aed01f0368f964b8e5664a574cd10200_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

aed01f0368f964b8e5664a574cd10200_JaffaCakes118
Size

4.5MB
MD5

aed01f0368f964b8e5664a574cd10200
SHA1

7fd6a385ccad3bfce7a2ba51e49b10c0f2848303
SHA256

1e699e989687b502bb00092b83b85292da842e89220623be3ec4a465506448c9
SHA512

a83a77e05fa2c4de293ee3384c425d1af2138707a2b45c7db7bc8ad4280d1009b5eb6223c62707406bb580d66dafdc3903cd9b47f85191ab59c089d3cb6b4093
SSDEEP

98304:YAY2bmWgqCCtwtESwMWrW7OJVYOzi1PWsZ0zFktRDIWvcbY0BCKh:YAYlhK0fW9M11PWW0RktRxvc80Bf

Score

3^/10

Malware Config

Signatures

Unsigned PE 10 IoCs

Checks for missing Authenticode signature.

resource
unpack001/EtjJuSearch_v4.0/bin/ETongJin.Common.dll
unpack001/EtjJuSearch_v4.0/bin/ETongJin.Search.Ju.dll
unpack001/EtjJuSearch_v4.0/bin/ETongJin.Search.UI.dll
unpack001/EtjJuSearch_v4.0/bin/ETongJin.Search.dll
unpack001/EtjJuSearch_v4.0/bin/HtmlAgilityPack.dll
unpack001/EtjJuSearch_v4.0/bin/Lucene.Net.dll
unpack001/EtjJuSearch_v4.0/bin/Net.LikeShow.ContentAnalyze.dll
unpack001/EtjJuSearch_v4.0/bin/PanGu.HighLight.dll
unpack001/EtjJuSearch_v4.0/bin/PanGu.Lucene.Analyzer.dll
unpack001/EtjJuSearch_v4.0/bin/PanGu.dll

Files

aed01f0368f964b8e5664a574cd10200_JaffaCakes118
.rar
EtjJuSearch_v4.0/Admin/Admin.Master
.asp
EtjJuSearch_v4.0/Admin/Default.aspx
.asp
EtjJuSearch_v4.0/Admin/Top.aspx
.html
EtjJuSearch_v4.0/Admin/css/12ym_main.css
EtjJuSearch_v4.0/Admin/css/style.css
EtjJuSearch_v4.0/Admin/css/tigra_tables.js
.js
EtjJuSearch_v4.0/Admin/css/tree.js
.js
EtjJuSearch_v4.0/Admin/images/add.gif
.gif
EtjJuSearch_v4.0/Admin/images/ajax_loading.gif
.gif
EtjJuSearch_v4.0/Admin/images/arrow.gif
.gif
EtjJuSearch_v4.0/Admin/images/bbs_home.gif
.gif
EtjJuSearch_v4.0/Admin/images/bg.gif
.gif
EtjJuSearch_v4.0/Admin/images/bg2.gif
.gif
EtjJuSearch_v4.0/Admin/images/bg3.gif
.gif
EtjJuSearch_v4.0/Admin/images/bg4.gif
.gif
EtjJuSearch_v4.0/Admin/images/body_bg.gif
.gif
EtjJuSearch_v4.0/Admin/images/botbg.gif
.gif
EtjJuSearch_v4.0/Admin/images/btn02.gif
.gif
EtjJuSearch_v4.0/Admin/images/button_bg.gif
.gif
EtjJuSearch_v4.0/Admin/images/buttonbg.gif
.gif
EtjJuSearch_v4.0/Admin/images/cal_nextMonth.gif
.gif
EtjJuSearch_v4.0/Admin/images/date_bg.gif
.gif
EtjJuSearch_v4.0/Admin/images/del.gif
.gif
EtjJuSearch_v4.0/Admin/images/folder.gif
.gif
EtjJuSearch_v4.0/Admin/images/folders.gif
.gif
EtjJuSearch_v4.0/Admin/images/left.gif
.gif
EtjJuSearch_v4.0/Admin/images/leftbg.gif
.gif
EtjJuSearch_v4.0/Admin/images/leftop.gif
.gif
EtjJuSearch_v4.0/Admin/images/letter_bg.png
.png
EtjJuSearch_v4.0/Admin/images/lines/dash.gif
.gif
EtjJuSearch_v4.0/Admin/images/lines/dashminus.gif
.gif
EtjJuSearch_v4.0/Admin/images/lines/dashplus.gif
.gif
EtjJuSearch_v4.0/Admin/images/lines/i.gif
.gif
EtjJuSearch_v4.0/Admin/images/lines/l.gif
.gif
EtjJuSearch_v4.0/Admin/images/lines/lminus.gif
.gif
EtjJuSearch_v4.0/Admin/images/lines/lplus.gif
.gif
EtjJuSearch_v4.0/Admin/images/lines/minus.gif
.gif
EtjJuSearch_v4.0/Admin/images/lines/noexpand.gif
.gif
EtjJuSearch_v4.0/Admin/images/lines/plus.gif
.gif
EtjJuSearch_v4.0/Admin/images/lines/r.gif
.gif
EtjJuSearch_v4.0/Admin/images/lines/rminus.gif
.gif
EtjJuSearch_v4.0/Admin/images/lines/rplus.gif
.gif
EtjJuSearch_v4.0/Admin/images/lines/t.gif
.gif
EtjJuSearch_v4.0/Admin/images/lines/tminus.gif
.gif
EtjJuSearch_v4.0/Admin/images/lines/tplus.gif
.gif
EtjJuSearch_v4.0/Admin/images/login_Button.gif
.gif
EtjJuSearch_v4.0/Admin/images/login_bg.jpg
.jpg
EtjJuSearch_v4.0/Admin/images/login_inbg.gif
.gif
EtjJuSearch_v4.0/Admin/images/login_la.gif
.gif
EtjJuSearch_v4.0/Admin/images/login_text.jpg
.jpg
EtjJuSearch_v4.0/Admin/images/logo.gif
.gif
EtjJuSearch_v4.0/Admin/images/menu01.gif
.gif
EtjJuSearch_v4.0/Admin/images/menu01_right.gif
.gif
EtjJuSearch_v4.0/Admin/images/menu02.gif
.gif
EtjJuSearch_v4.0/Admin/images/menu_button_bg.gif
.gif
EtjJuSearch_v4.0/Admin/images/menu_icon2.gif
.gif
EtjJuSearch_v4.0/Admin/images/menu_left_topbg.gif
.gif
EtjJuSearch_v4.0/Admin/images/menubg.gif
.gif
EtjJuSearch_v4.0/Admin/images/menubg_hover.gif
.gif
EtjJuSearch_v4.0/Admin/images/menubg_on.gif
.gif
EtjJuSearch_v4.0/Admin/images/move.gif
.gif
EtjJuSearch_v4.0/Admin/images/nav/guide.gif
.gif
EtjJuSearch_v4.0/Admin/images/right.gif
.gif
EtjJuSearch_v4.0/Admin/images/submit.gif
.gif
EtjJuSearch_v4.0/Admin/images/tableft6.gif
.gif
EtjJuSearch_v4.0/Admin/images/tabright6.gif
.gif
EtjJuSearch_v4.0/Admin/images/top_bg.gif
.gif
EtjJuSearch_v4.0/Admin/images/topictype.gif
.gif
EtjJuSearch_v4.0/Admin/left.aspx
.html
EtjJuSearch_v4.0/Admin/sys/AdminName.aspx
EtjJuSearch_v4.0/Admin/sys/Baibao.aspx
EtjJuSearch_v4.0/Admin/sys/Blacklist.aspx
EtjJuSearch_v4.0/Admin/sys/Config.aspx
.asp
EtjJuSearch_v4.0/Admin/sys/ConfigJu.aspx
.asp
EtjJuSearch_v4.0/Admin/sys/ConfigJu2.aspx
.js
EtjJuSearch_v4.0/Admin/sys/DataHelper.aspx
EtjJuSearch_v4.0/Admin/sys/EditBaibao.aspx
EtjJuSearch_v4.0/Admin/sys/Email.aspx
.asp
EtjJuSearch_v4.0/Admin/sys/HistoryPay.aspx
.asp
EtjJuSearch_v4.0/Admin/sys/Index.aspx
.asp .js polyglot
EtjJuSearch_v4.0/Admin/sys/Main.aspx
EtjJuSearch_v4.0/Admin/sys/SearchRecord2.aspx
.js
EtjJuSearch_v4.0/Admin/sys/SpiderRecord.aspx
EtjJuSearch_v4.0/Admin/sys/Statistics2.aspx
.js
EtjJuSearch_v4.0/Admin/tg/Ad.aspx
EtjJuSearch_v4.0/Admin/tg/AdClick.aspx
.asp .js polyglot
EtjJuSearch_v4.0/Admin/tg/AdList.aspx
.asp .js polyglot
EtjJuSearch_v4.0/Admin/tg/Contribution.aspx
.js
EtjJuSearch_v4.0/Admin/tg/Edit.aspx
.asp
EtjJuSearch_v4.0/Admin/tg/UserList.aspx
.js
EtjJuSearch_v4.0/App_Data/#main.mdb
EtjJuSearch_v4.0/App_Data/Config/Blacklist.config
EtjJuSearch_v4.0/App_Data/Config/Email.config
.xml
EtjJuSearch_v4.0/App_Data/Config/Site.config
EtjJuSearch_v4.0/App_Data/Config/badcache.config
EtjJuSearch_v4.0/App_Data/Config/ju.config
.xml
EtjJuSearch_v4.0/App_Data/Config/juclass.config
.xml
EtjJuSearch_v4.0/App_Data/ETongJin.ip
EtjJuSearch_v4.0/App_Data/dict/ChsDoubleName1.txt
EtjJuSearch_v4.0/App_Data/dict/ChsDoubleName2.txt
EtjJuSearch_v4.0/App_Data/dict/ChsSingleName.txt
EtjJuSearch_v4.0/App_Data/dict/Dict.dct
EtjJuSearch_v4.0/App_Data/dict/Stopword.txt
EtjJuSearch_v4.0/Content/css/g.css
EtjJuSearch_v4.0/Content/css/pic.css
EtjJuSearch_v4.0/Content/images/a.jpg
.jpg
EtjJuSearch_v4.0/Content/images/arr.gif
.gif
EtjJuSearch_v4.0/Content/images/combg.gif
.gif
EtjJuSearch_v4.0/Content/images/i2.png
.png
EtjJuSearch_v4.0/Content/images/s.png
.png
EtjJuSearch_v4.0/Content/logo.png
.png
EtjJuSearch_v4.0/Content/logo2.png
.png
EtjJuSearch_v4.0/I/default.aspx
.asp .js polyglot
EtjJuSearch_v4.0/I/get.aspx
EtjJuSearch_v4.0/Ju/C/default.aspx
.asp
EtjJuSearch_v4.0/Ju/Hot/default.aspx
.asp
EtjJuSearch_v4.0/Ju/default.aspx
.asp .js polyglot
EtjJuSearch_v4.0/Ju/tools/calendar.htm
.js
EtjJuSearch_v4.0/Ju/tools/time.js
.js
EtjJuSearch_v4.0/Scripts/Utility/jquery-ui-datepicker.js
.js
EtjJuSearch_v4.0/Scripts/Utility/jquery-ui.css
EtjJuSearch_v4.0/Scripts/jquery-1.3.2.min.js
.js
EtjJuSearch_v4.0/Su/C/default.aspx
EtjJuSearch_v4.0/Su/Go/Default.aspx
EtjJuSearch_v4.0/TuiGuang/Ad.aspx
EtjJuSearch_v4.0/TuiGuang/AdClick.aspx
.js
EtjJuSearch_v4.0/TuiGuang/AdList.aspx
.js
EtjJuSearch_v4.0/TuiGuang/ChangePsw.aspx
.asp
EtjJuSearch_v4.0/TuiGuang/Contribution.aspx
.asp .js polyglot
EtjJuSearch_v4.0/TuiGuang/Forget.aspx
.asp
EtjJuSearch_v4.0/TuiGuang/GetCode.aspx
.asp
EtjJuSearch_v4.0/TuiGuang/HistoryPay.aspx
.asp
EtjJuSearch_v4.0/TuiGuang/JingJia.aspx
.asp
EtjJuSearch_v4.0/TuiGuang/Login.aspx
.asp
EtjJuSearch_v4.0/TuiGuang/Pay.aspx
.asp .js polyglot
EtjJuSearch_v4.0/TuiGuang/Register.aspx
.asp
EtjJuSearch_v4.0/TuiGuang/UserInfo.aspx
.asp
EtjJuSearch_v4.0/TuiGuang/alipayto.aspx
EtjJuSearch_v4.0/TuiGuang/css/LeftMenu.css
EtjJuSearch_v4.0/TuiGuang/css/mainstyle.css
EtjJuSearch_v4.0/TuiGuang/css/style.css
EtjJuSearch_v4.0/TuiGuang/css/vssver2.scc
EtjJuSearch_v4.0/TuiGuang/images/655x330.jpg
.jpg
EtjJuSearch_v4.0/TuiGuang/images/ABC_OUT.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/BJRCB_OUT.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/BOC_OUT.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/CCB_OUT.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/CEB_OUT.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/CIB_OUT.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/CITIC_OUT.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/CMBC_OUT.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/CMB_OUT.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/COMM_OUT.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/ENV_ABC_OUT.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/ENV_CCB_OUT.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/ENV_ICBC_OUT.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/ENV_SPDB_OUT.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/FDB_OUT.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/GDB_OUT.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/HZCB_OUT.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/ICBC_OUT.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/NBBANK_OUT.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/PSBC_OUT.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/SDB_OUT.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/SHBANK_OUT.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/SPABANK_OUT.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/SPDB_OUT.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/alipay_1.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/bg.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/bghead.jpg
.jpg
EtjJuSearch_v4.0/TuiGuang/images/bghead_bottom.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/bghead_top_com.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/body_bg.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/btn.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/login_btn.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/menu_topimg.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/new/arrow_c.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/new/arrow_o.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/new/btn.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/new/calendar.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/new/date_bg.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/new/file.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/new/folder-close.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/new/folder-open.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/new/head_bg.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/new/head_sch.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/new/img_delete.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/new/img_select.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/new/img_upload.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/new/left_menu02.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/new/left_menu03.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/new/letter_bg.png
.png
EtjJuSearch_v4.0/TuiGuang/images/new/loading.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/new/logo.jpg
.jpg
EtjJuSearch_v4.0/TuiGuang/images/new/pay_btn.jpg
.jpg
EtjJuSearch_v4.0/TuiGuang/images/new/side_head.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/new/spacer.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/new/th.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/new/vssver2.scc
EtjJuSearch_v4.0/TuiGuang/images/new/weizhi_bj.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/new/weizhi_menu.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/regedit_btn.gif
.gif
EtjJuSearch_v4.0/TuiGuang/images/vssver2.scc
EtjJuSearch_v4.0/TuiGuang/index.htm
.html
EtjJuSearch_v4.0/TuiGuang/js/common.js
.js
EtjJuSearch_v4.0/TuiGuang/js/jquery-1.2.6.js
.js
EtjJuSearch_v4.0/TuiGuang/js/jquery.lightTreeview.pack.js
.js
EtjJuSearch_v4.0/TuiGuang/js/tigra_tables.js
.js
EtjJuSearch_v4.0/TuiGuang/js/vssver2.scc
EtjJuSearch_v4.0/TuiGuang/left.htm
.html .js polyglot
EtjJuSearch_v4.0/TuiGuang/notify_url.aspx
EtjJuSearch_v4.0/TuiGuang/return_url.aspx
EtjJuSearch_v4.0/TuiGuang/right.aspx
.asp
EtjJuSearch_v4.0/TuiGuang/top.aspx
.asp
EtjJuSearch_v4.0/Web.config
EtjJuSearch_v4.0/about/duty.htm
.html
EtjJuSearch_v4.0/about/freecode.htm
.html
EtjJuSearch_v4.0/bin/ETongJin.Common.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EtjJuSearch_v4.0/bin/ETongJin.Search.Ju.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EtjJuSearch_v4.0/bin/ETongJin.Search.UI.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EtjJuSearch_v4.0/bin/ETongJin.Search.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 190KB - Virtual size: 189KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EtjJuSearch_v4.0/bin/HtmlAgilityPack.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EtjJuSearch_v4.0/bin/Lucene.Net.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\搜索引擎\lucene.net2.4.0\src\Lucene.Net\obj\Release\Lucene.Net.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 616KB - Virtual size: 615KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EtjJuSearch_v4.0/bin/Net.LikeShow.ContentAnalyze.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EtjJuSearch_v4.0/bin/PanGu.HighLight.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\ApolloWorkFolder\test\laboratory\Opensource\PanGu\PanGuSegment\PanGu.HighLight\obj\Release\PanGu.HighLight.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EtjJuSearch_v4.0/bin/PanGu.Lucene.Analyzer.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Documents and Settings\Administrator\桌面\pangu\PanGu4Lucene\PanGu.Lucene.Analyzer\obj\Release\PanGu.Lucene.Analyzer.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EtjJuSearch_v4.0/bin/PanGu.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Live\dev\so.12ym.com\pangu\PanGuSegment\PanGu\obj\Release\PanGu.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EtjJuSearch_v4.0/bin/PanGu.xml
EtjJuSearch_v4.0/bin/log.log
EtjJuSearch_v4.0/default.aspx
.asp .js polyglot
EtjJuSearch_v4.0/gif.aspx
EtjJuSearch_v4.0/readme.txt
EtjJuSearch_v4.0/下载说明.txt
EtjJuSearch_v4.0/使用说明.url
.url
EtjJuSearch_v4.0/新云软件.url
.url

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 85KB - Virtual size: 84KB

.sdata Size: 512B - Virtual size: 448B

.rsrc Size: 1024B - Virtual size: 792B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 39KB - Virtual size: 39KB

.rsrc Size: 1024B - Virtual size: 816B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 81KB - Virtual size: 80KB

.rsrc Size: 1024B - Virtual size: 840B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 190KB - Virtual size: 189KB

.sdata Size: 512B - Virtual size: 10B

.rsrc Size: 1024B - Virtual size: 816B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 76KB - Virtual size: 75KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 616KB - Virtual size: 615KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 24KB - Virtual size: 21KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

.text
Size: 85KB - Virtual size: 84KB

.sdata
Size: 512B - Virtual size: 448B

.rsrc
Size: 1024B - Virtual size: 792B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 39KB - Virtual size: 39KB

.rsrc
Size: 1024B - Virtual size: 816B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 81KB - Virtual size: 80KB

.rsrc
Size: 1024B - Virtual size: 840B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 190KB - Virtual size: 189KB

.sdata
Size: 512B - Virtual size: 10B

.rsrc
Size: 1024B - Virtual size: 816B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 76KB - Virtual size: 75KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 616KB - Virtual size: 615KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 24KB - Virtual size: 21KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 1024B - Virtual size: 920B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 936B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 53KB - Virtual size: 53KB

.rsrc
Size: 1024B - Virtual size: 816B

.reloc
Size: 512B - Virtual size: 12B