b4901f5946fffb96a6e62b3d82e1df572fa33d05d618bfb018c4c43ba3d9484c

Sharing

Copy URL Twitter E-mail

General

Target

b4901f5946fffb96a6e62b3d82e1df572fa33d05d618bfb018c4c43ba3d9484c
Size

1.4MB
MD5

5012a68ba366eeb2ace9263180add283
SHA1

8d046ed88f6cdd14882473dcf9a5dc4108fe3fc9
SHA256

b4901f5946fffb96a6e62b3d82e1df572fa33d05d618bfb018c4c43ba3d9484c
SHA512

9a5f9beffcc8b8077a59df7ca4c492d83409c554d8ca6baf57c24e5c3c5b8c554a10e91d362977d6fdde90cbcefef5850ec02f0e56b654818138b46ad82f79ad
SSDEEP

12288:WLVx2RAloNrlpVusl+7dCnrOznaGp7+VSs/lFE7qS2ecu:W5cRZNrlpIslQCnCmiT

Score

N/A

Malware Config

Signatures

Files

b4901f5946fffb96a6e62b3d82e1df572fa33d05d618bfb018c4c43ba3d9484c
.dll windows x86

869f31aa960dbaf3fbb53ba187d7e368

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

i18nutilmsc

?gethalf2fullTable@widthfolding@i18n@star@sun@com@@SAAAVoneToOneMapping@2345@XZ
?gethalf2fullTableForJIS@widthfolding@i18n@star@sun@com@@SAAAVoneToOneMapping@2345@XZ
?gethalfKana2fullKanaTable@widthfolding@i18n@star@sun@com@@SAAAVoneToOneMapping@2345@XZ
?compose_ja_voiced_sound_marks@widthfolding@i18n@star@sun@com@@SA?AVOUString@rtl@@ABV67@JJAAV?$Sequence@J@uno@345@EJ@Z
?getfull2halfTable@widthfolding@i18n@star@sun@com@@SAAAVoneToOneMapping@2345@XZ
?getfull2halfTableForASC@widthfolding@i18n@star@sun@com@@SAAAVoneToOneMapping@2345@XZ
?getfullKana2halfKanaTable@widthfolding@i18n@star@sun@com@@SAAAVoneToOneMapping@2345@XZ
?decompose_ja_voiced_sound_marksChar2Char@widthfolding@i18n@star@sun@com@@SAGG@Z
?decompose_ja_voiced_sound_marks@widthfolding@i18n@star@sun@com@@SA?AVOUString@rtl@@ABV67@JJAAV?$Sequence@J@uno@345@E@Z
?getNextChar@casefolding@i18n@star@sun@com@@SAGPBGAAJJAAUMappingElement@2345@AAULocale@lang@345@EW4TransliterationModules@2345@@Z
?getValue@casefolding@i18n@star@sun@com@@SAAAUMapping@2345@PBGJJAAULocale@lang@345@E@Z
??0oneToOneMapping@i18n@star@sun@com@@QAE@PAU?$pair@GG@_STL@@II@Z
?isWhiteSpace@unicode@@SAEG@Z
?getUnicodeScriptEnd@unicode@@SAGW4UnicodeScript@i18n@star@sun@com@@@Z
?getUnicodeScriptStart@unicode@@SAGW4UnicodeScript@i18n@star@sun@com@@@Z
??1oneToOneMapping@i18n@star@sun@com@@UAE@XZ
?getUnicodeDirection@unicode@@SAEG@Z
?getUnicodeScriptType@unicode@@SAFGPAU_ScriptTypeList@@F@Z
?getUnicodeType@unicode@@SAFG@Z

i18nisolang1msc

?getFallbackLocale@MsLangId@@SA?AULocale@lang@star@sun@com@@ABU23456@@Z

comphelp4msc

?getProcessServiceFactory@comphelper@@YA?AV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@XZ

cppuhelper3msc

?WeakImplHelper_getTypes@cppu@@YA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@PAUclass_data@1@@Z
?WeakImplHelper_query@cppu@@YA?AVAny@uno@star@sun@com@@ABVType@3456@PAUclass_data@1@PAXPAVOWeakObject@1@@Z
?createSingleFactory@cppu@@YA?AV?$Reference@VXSingleServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@3456@ABVOUString@rtl@@P6A?AV?$Reference@VXInterface@uno@star@sun@com@@@3456@0@ZABV?$Sequence@VOUString@rtl@@@3456@PAU_rtl_ModuleCount@@@Z
??0OWeakObject@cppu@@QAE@XZ
?release@OWeakObject@cppu@@UAAXXZ
?acquire@OWeakObject@cppu@@UAAXXZ
?queryAdapter@OWeakObject@cppu@@UAA?AV?$Reference@VXAdapter@uno@star@sun@com@@@uno@star@sun@com@@XZ
??1OWeakObject@cppu@@MAE@XZ
?ImplHelper_getImplementationId@cppu@@YA?AV?$Sequence@C@uno@star@sun@com@@PAUclass_data@1@@Z

cppu3

uno_type_any_construct
uno_any_construct
typelib_typedescriptionreference_acquire
typelib_typedescriptionreference_release
uno_type_assignData
uno_type_sequence_assign
uno_type_any_assign
uno_type_sequence_reference2One
uno_type_sequence_construct
uno_type_destructData
typelib_static_sequence_type_init
typelib_static_type_init
uno_any_destruct
typelib_static_type_getByTypeClass
uno_type_sequence_realloc

sal3

rtl_math_uStringToDouble
rtl_uString_newReplaceStrAt
rtl_stringbuffer_insert
rtl_string_new_WithLength
rtl_string_release
rtl_uString2String
rtl_ustr_valueOfInt32
rtl_uString_newToAsciiLowerCase
osl_loadModuleRelative
rtl_uStringbuffer_ensureCapacity
osl_getFunctionSymbol
osl_unloadModule
osl_destroyMutex
osl_createMutex
rtl_ustr_toInt32
rtl_uString_getToken
rtl_uString_newConcat
rtl_uString_newFromStr
rtl_string2UString
rtl_str_getLength
rtl_ustr_getLength
rtl_uStringbuffer_insert_ascii
rtl_uStringbuffer_insert
rtl_uString_new_WithLength
rtl_ustr_indexOfStr_WithLength
rtl_ustr_indexOfChar_WithLength
rtl_ustr_asciil_reverseEquals_WithLength
rtl_ustr_reverseCompare_WithLength
rtl_uString_newFromStr_WithLength
rtl_uString_acquire
osl_incrementInterlockedCount
rtl_uString_iterateCodePoints
rtl_ustr_ascii_compare_WithLength
rtl_ustr_compare_WithLength
rtl_uString_newFromCodePoints
rtl_str_compare
osl_getGlobalMutex
osl_releaseMutex
osl_acquireMutex
rtl_freeMemory
rtl_allocateMemory
rtl_uString_newFromAscii
rtl_uString_assign
rtl_uString_release
rtl_uString_new

icuin40

?createInstance@Collator@icu_4_0@@SAPAV12@ABVLocale@2@AAW4UErrorCode@@@Z
??0RuleBasedCollator@icu_4_0@@QAE@PBEHPBV01@AAW4UErrorCode@@@Z
??0RuleBasedCollator@icu_4_0@@QAE@ABVUnicodeString@1@AAW4UErrorCode@@@Z
?getDynamicClassID@RuleBasedCollator@icu_4_0@@UBEPAXXZ
??8RuleBasedCollator@icu_4_0@@UBECABVCollator@1@@Z
??9RuleBasedCollator@icu_4_0@@UBECABVCollator@1@@Z
?clone@RuleBasedCollator@icu_4_0@@UBEPAVCollator@2@XZ
?compare@RuleBasedCollator@icu_4_0@@UBE?AW4UCollationResult@@PBGH0HAAW4UErrorCode@@@Z
?compare@RuleBasedCollator@icu_4_0@@UBE?AW4EComparisonResult@Collator@2@PBGH0H@Z
?compare@RuleBasedCollator@icu_4_0@@UBE?AW4UCollationResult@@ABVUnicodeString@2@0HAAW4UErrorCode@@@Z
?compare@RuleBasedCollator@icu_4_0@@UBE?AW4EComparisonResult@Collator@2@ABVUnicodeString@2@0H@Z
?compare@RuleBasedCollator@icu_4_0@@UBE?AW4UCollationResult@@ABVUnicodeString@2@0AAW4UErrorCode@@@Z
?compare@RuleBasedCollator@icu_4_0@@UBE?AW4EComparisonResult@Collator@2@ABVUnicodeString@2@0@Z
?getCollationKey@RuleBasedCollator@icu_4_0@@UBEAAVCollationKey@2@PBGHAAV32@AAW4UErrorCode@@@Z
?getCollationKey@RuleBasedCollator@icu_4_0@@UBEAAVCollationKey@2@ABVUnicodeString@2@AAV32@AAW4UErrorCode@@@Z
?hashCode@RuleBasedCollator@icu_4_0@@UBEHXZ
?getLocale@RuleBasedCollator@icu_4_0@@UBE?BVLocale@2@W4ULocDataLocaleType@@AAW4UErrorCode@@@Z
?getStrength@RuleBasedCollator@icu_4_0@@UBE?AW4ECollationStrength@Collator@2@XZ
?setStrength@RuleBasedCollator@icu_4_0@@UAEXW4ECollationStrength@Collator@2@@Z
?getVersion@RuleBasedCollator@icu_4_0@@UBEXQAE@Z
?setAttribute@RuleBasedCollator@icu_4_0@@UAEXW4UColAttribute@@W4UColAttributeValue@@AAW4UErrorCode@@@Z
?getAttribute@RuleBasedCollator@icu_4_0@@UAE?AW4UColAttributeValue@@W4UColAttribute@@AAW4UErrorCode@@@Z
?setVariableTop@RuleBasedCollator@icu_4_0@@UAEXIAAW4UErrorCode@@@Z
?setVariableTop@RuleBasedCollator@icu_4_0@@UAEIVUnicodeString@2@AAW4UErrorCode@@@Z
?setVariableTop@RuleBasedCollator@icu_4_0@@UAEIPBGHAAW4UErrorCode@@@Z
?getVariableTop@RuleBasedCollator@icu_4_0@@UBEIAAW4UErrorCode@@@Z
?getTailoredSet@RuleBasedCollator@icu_4_0@@UBEPAVUnicodeSet@2@AAW4UErrorCode@@@Z
?safeClone@RuleBasedCollator@icu_4_0@@UAEPAVCollator@2@XZ
?getSortKey@RuleBasedCollator@icu_4_0@@UBEHPBGHPAEH@Z
?getSortKey@RuleBasedCollator@icu_4_0@@UBEHABVUnicodeString@2@PAEH@Z
?setLocales@RuleBasedCollator@icu_4_0@@MAEXABVLocale@2@00@Z
?createCollationElementIterator@RuleBasedCollator@icu_4_0@@UBEPAVCollationElementIterator@2@ABVCharacterIterator@2@@Z
?createCollationElementIterator@RuleBasedCollator@icu_4_0@@UBEPAVCollationElementIterator@2@ABVUnicodeString@2@@Z
??1RuleBasedCollator@icu_4_0@@UAE@XZ
?getTimeInMillis@Calendar@icu_4_0@@IBENAAW4UErrorCode@@@Z
?setTimeInMillis@Calendar@icu_4_0@@IAEXNAAW4UErrorCode@@@Z
?getFirstDayOfWeek@Calendar@icu_4_0@@QBE?AW4EDaysOfWeek@12@XZ
?set@Calendar@icu_4_0@@QAEXW4UCalendarDateFields@@H@Z
?createInstance@Calendar@icu_4_0@@SAPAV12@ABVLocale@2@AAW4UErrorCode@@@Z
?setMinimalDaysInFirstWeek@Calendar@icu_4_0@@QAEXE@Z
?setFirstDayOfWeek@Calendar@icu_4_0@@QAEXW4UCalendarDaysOfWeek@@@Z
?get@Calendar@icu_4_0@@QBEHW4UCalendarDateFields@@AAW4UErrorCode@@@Z

icuuc40

??0UnicodeString@icu_4_0@@QAE@XZ
??1RuleBasedBreakIterator@icu_4_0@@UAE@XZ
??0RuleBasedBreakIterator@icu_4_0@@QAE@PAUUDataMemory@@AAW4UErrorCode@@@Z
?getDynamicClassID@RuleBasedBreakIterator@icu_4_0@@UBEPAXXZ
??8RuleBasedBreakIterator@icu_4_0@@UBECABVBreakIterator@1@@Z
?clone@RuleBasedBreakIterator@icu_4_0@@UBEPAVBreakIterator@2@XZ
?getText@RuleBasedBreakIterator@icu_4_0@@UBEAAVCharacterIterator@2@XZ
?getUText@RuleBasedBreakIterator@icu_4_0@@UBEPAUUText@@PAU3@AAW4UErrorCode@@@Z
?setText@RuleBasedBreakIterator@icu_4_0@@UAEXPAUUText@@AAW4UErrorCode@@@Z
?setText@RuleBasedBreakIterator@icu_4_0@@UAEXABVUnicodeString@2@@Z
?adoptText@RuleBasedBreakIterator@icu_4_0@@UAEXPAVCharacterIterator@2@@Z
?first@RuleBasedBreakIterator@icu_4_0@@UAEHXZ
?last@RuleBasedBreakIterator@icu_4_0@@UAEHXZ
?previous@RuleBasedBreakIterator@icu_4_0@@UAEHXZ
?next@RuleBasedBreakIterator@icu_4_0@@UAEHH@Z
?next@RuleBasedBreakIterator@icu_4_0@@UAEHXZ
?current@RuleBasedBreakIterator@icu_4_0@@UBEHXZ
?following@RuleBasedBreakIterator@icu_4_0@@UAEHH@Z
?preceding@RuleBasedBreakIterator@icu_4_0@@UAEHH@Z
?isBoundary@RuleBasedBreakIterator@icu_4_0@@UAECH@Z
?createBufferClone@RuleBasedBreakIterator@icu_4_0@@UAEPAVBreakIterator@2@PAXAAHAAW4UErrorCode@@@Z
?hashCode@RuleBasedBreakIterator@icu_4_0@@UBEHXZ
?getRules@RuleBasedBreakIterator@icu_4_0@@UBEABVUnicodeString@2@XZ
?getRuleStatus@RuleBasedBreakIterator@icu_4_0@@UBEHXZ
?getRuleStatusVec@RuleBasedBreakIterator@icu_4_0@@UAEHPAHHAAW4UErrorCode@@@Z
?getBinaryRules@RuleBasedBreakIterator@icu_4_0@@UAEPBEAAI@Z
?reset@RuleBasedBreakIterator@icu_4_0@@MAEXXZ
?setBreakType@RuleBasedBreakIterator@icu_4_0@@MAEXH@Z
??3UMemory@icu_4_0@@SAXPAX@Z
?compare@UnicodeString@icu_4_0@@QBECABV12@@Z
??4UnicodeString@icu_4_0@@QAEAAV01@ABV01@@Z
??0UnicodeString@icu_4_0@@QAE@PBGH@Z
?createCharacterInstance@BreakIterator@icu_4_0@@SAPAV12@ABVLocale@2@AAW4UErrorCode@@@Z
?createWordInstance@BreakIterator@icu_4_0@@SAPAV12@ABVLocale@2@AAW4UErrorCode@@@Z
?createSentenceInstance@BreakIterator@icu_4_0@@SAPAV12@ABVLocale@2@AAW4UErrorCode@@@Z
?createLineInstance@BreakIterator@icu_4_0@@SAPAV12@ABVLocale@2@AAW4UErrorCode@@@Z
udata_open_4_0
??2UMemory@icu_4_0@@SAPAXI@Z
udata_setAppData_4_0
??0UnicodeString@icu_4_0@@QAE@PBG@Z
u_charDirection_4_0
u_ispunct_4_0
??1UnicodeString@icu_4_0@@UAE@XZ
ublock_getCode_4_0
u_charType_4_0
u_isUWhiteSpace_4_0
u_isWhitespace_4_0
u_isalnum_4_0
??0Locale@icu_4_0@@QAE@PBD000@Z
??1Locale@icu_4_0@@UAE@XZ

msvcr90

sprintf
_CIsin
calloc
memset
memcpy
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
malloc
_adjust_fdiv
__CppXcptFilter
_unlock
??1exception@std@@UAE@XZ
_lock
_onexit
?terminate@@YAXXZ
__clean_type_info_names_internal
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
free
??2@YAPAXI@Z
??_V@YAXPAX@Z
??_U@YAPAXI@Z
memmove
_purecall
strstr
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
??3@YAXPAX@Z
?what@exception@std@@UBEPBDXZ
__CxxFrameHandler3
??0exception@std@@QAE@ABQBDH@Z
_amsg_exit
__dllonexit

kernel32

LoadLibraryA
GetProcAddress
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
SetUnhandledExceptionFilter

stlport_vc7145

?deallocate@?$__node_alloc@$00$0A@@_STL@@SAXPAXI@Z
?allocate@?$__node_alloc@$00$0A@@_STL@@SAPAXI@Z

Exports

Exports

GetVersionInfo
component_getFactory
component_getImplementationEnvironment
component_writeInfo

Sections

.text
Size: 258KB - Virtual size: 257KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 955KB - Virtual size: 954KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 26KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

869f31aa960dbaf3fbb53ba187d7e368

Headers

DLL Characteristics

File Characteristics

Imports

i18nutilmsc

i18nisolang1msc

comphelp4msc

cppuhelper3msc

cppu3

sal3

icuin40

icuuc40

msvcr90

kernel32

stlport_vc7145

Exports

Exports

Sections

.text Size: 258KB - Virtual size: 257KB

.rdata Size: 955KB - Virtual size: 954KB

.data Size: 26KB - Virtual size: 31KB

.rsrc Size: 100KB - Virtual size: 99KB

.reloc Size: 45KB - Virtual size: 44KB

.text
Size: 258KB - Virtual size: 257KB

.rdata
Size: 955KB - Virtual size: 954KB

.data
Size: 26KB - Virtual size: 31KB

.rsrc
Size: 100KB - Virtual size: 99KB

.reloc
Size: 45KB - Virtual size: 44KB