66b9af54aeebbe73348302f0ee4069cf37afe6f859525fefdaf158d56ffba25e

Sharing

Copy URL

Twitter E-mail

General

Target

66b9af54aeebbe73348302f0ee4069cf37afe6f859525fefdaf158d56ffba25e
Size

600KB
MD5

62b8f8ce549584f1a49b4fbad4d3ce00
SHA1

8ab1b24b34a84d70623080de4daa393aab538bf2
SHA256

66b9af54aeebbe73348302f0ee4069cf37afe6f859525fefdaf158d56ffba25e
SHA512

3ddb7fbd9acabb33b8f0c3820290a295d25cae63be3f15e1415a62b5537cc4c1bce6d82b90163c38509d5198fae9ca22adfb356df5465548389e6f7b73af6152
SSDEEP

12288:DN5Lni72+F+/SvQsGHczF9gaL122xXTXP37vFzbH0nCGtNJvmImuWN:742+JYsVz7wtNFWuu

Score

N/A

Malware Config

Signatures

Files

66b9af54aeebbe73348302f0ee4069cf37afe6f859525fefdaf158d56ffba25e
.dll windows x86

7d71c6c0e7f7ff35f8bf407db583f9ac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcp71

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGD@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@E@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setiosflags@std@@YA?AU?$_Smanip@H@1@H@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?classic@locale@std@@SAABV12@XZ
?_Nomemory@std@@YAXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?max_size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?is@?$ctype@G@std@@QBE_NFG@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??1locale@std@@QAE@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?clear@ios_base@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?id@?$ctype@G@std@@2V0locale@2@A
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@@Z
??0_Lockit@std@@QAE@H@Z
?id@?$ctype@D@std@@2V0locale@2@A
??Bid@locale@std@@QAEIXZ
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@@Z
?_Incref@facet@locale@std@@QAEXXZ
?_Register@facet@locale@std@@QAEXXZ
??1_Lockit@std@@QAE@XZ
?_Lock@_Mutex@std@@QAEXXZ
?_Unlock@_Mutex@std@@QAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ

msvcr71

__CppXcptFilter
_adjust_fdiv
_initterm
?terminate@@YAXXZ
_onexit
__dllonexit
__security_error_handler
??1type_info@@UAE@XZ
_callnewh
gmtime
mktime
_getmbcp
wcscpy
_except_handler3
_resetstkoflw
free
malloc
sprintf
isprint
_tzset
_daylight
div
srand
rand
strcmp
memcmp
strncpy
_purecall
strncmp
??0bad_cast@@QAE@PBD@Z
??1bad_cast@@UAE@XZ
??0bad_cast@@QAE@ABV0@@Z
_vsnprintf
time
localtime
strftime
fprintf
fflush
strcpy
strcat
fopen
fclose
_mbsnbcpy
memcpy
??_V@YAXPAX@Z
memset
memmove
_CxxThrowException
??0exception@@QAE@ABV0@@Z
??3@YAXPAX@Z
__CxxFrameHandler
??0exception@@QAE@XZ
??1exception@@UAE@XZ
strlen
_timezone
realloc

mfc71

ord1187
ord1191

kernel32

DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetModuleFileNameA
SetLastError
WideCharToMultiByte
GetLastError
MultiByteToWideChar
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
GetVersion
lstrcmpiA
lstrlenW
lstrcmpiW
lstrlenA
CreateSemaphoreA
CloseHandle
WaitForSingleObject
ReleaseSemaphore
CreateMutexA
ReleaseMutex
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventA
SetEvent
ResetEvent
CompareStringA
CompareStringW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetStringTypeExA
GetStringTypeExW
GlobalMemoryStatus
Sleep
GetSystemDefaultLangID
LocalFree
FormatMessageA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetTickCount
LocalFileTimeToFileTime
SystemTimeToFileTime
ExitProcess
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
RaiseException

user32

UnregisterClassA
CharUpperW
CharUpperA
CharLowerA
CharLowerW

oleaut32

SysFreeString

Exports

Exports

??0?$CExtensionCollector@VINeroMediumDriver@@VINeroFileSystemMediumExtension@@W4NeroFSExtensionsType@@@@QAE@ABV0@@Z
??0?$CExtensionCollector@VINeroMediumDriver@@VINeroFileSystemMediumExtension@@W4NeroFSExtensionsType@@@@QAE@XZ
??0CNeroFileSystemString@@QAE@ABV0@@Z
??0CNeroFileSystemString@@QAE@PBD@Z
??0CNeroFileSystemString@@QAE@PBG@Z
??0CNeroFileSystemString@@QAE@XZ
??0CStateSubject@@IAE@XZ
??0CStateSubject@@QAE@ABV0@@Z
??0CUDFFileSystemDriver@@QAE@ABV0@@Z
??0CUDFFileSystemDriver@@QAE@PAVINeroFileSystemBlockAccess@@H@Z
??0MountRainierBlockReadWriter@@QAE@ABV0@@Z
??0MountRainierBlockReadWriter@@QAE@PAVINeroFileSystemBlockAccess@@H@Z
??0MountRainierBlockReadWriter@@QAE@PAVINeroFileSystemBlockReader@@H@Z
??0StateContainer@@QAE@ABV0@@Z
??0StateContainer@@QAE@XZ
??0UDFState@@QAE@ABV0@@Z
??0UDFState@@QAE@XZ
??0UDFStateHandler@@QAE@ABV0@@Z
??0UDFStateHandler@@QAE@XZ
??0UDF_FSReader@@IAE@PAVINeroFileSystemBlockAccess@@HPAVVDSContainer@@@Z
??0UDF_FSReader@@QAE@ABV0@@Z
??1?$CExtensionCollector@VINeroMediumDriver@@VINeroFileSystemMediumExtension@@W4NeroFSExtensionsType@@@@UAE@XZ
??1CNeroFileSystemString@@UAE@XZ
??1CStateSubject@@UAE@XZ
??1CUDFFileSystemDriver@@UAE@XZ
??1MountRainierBlockReadWriter@@UAE@XZ
??1StateContainer@@UAE@XZ
??1UDFState@@UAE@XZ
??1UDFStateHandler@@QAE@XZ
??1UDF_FSReader@@IAE@XZ
??4?$CExtensionCollector@VINeroMediumDriver@@VINeroFileSystemMediumExtension@@W4NeroFSExtensionsType@@@@QAEAAV0@ABV0@@Z
??4CNeroFileSystemString@@QAEAAV0@ABV0@@Z
??4CStateSubject@@QAEAAV0@ABV0@@Z
??4CUDFFileSystemDriver@@QAEAAV0@ABV0@@Z
??4MountRainierBlockReadWriter@@QAEAAV0@ABV0@@Z
??4StateContainer@@QAEAAV0@ABV0@@Z
??4UDFState@@QAEAAV0@ABV0@@Z
??4UDFStateHandler@@QAEAAV0@ABV0@@Z
??4UDF_FSReader@@QAEAAV0@ABV0@@Z
??_7?$CExtensionCollector@VINeroMediumDriver@@VINeroFileSystemMediumExtension@@W4NeroFSExtensionsType@@@@6B@
??_7CNeroFileSystemString@@6B@
??_7CStateSubject@@6B@
??_7CUDFFileSystemDriver@@6B?$CExtensionCollector@VINeroMediumDriver@@VINeroFileSystemMediumExtension@@W4NeroFSExtensionsType@@@@@
??_7CUDFFileSystemDriver@@6BISwitchSessionNotificationSink@@@
??_7MountRainierBlockReadWriter@@6B@
??_7StateContainer@@6B@
??_7UDFState@@6B@
?AddBool@StateContainer@@UAEXPBDH@Z
?AddByte@StateContainer@@UAEXPBDE@Z
?AddData@StateContainer@@UAEXPBDIPAXI@Z
?AddExtension@?$CExtensionCollector@VINeroMediumDriver@@VINeroFileSystemMediumExtension@@W4NeroFSExtensionsType@@@@QAEXPAVINeroFileSystemMediumExtension@@@Z
?AddInt64@StateContainer@@UAEXPBD_J@Z
?AddPointer@StateContainer@@UAEXPBDPAX@Z
?AddString@StateContainer@@UAEXPBDABVINeroFileSystemString@@@Z
?AddUint16@StateContainer@@UAEXPBDG@Z
?AddUint32@StateContainer@@UAEXPBDI@Z
?Attach@CStateSubject@@UAEXPAVIStateObserver@@@Z
?ByteSwap2352@@YAXPAE@Z
?CalcLogicalBlock@UDF_FSReader@@QAE?AW4NeroFSError@@_JAAIAAG@Z
?CalcSubChannelCRC@@YAGPBEK@Z
?CheckECCAndEDC_Mode1@@YAHQAEH@Z
?CheckECCAndEDC_Mode2Form1@@YAHQAEH@Z
?CheckECCAndEDC_Mode2Form1_2336@@YAHQAEH@Z
?CheckECCAndEDC_Mode2Form2@@YAHQAEH@Z
?CheckECCAndEDC_Mode2Form2_2336@@YAHQAEH@Z
?CheckVATFileEntry@UDF_FSReader@@QAEHPAVCUDF_BasicFileEntry@UDFImporterLowlevelStructures@@@Z
?ClearPercent@UDFStateHandler@@QAEXXZ
?Convert2kToMode2Form1@@YAHQBEQAEIPBE@Z
?Convert2kToMode2Form1With2332@@YAHQBEQAEPBE@Z
?Convert2kToMode2Form1With2336@@YAHQBEQAEPBE@Z
?ConvertMode2_2336_to_2352@@YAHQAEPBUSectHeaderMSF@@0@Z
?ConvertPackedToRawSubChannel@@YAXPAE00H@Z
?ConvertToHex@StateContainer@@IAEXPADHAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?CreateWriteBuffers@UDF_FSReader@@QAE?AW4NeroFSError@@PAE_JABV?$vector@_JV?$allocator@_J@std@@@std@@AAV?$vector@UUDF_SectorWriteBuffer@@V?$allocator@UUDF_SectorWriteBuffer@@@std@@@4@@Z
?DeInitialize@CUDFFileSystemDriver@@IAEXXZ
?DestroyInstance@UDFStateHandler@@SAXXZ
?DestroyInstance@UDF_FSReader@@SAXPAV1@@Z
?Detach@CStateSubject@@UAEXPAVIStateObserver@@@Z
?DetachINode@UDF_FSReader@@QAEXPAVINode@@@Z
?DisableUpdate@UDFStateHandler@@QAEXXZ
?DumpDescriptor@UDF_FSReader@@QAEHAAUUDF_SectorWriteBuffer@@PAVCUDF_DescriptorTag@UDFImporterLowlevelStructures@@@Z
?EnableUpdate@UDFStateHandler@@QAEXXZ
?ExtractPQDataFromRaw@@YAHPAUQDATAtag@@PAE@Z
?FindData@StateContainer@@IAEHPBDAAViterator@?$vector@Ustatedata@@V?$allocator@Ustatedata@@@std@@@std@@@Z
?FindVATFileEntry@UDF_FSReader@@AAEPAVCUDF_BasicFileEntry@UDFImporterLowlevelStructures@@_J@Z
?FlushSectorCache@MountRainierBlockReadWriter@@UAEXXZ
?GenECCAndEDC_Mode1@@YAHQBEPBUSectHeaderMSF@@QAE@Z
?GenECCAndEDC_Mode2Form1@@YAHQBEPBUSectHeaderMSF@@0QAE@Z
?GenECCAndEDC_Mode2Form2@@YAHQBEPBUSectHeaderMSF@@0QAE@Z
?GenEDC@@YAHPAEKPAV?$LittleEndian@K@@@Z
?GenEmptyAudio96Sector@@YAXPAEHEKH@Z
?GenRawEmptySector@@YAHQAEW4TRACKMODE@@KH@Z
?GetAVDP@CUDFFileSystemDriver@@IAEHXZ
?GetBlockReader@UDF_FSReader@@QAEPAVINeroFileSystemBlockAccess@@XZ
?GetBlockWriterType@MountRainierBlockReadWriter@@UAE?AW4InterfaceType@@XZ
?GetBool@StateContainer@@UAEHPBDAAH@Z
?GetBufferMode@UDF_FSReader@@QAEHXZ
?GetByte@StateContainer@@UAEHPBDAAE@Z
?GetCD_CRCTable@@YAPBKXZ
?GetData@StateContainer@@UAEHPBDIAAPAXAAI@Z
?GetExtendedSectorAllocator@UDF_FSReader@@QAEPAVSectorAllocator@@XZ
?GetFileEntryFileData@UDF_FSReader@@QAE?AW4NeroFSError@@PAVCUDF_BasicFileEntry@UDFImporterLowlevelStructures@@AAPAEAA_J@Z
?GetFileEntrySectorList@UDF_FSReader@@QAE?AW4NeroFSError@@PAVCUDF_BasicFileEntry@UDFImporterLowlevelStructures@@AAV?$vector@_JV?$allocator@_J@std@@@std@@PAVUDF_Allocator@@@Z
?GetFileExtension@?$CExtensionCollector@VINeroMediumDriver@@VINeroFileSystemMediumExtension@@W4NeroFSExtensionsType@@@@UAEPAVINeroFileSystemMediumExtension@@W4NeroFSExtensionsType@@@Z
?GetFileExtension@MountRainierBlockReadWriter@@UAEPAVINeroFileSystemBlockAccessExtension@@W4NeroFSBlockAccessExtensionsType@@@Z
?GetFileExtensionByNumber@?$CExtensionCollector@VINeroMediumDriver@@VINeroFileSystemMediumExtension@@W4NeroFSExtensionsType@@@@UAEPAVINeroFileSystemMediumExtension@@H@Z
?GetFileExtensionByNumber@MountRainierBlockReadWriter@@UAEPAVINeroFileSystemBlockAccessExtension@@H@Z
?GetFileSystemPreferences@UDF_FSReader@@QAEPAVFileSystemPreferences@@XZ
?GetINode@UDF_FSReader@@QAEPAVINode@@PAVCUDF_BasicFileEntry@UDFImporterLowlevelStructures@@@Z
?GetINodeMap@UDF_FSReader@@QAEPAVINodeMap@@XZ
?GetInt64@StateContainer@@UAEHPBDAA_J@Z
?GetLogicalBlockSize@UDF_FSReader@@QBE_JXZ
?GetLongAllocDescTranslation@UDF_FSReader@@QAE_JABUUDF_LONG_ALLOCATION_DESCRIPTOR@UDFImporterLowlevelStructures@@IAA_J@Z
?GetLongAllocDescTranslationCount@UDF_FSReader@@QAEIABUUDF_LONG_ALLOCATION_DESCRIPTOR@UDFImporterLowlevelStructures@@@Z
?GetMetadataBitmapFileEntry@UDF_FSReader@@QAE?AW4NeroFSError@@AAPAVCUDF_BasicFileEntry@UDFImporterLowlevelStructures@@@Z
?GetMetadataFileEntry@UDF_FSReader@@QAEPAVCUDF_BasicFileEntry@UDFImporterLowlevelStructures@@XZ
?GetMetadataFreeSpace@UDF_FSReader@@QAE?AW4NeroFSError@@GAAI@Z
?GetMetadataMirrorFileEntry@UDF_FSReader@@QAEPAVCUDF_BasicFileEntry@UDFImporterLowlevelStructures@@XZ
?GetMetadataMirrorSector@UDF_FSReader@@QAE?AW4NeroFSError@@_JAA_J@Z
?GetMetadataPartitionBitmap@UDF_FSReader@@QAE?AW4NeroFSError@@AAPAVCUDF_SpaceBitmapDescriptor@UDFImporterLowlevelStructures@@@Z
?GetMetadataPartitionFileEntry@UDF_FSReader@@QAE?AW4NeroFSError@@IGAAPAVCUDF_BasicFileEntry@UDFImporterLowlevelStructures@@@Z
?GetMetadataPartitionMap@UDF_FSReader@@QAEXAAPBVCUDF_Type2MetaDataPartitionMap@UDFImporterLowlevelStructures@@@Z
?GetMetadataPartitionNumber@UDF_FSReader@@QBEHXZ
?GetMetadataPartitionReference@UDF_FSReader@@QBEHAAG@Z
?GetMetadataSize@UDF_FSReader@@QAE?AW4NeroFSError@@GAAI@Z
?GetNASManager@UDF_FSReader@@QAEPAVNonAllocatableSpaceManager@@XZ
?GetNumPartitions@MountRainierBlockReadWriter@@UAEHXZ
?GetNumSupportedExtensions@?$CExtensionCollector@VINeroMediumDriver@@VINeroFileSystemMediumExtension@@W4NeroFSExtensionsType@@@@UAEKXZ
?GetNumSupportedExtensions@MountRainierBlockReadWriter@@UAEKXZ
?GetNumberOfVolumes@CUDFFileSystemDriver@@UAEHXZ
?GetPartitionForSector@MountRainierBlockReadWriter@@UAEABUNeroFSPartitionInfo@@_J@Z
?GetPartitionInfo@MountRainierBlockReadWriter@@UAEABUNeroFSPartitionInfo@@H@Z
?GetPartitionLastSec@UDF_FSReader@@QAE_JXZ
?GetPartitionStartSec@UDF_FSReader@@QAE_JXZ
?GetPartitionType@UDF_FSReader@@QAE?AW4UDF_PARTITION_TYPE@@H@Z
?GetPhysicalPartitionDescriptor@UDF_FSReader@@QAEPAVCUDF_PartitionDescriptor@UDFImporterLowlevelStructures@@XZ
?GetPhysicalPartitionDescriptorIndex@UDF_FSReader@@QBEHXZ
?GetPhysicalPartitionDescriptorReferenceNumber@UDF_FSReader@@QAEGXZ
?GetPointer@StateContainer@@UAEHPBDAAPAX@Z
?GetPreferredPartition@UDF_FSReader@@QBEGXZ
?GetSectorAllocator@UDF_FSReader@@QAEPAVISectorAllocator@@H@Z
?GetSparingTableManager@UDF_FSReader@@QAEPAVSparingTableManager@@XZ
?GetState@UDFState@@UAEXAAPAVIStateContainer@@@Z
?GetStateHandler@UDFStateHandler@@QAEPAVIStateHandler@@XZ
?GetString@StateContainer@@UAEHPBDAAVINeroFileSystemString@@@Z
?GetStringContent@CNeroFileSystemString@@UBEPBDXZ
?GetUDFRevision@UDF_FSReader@@QAEGXZ
?GetUint16@StateContainer@@UAEHPBDAAG@Z
?GetUint32@StateContainer@@UAEHPBDAAI@Z
?GetUniqueIdMappingStream@UDF_FSReader@@QAEPAVUniqueIdMappingStream@@XZ
?GetVAT@UDF_FSReader@@QAEPAVCUDF_BasicVAT@UDFImporterLowlevelStructures@@XZ
?GetVATFileEntry@UDF_FSReader@@QAEHAAPAVCUDF_BasicFileEntry@UDFImporterLowlevelStructures@@@Z
?GetVATFileEntryLocation@UDF_FSReader@@QAE_JXZ
?GetVolume@CUDFFileSystemDriver@@UAEPAVINeroFileSystemVolume@@H@Z
?GetVolumeDescriptorSequencePtr@UDF_FSReader@@QAEPAVVDSContainer@@XZ
?GetVolumeIntegrityManager@UDF_FSReader@@QAEPAVVolumeIntegrityManager@@XZ
?GetVolumeSpaceAllocator@UDF_FSReader@@QAEPAVVolumeSpaceAllocator@@XZ
?GetWideStringContent@CNeroFileSystemString@@UBEPBGXZ
?HasMetadataMirror@UDF_FSReader@@QBE_NXZ
?HasMetadataPartition@UDF_FSReader@@QBE_NXZ
?IdentifyTrack@@YA?AW4TrackModeType@@QBE@Z
?IdentifyTrackFor2336@@YA?AW4TrackModeType@@QBE@Z
?InitMetadataPartition@UDF_FSReader@@QAEHXZ
?InitWriteSupport@UDF_FSReader@@IAE?AW4NeroFSError@@XZ
?Initialize@CUDFFileSystemDriver@@IAEXXZ
?Initialize@MountRainierBlockReadWriter@@IAEHPAVINeroFileSystemBlockReader@@H@Z
?InitializeUDFRevision@UDF_FSReader@@AAEXXZ
?Instance@UDFStateHandler@@SAPAV1@XZ
?Instance@UDF_FSReader@@SAPAV1@PAVINeroFileSystemBlockAccess@@HPAVVDSContainer@@@Z
?LogicalBlock2Sector@UDF_FSReader@@QAE?AW4NeroFSError@@IH_JAA_J@Z
?MRWCheck@CUDFFileSystemDriver@@IAEHXZ
?MergePQ16WithRWRaw@@YAXPAE0PBE@Z
?NormalizeRawSector@@YAHPAEK@Z
?Notify@CStateSubject@@UAEXXZ
?NumSectorAllocators@UDF_FSReader@@QBEIXZ
?PrintToStream@StateContainer@@QAEXAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@@Z
?ReLoadStructures@CUDFFileSystemDriver@@UAEXXZ
?ReadDescriptor@UDF_FSReader@@QAE?AW4NeroFSError@@UUDF_EXTENDED_ALLOCATION_DESCRIPTOR@UDFImporterLowlevelStructures@@AAPAVCUDF_DescriptorTag@4@AAV?$vector@_JV?$allocator@_J@std@@@std@@AA_JG@Z
?ReadDescriptor@UDF_FSReader@@QAE?AW4NeroFSError@@UUDF_LONG_ALLOCATION_DESCRIPTOR@UDFImporterLowlevelStructures@@AAPAVCUDF_DescriptorTag@4@AAV?$vector@_JV?$allocator@_J@std@@@std@@AA_JG@Z
?ReadDescriptor@UDF_FSReader@@QAE?AW4NeroFSError@@UUDF_SHORT_ALLOCATION_DESCRIPTOR@@AAPAVCUDF_DescriptorTag@UDFImporterLowlevelStructures@@AAV?$vector@_JV?$allocator@_J@std@@@std@@AA_JG@Z
?ReadDescriptor@UDF_FSReader@@QAE?AW4NeroFSError@@UUDF_SHORT_ALLOCATION_DESCRIPTOR@@HAAPAVCUDF_DescriptorTag@UDFImporterLowlevelStructures@@AAV?$vector@_JV?$allocator@_J@std@@@std@@AA_JG@Z
?ReadLongAllocDesc@UDF_FSReader@@QAE?AW4NeroFSError@@ABUUDF_LONG_ALLOCATION_DESCRIPTOR@UDFImporterLowlevelStructures@@AAPAEAA_J@Z
?ReadSectors@UDF_FSReader@@QAE?AW4NeroFSError@@AAV?$vector@_JV?$allocator@_J@std@@@std@@AAPAEAA_J@Z
?ReadSectorsBuffered@MountRainierBlockReadWriter@@UAE?AW4NeroFSError@@PAX_J1AA_J@Z
?ReadSectorsUnBuffered@MountRainierBlockReadWriter@@UAE?AW4NeroFSError@@PAX_J1AA_J@Z
?ReadSparablePartitionTables@UDF_FSReader@@QAEHXZ
?ReadVAT@UDF_FSReader@@QAEHXZ
?RemoveEntry@StateContainer@@UAEHPBD@Z
?RemoveExtension@?$CExtensionCollector@VINeroMediumDriver@@VINeroFileSystemMediumExtension@@W4NeroFSExtensionsType@@@@QAEXPAVINeroFileSystemMediumExtension@@@Z
?ReplaceBool@StateContainer@@UAEHPBDH@Z
?ReplaceByte@StateContainer@@UAEHPBDE@Z
?ReplaceData@StateContainer@@UAEHPBDIPAXI@Z
?ReplaceInt64@StateContainer@@UAEHPBD_J@Z
?ReplacePointer@StateContainer@@UAEHPBDPAX@Z
?ReplaceString@StateContainer@@UAEHPBDABVINeroFileSystemString@@@Z
?ReplaceUint16@StateContainer@@UAEHPBDG@Z
?ReplaceUint32@StateContainer@@UAEHPBDI@Z
?ScrambleSector@@YAXQAE@Z
?SectorsPerLogicalBlock@UDF_FSReader@@QAE_JXZ
?SetAction@UDFStateHandler@@QAEXIV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetBufferMode@UDF_FSReader@@QAEHH@Z
?SetCurrentSector@UDFStateHandler@@QAEX_J@Z
?SetCurrentSectorCount@UDFStateHandler@@QAEX_J@Z
?SetError@UDFStateHandler@@QAEXIV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetInformation@UDFStateHandler@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetNASManager@UDF_FSReader@@QAEXPAVNonAllocatableSpaceManager@@@Z
?SetPercentCompleted@UDFStateHandler@@QAEXI@Z
?SetPercentLimits@UDFStateHandler@@QAEXII@Z
?SetPercentValue@UDFStateHandler@@QAEXI@Z
?SetSectorLimits@UDFStateHandler@@QAEX_J0@Z
?SetState@UDFState@@UAEXPAVIStateContainer@@@Z
?SetStringContent@CNeroFileSystemString@@UAEXPBD@Z
?SetStringContent@CNeroFileSystemString@@UAEXPBG@Z
?SetUniqueIdMappingStream@UDF_FSReader@@QAEXPAVUniqueIdMappingStream@@@Z
?TranslateExtendedAllocDesc@UDF_FSReader@@QAE?AW4NeroFSError@@ABUUDF_EXTENDED_ALLOCATION_DESCRIPTOR@UDFImporterLowlevelStructures@@AAV?$vector@_JV?$allocator@_J@std@@@std@@AA_J@Z
?TranslateLongAllocDesc@UDF_FSReader@@QAE?AW4NeroFSError@@ABUUDF_LONG_ALLOCATION_DESCRIPTOR@UDFImporterLowlevelStructures@@AAV?$vector@_JV?$allocator@_J@std@@@std@@AA_J@Z
?TranslateSector2LogicalBlock@UDF_FSReader@@QAE?AW4NeroFSError@@_JAA_JAAH@Z
?TranslateSector@UDF_FSReader@@QAE?AW4NeroFSError@@_JHAA_JH@Z
?TranslateSectorList@UDF_FSReader@@QAE?AW4NeroFSError@@_J0HAAV?$vector@_JV?$allocator@_J@std@@@std@@H@Z
?TranslateShortAllocDescEx@UDF_FSReader@@QAE?AW4NeroFSError@@ABUUDF_SHORT_ALLOCATION_DESCRIPTOR@@HAAV?$vector@_JV?$allocator@_J@std@@@std@@AA_J@Z
?TryRelocating@UDF_FSReader@@AAE?AW4NeroFSError@@AAV?$vector@UUDF_SectorWriteBuffer@@V?$allocator@UUDF_SectorWriteBuffer@@@std@@@std@@H_N@Z
?UpdateIfNecessary@UDFStateHandler@@QAEXXZ
?WordSwap2352@@YAXPAE@Z
?WriteBuffersToDisk@UDF_FSReader@@QAE?AW4NeroFSError@@AAV?$vector@UUDF_SectorWriteBuffer@@V?$allocator@UUDF_SectorWriteBuffer@@@std@@@std@@_N1@Z
?WriteSectorsBuffered@MountRainierBlockReadWriter@@UAE?AW4NeroFSError@@PBX_J1AA_J@Z
?WriteSectorsUnBuffered@MountRainierBlockReadWriter@@UAE?AW4NeroFSError@@PBX_J1AA_J@Z
?getReader@MountRainierBlockReadWriter@@IAEPAVINeroFileSystemBlockReader@@XZ
?iCreateDesc@UDF_FSReader@@AAE?AW4NeroFSError@@PAEIHAAPAVCUDF_DescriptorTag@UDFImporterLowlevelStructures@@AAV?$vector@_JV?$allocator@_J@std@@@std@@AA_JG@Z
?m_StateHandler@UDFStateHandler@@0PAV1@A
?m_pInstanceMap@UDF_FSReader@@0V?$CDynArray@PAVUDF_FSReader@@@@A
?readSectorsRaw@MountRainierBlockReadWriter@@IAE?AW4NeroFSError@@PAX_J1AA_J_N@Z
?repairSIP@MountRainierBlockReadWriter@@IAEHXZ
CompressUnicode
NERO_PLUGIN_GetInterfaceVersion
NERO_PLUGIN_GetPluginName
NERO_PLUGIN_GetPluginType
NERO_PLUGIN_GetVersion
NERO_PLUGIN_SetInterfaceVersion
NERO_PLUGIN_SetVendorInformations
NeroFileSystemDriver_Create
UDFDateTime2Nero
UDFTransName
UncompressUnicode

Sections

.text
Size: 304KB - Virtual size: 302KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7d71c6c0e7f7ff35f8bf407db583f9ac

Headers

File Characteristics

Imports

msvcp71

msvcr71

mfc71

kernel32

user32

oleaut32

Exports

Exports

Sections

.text Size: 304KB - Virtual size: 302KB

.rdata Size: 80KB - Virtual size: 78KB

.data Size: 8KB - Virtual size: 10KB

.rsrc Size: 4KB - Virtual size: 960B

.reloc Size: 16KB - Virtual size: 15KB

.text Size: 184KB - Virtual size: 184KB

.text
Size: 304KB - Virtual size: 302KB

.rdata
Size: 80KB - Virtual size: 78KB

.data
Size: 8KB - Virtual size: 10KB

.rsrc
Size: 4KB - Virtual size: 960B

.reloc
Size: 16KB - Virtual size: 15KB

.text
Size: 184KB - Virtual size: 184KB