DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
General
-
Target
e1029e81f2323230d055b6967399c3a4_JaffaCakes118
-
Size
1.5MB
-
MD5
e1029e81f2323230d055b6967399c3a4
-
SHA1
2993e795a5ce356b056e3219c35fac253d869aff
-
SHA256
574e2df52cdd66e1fe88687939c65c4a0c0aeb7d9748a92b4cfd3db8d1ba2ac2
-
SHA512
25a06013c3c6f3af8d341ea9a41c7d318072d9e211acdc3484bc8787f9d093fffcab35d220e2f8ed9a02fe35622eb02c2ea6cf649091e1a18347441eb7e4816f
-
SSDEEP
24576:/lQThXQZEFG4GRm7phbG+tHZ/O2Lb8LwOnXZK2cXLoACXc9zHrYDn6dga2QmlFGo:/eThsEFGLRm7p9xH/8lJK26LoACMZsO+
Score
3/10
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
Files
-
e1029e81f2323230d055b6967399c3a4_JaffaCakes118
-
WEB_TEST/LQHM/URL/URL转发设置.txt
-
WEB_TEST/LQHM/URL/index.asp
-
WEB_TEST/LQHM/db/WinIISWeb.BAK
-
WEB_TEST/LQHM/dll/AspSocket.dll
c45ef89ebce38b95fe0ea447e826d866
Headers
Imports
Exports
Sections
-
WEB_TEST/LQHM/dll/CnMd5.dll
0f181a164690ec3ca8b2428df90333b1
Headers
Imports
Exports
Sections
-
WEB_TEST/LQHM/dll/lqhm.dll
d9c025c20b4a55ded414e9c304633987
Headers
Imports
Exports
Sections
-
WEB_TEST/LQHM/dll/注册组件.bat
-
WEB_TEST/LQHM/index.asp
-
WEB_TEST/LQHM/newuserreg.asp
-
WEB_TEST/LQHM/user/Admin/MailCfg.asp
-
WEB_TEST/LQHM/user/Admin/config.asp
-
WEB_TEST/LQHM/user/Admin/menuClass_list.asp
-
WEB_TEST/LQHM/user/Admin/menu_list.asp
-
WEB_TEST/LQHM/user/Admin/opLog.asp
-
WEB_TEST/LQHM/user/Admin/productClass_list.asp
-
WEB_TEST/LQHM/user/Admin/product_list.asp
-
WEB_TEST/LQHM/user/Admin/product_list_bak.asp
-
WEB_TEST/LQHM/user/Admin/product_list_bak2.asp
-
WEB_TEST/LQHM/user/Images/4.JPG
-
WEB_TEST/LQHM/user/Images/Ad_Style.css
-
WEB_TEST/LQHM/user/Images/DELETE.gif
-
WEB_TEST/LQHM/user/Images/Icon_order.gif
-
WEB_TEST/LQHM/user/Images/ad_qqmenu_btn1.jpg
-
WEB_TEST/LQHM/user/Images/ad_qqmenu_btn2.jpg
-
WEB_TEST/LQHM/user/Images/ad_qqmenu_left.jpg
-
WEB_TEST/LQHM/user/Images/ad_qqmenu_leftbg.jpg
-
WEB_TEST/LQHM/user/Images/ad_qqmenu_top.jpg
-
WEB_TEST/LQHM/user/Images/admin_hide_left.gif
-
WEB_TEST/LQHM/user/Images/admin_home.gif
-
WEB_TEST/LQHM/user/Images/admin_main.gif
-
WEB_TEST/LQHM/user/Images/admin_show_left.gif
-
WEB_TEST/LQHM/user/Images/admin_top.jpg
-
WEB_TEST/LQHM/user/Images/admin_top_icon_1.gif
-
WEB_TEST/LQHM/user/Images/admin_top_icon_5.gif
-
WEB_TEST/LQHM/user/Images/cert.gif
-
WEB_TEST/LQHM/user/Images/dotdb.gif
-
WEB_TEST/LQHM/user/Images/icann.gif
-
WEB_TEST/LQHM/user/Images/icon_exit.gif
-
WEB_TEST/LQHM/user/Images/icon_fd.gif
-
WEB_TEST/LQHM/user/Images/icon_financialinfo.gif
-
WEB_TEST/LQHM/user/Images/icon_handle.gif
-
WEB_TEST/LQHM/user/Images/icon_setting.gif
-
WEB_TEST/LQHM/user/Images/icon_user.gif
-
WEB_TEST/LQHM/user/Images/icon_users.gif
-
WEB_TEST/LQHM/user/Images/lastnodeline.gif
-
WEB_TEST/LQHM/user/Images/line1.gif
-
WEB_TEST/LQHM/user/Images/logo.gif
-
WEB_TEST/LQHM/user/Images/logo2.gif
-
WEB_TEST/LQHM/user/Images/lqwl.gif
-
WEB_TEST/LQHM/user/Images/midclosedfolder.gif
-
WEB_TEST/LQHM/user/Images/midnodeline.gif
-
WEB_TEST/LQHM/user/Images/midopenedfolder.gif
-
WEB_TEST/LQHM/user/Images/topbar_bg.gif
-
WEB_TEST/LQHM/user/Images/topbg.gif
-
WEB_TEST/LQHM/user/Images/vertline.gif
-
WEB_TEST/LQHM/user/Inc/CONN.asp
-
WEB_TEST/LQHM/user/Inc/Check_Fun.asp
-
WEB_TEST/LQHM/user/Inc/Func2.asp
-
WEB_TEST/LQHM/user/Inc/Menufunction.js
-
WEB_TEST/LQHM/user/Inc/PopErr.asp
-
WEB_TEST/LQHM/user/Inc/bottom.asp
-
WEB_TEST/LQHM/user/Inc/bottom2.asp
-
WEB_TEST/LQHM/user/Inc/css.css
-
WEB_TEST/LQHM/user/Inc/func.asp
-
WEB_TEST/LQHM/user/Inc/head.asp
-
WEB_TEST/LQHM/user/Inc/head2.asp
-
WEB_TEST/LQHM/user/Inc/pcheck.js
-
WEB_TEST/LQHM/user/Index_new.asp
-
WEB_TEST/LQHM/user/Index_new_Left.asp
-
WEB_TEST/LQHM/user/Index_new_Top.asp
-
WEB_TEST/LQHM/user/MRP/Agent.asp
-
WEB_TEST/LQHM/user/MRP/Order.asp
-
WEB_TEST/LQHM/user/MRP/mFunDetail.asp
-
WEB_TEST/LQHM/user/MRP/mFunState.asp
-
WEB_TEST/LQHM/user/MRP/mFunState_bak.asp
-
WEB_TEST/LQHM/user/MRP/mOrder_list.asp
-
WEB_TEST/LQHM/user/MRP/mfund.asp
-
WEB_TEST/LQHM/user/MRP/muserlist.asp
-
WEB_TEST/LQHM/user/MRP/musermanage.asp
-
WEB_TEST/LQHM/user/Reg/Domain_check.asp
-
WEB_TEST/LQHM/user/Reg/RegAPI.asp
-
WEB_TEST/LQHM/user/Reg/apply.asp
-
WEB_TEST/LQHM/user/Reg/domainreg.asp
-
WEB_TEST/LQHM/user/Reg/domainreg2.asp
-
WEB_TEST/LQHM/user/Reg/domainreg3.asp
-
WEB_TEST/LQHM/user/Reg/domainreg4.asp
-
WEB_TEST/LQHM/user/Reg/dummyicp.asp
-
WEB_TEST/LQHM/user/Reg/fundinvoice.asp
-
WEB_TEST/LQHM/user/Reg/oneplusone.asp
-
WEB_TEST/LQHM/user/Reg/oneplusone2.asp
-
WEB_TEST/LQHM/user/Reg/oneplusone3.asp
-
WEB_TEST/LQHM/user/Reg/reg.asp
-
WEB_TEST/LQHM/user/Reg/reg_contactor_log.txt
-
WEB_TEST/LQHM/user/UserSelf/bankRet.asp
-
WEB_TEST/LQHM/user/UserSelf/banktransfer.asp
-
WEB_TEST/LQHM/user/UserSelf/banktransfer_check.asp
-
WEB_TEST/LQHM/user/UserSelf/banktransfer_submit.asp
-
WEB_TEST/LQHM/user/UserSelf/chinabank_receive.asp
-
WEB_TEST/LQHM/user/UserSelf/funddetail.asp
-
WEB_TEST/LQHM/user/UserSelf/getpassword.asp
-
WEB_TEST/LQHM/user/UserSelf/help.asp
-
WEB_TEST/LQHM/user/UserSelf/infoupdate.asp
-
WEB_TEST/LQHM/user/UserSelf/invoide_info.asp
-
WEB_TEST/LQHM/user/UserSelf/login.asp
-
WEB_TEST/LQHM/user/UserSelf/logout.asp
-
WEB_TEST/LQHM/user/UserSelf/newuserreg.asp
-
WEB_TEST/LQHM/user/UserSelf/newuserreg_in.asp
-
WEB_TEST/LQHM/user/UserSelf/passchange.asp
-
WEB_TEST/LQHM/user/UserSelf/teachsupport_in.asp
-
WEB_TEST/LQHM/user/UserSelf/techsupport.asp
-
WEB_TEST/LQHM/user/UserSelf/userinfo.asp
-
WEB_TEST/LQHM/user/UserSelf/userinform.asp
-
WEB_TEST/LQHM/user/getpassword.asp
-
WEB_TEST/LQHM/user/index.asp
-
WEB_TEST/LQHM/user/index_new_center.asp
-
WEB_TEST/LQHM/user/price.asp
-
WEB_TEST/LQHM/user/result.asp
-
WEB_TEST/LQHM/user/userlogin.asp
-
WEB_TEST/LQHM/user/usermenu.asp
-
WEB_TEST/LQHM/砺青主机管理系统使用说明.txt
-
WEB_TEST/WinIIS业务系统使用说明.txt
-
WEB_TEST/aboutus.asp
-
WEB_TEST/domain.asp
-
WEB_TEST/eof.asp
-
WEB_TEST/factor.asp
-
WEB_TEST/flash/banner2.swf
-
WEB_TEST/flash/lqwlbanner.swf
-
WEB_TEST/host.asp
-
WEB_TEST/images/00.gif
-
WEB_TEST/images/001.gif
-
WEB_TEST/images/01.gif
-
WEB_TEST/images/02.gif
-
WEB_TEST/images/03.gif
-
WEB_TEST/images/04.gif
-
WEB_TEST/images/05.gif
-
WEB_TEST/images/0_163.gif
-
WEB_TEST/images/0_baidu.gif
-
WEB_TEST/images/0_gh.gif
-
WEB_TEST/images/0_google.gif
-
WEB_TEST/images/0_jh.gif
-
WEB_TEST/images/0_nh.gif
-
WEB_TEST/images/0_sina.gif
-
WEB_TEST/images/0_zs.gif
-
WEB_TEST/images/1.gif
-
WEB_TEST/images/100029.jpg
-
WEB_TEST/images/12.gif
-
WEB_TEST/images/1_163.jpg
-
WEB_TEST/images/1_baidu.jpg
-
WEB_TEST/images/1_google.jpg
-
WEB_TEST/images/1_sina.jpg
-
WEB_TEST/images/1_sohu.jpg
-
WEB_TEST/images/1_yahoo.jpg
-
WEB_TEST/images/2.gif
-
WEB_TEST/images/NEXT.GIF
-
WEB_TEST/images/Thumbs.db
-
WEB_TEST/images/b_b.jpg
-
WEB_TEST/images/b_g.jpg
-
WEB_TEST/images/b_j.jpg
-
WEB_TEST/images/b_n.jpg
-
WEB_TEST/images/bg4.gif
-
WEB_TEST/images/bg5.gif
-
WEB_TEST/images/bg6.gif
-
WEB_TEST/images/bg8.gif
-
WEB_TEST/images/biao01.gif
-
WEB_TEST/images/biao02.gif
-
WEB_TEST/images/buy.jpg
-
WEB_TEST/images/buy01.jpg
-
WEB_TEST/images/buy02.jpg
-
WEB_TEST/images/c002_w.gif
-
WEB_TEST/images/c003_w.gif
-
WEB_TEST/images/c004_w.gif
-
WEB_TEST/images/ddd.gif
-
WEB_TEST/images/dom01.gif
-
WEB_TEST/images/dom01.jpg
-
WEB_TEST/images/dom02.gif
-
WEB_TEST/images/dom03.gif
-
WEB_TEST/images/dom04.gif
-
WEB_TEST/images/dom05.gif
-
WEB_TEST/images/dom06.gif
-
WEB_TEST/images/dom07.gif
-
WEB_TEST/images/dom08.gif
-
WEB_TEST/images/dom09.gif
-
WEB_TEST/images/emai0.jpg
-
WEB_TEST/images/email001.jpg
-
WEB_TEST/images/email002.jpg
-
WEB_TEST/images/email003.jpg
-
WEB_TEST/images/email004.jpg
-
WEB_TEST/images/email005.jpg
-
WEB_TEST/images/email01.jpg
-
WEB_TEST/images/email02.jpg
-
WEB_TEST/images/email03.jpg
-
WEB_TEST/images/email04.jpg
-
WEB_TEST/images/email05.jpg
-
WEB_TEST/images/f01.gif
-
WEB_TEST/images/f02.gif
-
WEB_TEST/images/host01.jpg
-
WEB_TEST/images/host02.jpg
-
WEB_TEST/images/host03.jpg
-
WEB_TEST/images/host04.jpg
-
WEB_TEST/images/host05.jpg
-
WEB_TEST/images/host06.jpg
-
WEB_TEST/images/host07.jpg
-
WEB_TEST/images/host08.jpg
-
WEB_TEST/images/hostt01.gif
-
WEB_TEST/images/hostt02.gif
-
WEB_TEST/images/hostt03.gif
-
WEB_TEST/images/hostt04.gif
-
WEB_TEST/images/imail.gif
-
WEB_TEST/images/li01.jpg
-
WEB_TEST/images/li02.jpg
-
WEB_TEST/images/li03.jpg
-
WEB_TEST/images/li04.jpg
-
WEB_TEST/images/li05.jpg
-
WEB_TEST/images/li06.jpg
-
WEB_TEST/images/li07.jpg
-
WEB_TEST/images/liu01.gif
-
WEB_TEST/images/liu02.gif
-
WEB_TEST/images/liu03.gif
-
WEB_TEST/images/liu04.gif
-
WEB_TEST/images/liu05.gif
-
WEB_TEST/images/liu06.gif
-
WEB_TEST/images/liu07.gif
-
WEB_TEST/images/liu08.gif
-
WEB_TEST/images/liu09.gif
-
WEB_TEST/images/liu10.gif
-
WEB_TEST/images/lqwl.gif
-
WEB_TEST/images/lqwl01.gif
-
WEB_TEST/images/lqwl02.gif
-
WEB_TEST/images/lqwl03.gif
-
WEB_TEST/images/lqwl04.gif
-
WEB_TEST/images/lqwl05.gif
-
WEB_TEST/images/lqwl06.gif
-
WEB_TEST/images/lqwl07.gif
-
WEB_TEST/images/lqwl08.gif
-
WEB_TEST/images/lqwl09.gif
-
WEB_TEST/images/lqwlbanner.swf
-
WEB_TEST/images/lqwlcenter01.gif
-
WEB_TEST/images/lqwlcenter02.gif
-
WEB_TEST/images/lqwlcenter03.gif
-
WEB_TEST/images/lqwlcenter04.gif
-
WEB_TEST/images/lqwlcenter05.gif
-
WEB_TEST/images/lqwlcenter06.gif
-
WEB_TEST/images/lqwlcenter07.gif
-
WEB_TEST/images/lqwlcenter08.gif
-
WEB_TEST/images/lqwlcenter09.gif
-
WEB_TEST/images/lqwlcenter10.gif
-
WEB_TEST/images/lqwlcenter11.gif
-
WEB_TEST/images/lqwlcenter12.gif
-
WEB_TEST/images/lqwlcenter13.gif
-
WEB_TEST/images/lqwlleft02.gif
-
WEB_TEST/images/lqwlleft03.gif
-
WEB_TEST/images/lwqlleft01.gif
-
WEB_TEST/images/mail.jpg
-
WEB_TEST/images/mail01.gif
-
WEB_TEST/images/mail02.gif
-
WEB_TEST/images/mail03.gif
-
WEB_TEST/images/mail04.gif
-
WEB_TEST/images/mail05.gif
-
WEB_TEST/images/mail06.gif
-
WEB_TEST/images/mailbuy.jpg
-
WEB_TEST/images/ok.jpg
-
WEB_TEST/images/ren01.jpg
-
WEB_TEST/images/ren02.jpg
-
WEB_TEST/images/searchdomain.gif
-
WEB_TEST/images/ser01.gif
-
WEB_TEST/images/ser02.gif
-
WEB_TEST/images/ser03.gif
-
WEB_TEST/images/ser04.gif
-
WEB_TEST/images/server01.jpg
-
WEB_TEST/images/server02.jpg
-
WEB_TEST/images/server03.jpg
-
WEB_TEST/images/server04.jpg
-
WEB_TEST/images/server05.jpg
-
WEB_TEST/images/spacer.gif
-
WEB_TEST/images/tr2.gif
-
WEB_TEST/images/tr3.gif
-
WEB_TEST/images/tr4.gif
-
WEB_TEST/images/tr5.gif
-
WEB_TEST/images/tu01.jpg
-
WEB_TEST/images/tu02.jpg
-
WEB_TEST/images/tu03.jpg
-
WEB_TEST/images/tu04.jpg
-
WEB_TEST/images/tu05.jpg
-
WEB_TEST/images/tu06.jpg
-
WEB_TEST/images/tu07.jpg
-
WEB_TEST/images/tu08.jpg
-
WEB_TEST/images/tu09.jpg
-
WEB_TEST/images/tu10.jpg
-
WEB_TEST/images/tu11.jpg
-
WEB_TEST/images/tu12.jpg
-
WEB_TEST/images/tu13.jpg
-
WEB_TEST/images/tu15.jpg
-
WEB_TEST/images/vlan.gif
-
WEB_TEST/images/web00.gif
-
WEB_TEST/images/web01.jpg
-
WEB_TEST/images/web02.jpg
-
WEB_TEST/images/web03.jpg
-
WEB_TEST/images/web04.jpg
-
WEB_TEST/images/web06.jpg
-
WEB_TEST/images/webp01.gif
-
WEB_TEST/images/webp02.gif
-
WEB_TEST/images/webp03.gif
-
WEB_TEST/images/webp04.gif
-
WEB_TEST/images/webp05.gif
-
WEB_TEST/images/wo.css
-
WEB_TEST/images/wo1.css
-
WEB_TEST/index.asp
-
WEB_TEST/left.asp
-
WEB_TEST/login.lbi
-
WEB_TEST/main.css
-
WEB_TEST/map.asp
-
WEB_TEST/payway.asp
-
WEB_TEST/support.asp
-
WEB_TEST/top.asp
-
WEB_TEST/下载说明.htm
-
WEB_TEST/测试版使用说明.txt