dd7b254f30e3f0cf9113f1c126c614d0_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

dd7b254f30e3f0cf9113f1c126c614d0_JaffaCakes118
Size

786KB
MD5

dd7b254f30e3f0cf9113f1c126c614d0
SHA1

f93ac89578d03efc7ba2f0a7d173851b63611fd2
SHA256

9f0340fca876c6d22a4e5d2ce83265321d8ddb6237119b871cc0e03796b542e8
SHA512

148de51f5a6d469b7c807d2a1b76d121eb04c1bdfb0d85853e0db7656de1eeaf33df8a5afe78ab00a51b56b4371062a34c77184d49f20b8dd52fad980eba8559
SSDEEP

12288:9R7Vn/HgvHgBbaGm/LPiiQ9cVL27Owk9U0VpawJ3ZhLKYJz/jUgB2Z4:9RNgvHKaGm/L+M27Ob9Uwacy0pIZ4

Score

3^/10

Malware Config

Signatures

Unsigned PE 11 IoCs

Checks for missing Authenticode signature.

resource
unpack001/YUTK1/bin/App_Code.dll
unpack001/YUTK1/bin/App_Web_2iamtoar.dll
unpack001/YUTK1/bin/App_Web_grgay0ag.dll
unpack001/YUTK1/bin/App_Web_lz7y9nn8.dll
unpack001/YUTK1/bin/App_Web_nmbukrgl.dll
unpack001/YUTK1/bin/App_Web_ywtl3g7p.dll
unpack001/YUTK1/bin/App_global.asax.dll
unpack001/YUTK1/bin/DrawImageMark.dll
unpack001/YUTK1/bin/Interop.JRO.dll
unpack001/YUTK1/bin/URLRewriter.dll
unpack001/YUTK1/bin/WebFilesTable.dll

Files

dd7b254f30e3f0cf9113f1c126c614d0_JaffaCakes118
.rar
YUTK1/About.aspx
YUTK1/Admin/Admin_Article.aspx
YUTK1/Admin/Admin_ArticleEdit.aspx
YUTK1/Admin/Admin_Cat.aspx
YUTK1/Admin/Admin_CatAdd.aspx
YUTK1/Admin/Admin_CatEdit.aspx
YUTK1/Admin/Admin_Config.aspx
YUTK1/Admin/Admin_Down.aspx
YUTK1/Admin/Admin_DownEdit.aspx
YUTK1/Admin/Admin_Error.aspx
YUTK1/Admin/Admin_Group.aspx
.asp
YUTK1/Admin/Admin_GroupEdit.aspx
.asp
YUTK1/Admin/Admin_Link.aspx
.asp
YUTK1/Admin/Admin_LinkEdit.aspx
.asp
YUTK1/Admin/Admin_Login.aspx
YUTK1/Admin/Admin_Logout.aspx
YUTK1/Admin/Admin_Logs.aspx
.asp
YUTK1/Admin/Admin_Main.aspx
YUTK1/Admin/Admin_Maintain.aspx
.asp
YUTK1/Admin/Admin_Message.aspx
.asp
YUTK1/Admin/Admin_News.aspx
YUTK1/Admin/Admin_NewsEdit.aspx
YUTK1/Admin/Admin_PeoPle.aspx
YUTK1/Admin/Admin_PeoPleEdit.aspx
YUTK1/Admin/Admin_Pic.aspx
YUTK1/Admin/Admin_PicEdit.aspx
YUTK1/Admin/Admin_UpFiles.aspx
.asp
YUTK1/Admin/Index.htm
.html
YUTK1/Admin/LeftFrame.htm
.html
YUTK1/Admin/TopFrame.htm
.html
YUTK1/Admin/UpFiles.aspx
YUTK1/Art.aspx
YUTK1/Commentary.aspx
YUTK1/Controls/CheckCode.aspx
YUTK1/Controls/HtmlEdit.ascx
YUTK1/Controls/YU_Art.ascx
YUTK1/Controls/YU_Down.ascx
YUTK1/Controls/YU_Header.ascx
YUTK1/Controls/YU_Link.ascx
YUTK1/Controls/YU_News.ascx
YUTK1/Controls/YU_News_Sel.ascx
.js
YUTK1/Controls/YU_Pic.ascx
.js
YUTK1/Down.aspx
YUTK1/Editor/Editor.js
.js
YUTK1/Editor/images/aleft.gif
.gif
YUTK1/Editor/images/aright.gif
.gif
YUTK1/Editor/images/bold.gif
.gif
YUTK1/Editor/images/bt.gif
.gif
YUTK1/Editor/images/center.gif
.gif
YUTK1/Editor/images/cleancode.gif
.gif
YUTK1/Editor/images/fbcolor.gif
.gif
YUTK1/Editor/images/fgcolor.gif
.gif
YUTK1/Editor/images/img.gif
.gif
YUTK1/Editor/images/italic.gif
.gif
YUTK1/Editor/images/rar.gif
.gif
YUTK1/Editor/images/rm.gif
.gif
YUTK1/Editor/images/swf.gif
.gif
YUTK1/Editor/images/underline.gif
.gif
YUTK1/Editor/images/unlink.gif
.gif
YUTK1/Editor/images/wlink.gif
.gif
YUTK1/Editor/images/wmv.gif
.gif
YUTK1/Editor/include/img.aspx
.asp .js polyglot
YUTK1/Editor/include/inputbg.gif
.gif
YUTK1/Editor/include/pop.css
YUTK1/Editor/include/rar.aspx
.js
YUTK1/Editor/include/rm.htm
.html
YUTK1/Editor/include/selcolor.htm
.html .js polyglot
YUTK1/Editor/include/swf.htm
.html
YUTK1/Editor/include/wmv.htm
.html
YUTK1/Editor/style/css.css
YUTK1/Error.aspx
YUTK1/Inc/CommentaryForm.inc
YUTK1/Inc/Foot.inc
YUTK1/Inc/PeoPleEdu.inc
YUTK1/Inc/PeoPleJob.inc
YUTK1/Index.aspx
.asp
YUTK1/JScript/CheckAll.js
YUTK1/JScript/CopyText.js
YUTK1/JScript/DateInput.js
.js
YUTK1/JScript/LeftFrame.js
YUTK1/JScript/Show.js
.js
YUTK1/JScript/ShowDialog.js
.js
YUTK1/JScript/TextManage.js
.js
YUTK1/JScript/simp_trad.js
.js
YUTK1/Links.aspx
YUTK1/MD5.aspx
YUTK1/Message.aspx
.asp
YUTK1/News.aspx
YUTK1/OpenSoft.aspx
YUTK1/Pic.aspx
YUTK1/PrecompiledApp.config
YUTK1/Search.aspx
YUTK1/ShowArt.aspx
YUTK1/ShowDown.aspx
YUTK1/ShowNews.aspx
.asp
YUTK1/ShowPic.aspx
YUTK1/Styles/Admin_Default.css
YUTK1/Styles/Default.css
YUTK1/Styles/LeftFrame.css
YUTK1/Styles/TopFrame.css
YUTK1/Styles/index.css
YUTK1/TreeView.aspx
YUTK1/YUTK.sln
YUTK1/YU_Config/About.xml
.xml
YUTK1/YU_Config/Banner.xml
.xml
YUTK1/YU_Config/Open.xml
.xml
YUTK1/YU_Config/YU_Config.config
.xml
YUTK1/bin/App_Code.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.textxc
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 676B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
YUTK1/bin/App_Web_2iamtoar.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.textxc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
YUTK1/bin/App_Web_grgay0ag.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.textxc
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
YUTK1/bin/App_Web_lz7y9nn8.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.textxc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
YUTK1/bin/App_Web_nmbukrgl.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.textxc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
YUTK1/bin/App_Web_ywtl3g7p.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.textxc
Size: 428KB - Virtual size: 425KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
YUTK1/bin/App_global.asax.compiled
YUTK1/bin/App_global.asax.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
YUTK1/bin/DrawImageMark.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Controls\DrawImageMark\obj\Release\DrawImageMark.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
YUTK1/bin/Interop.JRO.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
YUTK1/bin/URLRewriter.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\My Projects\Misc Code Projects\MSDN Article Projects\URLRewriter\obj\Debug\URLRewriter.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
YUTK1/bin/WebFilesTable.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\Controls\WebFilesTable\obj\Release\WebFilesTable.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
YUTK1/databases/data.mdb
YUTK1/favicon.ico
YUTK1/image/Left_button.gif
.gif
YUTK1/image/Left_button1.gif
.gif
YUTK1/image/Rigth_button.gif
.gif
YUTK1/image/Rigth_button1.gif
.gif
YUTK1/image/an.gif
.gif
YUTK1/image/b_1.gif
.gif
YUTK1/image/b_2.gif
.gif
YUTK1/image/b_3.gif
.gif
YUTK1/image/ban_left.gif
.gif
YUTK1/image/ban_left1.gif
.gif
YUTK1/image/bg.gif
.gif
YUTK1/image/bottom.gif
.gif
YUTK1/image/bottom_bg.gif
.gif
YUTK1/image/bottom_left.gif
.gif
YUTK1/image/bottom_right.gif
.gif
YUTK1/image/c_1.gif
.gif
YUTK1/image/c_2.gif
.gif
YUTK1/image/c_3.gif
.gif
YUTK1/image/cd.gif
.gif
YUTK1/image/cd1.gif
.gif
YUTK1/image/cd3.gif
.gif
YUTK1/image/cd4.gif
.gif
YUTK1/image/cs/1.jpg
.jpg
YUTK1/image/cs/2.jpg
.jpg
YUTK1/image/cs/3.jpg
.jpg
YUTK1/image/cs/4.jpg
.jpg
YUTK1/image/dd.gif
.gif
YUTK1/image/face/face1.gif
.gif
YUTK1/image/face/face10.gif
.gif
YUTK1/image/face/face11.gif
.gif
YUTK1/image/face/face12.gif
.gif
YUTK1/image/face/face13.gif
.gif
YUTK1/image/face/face14.gif
.gif
YUTK1/image/face/face15.gif
.gif
YUTK1/image/face/face16.gif
.gif
YUTK1/image/face/face17.gif
.gif
YUTK1/image/face/face18.gif
.gif
YUTK1/image/face/face2.gif
.gif
YUTK1/image/face/face3.gif
.gif
YUTK1/image/face/face4.gif
.gif
YUTK1/image/face/face5.gif
.gif
YUTK1/image/face/face6.gif
.gif
YUTK1/image/face/face7.gif
.gif
YUTK1/image/face/face8.gif
.gif
YUTK1/image/face/face9.gif
.gif
YUTK1/image/go.gif
.gif
YUTK1/image/hr.gif
.gif
YUTK1/image/left.gif
.gif
YUTK1/image/list.gif
.gif
YUTK1/image/logo.gif
.gif
YUTK1/image/logo.psd
YUTK1/image/logo1.psd
YUTK1/image/menu_bg.jpg
.jpg
YUTK1/image/menu_left.gif
.gif
YUTK1/image/menu_right.gif
.gif
YUTK1/image/new1.gif
.gif
YUTK1/image/new2.gif
.gif
YUTK1/image/new3.gif
.gif
YUTK1/image/pic.swf
YUTK1/image/right.gif
.gif
YUTK1/image/smenubg.gif
.gif
YUTK1/image/soft/1star.gif
.gif
YUTK1/image/soft/2star.gif
.gif
YUTK1/image/soft/3star.gif
.gif
YUTK1/image/soft/4star.gif
.gif
YUTK1/image/soft/5star.gif
.gif
YUTK1/image/top.gif
.gif
YUTK1/image/top1.gif
.gif
YUTK1/image/topbbg.gif
.gif
YUTK1/image/复件 logo.gif
.gif
YUTK1/images/Admin_Default/admin_bulletin.gif
YUTK1/images/Admin_Default/admin_help.gif
.gif
YUTK1/images/Admin_Default/admin_img.gif
YUTK1/images/Admin_Default/admin_key.gif
.gif
YUTK1/images/Admin_Default/admin_title.gif
.gif
YUTK1/images/Admin_Default/admin_title_bg_hide.gif
.gif
YUTK1/images/Admin_Default/admin_title_bg_quit.gif
.gif
YUTK1/images/Admin_Default/admin_title_bg_show.gif
.gif
YUTK1/images/Admin_Default/admin_top_bg.gif
.gif
YUTK1/images/Admin_Default/admin_top_icon_1.gif
.gif
YUTK1/images/Admin_Default/admin_top_icon_2.gif
.gif
YUTK1/images/Admin_Default/admin_top_icon_3.gif
.gif
YUTK1/images/Admin_Default/admin_top_icon_4.gif
.gif
YUTK1/images/Admin_Default/admin_top_icon_5.gif
.gif
YUTK1/images/Admin_Default/admin_topic.gif
.gif
YUTK1/images/Admin_Default/admin_www.gif
.gif
YUTK1/images/Admin_Default/article_nopass.gif
.gif
YUTK1/images/Admin_Default/article_pass.gif
.gif
YUTK1/images/Admin_Default/lframe_t.gif
.gif
YUTK1/images/Admin_Default/lock.gif
.gif
YUTK1/images/PeoPle_female.gif
.gif
YUTK1/images/PeoPle_male.gif
.gif
YUTK1/images/calendar.gif
.gif
YUTK1/images/logo.gif
.gif
YUTK1/images/more.gif
.gif
YUTK1/images/shuqian.png
.png
YUTK1/images/vip.gif
.gif
YUTK1/images/waiting.gif
.gif
YUTK1/love.htm
.html .js polyglot
YUTK1/proxy/cache.txt
YUTK1/proxy/index.php
.ps1
YUTK1/proxy/list.php
YUTK1/proxy/readme.txt
YUTK1/tv.htm
.html .js polyglot
YUTK1/web.config
.xml
YUTK1/新云软件.url
.url

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.textxc Size: 104KB - Virtual size: 102KB

.idata Size: 4KB - Virtual size: 86B

.reloc Size: 4KB - Virtual size: 12B

.rsrc Size: 4KB - Virtual size: 676B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.textxc Size: 20KB - Virtual size: 19KB

.idata Size: 512B - Virtual size: 86B

.reloc Size: 512B - Virtual size: 12B

.rsrc Size: 1024B - Virtual size: 708B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.textxc Size: 68KB - Virtual size: 66KB

.idata Size: 4KB - Virtual size: 86B

.reloc Size: 4KB - Virtual size: 12B

.rsrc Size: 4KB - Virtual size: 708B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.textxc Size: 20KB - Virtual size: 16KB

.idata Size: 4KB - Virtual size: 86B

.reloc Size: 4KB - Virtual size: 12B

.rsrc Size: 4KB - Virtual size: 708B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.textxc Size: 9KB - Virtual size: 9KB

.idata Size: 512B - Virtual size: 86B

.reloc Size: 512B - Virtual size: 12B

.rsrc Size: 1024B - Virtual size: 708B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.textxc Size: 428KB - Virtual size: 425KB

.idata Size: 4KB - Virtual size: 86B

.reloc Size: 4KB - Virtual size: 12B

.rsrc Size: 4KB - Virtual size: 708B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 704B

.textxc
Size: 104KB - Virtual size: 102KB

.idata
Size: 4KB - Virtual size: 86B

.reloc
Size: 4KB - Virtual size: 12B

.rsrc
Size: 4KB - Virtual size: 676B

.textxc
Size: 20KB - Virtual size: 19KB

.idata
Size: 512B - Virtual size: 86B

.reloc
Size: 512B - Virtual size: 12B

.rsrc
Size: 1024B - Virtual size: 708B

.textxc
Size: 68KB - Virtual size: 66KB

.idata
Size: 4KB - Virtual size: 86B

.reloc
Size: 4KB - Virtual size: 12B

.rsrc
Size: 4KB - Virtual size: 708B

.textxc
Size: 20KB - Virtual size: 16KB

.idata
Size: 4KB - Virtual size: 86B

.reloc
Size: 4KB - Virtual size: 12B

.rsrc
Size: 4KB - Virtual size: 708B

.textxc
Size: 9KB - Virtual size: 9KB

.idata
Size: 512B - Virtual size: 86B

.reloc
Size: 512B - Virtual size: 12B

.rsrc
Size: 1024B - Virtual size: 708B

.textxc
Size: 428KB - Virtual size: 425KB

.idata
Size: 4KB - Virtual size: 86B

.reloc
Size: 4KB - Virtual size: 12B

.rsrc
Size: 4KB - Virtual size: 708B

.text
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 704B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 1024B

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 1024B - Virtual size: 800B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 8KB - Virtual size: 6KB

.rsrc
Size: 4KB - Virtual size: 880B

.reloc
Size: 4KB - Virtual size: 12B

.text
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 1016B

.reloc
Size: 4KB - Virtual size: 12B