7234c81dad0c681b98adfc726ecbafdf832d7003826ebb001a6d7c126951ee3b

Sharing

Copy URL Twitter E-mail

General

Target

7234c81dad0c681b98adfc726ecbafdf832d7003826ebb001a6d7c126951ee3b
Size

446KB
MD5

9143ea0a8f60c49007d1b5354e6aaf60
SHA1

5d33604a966017a96cc02dc52a6820d3861f8390
SHA256

7234c81dad0c681b98adfc726ecbafdf832d7003826ebb001a6d7c126951ee3b
SHA512

b4d19cb10048972988a95439ccb357ac686b6121eec4c5e6721f4414dba4a3379e04a122515fc9afa3ccb5283c2c74987b13c713b081ef36b74f1d8fb1165d96
SSDEEP

6144:yUe3Pqs0T3uvRUlwfqI3NoMGllXOK5pd6750QLloSlxLspwAz0k:yUe/qvT3uvGlWqIBgpdT0oSl1sqk

Score

N/A

Malware Config

Signatures

Files

7234c81dad0c681b98adfc726ecbafdf832d7003826ebb001a6d7c126951ee3b
.dll windows x86

cacb420dfc46dc664f49f57934ffc493

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SysAllocString
SetErrorInfo
CreateErrorInfo
SysFreeString
GetErrorInfo
VariantClear
VariantInit
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
VariantChangeType
VariantCopyInd
SafeArrayPutElement
SafeArrayDestroy
SafeArrayCreate
SafeArrayGetRecordInfo
GetRecordInfoFromGuids
GetRecordInfoFromTypeInfo
GetActiveObject
RegisterActiveObject
RevokeActiveObject
CreateTypeLi
CreateTypeLib2
SysStringLen
LoadTypeLi
LoadRegTypeLi
LHashValOfNameSys
QueryPathOfRegTypeLi
UnRegisterTypeLi
RegisterTypeLi
SysAllocStringLen

ole32

PropVariantClear
OleInitialize
DoDragDrop
RevokeDragDrop
RegisterDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
OleGetClipboard
OleSaveToStream
OleLoadFromStream
OleLoad
CoGetObject
CoReleaseMarshalData
CoUnmarshalInterface
CoMarshalInterface
CoCreateFreeThreadedMarshaler
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
GetRunningObjectTable
CoFreeUnusedLibraries
GetClassFile
CreateItemMoniker
CreateFileMoniker
CreatePointerMoniker
MkParseDisplayName
CreateBindCtx
ProgIDFromCLSID
CoTaskMemFree
CoCreateGuid
CoTreatAsClass
CoResumeClassObjects
CoRevokeClassObject
CoRegisterClassObject
CoCreateInstance
StgOpenStorage
StgIsStorageFile
StgCreateDocfileOnILockBytes
StgCreateDocfile
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
WriteClassStm
ReadClassStm
WriteClassStg
ReadClassStg
ReleaseStgMedium
CoTaskMemAlloc
CoUninitialize
CoInitialize
StringFromGUID2

user32

DispatchMessageA
GetMessageA
TranslateMessage
PostThreadMessageA
wsprintfA
PeekMessageA

python27

PyObject_Size
PyObject_SetAttrString
PyTuple_SetItem
PyObject_HasAttrString
PyType_IsSubtype
PyFloat_Type
PyRun_SimpleFileExFlags
PyErr_ExceptionMatches
PyExc_OverflowError
PyLong_AsLongLong
PyTuple_Size
PyEval_CallObjectWithKeywords
PyObject_CallFunction
PyNumber_Long
PyArg_ParseTupleAndKeywords
PyLong_AsVoidPtr
PyLong_FromDouble
PyNumber_Check
PyExc_AttributeError
Py_VaBuildValue
PyString_AsString
_Py_NotImplementedStruct
PyLong_AsLong
PyErr_NoMemory
PyMem_Malloc
PyMem_Free
PyString_FromStringAndSize
PyDict_GetItemString
PyModule_GetDict
PyObject_RichCompareBool
PyString_ConcatAndDel
PyObject_Repr
PyString_Concat
PyLong_FromVoidPtr
_Py_TrueStruct
PyExc_NotImplementedError
PyErr_WarnEx
PyExc_PendingDeprecationWarning
Py_FrozenFlag
PyErr_NewException
PyType_Ready
Py_InitModule4
PyMapping_HasKey
PyCObject_FromVoidPtr
PyCObject_AsVoidPtr
PyCObject_Type
PyLong_FromLongLong
PyLong_FromUnsignedLongLong
PyLong_AsUnsignedLongLong
PyLong_Type
PyLong_AsUnsignedLong
PyExc_IndexError
PyObject_GenericSetAttr
PyArg_Parse
PySequence_Tuple
_PyString_Resize
_Py_ZeroStruct
PyLong_AsDouble
PyExc_ValueError
PyObject_Str
PyLong_AsUnsignedLongMask
PyNumber_Float
PyFloat_AsDouble
PyTuple_GetItem
PyBuffer_New
PyFloat_FromDouble
PyBool_FromLong
PyLong_FromUnsignedLong
PyLong_FromLong
PyBuffer_Type
PySequence_Check
PyInt_FromSsize_t
PyDict_GetItem
PyDict_SetItem
PyInt_AsSsize_t
PyObject_IsInstance
PyInt_AsUnsignedLongMask
PyObject_GenericGetAttr
PyTuple_New
PySeqIter_New
PySequence_Size
PyExc_StopIteration
PyErr_SetNone
PyObject_IsSubclass
PyType_Type
PyErr_Occurred
PyInt_FromLong
PyErr_SetObject
PyObject_CallMethod
PyImport_ImportModule
PyErr_NormalizeException
PyDict_New
Py_BuildValue
PyDict_SetItemString
PyObject_Call
PyErr_Print
PyErr_Fetch
PyFile_WriteString
PyErr_Restore
PyEval_RestoreThread
PyErr_GivenExceptionMatches
PyExc_TypeError
PyErr_Format
PySequence_GetItem
Py_IsInitialized
Py_Initialize
PySys_GetObject
PyList_New
PyString_FromString
PyList_Append
PySys_SetObject
PyEval_InitThreads
PyEval_SaveThread
PyGILState_Release
PyGILState_Ensure
PyArg_ParseTuple
PyExc_RuntimeError
PyObject_GetAttrString
_Py_NoneStruct
PyErr_Clear
PyNumber_Int
PyInt_AsLong
PyExc_MemoryError
PyErr_SetString
PyObject_AsReadBuffer
PySys_SetArgv

pywintypes27

?PyWinObject_AsWCHARArray@@YAHPAU_object@@PAPAPA_WPAKH@Z
?PyWinObject_FreeWCHARArray@@YAXPAPA_WK@Z
?PyWinObject_AsDWORDArray@@YAHPAU_object@@PAPAKPAKH@Z
?PyWinSequence_Tuple@@YAPAU_object@@PAU1@PAK@Z
?PyWinLong_FromHANDLE@@YAPAU_object@@PAX@Z
?PyWinObject_FreeTaskAllocatedWCHAR@@YAXPA_W@Z
?PyWin_SetAPIError@@YAPAU_object@@PADJ@Z
?PyWinMethod_NewTime@@YAPAU_object@@PAU1@0@Z
?PyWinMethod_NewIID@@YAPAU_object@@PAU1@0@Z
?_MakeAbsoluteSD@@YAHPAXPAPAX@Z
?FreeAbsoluteSD@@YAXPAX@Z
?PyWinLong_AsVoidPtr@@YAHPAU_object@@PAPAX@Z
?PyWinObject_AsSECURITY_DESCRIPTOR@@YAHPAU_object@@PAPAXH@Z
?PyWinObject_AsHANDLE@@YAHPAU_object@@PAPAX@Z
?PyWinObject_AsTaskAllocatedWCHAR@@YAHPAU_object@@PAPA_WHPAK@Z
?PyWinCoreString_FromString@@YAPAU_object@@PB_WH@Z
?PyWinObject_AsWCHAR@@YAHPAU_object@@PAPA_WHPAK@Z
?PyWinObject_FreeWCHAR@@YAXPA_W@Z
??0PyWin_AutoFreeBstr@@QAE@PA_W@Z
??1PyWin_AutoFreeBstr@@QAE@XZ
?PyWinObject_FreeBstr@@YAXPA_W@Z
?SetBstr@PyWin_AutoFreeBstr@@QAEXPA_W@Z
?PyWinCoreString_FromString@@YAPAU_object@@PBDH@Z
?PyWinObject_AsFILETIME@@YAHPAU_object@@PAU_FILETIME@@@Z
?PyWinObject_AsIID@@YAHPAU_object@@PAU_GUID@@@Z
?PyWinObject_FromFILETIME@@YAPAU_object@@ABU_FILETIME@@@Z
?PyWinObject_FromIID@@YAPAU_object@@ABU_GUID@@@Z
?PyWinObject_FromOLECHAR@@YAPAU_object@@PB_W@Z
?PyWinObject_FromOLECHAR@@YAPAU_object@@PB_WH@Z
?PyWinObject_AsReadBuffer@@YAHPAU_object@@PAPAXPAKH@Z
?PyWinObject_AsLARGE_INTEGER@@YAHPAU_object@@PAT_LARGE_INTEGER@@@Z
?PyWinObject_AsULARGE_INTEGER@@YAHPAU_object@@PAT_ULARGE_INTEGER@@@Z
?PyWinObject_AsDATE@@YAHPAU_object@@PAN@Z
?PyWinTime_Check@@YAHPAU_object@@@Z
?PyWinObject_AsWriteBuffer@@YAHPAU_object@@PAPAXPAKH@Z
?PyWinObject_FromLARGE_INTEGER@@YAPAU_object@@AAT_LARGE_INTEGER@@@Z
?PyWinObject_FromDATE@@YAPAU_object@@N@Z
?PyWinObject_FromULARGE_INTEGER@@YAPAU_object@@AAT_ULARGE_INTEGER@@@Z
?PyWinObject_FromTCHAR@@YAPAU_object@@PBDH@Z
?PyWin_GetErrorMessageModule@@YAPAUHINSTANCE__@@K@Z
?PyWinObject_FromBstr@@YAPAU_object@@QA_WH@Z
?GetPythonTraceback@@YAPADPAU_object@@00@Z
?PyWinExc_COMError@@3PAU_object@@A
?PyWinObject_AsBstr@@YAHPAU_object@@PAPA_WHPAK@Z
?PyWinGlobals_Ensure@@YAHXZ
?PyWin_AcquireGlobalLock@@YAXXZ
?PyWin_ReleaseGlobalLock@@YAXXZ

msvcr90

??2@YAPAXI@Z
__CxxFrameHandler3
_purecall
fclose
fopen
free
malloc
fprintf
__iob_func
_vsnprintf
strncpy
_snprintf
strncat
memset
memcpy
qsort
sprintf
_except_handler3
wcsncpy
printf
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
_crt_debugger_hook
__clean_type_info_names_internal
_except_handler4_common
??3@YAXPAX@Z
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__CppXcptFilter

kernel32

InterlockedIncrement
InterlockedDecrement
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
GetCurrentThreadId
MultiByteToWideChar
OutputDebugStringA
FormatMessageA
GlobalAlloc
GlobalSize
GlobalUnlock
GlobalLock
LoadLibraryA
VirtualFree
VirtualProtect
VirtualAlloc
InterlockedExchange
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

Exports

Exports

??0CPyFactory@@QAE@ABU_GUID@@@Z
??0CPyFactory@@QAE@ABV0@@Z
??0PyComEnumProviderTypeObject@@QAE@PBDPAVPyComTypeObject@@HPAUPyMethodDef@@P6APAVPyIUnknown@@PAUIUnknown@@@Z0@Z
??0PyComEnumTypeObject@@QAE@PBDPAVPyComTypeObject@@HPAUPyMethodDef@@P6APAVPyIUnknown@@PAUIUnknown@@@Z@Z
??0PyComTypeObject@@QAE@PBDPAV0@HPAUPyMethodDef@@P6APAVPyIUnknown@@PAUIUnknown@@@Z@Z
??0PyGOleWindow@@IAE@PAU_object@@@Z
??0PyGOleWindow@@QAE@ABV0@@Z
??0PyGPersist@@IAE@PAU_object@@@Z
??0PyGPersist@@QAE@ABV0@@Z
??0PyGatewayBase@@IAE@PAU_object@@@Z
??0PyGatewayBase@@QAE@ABV0@@Z
??0PyIBase@@IAE@XZ
??0PyIBase@@QAE@ABV0@@Z
??0PyIBindCtx@@IAE@PAUIUnknown@@@Z
??0PyIBindCtx@@QAE@ABV0@@Z
??0PyIClassFactory@@IAE@PAUIUnknown@@@Z
??0PyIClassFactory@@QAE@ABV0@@Z
??0PyIConnectionPoint@@IAE@PAUIUnknown@@@Z
??0PyIConnectionPoint@@QAE@ABV0@@Z
??0PyIConnectionPointContainer@@IAE@PAUIUnknown@@@Z
??0PyIConnectionPointContainer@@QAE@ABV0@@Z
??0PyIDispatch@@IAE@PAUIUnknown@@@Z
??0PyIDispatch@@QAE@ABV0@@Z
??0PyIDispatchEx@@IAE@PAUIUnknown@@@Z
??0PyIDispatchEx@@QAE@ABV0@@Z
??0PyIEnumMoniker@@IAE@PAUIUnknown@@@Z
??0PyIEnumMoniker@@QAE@ABV0@@Z
??0PyIEnumVARIANT@@IAE@PAUIUnknown@@@Z
??0PyIEnumVARIANT@@QAE@ABV0@@Z
??0PyIMoniker@@IAE@PAUIUnknown@@@Z
??0PyIMoniker@@QAE@ABV0@@Z
??0PyIOleWindow@@IAE@PAUIUnknown@@@Z
??0PyIOleWindow@@QAE@ABV0@@Z
??0PyIPersist@@IAE@PAUIUnknown@@@Z
??0PyIPersist@@QAE@ABV0@@Z
??0PyIPersistStream@@IAE@PAUIUnknown@@@Z
??0PyIPersistStream@@QAE@ABV0@@Z
??0PyIPersistStreamInit@@IAE@PAUIUnknown@@@Z
??0PyIPersistStreamInit@@QAE@ABV0@@Z
??0PyIProvideClassInfo2@@IAE@PAUIUnknown@@@Z
??0PyIProvideClassInfo2@@QAE@ABV0@@Z
??0PyIProvideClassInfo@@IAE@PAUIUnknown@@@Z
??0PyIProvideClassInfo@@QAE@ABV0@@Z
??0PyIServiceProvider@@IAE@PAUIUnknown@@@Z
??0PyIServiceProvider@@QAE@ABV0@@Z
??0PyIStream@@IAE@PAUIUnknown@@@Z
??0PyIStream@@QAE@ABV0@@Z
??0PyITypeComp@@IAE@PAUIUnknown@@@Z
??0PyITypeComp@@QAE@ABV0@@Z
??0PyITypeInfo@@IAE@PAUIUnknown@@@Z
??0PyITypeInfo@@QAE@ABV0@@Z
??0PyITypeLib@@IAE@PAUIUnknown@@@Z
??0PyITypeLib@@QAE@ABV0@@Z
??0PyIUnknown@@IAE@PAUIUnknown@@@Z
??0PyIUnknown@@QAE@ABV0@@Z
??0PyOleArgNotFound@@QAE@XZ
??0PyOleEmpty@@QAE@XZ
??0PyOleMissing@@QAE@XZ
??0PySTGMEDIUM@@QAE@PAUtagSTGMEDIUM@@@Z
??0PythonOleArgHelper@@QAE@XZ
??1CPyFactory@@QAE@XZ
??1PyComEnumProviderTypeObject@@QAE@XZ
??1PyComEnumTypeObject@@QAE@XZ
??1PyComTypeObject@@QAE@XZ
??1PyGOleWindow@@UAE@XZ
??1PyGPersist@@UAE@XZ
??1PyGatewayBase@@MAE@XZ
??1PyIBase@@MAE@XZ
??1PyIBindCtx@@MAE@XZ
??1PyIClassFactory@@MAE@XZ
??1PyIConnectionPoint@@MAE@XZ
??1PyIConnectionPointContainer@@MAE@XZ
??1PyIDispatch@@MAE@XZ
??1PyIDispatchEx@@MAE@XZ
??1PyIEnumMoniker@@MAE@XZ
??1PyIEnumVARIANT@@MAE@XZ
??1PyIMoniker@@MAE@XZ
??1PyIOleWindow@@MAE@XZ
??1PyIPersist@@MAE@XZ
??1PyIPersistStream@@MAE@XZ
??1PyIPersistStreamInit@@MAE@XZ
??1PyIProvideClassInfo2@@MAE@XZ
??1PyIProvideClassInfo@@MAE@XZ
??1PyIServiceProvider@@MAE@XZ
??1PyIStream@@MAE@XZ
??1PyITypeComp@@MAE@XZ
??1PyITypeInfo@@MAE@XZ
??1PyITypeLib@@MAE@XZ
??1PyIUnknown@@MAE@XZ
??1PySTGMEDIUM@@QAE@XZ
??1PythonOleArgHelper@@QAE@XZ
??4CPyFactory@@QAEAAV0@ABV0@@Z
??4PyComEnumProviderTypeObject@@QAEAAV0@ABV0@@Z
??4PyComEnumTypeObject@@QAEAAV0@ABV0@@Z
??4PyComTypeObject@@QAEAAV0@ABV0@@Z
??4PyGOleWindow@@QAEAAV0@ABV0@@Z
??4PyGPersist@@QAEAAV0@ABV0@@Z
??4PyGatewayBase@@QAEAAV0@ABV0@@Z
??4PyIBase@@QAEAAV0@ABV0@@Z
??4PyIBindCtx@@QAEAAV0@ABV0@@Z
??4PyIClassFactory@@QAEAAV0@ABV0@@Z
??4PyIConnectionPoint@@QAEAAV0@ABV0@@Z
??4PyIConnectionPointContainer@@QAEAAV0@ABV0@@Z
??4PyIDispatch@@QAEAAV0@ABV0@@Z
??4PyIDispatchEx@@QAEAAV0@ABV0@@Z
??4PyIEnumMoniker@@QAEAAV0@ABV0@@Z
??4PyIEnumVARIANT@@QAEAAV0@ABV0@@Z
??4PyIMoniker@@QAEAAV0@ABV0@@Z
??4PyIOleWindow@@QAEAAV0@ABV0@@Z
??4PyIPersist@@QAEAAV0@ABV0@@Z
??4PyIPersistStream@@QAEAAV0@ABV0@@Z
??4PyIPersistStreamInit@@QAEAAV0@ABV0@@Z
??4PyIProvideClassInfo2@@QAEAAV0@ABV0@@Z
??4PyIProvideClassInfo@@QAEAAV0@ABV0@@Z
??4PyIServiceProvider@@QAEAAV0@ABV0@@Z
??4PyIStream@@QAEAAV0@ABV0@@Z
??4PyITypeComp@@QAEAAV0@ABV0@@Z
??4PyITypeInfo@@QAEAAV0@ABV0@@Z
??4PyITypeLib@@QAEAAV0@ABV0@@Z
??4PyIUnknown@@QAEAAV0@ABV0@@Z
??4PyOleArgNotFound@@QAEAAV0@ABV0@@Z
??4PyOleEmpty@@QAEAAV0@ABV0@@Z
??4PyOleMissing@@QAEAAV0@ABV0@@Z
??4PySTGMEDIUM@@QAEAAV0@ABV0@@Z
??4PythonOleArgHelper@@QAEAAV0@ABV0@@Z
??_7CPyFactory@@6B@
??_7PyGOleWindow@@6B@
??_7PyGOleWindow@@6BIDispatchEx@@@
??_7PyGOleWindow@@6BIInternalUnwrapPythonObject@@@
??_7PyGOleWindow@@6BISupportErrorInfo@@@
??_7PyGPersist@@6B@
??_7PyGPersist@@6BIDispatchEx@@@
??_7PyGPersist@@6BIInternalUnwrapPythonObject@@@
??_7PyGPersist@@6BISupportErrorInfo@@@
??_7PyGatewayBase@@6BIDispatchEx@@@
??_7PyGatewayBase@@6BIInternalUnwrapPythonObject@@@
??_7PyGatewayBase@@6BISupportErrorInfo@@@
??_7PyIBase@@6B@
??_7PyIBindCtx@@6B@
??_7PyIClassFactory@@6B@
??_7PyIConnectionPoint@@6B@
??_7PyIConnectionPointContainer@@6B@
??_7PyIDispatch@@6B@
??_7PyIDispatchEx@@6B@
??_7PyIEnumMoniker@@6B@
??_7PyIEnumVARIANT@@6B@
??_7PyIMoniker@@6B@
??_7PyIOleWindow@@6B@
??_7PyIPersist@@6B@
??_7PyIPersistStream@@6B@
??_7PyIPersistStreamInit@@6B@
??_7PyIProvideClassInfo2@@6B@
??_7PyIProvideClassInfo@@6B@
??_7PyIServiceProvider@@6B@
??_7PyIStream@@6B@
??_7PyITypeComp@@6B@
??_7PyITypeInfo@@6B@
??_7PyITypeLib@@6B@
??_7PyIUnknown@@6B@
??_FPySTGMEDIUM@@QAEXXZ
?AddRef@CPyFactory@@UAGKXZ
?AddRef@PyGOleWindow@@MAGKXZ
?AddRef@PyGPersist@@MAGKXZ
?AddRef@PyGatewayBase@@UAGKXZ
?Advise@PyIConnectionPoint@@SAPAU_object@@PAU2@0@Z
?Bind@PyITypeComp@@QAEPAU_object@@PA_WG@Z
?BindToObject@PyIMoniker@@SAPAU_object@@PAU2@0@Z
?BindToStorage@PyIMoniker@@SAPAU_object@@PAU2@0@Z
?BindType@PyITypeComp@@QAEPAU_object@@PA_W@Z
?Clone@PyIEnumMoniker@@SAPAU_object@@PAU2@0@Z
?Clone@PyIEnumVARIANT@@SAPAU_object@@PAU2@0@Z
?Clone@PyIStream@@SAPAU_object@@PAU2@0@Z
?Close@PySTGMEDIUM@@QAEXXZ
?Commit@PyIStream@@SAPAU_object@@PAU2@0@Z
?ComposeWith@PyIMoniker@@SAPAU_object@@PAU2@0@Z
?ContextSensitiveHelp@PyGOleWindow@@MAGJH@Z
?ContextSensitiveHelp@PyIOleWindow@@SAPAU_object@@PAU2@0@Z
?CopyTo@PyIStream@@SAPAU_object@@PAU2@0@Z
?CopyTo@PySTGMEDIUM@@QAEHPAUtagSTGMEDIUM@@@Z
?CreateInstance@CPyFactory@@UAGJPAUIUnknown@@ABU_GUID@@PAPAX@Z
?CreateInstance@PyIClassFactory@@SAPAU_object@@PAU2@0@Z
?CreateNewPythonInstance@CPyFactory@@IAGJABU_GUID@@0PAPAU_object@@@Z
?DeleteMemberByDispID@PyGatewayBase@@UAGJJ@Z
?DeleteMemberByDispID@PyIDispatchEx@@SAPAU_object@@PAU2@0@Z
?DeleteMemberByName@PyGatewayBase@@UAGJPA_WK@Z
?DeleteMemberByName@PyIDispatchEx@@SAPAU_object@@PAU2@0@Z
?DropOwnership@PySTGMEDIUM@@QAEXXZ
?Enum@PyIMoniker@@SAPAU_object@@PAU2@0@Z
?EnumConnectionPoints@PyIConnectionPointContainer@@SAPAU_object@@PAU2@0@Z
?EnumConnections@PyIConnectionPoint@@SAPAU_object@@PAU2@0@Z
?EnumObjectParam@PyIBindCtx@@SAPAU_object@@PAU2@0@Z
?FindConnectionPoint@PyIConnectionPointContainer@@SAPAU_object@@PAU2@0@Z
?GetBindOptions@PyIBindCtx@@SAPAU_object@@PAU2@0@Z
?GetClassID@PyGPersist@@MAGJPAU_GUID@@@Z
?GetClassID@PyIPersist@@SAPAU_object@@PAU2@0@Z
?GetClassInfoA@PyIProvideClassInfo@@SAPAU_object@@PAU2@0@Z
?GetConnectionInterface@PyIConnectionPoint@@SAPAU_object@@PAU2@0@Z
?GetConnectionPointContainer@PyIConnectionPoint@@SAPAU_object@@PAU2@0@Z
?GetContainingTypeLib@PyITypeInfo@@QAEPAU_object@@XZ
?GetDispID@PyGatewayBase@@UAGJPA_WKPAJ@Z
?GetDispID@PyIDispatchEx@@SAPAU_object@@PAU2@0@Z
?GetDisplayName@PyIMoniker@@SAPAU_object@@PAU2@0@Z
?GetDocumentation@PyITypeInfo@@QAEPAU_object@@J@Z
?GetDocumentation@PyITypeLib@@QAEPAU_object@@H@Z
?GetFuncDesc@PyITypeInfo@@QAEPAU_object@@H@Z
?GetGUID@PyIProvideClassInfo2@@SAPAU_object@@PAU2@0@Z
?GetI@PyIBindCtx@@SAPAUIBindCtx@@PAU_object@@@Z
?GetI@PyIClassFactory@@SAPAUIClassFactory@@PAU_object@@@Z
?GetI@PyIConnectionPoint@@SAPAUIConnectionPoint@@PAU_object@@@Z
?GetI@PyIConnectionPointContainer@@SAPAUIConnectionPointContainer@@PAU_object@@@Z
?GetI@PyIDispatch@@SAPAUIDispatch@@PAU_object@@@Z
?GetI@PyIDispatchEx@@SAPAUIDispatchEx@@PAU_object@@@Z
?GetI@PyIEnumMoniker@@SAPAUIEnumMoniker@@PAU_object@@@Z
?GetI@PyIEnumVARIANT@@SAPAUIEnumVARIANT@@PAU_object@@@Z
?GetI@PyIMoniker@@SAPAUIMoniker@@PAU_object@@@Z
?GetI@PyIOleWindow@@SAPAUIOleWindow@@PAU_object@@@Z
?GetI@PyIPersist@@SAPAUIPersist@@PAU_object@@@Z
?GetI@PyIPersistStream@@SAPAUIPersistStream@@PAU_object@@@Z
?GetI@PyIPersistStreamInit@@SAPAUIPersistStreamInit@@PAU_object@@@Z
?GetI@PyIProvideClassInfo2@@SAPAUIProvideClassInfo2@@PAU_object@@@Z
?GetI@PyIProvideClassInfo@@SAPAUIProvideClassInfo@@PAU_object@@@Z
?GetI@PyIServiceProvider@@SAPAUIServiceProvider@@PAU_object@@@Z
?GetI@PyIStream@@SAPAUIStream@@PAU_object@@@Z
?GetI@PyITypeComp@@SAPAUITypeComp@@PAU_object@@@Z
?GetI@PyITypeInfo@@SAPAUITypeInfo@@PAU_object@@@Z
?GetI@PyITypeLib@@SAPAUITypeLib@@PAU_object@@@Z
?GetI@PyIUnknown@@SAPAUIUnknown@@PAU_object@@@Z
?GetIDsOfNames@PyGatewayBase@@UAGJABU_GUID@@PAPA_WIKPAJ@Z
?GetIDsOfNames@PyIDispatch@@SAPAU_object@@PAU2@0@Z
?GetIID@PyGOleWindow@@MAE?AU_GUID@@XZ
?GetIID@PyGPersist@@MAE?AU_GUID@@XZ
?GetIID@PyGatewayBase@@UAE?AU_GUID@@XZ
?GetImplTypeFlags@PyITypeInfo@@QAEPAU_object@@H@Z
?GetLibAttr@PyITypeLib@@QAEPAU_object@@XZ
?GetMemberName@PyGatewayBase@@UAGJJPAPA_W@Z
?GetMemberName@PyIDispatchEx@@SAPAU_object@@PAU2@0@Z
?GetMemberProperties@PyGatewayBase@@UAGJJKPAK@Z
?GetMemberProperties@PyIDispatchEx@@SAPAU_object@@PAU2@0@Z
?GetNameSpaceParent@PyGatewayBase@@UAGJPAPAUIUnknown@@@Z
?GetNames@PyITypeInfo@@QAEPAU_object@@J@Z
?GetNextDispID@PyGatewayBase@@UAGJKJPAJ@Z
?GetNextDispID@PyIDispatchEx@@SAPAU_object@@PAU2@0@Z
?GetObjectParam@PyIBindCtx@@SAPAU_object@@PAU2@0@Z
?GetRefTypeInfo@PyITypeInfo@@QAEPAU_object@@K@Z
?GetRefTypeOfImplType@PyITypeInfo@@QAEPAU_object@@H@Z
?GetRunningObjectTable@PyIBindCtx@@SAPAU_object@@PAU2@0@Z
?GetSizeMax@PyIPersistStream@@SAPAU_object@@PAU2@0@Z
?GetTypeAttr@PyITypeInfo@@QAEPAU_object@@XZ
?GetTypeComp@PyITypeInfo@@QAEPAU_object@@XZ
?GetTypeComp@PyITypeLib@@QAEPAU_object@@XZ
?GetTypeInfo@PyGatewayBase@@UAGJIKPAPAUITypeInfo@@@Z
?GetTypeInfo@PyIDispatch@@SAPAU_object@@PAU2@0@Z
?GetTypeInfo@PyITypeLib@@QAEPAU_object@@H@Z
?GetTypeInfoCount@PyGatewayBase@@UAGJPAI@Z
?GetTypeInfoCount@PyIDispatch@@SAPAU_object@@PAU2@0@Z
?GetTypeInfoCount@PyITypeLib@@QAEPAU_object@@XZ
?GetTypeInfoOfGuid@PyITypeLib@@QAEPAU_object@@ABU_GUID@@@Z
?GetTypeInfoType@PyITypeLib@@QAEPAU_object@@H@Z
?GetVarDesc@PyITypeInfo@@QAEPAU_object@@H@Z
?GetWindow@PyGOleWindow@@MAGJPAPAUHWND__@@@Z
?GetWindow@PyIOleWindow@@SAPAU_object@@PAU2@0@Z
?Hash@PyIMoniker@@SAPAU_object@@PAU2@0@Z
?InitNew@PyIPersistStreamInit@@SAPAU_object@@PAU2@0@Z
?InterfaceSupportsErrorInfo@PyGatewayBase@@UAGJABU_GUID@@@Z
?Invoke@PyGatewayBase@@UAGJJABU_GUID@@KGPAUtagDISPPARAMS@@PAUtagVARIANT@@PAUtagEXCEPINFO@@PAI@Z
?Invoke@PyIDispatch@@SAPAU_object@@PAU2@0@Z
?InvokeEx@PyGatewayBase@@UAGJJKGPAUtagDISPPARAMS@@PAUtagVARIANT@@PAUtagEXCEPINFO@@PAUIServiceProvider@@@Z
?InvokeEx@PyIDispatchEx@@SAPAU_object@@PAU2@0@Z
?InvokeTypes@PyIDispatch@@SAPAU_object@@PAU2@0@Z
?InvokeViaPolicy@PyGatewayBase@@MAAJPBDPAPAU_object@@0ZZ
?IsDirty@PyIPersistStream@@SAPAU_object@@PAU2@0@Z
?IsEqual@PyIMoniker@@SAPAU_object@@PAU2@0@Z
?IsSystemMoniker@PyIMoniker@@SAPAU_object@@PAU2@0@Z
?Load@PyIPersistStream@@SAPAU_object@@PAU2@0@Z
?LockRegion@PyIStream@@SAPAU_object@@PAU2@0@Z
?LockServer@CPyFactory@@UAGJH@Z
?LockServer@PyIClassFactory@@SAPAU_object@@PAU2@0@Z
?MakeBstrToObj@@YAPAU_object@@QA_W@Z
?MakeOLECHARToObj@@YAPAU_object@@PB_W@Z
?MakeOLECHARToObj@@YAPAU_object@@PB_WH@Z
?MakeObjToVariant@PythonOleArgHelper@@QAEHPAU_object@@PAUtagVARIANT@@0@Z
?MakePythonArgumentTuples@@YAHPAPAU_object@@PAPAVPythonOleArgHelper@@01PAUtagDISPPARAMS@@@Z
?MakeVariantToObj@PythonOleArgHelper@@QAEPAU_object@@PAUtagVARIANT@@@Z
?Next@PyIEnumMoniker@@SAPAU_object@@PAU2@0@Z
?Next@PyIEnumVARIANT@@SAPAU_object@@PAU2@0@Z
?ParseTypeInformation@PythonOleArgHelper@@QAEHPAU_object@@@Z
?PyCom_BstrFromPyObject@@YAHPAU_object@@PAPA_WH@Z
?PyCom_BuildInternalPyException@@YAPAU_object@@PAD@Z
?PyCom_BuildPyException@@YAPAU_object@@JPAUIUnknown@@ABU_GUID@@@Z
?PyCom_BuildPyExceptionFromEXCEPINFO@@YAPAU_object@@JPAUtagEXCEPINFO@@I@Z
?PyCom_DLLAddRef@@YAXXZ
?PyCom_DLLReleaseRef@@YAXXZ
?PyCom_EnableQuitMessage@@YAXK@Z
?PyCom_ExcepInfoFromPyException@@YAXPAUtagEXCEPINFO@@@Z
?PyCom_ExcepInfoFromPyObject@@YAHPAU_object@@PAUtagEXCEPINFO@@PAJ@Z
?PyCom_InterfaceFromPyInstanceOrObject@@YAHPAU_object@@ABU_GUID@@PAPAXH@Z
?PyCom_IsGatewayRegistered@@YAHABU_GUID@@@Z
?PyCom_LogF@@YAXPBDZZ
?PyCom_LoggerException@@YAXPAU_object@@PBDZZ
?PyCom_LoggerNonServerException@@YAXPAU_object@@PBDZZ
?PyCom_LoggerWarning@@YAXPAU_object@@PBDZZ
?PyCom_PyObjectAsSTATSTG@@YAHPAU_object@@PAUtagSTATSTG@@K@Z
?PyCom_PyObjectAsSTGOPTIONS@@YAHPAU_object@@PAPAUtagSTGOPTIONS@@@Z
?PyCom_PyObjectFromExcepInfo@@YAPAU_object@@PBUtagEXCEPINFO@@@Z
?PyCom_PyObjectFromSAFEARRAY@@YAPAU_object@@PAUtagSAFEARRAY@@W4VARENUM@@@Z
?PyCom_PyObjectFromSTATPROPSETSTG@@YAPAU_object@@PAUtagSTATPROPSETSTG@@@Z
?PyCom_PyObjectFromSTATSTG@@YAPAU_object@@PAUtagSTATSTG@@@Z
?PyCom_RegisterClientType@@YAHPAU_typeobject@@PBU_GUID@@@Z
?PyCom_RegisterExtensionSupport@@YAHPAU_object@@PBUPyCom_InterfaceSupportInfo@@H@Z
?PyCom_RegisterGatewayObject@@YAJABU_GUID@@P6AJPAU_object@@PAVPyGatewayBase@@PAPAX0@ZPBD@Z
?PyCom_SAFEARRAYFromPyObject@@YAHPAU_object@@PAPAUtagSAFEARRAY@@W4VARENUM@@@Z
?PyCom_SetAndLogCOMErrorFromPyException@@YAJPBDABU_GUID@@@Z
?PyCom_SetAndLogCOMErrorFromPyExceptionEx@@YAJPAU_object@@PBDABU_GUID@@@Z
?PyCom_SetCOMErrorFromPyException@@YAJABU_GUID@@@Z
?PyCom_SetCOMErrorFromSimple@@YAJJABU_GUID@@PBD@Z
?PyCom_StreamMessage@@YAXPBD@Z
?PyGatewayConstruct@PyGOleWindow@@SAJPAU_object@@PAVPyGatewayBase@@PAPAXABU_GUID@@@Z
?PyGatewayConstruct@PyGPersist@@SAJPAU_object@@PAVPyGatewayBase@@PAPAXABU_GUID@@@Z
?PyGatewayConstruct@PyGatewayBase@@SAJPAU_object@@PAV1@PAPAXABU_GUID@@@Z
?PyObConstruct@PyIBindCtx@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIClassFactory@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIConnectionPoint@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIConnectionPointContainer@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIDispatch@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIDispatchEx@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIEnumMoniker@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIEnumVARIANT@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIMoniker@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIOleWindow@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIPersist@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIPersistStream@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIPersistStreamInit@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIProvideClassInfo2@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIProvideClassInfo@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIServiceProvider@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIStream@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyITypeComp@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyITypeInfo@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyITypeLib@@SAPAVPyIUnknown@@PAUIUnknown@@@Z
?PyObConstruct@PyIUnknown@@SAPAV1@PAUIUnknown@@@Z
?PyObject_AsCurrency@@YAHPAU_object@@PATtagCY@@@Z
?PyObject_AsOLEMENUGROUPWIDTHS@@YAHPAU_object@@PAUtagOleMenuGroupWidths@@@Z
?PyObject_AsPROPVARIANT@@YAHPAU_object@@PAUtagPROPVARIANT@@@Z
?PyObject_FromCurrency@@YAPAU_object@@AATtagCY@@@Z
?PyObject_FromOLEMENUGROUPWIDTHS@@YAPAU_object@@PBUtagOleMenuGroupWidths@@@Z
?PyObject_FromPROPVARIANT@@YAPAU_object@@PAUtagPROPVARIANT@@@Z
?PyObject_FromPROPVARIANTs@@YAPAU_object@@PAUtagPROPVARIANT@@K@Z
?PyObject_FromSTGMEDIUM@@YAPAVPySTGMEDIUM@@PAUtagSTGMEDIUM@@@Z
?PyOleArgNotFoundType@@3U_typeobject@@A
?PyOleEmptyType@@3U_typeobject@@A
?PyOleMissingType@@3U_typeobject@@A
?QueryInterface@CPyFactory@@UAGJABU_GUID@@PAPAX@Z
?QueryInterface@PyGOleWindow@@MAGJABU_GUID@@PAPAX@Z
?QueryInterface@PyGPersist@@MAGJABU_GUID@@PAPAX@Z
?QueryInterface@PyGatewayBase@@UAGJABU_GUID@@PAPAX@Z
?QueryInterface@PyIUnknown@@SAPAU_object@@PAU2@0@Z
?QueryService@PyIServiceProvider@@SAPAU_object@@PAU2@0@Z
?Read@PyIStream@@SAPAU_object@@PAU2@0@Z
?RegisterObjectParam@PyIBindCtx@@SAPAU_object@@PAU2@0@Z
?Release@CPyFactory@@UAGKXZ
?Release@PyGOleWindow@@MAGKXZ
?Release@PyGPersist@@MAGKXZ
?Release@PyGatewayBase@@UAGKXZ
?Reset@PyIEnumMoniker@@SAPAU_object@@PAU2@0@Z
?Reset@PyIEnumVARIANT@@SAPAU_object@@PAU2@0@Z
?Revert@PyIStream@@SAPAU_object@@PAU2@0@Z
?RevokeObjectParam@PyIBindCtx@@SAPAU_object@@PAU2@0@Z
?SafeRelease@PyIUnknown@@SAXPAV1@@Z
?Save@PyIPersistStream@@SAPAU_object@@PAU2@0@Z
?Seek@PyIStream@@SAPAU_object@@PAU2@0@Z
?SetBindOptions@PyIBindCtx@@SAPAU_object@@PAU2@0@Z
?SetPythonCOMError@PyIConnectionPoint@@SAPAU_object@@PAU2@J@Z
?SetPythonCOMError@PyIConnectionPointContainer@@SAPAU_object@@PAU2@J@Z
?SetPythonCOMError@PyIDispatchEx@@SAPAU_object@@PAU2@J@Z
?SetSize@PyIStream@@SAPAU_object@@PAU2@0@Z
?Skip@PyIEnumMoniker@@SAPAU_object@@PAU2@0@Z
?Skip@PyIEnumVARIANT@@SAPAU_object@@PAU2@0@Z
?Stat@PyIStream@@SAPAU_object@@PAU2@0@Z
?ThisAsIID@PyGOleWindow@@MAEPAXU_GUID@@@Z
?ThisAsIID@PyGPersist@@MAEPAXU_GUID@@@Z
?ThisAsIID@PyGatewayBase@@UAEPAXU_GUID@@@Z
?Type@PySTGMEDIUM@@2U_typeobject@@A
?Unadvise@PyIConnectionPoint@@SAPAU_object@@PAU2@0@Z
?UnlockRegion@PyIStream@@SAPAU_object@@PAU2@0@Z
?Unwrap@PyGatewayBase@@UAGJPAPAU_object@@@Z
?Write@PyIStream@@SAPAU_object@@PAU2@0@Z
?cmp@PyIBase@@SAHPAU_object@@0@Z
?compare@PyIBase@@UAEHPAU_object@@@Z
?compare@PyIUnknown@@UAEHPAU_object@@@Z
?dealloc@PyIBase@@SAXPAU_object@@@Z
?deallocFunc@PySTGMEDIUM@@SAXPAU_object@@@Z
?getattr@PyIBase@@UAEPAU_object@@PAD@Z
?getattro@PyIBase@@SAPAU_object@@PAU2@0@Z
?getattro@PySTGMEDIUM@@SAPAU_object@@PAU2@0@Z
?is_interface_type@PyComTypeObject@@SAHPAU_object@@@Z
?is_object@PyIBase@@QAEHPAVPyComTypeObject@@@Z
?is_object@PyIBase@@SAHPAU_object@@PAVPyComTypeObject@@@Z
?iter@PyComEnumProviderTypeObject@@SAPAU_object@@PAU2@@Z
?iter@PyComEnumTypeObject@@SAPAU_object@@PAU2@@Z
?iter@PyIBase@@UAEPAU_object@@XZ
?iternext@PyComEnumTypeObject@@SAPAU_object@@PAU2@@Z
?iternext@PyIBase@@UAEPAU_object@@XZ
?methods@PySTGMEDIUM@@2PAUPyMethodDef@@A
?repr@PyIBase@@SAPAU_object@@PAU2@@Z
?repr@PyIBase@@UAEPAU_object@@XZ
?repr@PyIUnknown@@UAEPAU_object@@XZ
?richcmp@PyIBase@@SAPAU_object@@PAU2@0H@Z
?setattr@PyIBase@@UAEHPADPAU_object@@@Z
?setattro@PyIBase@@SAHPAU_object@@00@Z
?szErrMsgObjectReleased@PyIUnknown@@2PADA
?type@PyIBindCtx@@2VPyComTypeObject@@A
?type@PyIClassFactory@@2VPyComTypeObject@@A
?type@PyIConnectionPoint@@2VPyComTypeObject@@A
?type@PyIConnectionPointContainer@@2VPyComTypeObject@@A
?type@PyIDispatch@@2VPyComTypeObject@@A
?type@PyIDispatchEx@@2VPyComTypeObject@@A
?type@PyIEnumMoniker@@2VPyComEnumTypeObject@@A
?type@PyIEnumVARIANT@@2VPyComEnumTypeObject@@A
?type@PyIMoniker@@2VPyComEnumProviderTypeObject@@A
?type@PyIOleWindow@@2VPyComTypeObject@@A
?type@PyIPersist@@2VPyComTypeObject@@A
?type@PyIPersistStream@@2VPyComTypeObject@@A
?type@PyIPersistStreamInit@@2VPyComTypeObject@@A
?type@PyIProvideClassInfo2@@2VPyComTypeObject@@A
?type@PyIProvideClassInfo@@2VPyComTypeObject@@A
?type@PyIServiceProvider@@2VPyComTypeObject@@A
?type@PyIStream@@2VPyComTypeObject@@A
?type@PyITypeComp@@2VPyComTypeObject@@A
?type@PyITypeInfo@@2VPyComTypeObject@@A
?type@PyITypeLib@@2VPyComTypeObject@@A
?type@PyIUnknown@@2VPyComTypeObject@@A
DllCanUnloadNow
DllGetClassObject
DllRegisterServerEx
DllUnregisterServerEx
PyCom_CoInitialize
PyCom_CoInitializeEx
PyCom_CoUninitialize
PyCom_InterfaceFromPyObject
PyCom_MakeOlePythonCall
PyCom_PyObjectFromIUnknown
PyCom_PyObjectFromVariant
PyCom_VariantFromPyObject
_DllMain@12
initpythoncom

Sections

.text
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 90KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cacb420dfc46dc664f49f57934ffc493

Headers

File Characteristics

Imports

oleaut32

ole32

user32

python27

pywintypes27

msvcr90

kernel32

Exports

Exports

Sections

.text Size: 203KB - Virtual size: 203KB

.rdata Size: 111KB - Virtual size: 110KB

.data Size: 13KB - Virtual size: 39KB

.rsrc Size: 1024B - Virtual size: 852B

.reloc Size: 26KB - Virtual size: 25KB

.text Size: 90KB - Virtual size: 92KB

.text
Size: 203KB - Virtual size: 203KB

.rdata
Size: 111KB - Virtual size: 110KB

.data
Size: 13KB - Virtual size: 39KB

.rsrc
Size: 1024B - Virtual size: 852B

.reloc
Size: 26KB - Virtual size: 25KB

.text
Size: 90KB - Virtual size: 92KB