A6F86D2D67D9403eA725820C4EF210A2
A6F92A92B69B4082AB0F9C7A9C1FF10C
CheckRuntime
EC1DB9C1620C48588C4701045B242FA9
GetCpuID
GetCpuIDW
GetDiskID
GetDiskIDW
GetMacID
GetMacIDW
GetModuleBase
MainDLL
_CorExeMain
General
-
Target
daea0bd234ee65047d0210e0450b1bbe_JaffaCakes118
-
Size
1.8MB
-
MD5
daea0bd234ee65047d0210e0450b1bbe
-
SHA1
97aa29b7d086c4e197ae58f9dc223d762e62445f
-
SHA256
a8111f1a9eb79cc82e0a2d00fb041cf37528cc3f1a89a085fa7efb6fd22fccf0
-
SHA512
c03121862370ea068782e5ac37daa661a6540a4028690202eee3b39e17437b280976895de8609659a242e211ef31ca18273e57219f23c4aa27fe9a0bd94c801d
-
SSDEEP
49152:zywO6ynyyF+JzU3RokOhlBEyvqko69/TwHOiiF1Q4KUs:rOiyFAgut9TxiibQms
Score
3/10
Malware Config
Signatures
-
Unsigned PE 9 IoCs
Checks for missing Authenticode signature.
Files
-
daea0bd234ee65047d0210e0450b1bbe_JaffaCakes118
-
v1.0sql版升级到v2.0sql版.txt
-
初始安装说明.doc
-
升级报告.txt
-
程序/PrecompiledApp.config
-
程序/Web.Config
-
程序/adddianpu.aspx
-
程序/admin/Viewstore.aspx
-
程序/admin/addadmin.aspx
-
程序/admin/addstore.aspx
-
程序/admin/addzheq.aspx
-
程序/admin/comment.aspx
-
程序/admin/css/style.css
-
程序/admin/dq.aspx
-
程序/admin/excel.aspx
-
程序/admin/huiyuan.aspx
-
程序/admin/image/add_01.jpg
-
程序/admin/image/button.gif
-
程序/admin/image/dian.gif
-
程序/admin/image/dixian.jpg
-
程序/admin/image/dixian2.jpg
-
程序/admin/image/l_now.gif
-
程序/admin/image/l_topbg.gif
-
程序/admin/image/left_bg.gif
-
程序/admin/image/line.gif
-
程序/admin/image/menu_bgs.gif
-
程序/admin/image/now.gif
-
程序/admin/image/sanjiao.gif
-
程序/admin/image/top_bg.gif
-
程序/admin/image/top_imgbg.gif
-
程序/admin/imagelist.aspx
-
程序/admin/images/fox.css
-
程序/admin/images/icon-demo.gif
-
程序/admin/images/icon-login-seaver.gif
-
程序/admin/images/login-buttom-bg.gif
-
程序/admin/images/login-content-bg.gif
-
程序/admin/images/login-top-bg.gif
-
程序/admin/images/login-wel.gif
-
程序/admin/images/login_bg.jpg
-
程序/admin/images/logo.png
-
程序/admin/images/luck.gif
-
程序/admin/images/skin.css
-
程序/admin/index.aspx
-
程序/admin/ka.aspx
-
程序/admin/kindeditor/index.css
-
程序/admin/kindeditor/kindeditor.js
-
程序/admin/kindeditor/plugins/about.htm
-
程序/admin/kindeditor/plugins/emoticons/etc_01.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_02.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_03.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_04.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_05.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_06.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_07.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_08.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_09.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_10.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_11.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_12.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_13.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_14.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_15.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_16.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_17.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_18.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_19.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_20.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_21.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_22.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_23.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_24.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_25.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_26.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_27.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_28.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_29.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_30.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_31.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_32.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_33.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_34.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_35.gif
-
程序/admin/kindeditor/plugins/emoticons/etc_36.gif
-
程序/admin/kindeditor/plugins/flash.htm
-
程序/admin/kindeditor/plugins/image.htm
-
程序/admin/kindeditor/plugins/link.htm
-
程序/admin/kindeditor/plugins/media.htm
-
程序/admin/kindeditor/plugins/plainpaste.htm
-
程序/admin/kindeditor/plugins/remote_image.htm
-
程序/admin/kindeditor/plugins/upload.aspx
-
程序/admin/kindeditor/plugins/wordpaste.htm
-
程序/admin/kindeditor/skins/default.css
-
程序/admin/kindeditor/skins/default.gif
-
程序/admin/kindeditor/skins/div.gif
-
程序/admin/kindeditor/skins/dl.gif
-
程序/admin/kindeditor/skins/editor.css
-
程序/admin/kindeditor/skins/ol.gif
-
程序/admin/kindeditor/skins/p.gif
-
程序/admin/kindeditor/skins/tinymce.css
-
程序/admin/kindeditor/skins/tinymce.gif
-
程序/admin/kindeditor/skins/ul.gif
-
程序/admin/lb.aspx
-
程序/admin/left.aspx
-
程序/admin/login.aspx
-
程序/admin/moban.aspx
-
程序/admin/music.aspx
-
程序/admin/right.aspx
-
程序/admin/s.aspx
-
程序/admin/top.aspx
-
程序/admin/tousu.aspx
-
程序/admin/upload.aspx
-
程序/bin/App_Code.dll
dae02f32a21e03ce65412f6e56942daa
Headers
Imports
Sections
-
程序/bin/App_WebReferences.dll
dae02f32a21e03ce65412f6e56942daa
Headers
Imports
Sections
-
程序/bin/App_Web_7buwklbw.dll
dae02f32a21e03ce65412f6e56942daa
Headers
Imports
Sections
-
程序/bin/App_Web_dhaukcul.dll
dae02f32a21e03ce65412f6e56942daa
Headers
Imports
Sections
-
程序/bin/App_Web_izuvqlrv.dll
dae02f32a21e03ce65412f6e56942daa
Headers
Imports
Sections
-
程序/bin/App_Web_j8wx_o2r.dll
dae02f32a21e03ce65412f6e56942daa
Headers
Imports
Sections
-
程序/bin/App_Web_l0tuyowm.dll
dae02f32a21e03ce65412f6e56942daa
Headers
Imports
Sections
-
程序/bin/Intelligencia.UrlRewriter.dll
dae02f32a21e03ce65412f6e56942daa
Headers
Imports
Sections
-
程序/bin/qicms.dll
5946102212fc38379f0a7686424bedc7
Headers
Imports
Exports
Sections
-
程序/bottom.ascx
-
程序/data/shop.mdb
-
程序/dazheka.aspx
-
程序/huiyuan/addshop.css
-
程序/huiyuan/image/Thumbs.db
-
程序/huiyuan/image/dashanghu.gif
-
程序/huiyuan/image/daxiahu.gif
-
程序/huiyuan/image/lvshanghu.gif
-
程序/huiyuan/image/lvxiahu.gif
-
程序/huiyuan/image/shanghu.gif
-
程序/huiyuan/image/xiahu.gif
-
程序/huiyuan/index.aspx
-
程序/huiyuan/login.aspx
-
程序/huiyuan/reg.aspx
-
程序/images/8_online.gif
-
程序/images/ajax.gif
-
程序/images/datetime.gif
-
程序/images/dayintubiao.jpg
-
程序/images/dazheka.jpg
-
程序/images/detail_10-r.gif
-
程序/images/detail_12.gif
-
程序/images/detail_13-r.gif
-
程序/images/detail_17.gif
-
程序/images/detail_18-r.gif
-
程序/images/dianpu_index_dengji.jpg
-
程序/images/fenhong_pingpu.jpg
-
程序/images/fenhong_xiao.jpg
-
程序/images/fenhong_xiao2.jpg
-
程序/images/fenhong_youhu.jpg
-
程序/images/fenhong_zuohu.jpg
-
程序/images/guestbook.gif
-
程序/images/h_dash1.gif
-
程序/images/ing.gif
-
程序/images/logo.gif
-
程序/images/lvse_pingpu.jpg
-
程序/images/lvse_youhu.jpg
-
程序/images/lvse_zuohu.jpg
-
程序/images/menu_bg.gif
-
程序/images/menu_bg_l.gif
-
程序/images/menu_bg_r.gif
-
程序/images/menu_pp.jpg
-
程序/images/middle_one_zuiyou_pingpu.jpg
-
程序/images/middle_one_zuiyou_pingpu2.jpg
-
程序/images/pic_bg.jpg
-
程序/images/prints.jpg
-
程序/images/repeat_y.jpg
-
程序/images/shop_topb-r.gif
-
程序/images/shop_topbg-r.gif
-
程序/images/shuiyin.png
-
程序/images/tanhao.jpg
-
程序/images/top_01.gif
-
程序/images/top_02.gif
-
程序/images/top_end_bg.gif
-
程序/images/top_end_bg21.jpg
-
程序/images/top_end_bg22.jpg
-
程序/images/top_end_bg31.jpg
-
程序/images/top_end_bg32.jpg
-
程序/images/top_end_bg33.gif
-
程序/images/topnav_link.gif
-
程序/images/topnav_up.gif
-
程序/images/user.jpg
-
程序/images/user_index_top.jpg
-
程序/images/user_menu_pingpu.jpg
-
程序/images/woyaodianping.jpg
-
程序/images/xiangxi_menu_pingpu1pu.jpg
-
程序/images/xiangxi_menu_pingpu2.jpg
-
程序/images/xiaodian.jpg
-
程序/images/xiaosanjiao.jpg
-
程序/images/xiesanjiao.jpg
-
程序/images/yn_icon_mapbluebg_2x29.gif
-
程序/images/yn_icon_mapblueleft_22x29.gif
-
程序/images/yn_icon_mapblueright_10x29.gif
-
程序/images/youhuiquan.gif
-
程序/images/zhuyishixiang_pingpu.jpg
-
程序/images/娱乐券.jpg
-
程序/images/生活券.jpg
-
程序/images/美食券.jpg
-
程序/images/购物券.jpg
-
程序/inc/RandomImage.aspx
-
程序/inc/ajax.aspx
-
程序/inc/ajax.js
-
程序/inc/css.css
-
程序/inc/lightbox.js
-
程序/inc/lightbox/images/blank.gif
-
程序/inc/lightbox/images/closelabel.gif
-
程序/inc/lightbox/images/loading.gif
-
程序/inc/lightbox/images/nextlabel.gif
-
程序/inc/lightbox/images/prevlabel.gif
-
程序/inc/lightbox/images/printlabel.gif
-
程序/inc/lightbox/js.js
-
程序/inc/lightbox/style.css
-
程序/inc/loading.js
-
程序/inc/rq.js
-
程序/inc/scrollhuiyuan.js
-
程序/inc/scrollpic.js
-
程序/inc/shenqing.css
-
程序/inc/star.js
-
程序/inc/szr.js
-
程序/inc/tb.js
-
程序/inc/xiangxi.css
-
程序/inc/zhe.css
-
程序/index.aspx
-
程序/pinglun.aspx
-
程序/print.aspx
-
程序/search.aspx
-
程序/sitemap.aspx
-
程序/tishi.aspx
-
程序/toleave.aspx
-
程序/top.ascx
-
程序/xiangxi.aspx
-
程序/youhuiquan.aspx
-
程序/新云软件.url
-
进入QICMS官方网站.url
-
进入QICMS官方论坛.url