Overview
overview
7Static
static
7admin/admin_add.js
windows7-x64
3admin/admin_add.js
windows10-2004-x64
3admin/admin_ads.vbs
windows7-x64
1admin/admin_ads.vbs
windows10-2004-x64
1admin/admi...ig.vbs
windows7-x64
1admin/admi...ig.vbs
windows10-2004-x64
1admin/admi...g1.vbs
windows7-x64
1admin/admi...g1.vbs
windows10-2004-x64
1admin/admin_index.vbs
windows7-x64
1admin/admin_index.vbs
windows10-2004-x64
1admin/admin_link.vbs
windows7-x64
1admin/admin_link.vbs
windows10-2004-x64
1admin/admin_list.vbs
windows7-x64
1admin/admin_list.vbs
windows10-2004-x64
1admin/admin_mb.vbs
windows7-x64
1admin/admin_mb.vbs
windows10-2004-x64
1admin/admin_p.vbs
windows7-x64
1admin/admin_p.vbs
windows10-2004-x64
1admin/admin_pl.vbs
windows7-x64
1admin/admin_pl.vbs
windows10-2004-x64
1admin/admin_re.vbs
windows7-x64
1admin/admin_re.vbs
windows10-2004-x64
1admin/admi...ch.vbs
windows7-x64
1admin/admi...ch.vbs
windows10-2004-x64
1admin/admin_type.vbs
windows7-x64
1admin/admin_type.vbs
windows10-2004-x64
1admin/admi...er.vbs
windows7-x64
1admin/admi...er.vbs
windows10-2004-x64
1admin/check.vbs
windows7-x64
1admin/check.vbs
windows10-2004-x64
1admin/conn.asp
windows7-x64
3admin/conn.asp
windows10-2004-x64
3Behavioral task
behavioral1
Sample
admin/admin_add.js
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
admin/admin_add.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
admin/admin_ads.vbs
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
admin/admin_ads.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
admin/admin_config.vbs
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
admin/admin_config.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
admin/admin_config1.vbs
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
admin/admin_config1.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
admin/admin_index.vbs
Resource
win7-20240704-en
Behavioral task
behavioral10
Sample
admin/admin_index.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
admin/admin_link.vbs
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
admin/admin_link.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
admin/admin_list.vbs
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
admin/admin_list.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
admin/admin_mb.vbs
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
admin/admin_mb.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
admin/admin_p.vbs
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
admin/admin_p.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
admin/admin_pl.vbs
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
admin/admin_pl.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
admin/admin_re.vbs
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
admin/admin_re.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
admin/admin_search.vbs
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
admin/admin_search.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
admin/admin_type.vbs
Resource
win7-20240903-en
Behavioral task
behavioral26
Sample
admin/admin_type.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
admin/admin_webmaster.vbs
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
admin/admin_webmaster.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
admin/check.vbs
Resource
win7-20240903-en
Behavioral task
behavioral30
Sample
admin/check.vbs
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
admin/conn.asp
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
admin/conn.asp
Resource
win10v2004-20240802-en
General
-
Target
dd1eea137796293998fd2939ee68ddd9_JaffaCakes118
-
Size
1.7MB
-
MD5
dd1eea137796293998fd2939ee68ddd9
-
SHA1
3f8568fb91bad5091b42b4e5b0eafcb6d1ebed28
-
SHA256
2bda5208b44825bf958f9c4a75c71d677d4eb4bbc525d8ea4ce02b7f70f42346
-
SHA512
2ef151a876a94cced4521e28ac30d9e40e68c4354e96e9f76e453fb54ae52b53dcf59ef24186022dbc23f73a596cf7b7900c6e935c34b8667343d97f2658ea91
-
SSDEEP
49152:73+YeOO8GJNZdyUqwwSFZLCLksoxXLIYpyHMcRr+y7Ra:LN8Dqswks61p8lRrRRa
Malware Config
Signatures
-
resource yara_rule static1/unpack001/inc/speed.exe upx static1/unpack001/maxz.cn.v5.0_blue(2008.1.2)/inc/speed.exe upx -
Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/inc/speed.exe unpack002/out.upx unpack001/maxz.cn.v5.0_blue(2008.1.2)/inc/speed.exe unpack003/out.upx
Files
-
dd1eea137796293998fd2939ee68ddd9_JaffaCakes118.rar
-
admin/admin.css
-
admin/admin_add.asp.js
-
admin/admin_ads.asp.vbs
-
admin/admin_config.asp.vbs
-
admin/admin_config1.asp.vbs
-
admin/admin_index.asp.vbs
-
admin/admin_link.asp.vbs
-
admin/admin_list.asp.vbs
-
admin/admin_mb.asp.vbs
-
admin/admin_p.asp.vbs
-
admin/admin_pl.asp.vbs
-
admin/admin_re.asp.vbs
-
admin/admin_search.asp.vbs
-
admin/admin_type.asp.vbs
-
admin/admin_webmaster.asp.vbs
-
admin/check.asp.vbs
-
admin/conn.asp
-
admin/edit.htm.html .js polyglot
-
admin/images/Thumbs.db
-
admin/images/bb_alipay.gif.gif
-
admin/images/bb_bold.gif.gif
-
admin/images/bb_center.gif.gif
-
admin/images/bb_clear.gif.gif
-
admin/images/bb_code.gif.gif
-
admin/images/bb_color.gif.gif
-
admin/images/bb_contract.gif.gif
-
admin/images/bb_email.gif.gif
-
admin/images/bb_expand.gif.gif
-
admin/images/bb_flash.gif.gif
-
admin/images/bb_image.gif.gif
-
admin/images/bb_indent.gif.gif
-
admin/images/bb_italic.gif.gif
-
admin/images/bb_left.gif.gif
-
admin/images/bb_look.gif.gif
-
admin/images/bb_menupop.gif.gif
-
admin/images/bb_orderedlist.gif.gif
-
admin/images/bb_outdent.gif.gif
-
admin/images/bb_qq.gif.gif
-
admin/images/bb_quote.gif.gif
-
admin/images/bb_redo.gif.gif
-
admin/images/bb_removeformat.gif.gif
-
admin/images/bb_right.gif.gif
-
admin/images/bb_rm.gif.gif
-
admin/images/bb_separator.gif.gif
-
admin/images/bb_table.gif.gif
-
admin/images/bb_underline.gif.gif
-
admin/images/bb_undo.gif.gif
-
admin/images/bb_unlink.gif.gif
-
admin/images/bb_unorderedlist.gif.gif
-
admin/images/bb_url.gif.gif
-
admin/images/bb_wmv.gif.gif
-
admin/images/bbcode.js.js
-
admin/images/common.Js.js
-
admin/images/credits.gif.gif
-
admin/images/editor.js.js
-
admin/images/manage/1.gif.gif
-
admin/images/manage/2.gif.gif
-
admin/images/manage/EMAIL.GIF.gif
-
admin/images/manage/GOTO.GIF.gif
-
admin/images/manage/HOMEPAGE.GIF.gif
-
admin/images/manage/Thumbs.db
-
admin/images/manage/admin_bg.gif.gif
-
admin/images/manage/admin_bg_1.gif.gif
-
admin/images/manage/admin_left_1.gif.gif
-
admin/images/manage/admin_left_2.gif.gif
-
admin/images/manage/admin_title.gif.gif
-
admin/images/manage/bar.gif.gif
-
admin/images/manage/bar9.gif.gif
-
admin/images/manage/bbk.gif.gif
-
admin/images/manage/bbk_main.gif.gif
-
admin/images/manage/bullet.gif.gif
-
admin/images/manage/close.gif
-
admin/images/manage/color.js.js
-
admin/images/manage/html_no.gif.gif
-
admin/images/manage/html_ok.gif.gif
-
admin/images/manage/key.gif.gif
-
admin/images/manage/minus.gif.gif
-
admin/images/manage/name.gif.gif
-
admin/images/manage/plus.gif.gif
-
admin/images/manage/title_bg_hide.gif.gif
-
admin/images/manage/title_bg_quit.gif.gif
-
admin/images/manage/title_bg_show.gif.gif
-
admin/images/menu.js.js
-
admin/images/s.gif.gif
-
admin/images/ubb.css
-
admin/index.asp
-
admin/login.asp.vbs
-
admin/make.asp.vbs
-
admin/make_index.asp.vbs
-
admin/make_map.asp.vbs
-
admin/make_play.asp.vbs
-
admin/make_type.asp.vbs
-
admin/make_view.asp.vbs
-
admin/make_view_play.asp.vbs
-
admin/md5.asp.vbs
-
admin/mysql.asp.vbs
-
admin/serverinfo.asp.asp .vbs polyglot
-
admin/tool_56.asp.vbs
-
admin/tool_6.asp.vbs
-
admin/tool_iask.asp.vbs
-
admin/tool_resources.asp.vbs
-
admin/tool_tudou.asp.vbs
-
admin/tool_youku.asp.vbs
-
admin/tool_ztpic.asp.vbs
-
admin/ubb.asp
-
admin/up/upload.asp.asp .vbs polyglot
-
admin/up/upload.htm
-
admin/up/upsave.inc.vbs
-
admin/新云软件.url.url
-
allmovie.asp
-
comment.asp.vbs
-
foot.asp
-
gb.asp.js
-
head.asp
-
images/bj.gif.gif
-
images/bul.gif.gif
-
images/exe.gif.gif
-
images/faces/1.gif.gif
-
images/faces/10.gif.gif
-
images/faces/11.gif.gif
-
images/faces/12.gif.gif
-
images/faces/13.gif.gif
-
images/faces/14.gif.gif
-
images/faces/15.gif.gif
-
images/faces/16.gif.gif
-
images/faces/17.gif.gif
-
images/faces/2.gif.gif
-
images/faces/3.gif.gif
-
images/faces/4.gif.gif
-
images/faces/5.gif.gif
-
images/faces/6.gif.gif
-
images/faces/7.gif.gif
-
images/faces/8.gif.gif
-
images/faces/9.gif.gif
-
images/faces/Thumbs.db
-
images/hot.gif.gif
-
images/hot/0.jpg.jpg
-
images/hot/1.jpg.jpg
-
images/hot/2.jpg.jpg
-
images/hot/3.jpg.jpg
-
images/hot/4.jpg.jpg
-
images/hot/js.js.js
-
images/hot/pic.swf
-
images/hot/pic.xml.xml
-
images/ico.gif.gif
-
images/img_xx.gif.gif
-
images/img_xxx.gif.gif
-
images/imgbg.gif.gif
-
images/index_bg.gif.gif
-
images/index_tagleft.gif.gif
-
images/index_tagright.gif.gif
-
images/inputso.gif.gif
-
images/layer.gif.gif
-
images/loading.gif.gif
-
images/loading2.gif.gif
-
images/logo.gif.gif
-
images/logo.psd
-
images/memua.gif.gif
-
images/memubg.gif.gif
-
images/nav-bg.gif.gif
-
images/new.gif.gif
-
images/nopic.gif.gif
-
images/remen.gif.gif
-
images/style.css
-
inc/Conn.asp
-
inc/config.asp
-
inc/datas.asp
-
inc/db.asp.vbs
-
inc/fso.asp.vbs
-
inc/gb_data.mdb
-
inc/gbook.asp.asp .vbs polyglot
-
inc/hits.asp
-
inc/speed.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
inc/sqlin.asp.vbs
-
inc/sub.asp.vbs
-
inc/topic.asp.vbs
-
index.asp
-
js/AD.gif.gif
-
js/ajax.js.js
-
js/foot.js.js
-
js/index1.js
-
js/index2.js.js
-
js/item1.js.js
-
js/item2.js.js
-
js/loading.gif.gif
-
js/loading.html.html
-
js/play1.js.js
-
js/playad1.gif.gif
-
js/top.js.js
-
js/view1.js.js
-
js/view2.js.js
-
js/view3.js.js
-
js/view4.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/admin/admin.css
-
maxz.cn.v5.0_blue(2008.1.2)/admin/admin_add.asp.js
-
maxz.cn.v5.0_blue(2008.1.2)/admin/admin_ads.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/admin_config.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/admin_config1.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/admin_index.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/admin_link.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/admin_list.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/admin_mb.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/admin_p.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/admin_pl.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/admin_re.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/admin_search.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/admin_type.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/admin_webmaster.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/check.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/conn.asp
-
maxz.cn.v5.0_blue(2008.1.2)/admin/edit.htm.html .js polyglot
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/Thumbs.db
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_alipay.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_bold.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_center.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_clear.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_code.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_color.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_contract.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_email.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_expand.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_flash.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_image.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_indent.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_italic.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_left.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_look.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_menupop.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_orderedlist.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_outdent.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_qq.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_quote.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_redo.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_removeformat.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_right.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_rm.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_separator.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_table.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_underline.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_undo.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_unlink.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_unorderedlist.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_url.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bb_wmv.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/bbcode.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/common.Js.js
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/credits.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/editor.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/1.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/2.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/EMAIL.GIF.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/GOTO.GIF.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/HOMEPAGE.GIF.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/Thumbs.db
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/admin_bg.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/admin_bg_1.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/admin_left_1.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/admin_left_2.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/admin_title.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/bar.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/bar9.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/bbk.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/bbk_main.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/bullet.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/close.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/color.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/html_no.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/html_ok.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/key.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/minus.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/name.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/plus.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/title_bg_hide.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/title_bg_quit.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/manage/title_bg_show.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/menu.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/s.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/admin/images/ubb.css
-
maxz.cn.v5.0_blue(2008.1.2)/admin/index.asp
-
maxz.cn.v5.0_blue(2008.1.2)/admin/login.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/make.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/make_index.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/make_map.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/make_play.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/make_type.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/make_view.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/make_view_play.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/md5.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/mysql.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/serverinfo.asp.asp .vbs polyglot
-
maxz.cn.v5.0_blue(2008.1.2)/admin/tool_56.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/tool_6.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/tool_iask.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/tool_resources.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/tool_tudou.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/tool_youku.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/tool_ztpic.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/admin/ubb.asp
-
maxz.cn.v5.0_blue(2008.1.2)/admin/up/upload.asp.asp .vbs polyglot
-
maxz.cn.v5.0_blue(2008.1.2)/admin/up/upload.htm
-
maxz.cn.v5.0_blue(2008.1.2)/admin/up/upsave.inc.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/allmovie.asp
-
maxz.cn.v5.0_blue(2008.1.2)/comment.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/foot.asp
-
maxz.cn.v5.0_blue(2008.1.2)/gb.asp.js
-
maxz.cn.v5.0_blue(2008.1.2)/head.asp
-
maxz.cn.v5.0_blue(2008.1.2)/images/bj.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/bul.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/exe.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/faces/1.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/faces/10.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/faces/11.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/faces/12.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/faces/13.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/faces/14.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/faces/15.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/faces/16.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/faces/17.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/faces/2.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/faces/3.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/faces/4.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/faces/5.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/faces/6.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/faces/7.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/faces/8.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/faces/9.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/faces/Thumbs.db
-
maxz.cn.v5.0_blue(2008.1.2)/images/hot.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/hot/0.jpg.jpg
-
maxz.cn.v5.0_blue(2008.1.2)/images/hot/1.jpg.jpg
-
maxz.cn.v5.0_blue(2008.1.2)/images/hot/2.jpg.jpg
-
maxz.cn.v5.0_blue(2008.1.2)/images/hot/3.jpg.jpg
-
maxz.cn.v5.0_blue(2008.1.2)/images/hot/4.jpg.jpg
-
maxz.cn.v5.0_blue(2008.1.2)/images/hot/js.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/images/hot/pic.swf
-
maxz.cn.v5.0_blue(2008.1.2)/images/hot/pic.xml.xml
-
maxz.cn.v5.0_blue(2008.1.2)/images/ico.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/img_xx.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/img_xxx.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/imgbg.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/index_bg.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/index_tagleft.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/index_tagright.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/inputso.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/layer.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/loading.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/loading2.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/logo.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/logo.psd
-
maxz.cn.v5.0_blue(2008.1.2)/images/memua.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/memubg.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/nav-bg.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/new.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/nopic.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/remen.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/images/style.css
-
maxz.cn.v5.0_blue(2008.1.2)/inc/Conn.asp
-
maxz.cn.v5.0_blue(2008.1.2)/inc/config.asp
-
maxz.cn.v5.0_blue(2008.1.2)/inc/datas.asp
-
maxz.cn.v5.0_blue(2008.1.2)/inc/db.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/inc/fso.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/inc/gb_data.mdb
-
maxz.cn.v5.0_blue(2008.1.2)/inc/gbook.asp.asp .vbs polyglot
-
maxz.cn.v5.0_blue(2008.1.2)/inc/hits.asp
-
maxz.cn.v5.0_blue(2008.1.2)/inc/speed.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
maxz.cn.v5.0_blue(2008.1.2)/inc/sqlin.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/inc/sub.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/inc/topic.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/index.asp
-
maxz.cn.v5.0_blue(2008.1.2)/js/AD.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/js/ajax.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/js/foot.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/js/index1.js
-
maxz.cn.v5.0_blue(2008.1.2)/js/index2.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/js/item1.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/js/item2.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/js/loading.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/js/loading.html.html
-
maxz.cn.v5.0_blue(2008.1.2)/js/play1.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/js/playad1.gif.gif
-
maxz.cn.v5.0_blue(2008.1.2)/js/top.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/js/view1.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/js/view2.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/js/view3.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/js/view4.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/play.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/search.asp
-
maxz.cn.v5.0_blue(2008.1.2)/template/item.html.html
-
maxz.cn.v5.0_blue(2008.1.2)/template/link.txt
-
maxz.cn.v5.0_blue(2008.1.2)/template/play.html.html .js polyglot
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/56.htm.html
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/56.js
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/6rooms.htm.html
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/6rooms.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/bobo.htm.html
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/bobo.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/iask.htm.html
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/iask.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/media.htm
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/neo.htm.html
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/neo.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/ouou.htm.html
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/ouou.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/play.htm.html
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/play.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/play_media.htm
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/play_play.htm.html
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/play_play.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/play_real.htm.html .vbs polyglot
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/qvod.htm.html
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/qvod.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/real.htm.html .vbs polyglot
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/tudou.htm.html .js polyglot
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/tudou.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/tudou1.htm.html .js polyglot
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/tvix.htm.html .js polyglot
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/tvix.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/tvix1.htm.html .js polyglot
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/vcastr21.swf
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/xunlei.htm.js
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/xunlei2.htm.html
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/youku.htm.html
-
maxz.cn.v5.0_blue(2008.1.2)/template/play/youku.js.js
-
maxz.cn.v5.0_blue(2008.1.2)/template/view.html.html
-
maxz.cn.v5.0_blue(2008.1.2)/xml.asp.vbs
-
maxz.cn.v5.0_blue(2008.1.2)/函数调用.txt
-
maxz.cn.v5.0_blue(2008.1.2)/外部调用测试页.htm.html
-
maxz.cn.v5.0_blue(2008.1.2)/更新说明.txt
-
play.asp.vbs
-
search.asp
-
template/item.html.html
-
template/link.txt
-
template/play.html.html .js polyglot
-
template/play/56.htm.html
-
template/play/56.js
-
template/play/6rooms.htm.html
-
template/play/6rooms.js.js
-
template/play/bobo.htm.html
-
template/play/bobo.js.js
-
template/play/iask.htm.html
-
template/play/iask.js.js
-
template/play/media.htm
-
template/play/neo.htm.html
-
template/play/neo.js.js
-
template/play/ouou.htm.html
-
template/play/ouou.js.js
-
template/play/play.htm.html
-
template/play/play.js.js
-
template/play/play_media.htm
-
template/play/play_play.htm.html
-
template/play/play_play.js.js
-
template/play/play_real.htm.html .vbs polyglot
-
template/play/qvod.htm.html
-
template/play/qvod.js.js
-
template/play/real.htm.html .vbs polyglot
-
template/play/tudou.htm.html .js polyglot
-
template/play/tudou.js.js
-
template/play/tudou1.htm.html .js polyglot
-
template/play/tvix.htm.html .js polyglot
-
template/play/tvix.js.js
-
template/play/tvix1.htm.html .js polyglot
-
template/play/vcastr21.swf
-
template/play/xunlei.htm.js
-
template/play/xunlei2.htm.html
-
template/play/youku.htm.html
-
template/play/youku.js.js
-
template/view.html.html
-
xml.asp.vbs
-
函数调用.txt
-
外部调用测试页.htm.html
-
更新说明.txt