PHP Malware Analysis

codeigniter.htaccess

md5: 7f0b52009e0183e0f99f9592e6b1720e

Jump to: 

Screenshot
Attributes
Deobfuscated PHP code
<IfModule mod_rewrite.c>

 RewriteEngine on
 RewriteCond %{REQUEST_FILENAME} !-f
 RewriteCond %{REQUEST_FILENAME} !-d

 <IfModule mod_php5.c>
     RewriteRule ^(.*)$ index.php/$1 [L]
 </IfModule>

 <IfModule !mod_php5.c>
     RewriteRule ^(.*)$ index.php?/$1 [L]
 </IfModule>
 
</IfModule>
Execution traces
Generated HTML code
<html><head><meta name="color-scheme" content="light dark"></head><body><pre style="word-wrap: break-word; white-space: pre-wrap;">&lt;IfModule mod_rewrite.c&gt;

 RewriteEngine on
 RewriteCond %{REQUEST_FILENAME} !-f
 RewriteCond %{REQUEST_FILENAME} !-d

 &lt;IfModule mod_php5.c&gt;
     RewriteRule ^(.*)$ index.php/$1 [L]
 &lt;/IfModule&gt;

 &lt;IfModule !mod_php5.c&gt;
     RewriteRule ^(.*)$ index.php?/$1 [L]
 &lt;/IfModule&gt;
 
&lt;/IfModule&gt;</pre></body></html>
Original PHP code
<IfModule mod_rewrite.c>

 RewriteEngine on
 RewriteCond %{REQUEST_FILENAME} !-f
 RewriteCond %{REQUEST_FILENAME} !-d

 <IfModule mod_php5.c>
     RewriteRule ^(.*)$ index.php/$1 [L]
 </IfModule>

 <IfModule !mod_php5.c>
     RewriteRule ^(.*)$ index.php?/$1 [L]
 </IfModule>
 
</IfModule>