8ca39189069cac1f26fb171a32642fa479d9fc50012e2a66b212e3a75827ca5c

Sharing

Copy URL Twitter E-mail

General

Target

8ca39189069cac1f26fb171a32642fa479d9fc50012e2a66b212e3a75827ca5c
Size

164KB
MD5

772b499f02a8daccfd81bc1bc4d79efd
SHA1

6f86939cc088cc86d9a2a2aea4a6c899d33721f4
SHA256

8ca39189069cac1f26fb171a32642fa479d9fc50012e2a66b212e3a75827ca5c
SHA512

7c7f9beb2e505b6cbc8b9bf8cdc1d2d06ff41cb0272c69475c6fe9a53b7426f808cc943d1e32bdb28558741ec7897fde3966fbda6c880cf1be15964484d343bf
SSDEEP

3072:ke6u4xmWPbX8ULJXY7iodmbh5UK2/uqb4e+o:kZxBPbXjLJgNmt5x2/xB+o

Score

N/A

Malware Config

Signatures

Files

8ca39189069cac1f26fb171a32642fa479d9fc50012e2a66b212e3a75827ca5c
.dll windows x86

f6bd1a43470b5c49d3ba1122fdfd7651

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

spsswcom

pvGetCmaGlb
pvGetCmnDmo
pvGetCmnStk
pvGetCmaSym
pvGetCmaObv
pvGetCmaMch
pvGetCmnGlb
pvGetCmaDic
pvGetCmnLoc
pvGetCmnObv
pvGetCmnIo
pvGetCmnBpr
pvGetCmaSys
pvGetCmnSym
pvGetCmnDic
pvGetCmnSys
pvGetCmnMch

spsswdat

ValidateSPSSName
??0DataFreeDataSource@@QAE@XZ
??1DataFreeDataSource@@UAE@XZ

datasrc

?SystemMissing@SPSS_DataSource@@SANXZ
?SetSplit@SPSS_DataSource@@QAEXIQBH_N@Z
??1SPSS_SparseFileIndex@@QAE@XZ
?GetObsPointer@SPSS_InputCaseIterator@@QBEPATOBS@@I@Z
??0SPSS_SparseFileIndex@@QAE@K@Z
?GetNSplitVars@SPSS_DataSource@@QBEIXZ
?GetFilterVarIndex@SPSS_DataSource@@QBEHXZ
?SetFilterVar@SPSS_DataSource@@QAEXH@Z
?FindVarIndex@SPSS_DataSource@@QBEHVLocallyUniqueID@@@Z
?GetID@SPSS_Variable@@QBE?AVLocallyUniqueID@@XZ
?GetSplitVarIndex@SPSS_DataSource@@QBEHI@Z
?GetWeightVarIndex@SPSS_DataSource@@QBEHXZ
?SetWeightVar@SPSS_DataSource@@QAEXH@Z
?GetFormat@SPSS_Variable@@QBEXAAW4FormatType@1@AAH1@Z
?GetType@SPSS_Variable@@QBEHXZ
?GetName@SPSS_Variable@@QBEPBDXZ
??0SPSS_Variable@@QAE@ABV0@@Z
?NewID@SPSS_Variable@@QAEXXZ
?GetLabel@SPSS_Variable@@QBEPBDXZ
??0SPSS_Variable@@QAE@H@Z
??1?$RefCountPtr@VSPSS_VariableImpl@@@@QAE@XZ
?GetVariable@SPSS_DataSource@@QAEAAVSPSS_Variable@@H@Z
??1SPSS_Variable@@QAE@XZ
?FindVarIndex@SPSS_DataSource@@QBEHPBD@Z
?MakeVariable@SPSS_DataSource@@QAEAAVSPSS_Variable@@HPAI@Z
?SetName@SPSS_Variable@@QAEXPBD@Z
?SetLabel@SPSS_Variable@@QAEXPBD@Z
?SetFormat@SPSS_Variable@@QAEXW4FormatType@1@HH@Z
?SetWriteFormat@SPSS_Variable@@QAEXW4FormatType@1@HH@Z
?SetMeasurementLevel@SPSS_Variable@@QAEXW4MeasurementLevel@SPSS_Variable_Enumerations@@@Z
?GetVariable@SPSS_DataSource@@QBEABVSPSS_Variable@@H@Z
?MakeVariable@SPSS_DataSource@@QAEAAVSPSS_Variable@@ABV2@PAI@Z
??0SPSS_DataSource@@QAE@PBV0@@Z
?SetParentSource@SPSS_DataSource@@QAEXPBV1@@Z
?HasExtension@SPSS_DataSource@@QBE_NH@Z
?SetExtension@SPSS_DataSource@@QAEXHVExtension@1@@Z
??0Extension@SPSS_DataSource@@QAE@ABV1@H@Z
?ColumnCount@SPSS_DataSource@@QBEIXZ
??1Extension@SPSS_DataSource@@QAE@XZ
?InitCase@SPSS_InputCaseIterator@@QAEXXZ
?GetPos@SPSS_SparseFileIndex@@QBEX_JAA_J1@Z
?Add@SPSS_SparseFileIndex@@QAEX_J0@Z
??0SPSS_InputCaseIterator@@IAE@ABVSPSS_DataSource@@PATOBS@@@Z
?GetParentSource@SPSS_DataSource@@QBEPBV1@XZ
?SetParent@SPSS_InputCaseIterator@@QAEXPAV1@@Z
??1SPSS_InputCaseIterator@@UAE@XZ
?SetErrorMonitor@SPSS_InputCaseIterator@@UAEXPAVErrorMonitor@@@Z
??0SPSS_Format@@QAE@W4FormatType@0@HH@Z
??0SPSS_DataSource@@IAE@ABV0@@Z
??1SPSS_DataSource@@UAE@XZ
?GetObsAreaSize@SPSS_DataSource@@UBEIXZ
?IsLoaded@SPSS_DataSource@@UBE_NXZ
?ObsIndex@SPSS_DataSource@@QBEHH@Z

cpputil

??1ObsVector@@QAE@XZ
??1BpComposite@@UAE@XZ
?BpError@@YAXABVBpCellText@@W4BpErrorShow@@W4BpErrorLevel@@@Z
?Cell@BpCategory@@QAEXABVBpCellText@@@Z
??0BpDataValue@@QAE@ABVSPSS_Variable@@PBTOBS@@W4Preference@0@@Z
??0LexLess@ObsVecMap@@QAE@ABV1@@Z
??0BpString@@QAE@ABV0@@Z
?PivotTable@BpHeading@@QAE?AVBpPivotTable@@ABVBpCellText@@0_N@Z
??1BpDataValue@@UAE@XZ
??0BpVariable@@QAE@ABVSPSS_Variable@@W4Show@0@@Z
??0ObsVector@@QAE@ABV0@@Z
??0ObsVector@@QAE@ABVSPSS_InputCaseIterator@@ABV?$vector@HV?$allocator@H@std@@@std@@@Z
?HasNulls@ObsVector@@QBE_NXZ
??8ObsVector@@QAE_NABV0@@Z
??4ObsVector@@QAEAAV0@ABV0@@Z
?Extract@ObsVector@@QAEXXZ
??RLexLess@ObsVecMap@@QAE_NPBTOBS@@0@Z
??AObsVector@@QBEABTOBS@@H@Z
??1ObsVecMap@@QAE@XZ
?Sort@ObsVecMap@@QBE?AV?$vector@PATOBS@@V?$allocator@PATOBS@@@std@@@std@@XZ
?Category@BpGroup@@QAE?AVBpCategory@@ABVBpCellText@@@Z
?Dimension@BpPivotTable@@QAE?AVBpDimension@@ABVBpCellText@@W4Sort@1@@Z
?Finish@BpComposite@@QAEXXZ
??1BpString@@UAE@XZ
?Add@BpComposite@@QAEXABVBpCellText@@@Z
??0BpString@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
??0BpComposite@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??1BpPivotTable@@UAE@XZ
??1BpDimension@@UAE@XZ
??1BpVariable@@UAE@XZ
??1BpCategory@@QAE@XZ

spssiocv

IocvConvertInput
IocvConvertOutput

msvcrt

_purecall
__CxxFrameHandler
??2@YAPAXI@Z
__RTDynamicCast
_assert
malloc
_adjust_fdiv
sprintf
memmove
??3@YAXPAX@Z
free
_initterm
??1type_info@@UAE@XZ
_except_handler3
?terminate@@YAXXZ

msvcp60

?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Xlen@std@@YAXXZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PAD0PBD1@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z

kernel32

LoadLibraryA

Exports

Exports

??0C2vDataSource@@QAE@AAVC2vSpecification@@V?$auto_ptr@VObsVecMap@@@std@@_JABV?$vector@HV?$allocator@H@std@@@3@PBVSPSS_DataSource@@3AAVBpHeading@@@Z
??0C2vDataSource@@QAE@ABV0@@Z
??0C2vSpecification@@QAE@XZ
??1C2vDataSource@@UAE@XZ
??1C2vSpecification@@QAE@XZ
??_7C2vDataSource@@6B@
?Autofix@C2vSpecification@@QAEX_N@Z
?Autofix@C2vSpecification@@QBE_NXZ
?CountLabel@C2vSpecification@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?CountLabel@C2vSpecification@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?CountLabeled@C2vSpecification@@QBE_NXZ
?CountSpec@C2vSpecification@@QBE_NXZ
?CountVar@C2vSpecification@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?CountVar@C2vSpecification@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?DropVars@C2vSpecification@@QAEXABV?$vector@HV?$allocator@H@std@@@std@@@Z
?DropVars@C2vSpecification@@QBEABV?$vector@HV?$allocator@H@std@@@std@@XZ
?FixedVars@C2vSpecification@@QAEXABV?$vector@HV?$allocator@H@std@@@std@@@Z
?FixedVars@C2vSpecification@@QBEABV?$vector@HV?$allocator@H@std@@@std@@XZ
?GroupByIndex@C2vSpecification@@QAEX_N@Z
?GroupByIndex@C2vSpecification@@QBE_NXZ
?IDVars@C2vSpecification@@QAEXABV?$vector@HV?$allocator@H@std@@@std@@@Z
?IDVars@C2vSpecification@@QBEABV?$vector@HV?$allocator@H@std@@@std@@XZ
?IndexVars@C2vSpecification@@QAEXABV?$vector@HV?$allocator@H@std@@@std@@@Z
?IndexVars@C2vSpecification@@QBEABV?$vector@HV?$allocator@H@std@@@std@@XZ
?Indicator@C2vSpecification@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Indicator@C2vSpecification@@QBE_NXZ
?IndicatorRoot@C2vSpecification@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?MakeIterator@C2vDataSource@@UBEPAVSPSS_InputCaseIterator@@PATOBS@@@Z
?RenameSpecs@C2vSpecification@@QAEXABV?$vector@U?$pair@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@V?$allocator@U?$pair@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@@Z
?RenameSpecs@C2vSpecification@@QBEABV?$vector@U?$pair@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@V?$allocator@U?$pair@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@XZ
?RowCount@C2vDataSource@@UBE_JXZ
?Separator@C2vSpecification@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Separator@C2vSpecification@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f6bd1a43470b5c49d3ba1122fdfd7651

Headers

File Characteristics

Imports

spsswcom

spsswdat

datasrc

cpputil

spssiocv

msvcrt

msvcp60

kernel32

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 28KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 688B

.reloc Size: 4KB - Virtual size: 2KB

.text Size: 100KB - Virtual size: 100KB

.text
Size: 32KB - Virtual size: 28KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 688B

.reloc
Size: 4KB - Virtual size: 2KB

.text
Size: 100KB - Virtual size: 100KB