a94c0d96ebfafb915b2f944f41a86c2fdab426a31092f3bc05cb1ea6ab774680

Sharing

Copy URL Twitter E-mail

General

Target

a94c0d96ebfafb915b2f944f41a86c2fdab426a31092f3bc05cb1ea6ab774680
Size

314KB
MD5

499d6b9df2cd2c9da6e878a509d80a10
SHA1

dc4929a639f944e2de291cb57be576c882fc9a47
SHA256

a94c0d96ebfafb915b2f944f41a86c2fdab426a31092f3bc05cb1ea6ab774680
SHA512

b76a6e9e680445ce4c77c28654f6960cee984b61e1d07b40bdf94e5676338417c32f0056cc15501dab90b9f7b5ea4643fd467468ad302bc1a411eaa3b410f393
SSDEEP

6144:1cFFcBsUDqYR7qDHc2BIWsiNQOAlXKGh+gctV2twH1njKIXNxAMjYc:1cGsOhqA2BIDlKGBctV2twHhjKy

Score

N/A

Malware Config

Signatures

Files

a94c0d96ebfafb915b2f944f41a86c2fdab426a31092f3bc05cb1ea6ab774680
.dll windows x86

5455b79802af5182ec09e23de76de2c4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr90

_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
__CxxFrameHandler3
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABQBDH@Z
??3@YAXPAX@Z
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??_V@YAXPAX@Z
??2@YAPAXI@Z
_invalid_parameter_noinfo
??_U@YAPAXI@Z
memset
strchr
strstr
memcpy
strncpy
sprintf
malloc
strncmp
??1exception@std@@UAE@XZ
realloc
__iob_func
fprintf
clock
calloc
atoi
memmove
isspace
isalpha
isdigit
free
_malloc_crt
??0exception@std@@QAE@ABQBD@Z
_encode_pointer
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
fread
fclose
fgets
fopen

kernel32

TerminateProcess
Sleep
InterlockedCompareExchange
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
InterlockedExchange
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter

cppu3

uno_type_sequence_reference2One
typelib_static_type_getByTypeClass
typelib_static_type_init
uno_any_destruct
typelib_static_sequence_type_init
uno_type_sequence_construct
uno_type_assignData
uno_type_destructData
uno_type_sequence_realloc

cppuhelper3msc

?WeakImplHelper_query@cppu@@YA?AVAny@uno@star@sun@com@@ABVType@3456@PAUclass_data@1@PAXPAVOWeakObject@1@@Z
?release@OWeakObject@cppu@@UAAXXZ
?WeakImplHelper_getTypes@cppu@@YA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@PAUclass_data@1@@Z
?queryAdapter@OWeakObject@cppu@@UAA?AV?$Reference@VXAdapter@uno@star@sun@com@@@uno@star@sun@com@@XZ
??0OInterfaceContainerHelper@cppu@@QAE@AAVMutex@osl@@@Z
??1OInterfaceContainerHelper@cppu@@QAE@XZ
?createOneInstanceFactory@cppu@@YA?AV?$Reference@VXSingleServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@3456@ABVOUString@rtl@@P6A?AV?$Reference@VXInterface@uno@star@sun@com@@@3456@0@ZABV?$Sequence@VOUString@rtl@@@3456@PAU_rtl_ModuleCount@@@Z
??0OWeakObject@cppu@@QAE@XZ
?removeInterface@OInterfaceContainerHelper@cppu@@QAAJABV?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@@Z
?addInterface@OInterfaceContainerHelper@cppu@@QAAJABV?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@@Z
??1OWeakObject@cppu@@MAE@XZ
?ImplHelper_getImplementationId@cppu@@YA?AV?$Sequence@C@uno@star@sun@com@@PAUclass_data@1@@Z
?acquire@OWeakObject@cppu@@UAAXXZ
?disposeAndClear@OInterfaceContainerHelper@cppu@@QAAXABUEventObject@lang@star@sun@com@@@Z

i18nisolang1msc

?convertLanguageToLocale@MsLangId@@SA?AULocale@lang@star@sun@com@@G_N@Z
?convertIsoStringToLanguage@MsLangId@@SAGABVOUString@rtl@@G@Z

tl

??1String@@QAE@XZ
??BString@@QBE?AVOUString@rtl@@XZ
??0String@@QAE@ABVOUString@rtl@@@Z
?Assign@String@@QAEAAV1@ABV1@@Z
?CreateFromAscii@String@@SA?AV1@PBD@Z
??0String@@QAE@XZ

utl

??1SvtLinguConfigDictionaryEntry@@QAE@XZ
??0SvtLinguConfigDictionaryEntry@@QAE@ABU0@@Z
??1SvtLinguConfig@@UAE@XZ
??0SvtLinguConfig@@QAE@XZ
?GetActiveDictionariesByFormat@SvtLinguConfig@@QAE?AV?$vector@USvtLinguConfigDictionaryEntry@@V?$allocator@USvtLinguConfigDictionaryEntry@@@std@@@std@@ABVOUString@rtl@@@Z
?GetSupportedDictionaryFormatsFor@SvtLinguConfig@@QBEEABVOUString@rtl@@0AAV?$Sequence@VOUString@rtl@@@uno@star@sun@com@@@Z

sal3

rtl_getTextEncodingFromMimeCharset
rtl_getTextEncodingFromUnixCharset
rtl_string_acquire
rtl_string_new
osl_getGlobalMutex
osl_incrementInterlockedCount
osl_getThreadTextEncoding
rtl_uStringbuffer_newFromStr_WithLength
osl_getSystemPathFromFileURL
rtl_freeMemory
rtl_allocateMemory
osl_releaseMutex
osl_acquireMutex
rtl_uString_newFromAscii
rtl_uString_newConcat
rtl_uString_newFromStr_WithLength
rtl_ustr_lastIndexOfChar_WithLength
rtl_ustr_ascii_compare_WithLength
rtl_ustr_shortenedCompare_WithLength
rtl_ustr_compare_WithLength
rtl_uString_assign
rtl_string2UString
rtl_uString_acquire
rtl_uString_new
rtl_string_assign
rtl_string_release
rtl_uString2String
rtl_string_newFromStr
rtl_uString_release

lng

?GetLinguMutex@linguistic@@YAAAVMutex@osl@@XZ
?RemoveAsPropListener@PropertyChgHelper@linguistic@@QAEXXZ
?SetAlternatives@SpellAlternatives@linguistic@@QAEXABV?$Sequence@VOUString@rtl@@@uno@star@sun@com@@@Z
?SetFailureType@SpellAlternatives@linguistic@@QAEXF@Z
?SetWordLanguage@SpellAlternatives@linguistic@@QAEXABVOUString@rtl@@F@Z
??0SpellAlternatives@linguistic@@QAE@XZ
?LocaleToLanguage@linguistic@@YAGABULocale@lang@star@sun@com@@@Z
?AddAsPropListener@PropertyChgHelper@linguistic@@QAEXXZ
??0PropertyHelper_Spell@linguistic@@QAE@ABV?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@AAV?$Reference@VXPropertySet@beans@star@sun@com@@@3456@@Z
?GetLinguProperties@linguistic@@YA?AV?$Reference@VXPropertySet@beans@star@sun@com@@@uno@star@sun@com@@XZ
?HasDigits@linguistic@@YAEABVOUString@rtl@@@Z
?IsUpper@linguistic@@YAEABVString@@GGF@Z

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

uwinapi

GetShortPathNameW

icuuc40

u_isalpha_4_0
u_tolower_4_0
u_toupper_4_0

Exports

Exports

GetVersionInfo
component_getFactory
component_getImplementationEnvironment

Sections

.text
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 135KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5455b79802af5182ec09e23de76de2c4

Headers

DLL Characteristics

File Characteristics

Imports

msvcr90

kernel32

cppu3

cppuhelper3msc

i18nisolang1msc

tl

utl

sal3

lng

msvcp90

uwinapi

icuuc40

Exports

Exports

Sections

.text Size: 130KB - Virtual size: 130KB

.rdata Size: 24KB - Virtual size: 24KB

.data Size: 15KB - Virtual size: 15KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 5KB

.text Size: 135KB - Virtual size: 136KB

.text
Size: 130KB - Virtual size: 130KB

.rdata
Size: 24KB - Virtual size: 24KB

.data
Size: 15KB - Virtual size: 15KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 5KB

.text
Size: 135KB - Virtual size: 136KB