditor/plugins/emoticons/etc_14.gif
.gif
keditor/plugins/emoticons/etc_15.gif
.gif
keditor/plugins/emoticons/etc_16.gif
.gif
keditor/plugins/emoticons/etc_17.gif
.gif
keditor/plugins/emoticons/etc_18.gif
.gif
keditor/plugins/emoticons/etc_19.gif
.gif
keditor/plugins/emoticons/etc_20.gif
.gif
keditor/plugins/emoticons/etc_21.gif
.gif
keditor/plugins/emoticons/etc_22.gif
.gif
keditor/plugins/emoticons/etc_23.gif
.gif
keditor/plugins/emoticons/etc_24.gif
.gif
keditor/plugins/emoticons/etc_25.gif
.gif
keditor/plugins/emoticons/etc_26.gif
.gif
keditor/plugins/emoticons/etc_27.gif
.gif
keditor/plugins/emoticons/etc_28.gif
.gif
keditor/plugins/emoticons/etc_29.gif
.gif
keditor/plugins/emoticons/etc_30.gif
.gif
keditor/plugins/emoticons/etc_31.gif
.gif
keditor/plugins/emoticons/etc_32.gif
.gif
keditor/plugins/emoticons/etc_33.gif
.gif
keditor/plugins/emoticons/etc_34.gif
.gif
keditor/plugins/emoticons/etc_35.gif
.gif
keditor/plugins/emoticons/etc_36.gif
.gif
keditor/plugins/flash.html
.html
keditor/plugins/image.html
.html
keditor/plugins/link.html
.html
keditor/plugins/media.html
.html
keditor/plugins/plainpaste.html
.html
keditor/plugins/remote_image.html
.html
keditor/plugins/wordpaste.html
.html .js polyglot
keditor/skins/default.css
keditor/skins/default.gif
.gif
keditor/skins/div.gif
.gif
keditor/skins/dl.gif
.gif
keditor/skins/editor.css
keditor/skins/ol.gif
.gif
keditor/skins/p.gif
.gif
keditor/skins/tinymce.css
keditor/skins/tinymce.gif
.gif
keditor/skins/ul.gif
.gif
md5.asp
.vbs
reg.htm
.html
reg_edit.asp
.vbs
sc_list.asp
.html .vbs polyglot
sc_new.asp
.vbs
style.css
upload_5xsoft.inc
.html .vbs polyglot
使用说明.url
.url
新云软件.url
.url
说明.txt

Sharing

General

Malware Config

Signatures

Files

075408aabeacabe90c51dddc4557f964

Code Sign

ea:42:f4:0c:a4:cd:ac:6f:82:d8:54:f9:be:21:30:6dCertificate

Extended Key Usages

Key Usages

42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04Certificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0dCertificate

Extended Key Usages

Key Usages

6c:1a:02:a1:2b:d9:fb:97:04:d1:5b:40:ba:da:b2:90:84:fe:b3:cfSigner

Headers

File Characteristics

Imports

msvbvm60

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 73KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 8KB - Virtual size: 4KB

.reloc Size: 8KB - Virtual size: 7KB

Code Sign

ea:42:f4:0c:a4:cd:ac:6f:82:d8:54:f9:be:21:30:6dCertificate

Extended Key Usages

Key Usages

42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04Certificate

Extended Key Usages

Key Usages

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1bCertificate

Extended Key Usages

Key Usages

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0dCertificate

Extended Key Usages

Key Usages

78:98:f8:e5:49:1b:e3:78:ac:ba:26:cb:07:bc:70:b7:05:f8:bd:feSigner

Headers

DLL Characteristics

File Characteristics

Sections

CODE Size: 36KB - Virtual size: 36KB

DATA Size: 1024B - Virtual size: 588B

BSS Size: - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: - Virtual size: 2KB

.rsrc Size: 14KB - Virtual size: 14KB

ea:42:f4:0c:a4:cd:ac:6f:82:d8:54:f9:be:21:30:6d
Certificate

42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0d
Certificate

6c:1a:02:a1:2b:d9:fb:97:04:d1:5b:40:ba:da:b2:90:84:fe:b3:cf
Signer

.text
Size: 76KB - Virtual size: 73KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 8KB - Virtual size: 4KB

.reloc
Size: 8KB - Virtual size: 7KB

ea:42:f4:0c:a4:cd:ac:6f:82:d8:54:f9:be:21:30:6d
Certificate

42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04
Certificate

44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Certificate

43:73:c5:9c:4f:32:a9:e5:b5:d3:de:f1:26:9a:12:0d
Certificate

78:98:f8:e5:49:1b:e3:78:ac:ba:26:cb:07:bc:70:b7:05:f8:bd:fe
Signer

CODE
Size: 36KB - Virtual size: 36KB

DATA
Size: 1024B - Virtual size: 588B

BSS
Size: - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 2KB

.rsrc
Size: 14KB - Virtual size: 14KB