fbe839dd4ffa4df218cf881de00c4b29ba78b2759b00460e6dada004479c8f4a

Sharing

Copy URL

Twitter E-mail

General

Target

fbe839dd4ffa4df218cf881de00c4b29ba78b2759b00460e6dada004479c8f4a
Size

3.6MB
MD5

105c60048af31fe9650306b283c5b0e5
SHA1

dad4727f16b21390dd076948cd57d082daf01398
SHA256

fbe839dd4ffa4df218cf881de00c4b29ba78b2759b00460e6dada004479c8f4a
SHA512

cadbf31c5c40a3227460c2a2abff84337e9e7a0b61e3643abfe4a16e20622d8e9e913e83f33f908e4827a696fd3f6c5a0d3758f84cd12d4520f4f314b85e15ff
SSDEEP

49152:hOihsJcwS+HW5prII6KYoDbQxKVwk1tdl+ad2k:hYawLGH9rp

Score

N/A

Malware Config

Signatures

Files

fbe839dd4ffa4df218cf881de00c4b29ba78b2759b00460e6dada004479c8f4a
.dll windows x86

8aa35c0eb2ba542cc014ddd21ad1fdd2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cppu3

cppu_Any_extraction_failure_msg
uno_type_isAssignableFromData
uno_type_assignData
uno_any_clear
typelib_typedescriptionreference_assign
typelib_typedescriptionreference_acquire
typelib_typedescriptionreference_release
uno_type_any_construct
cppu_unsatisfied_iset_msg
uno_type_any_assign
cppu_unsatisfied_iquery_msg
uno_any_construct
uno_type_sequence_realloc
uno_type_sequence_reference2One
typelib_static_type_init
uno_any_destruct
uno_type_sequence_assign
uno_type_destructData
uno_type_sequence_construct
typelib_static_sequence_type_init
typelib_static_type_getByTypeClass

cppuhelper3msc

?queryAdapter@OWeakObject@cppu@@UAA?AV?$Reference@VXAdapter@uno@star@sun@com@@@uno@star@sun@com@@XZ
??0OWeakObject@cppu@@QAE@XZ
?acquire@OWeakObject@cppu@@UAAXXZ
?release@OWeakObject@cppu@@UAAXXZ
?WeakImplHelper_query@cppu@@YA?AVAny@uno@star@sun@com@@ABVType@3456@PAUclass_data@1@PAXPAVOWeakObject@1@@Z
?WeakImplHelper_getTypes@cppu@@YA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@PAUclass_data@1@@Z
?ImplHelper_getImplementationId@cppu@@YA?AV?$Sequence@C@uno@star@sun@com@@PAUclass_data@1@@Z
?queryInterface@OWeakObject@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?createSingleComponentFactory@cppu@@YA?AV?$Reference@VXSingleComponentFactory@lang@star@sun@com@@@uno@star@sun@com@@P6A?AV?$Reference@VXInterface@uno@star@sun@com@@@3456@ABV?$Reference@VXComponentContext@uno@star@sun@com@@@3456@@ZABVOUString@rtl@@ABV?$Sequence@VOUString@rtl@@@3456@PAU_rtl_ModuleCount@@@Z
?createSingleFactory@cppu@@YA?AV?$Reference@VXSingleServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@3456@ABVOUString@rtl@@P6A?AV?$Reference@VXInterface@uno@star@sun@com@@@3456@0@ZABV?$Sequence@VOUString@rtl@@@3456@PAU_rtl_ModuleCount@@@Z
?ImplHelper_queryNoXInterface@cppu@@YA?AVAny@uno@star@sun@com@@ABVType@3456@PAUclass_data@1@PAX@Z
?ImplInhHelper_getTypes@cppu@@YA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@PAUclass_data@1@ABV23456@@Z
??1OWeakObject@cppu@@MAE@XZ

comphelp4msc

?getLength@SequenceInputStream@comphelper@@UAA_JXZ
?getPosition@SequenceInputStream@comphelper@@UAA_JXZ
?seek@SequenceInputStream@comphelper@@UAAX_J@Z
?available@SequenceInputStream@comphelper@@UAAJXZ
?skipBytes@SequenceInputStream@comphelper@@UAAXJ@Z
?readSomeBytes@SequenceInputStream@comphelper@@UAAJAAV?$Sequence@C@uno@star@sun@com@@J@Z
?readBytes@SequenceInputStream@comphelper@@UAAJAAV?$Sequence@C@uno@star@sun@com@@J@Z
?getImplementationId@?$WeakImplHelper2@VXInputStream@io@star@sun@com@@VXSeekable@2345@@cppu@@UAA?AV?$Sequence@C@uno@star@sun@com@@XZ
?getTypes@?$WeakImplHelper2@VXInputStream@io@star@sun@com@@VXSeekable@2345@@cppu@@UAA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@XZ
??5SequenceAsHashMap@comphelper@@QBEXAAV?$Sequence@UPropertyValue@beans@star@sun@com@@@uno@star@sun@com@@@Z
??0SequenceAsHashMap@comphelper@@QAE@ABV?$Sequence@UNamedValue@beans@star@sun@com@@@uno@star@sun@com@@@Z
?PROP_ABORTED@MediaDescriptor@comphelper@@SAABVOUString@rtl@@XZ
??1IDocPasswordVerifier@comphelper@@UAE@XZ
?requestAndVerifyDocPassword@DocPasswordHelper@comphelper@@SA?AVOUString@rtl@@AAVIDocPasswordVerifier@2@AAVMediaDescriptor@2@W4DocPasswordRequestType@2@PBV?$vector@VOUString@rtl@@V?$allocator@VOUString@rtl@@@_STL@@@_STL@@@Z
??0SequenceAsHashMap@comphelper@@QAE@XZ
??0MediaDescriptor@comphelper@@QAE@XZ
??0MediaDescriptor@comphelper@@QAE@ABV?$Sequence@UPropertyValue@beans@star@sun@com@@@uno@star@sun@com@@@Z
??4MediaDescriptor@comphelper@@QAEAAV01@ABV01@@Z
??1SequenceAsHashMap@comphelper@@QAE@XZ
?addInputStream@MediaDescriptor@comphelper@@QAEEXZ
?PROP_URL@MediaDescriptor@comphelper@@SAABVOUString@rtl@@XZ
?PROP_STATUSINDICATOR@MediaDescriptor@comphelper@@SAABVOUString@rtl@@XZ
?PROP_INTERACTIONHANDLER@MediaDescriptor@comphelper@@SAABVOUString@rtl@@XZ
??1MediaDescriptor@comphelper@@QAE@XZ
?PROP_STREAMFOROUTPUT@MediaDescriptor@comphelper@@SAABVOUString@rtl@@XZ
?PROP_INPUTSTREAM@MediaDescriptor@comphelper@@SAABVOUString@rtl@@XZ
?PROP_COMPONENTDATA@MediaDescriptor@comphelper@@SAABVOUString@rtl@@XZ
?getAsConstPropertyValueList@SequenceAsHashMap@comphelper@@QBE?BV?$Sequence@UPropertyValue@beans@star@sun@com@@@uno@star@sun@com@@XZ
??6SequenceAsHashMap@comphelper@@QAEXABVAny@uno@star@sun@com@@@Z
?GetStorageOfFormatFromStream@OStorageHelper@comphelper@@SA?AV?$Reference@VXStorage@embed@star@sun@com@@@uno@star@sun@com@@ABVOUString@rtl@@ABV?$Reference@VXStream@io@star@sun@com@@@4567@JABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@4567@@Z
?GetStorageOfFormatFromInputStream@OStorageHelper@comphelper@@SA?AV?$Reference@VXStorage@embed@star@sun@com@@@uno@star@sun@com@@ABVOUString@rtl@@ABV?$Reference@VXInputStream@io@star@sun@com@@@4567@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@4567@@Z
??0ComponentContext@comphelper@@QAE@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@@Z
?getUNOContext@ComponentContext@comphelper@@QBE?AV?$Reference@VXComponentContext@uno@star@sun@com@@@uno@star@sun@com@@XZ
??1ComponentContext@comphelper@@QAE@XZ
??1SequenceInputStream@comphelper@@UAE@XZ
?release@?$WeakImplHelper2@VXInputStream@io@star@sun@com@@VXSeekable@2345@@cppu@@UAAXXZ
?acquire@?$WeakImplHelper2@VXInputStream@io@star@sun@com@@VXSeekable@2345@@cppu@@UAAXXZ
?queryInterface@?$WeakImplHelper2@VXInputStream@io@star@sun@com@@VXSeekable@2345@@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
??0SequenceInputStream@comphelper@@QAE@ABV?$Sequence@C@uno@star@sun@com@@@Z
?closeInput@SequenceInputStream@comphelper@@UAAXXZ

sal3

osl_getTimeValueFromDateTime
rtl_uString_getToken
rtl_math_uStringToDouble
rtl_ustr_ascii_shortenedCompare_WithLength
rtl_uString_newReplaceStrAt
rtl_ustr_indexOfStr_WithLength
rtl_ustr_toFloat
rtl_getTextEncodingFromWindowsCharset
rtl_uString_newToAsciiUpperCase
rtl_str_getLength
rtl_uStringbuffer_insert_ascii
rtl_ustr_lastIndexOfChar_WithLength
rtl_str_valueOfInt32
rtl_digest_update
rtl_digest_get
rtl_ustr_ascii_compare_WithLength
rtl_ustr_reverseCompare_WithLength
rtl_uriConvertRelToAbs
rtl_uString_newReplace
rtl_ustr_hashCode_WithLength
rtl_ustr_shortenedCompare_WithLength
rtl_ustr_asciil_reverseEquals_WithLength
rtl_uStringbuffer_newFromStringBuffer
rtl_uString_newTrim
rtl_cipher_init
rtl_digest_updateMD5
rtl_digest_rawMD5
rtl_digest_destroy
rtl_cipher_destroy
rtl_cipher_create
rtl_digest_create
rtl_ustr_indexOfChar_WithLength
osl_getDateTimeFromTimeValue
osl_getGlobalMutex
osl_releaseMutex
osl_acquireMutex
osl_destroyMutex
osl_createMutex
rtl_ustr_compare_WithLength
rtl_freeMemory
rtl_allocateMemory
rtl_uStringbuffer_newFromStr_WithLength
rtl_ustr_valueOfInt32
rtl_uString_internConvert
rtl_uString_newConcat
rtl_stringbuffer_insert
rtl_string_new_WithLength
rtl_uStringbuffer_ensureCapacity
rtl_string_newFromStr_WithLength
rtl_string_acquire
rtl_string_new
rtl_uStringbuffer_insert
rtl_uString_new_WithLength
rtl_ustr_toDouble
rtl_ustr_toInt64
rtl_ustr_toInt32
rtl_uString_newFromStr_WithLength
osl_incrementInterlockedCount
rtl_uString_assign
rtl_string2UString
rtl_uString_new
rtl_string_release
rtl_uString2String
rtl_string_newFromStr
rtl_uString_newFromAscii
rtl_uString_release
rtl_uString_acquire
rtl_ustr_toBoolean
rtl_str_toInt32
rtl_math_approxValue
rtl_ustr_valueOfBoolean
rtl_string_newToAsciiLowerCase
rtl_str_compare_WithLength
rtl_ustr_ascii_shortenedCompareIgnoreAsciiCase_WithLength
rtl_ustr_compareIgnoreAsciiCase_WithLength
rtl_ustr_valueOfDouble
rtl_stringbuffer_newFromStr_WithLength
rtl_ustr_ascii_compareIgnoreAsciiCase_WithLength
rtl_ustr_shortenedCompareIgnoreAsciiCase_WithLength
rtl_uString_newFromStr
osl_getThreadTextEncoding
rtl_cipher_decode

basegfxmi

?get@B2DHomMatrix@basegfx@@QBENGG@Z
??1B2DPolygon@basegfx@@QAE@XZ
?getB2DPoint@B2DPolygon@basegfx@@QBE?AVB2DPoint@2@K@Z
?count@B2DPolygon@basegfx@@QBEKXZ
?transform@B2DPolygon@basegfx@@QAEXABVB2DHomMatrix@2@@Z
??1B2DHomMatrix@basegfx@@QAE@XZ
?insert@B2DPolygon@basegfx@@QAEXKABVB2DPoint@2@K@Z
??0B2DPolygon@basegfx@@QAE@XZ
?rotate@B2DHomMatrix@basegfx@@QAEXN@Z
?translate@B2DHomMatrix@basegfx@@QAEXNN@Z
??XB2DPoint@basegfx@@QAEAAV01@ABVB2DHomMatrix@1@@Z
?scale@B2DHomMatrix@basegfx@@QAEXNN@Z
??0B2DHomMatrix@basegfx@@QAE@XZ

saxmi

??0FastSerializerHelper@sax_fastparser@@QAE@ABV?$Reference@VXOutputStream@io@star@sun@com@@@uno@star@sun@com@@@Z
?endElement@FastSerializerHelper@sax_fastparser@@QAEXJ@Z
?convertNumber@Converter@sax@@SA_NAAJABVOUString@rtl@@JJ@Z
?startElementNS@FastSerializerHelper@sax_fastparser@@QAAXJJZZ
??1FastSerializerHelper@sax_fastparser@@QAE@XZ
?write@FastSerializerHelper@sax_fastparser@@QAEPAV12@PBD@Z
?startElement@FastSerializerHelper@sax_fastparser@@QAAXJZZ
?write@FastSerializerHelper@sax_fastparser@@QAEPAV12@ABVOUString@rtl@@@Z

libeay32

ord266
ord3019
ord3067
ord2644
ord961
ord2656
ord256

msvcr90

strncmp
free
_encoded_null
_initterm
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
floor
_CIpow
__CxxFrameHandler3
??3@YAXPAX@Z
_CxxThrowException
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBDH@Z
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
_malloc_crt
memset
_purecall
memcpy
memmove
??2@YAPAXI@Z
??_V@YAXPAX@Z
??_U@YAPAXI@Z
printf
??0exception@std@@QAE@XZ
__RTDynamicCast
modf
fflush
fprintf
__iob_func

uwinapi

snprintf

kernel32

TerminateProcess
IsDebuggerPresent
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
InterlockedExchange
Sleep
InterlockedCompareExchange

stlport_vc7145

?_M_increment@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@@Z
??1?$basic_string@DV?$char_traits@D@_STL@@V?$allocator@D@2@@_STL@@QAE@XZ
?allocate@?$__node_alloc@$00$0A@@_STL@@SAPAXI@Z
?deallocate@?$__node_alloc@$00$0A@@_STL@@SAXPAXI@Z
??1?$_STLP_alloc_proxy@PADDV?$allocator@D@_STL@@@_STL@@QAE@XZ
??1?$allocator@D@_STL@@QAE@XZ
?allocate@?$allocator@D@_STL@@QBEPADIPBX@Z
?deallocate@?$allocator@D@_STL@@QBEXPADI@Z
?_M_decrement@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@@Z
?_Rebalance@?$_Rb_global@_N@_STL@@SAXPAU_Rb_tree_node_base@2@AAPAU32@@Z
??1?$_STLP_alloc_proxy@PAGGV?$allocator@G@_STL@@@_STL@@QAE@XZ
??1?$allocator@G@_STL@@QAE@XZ
?deallocate@?$allocator@G@_STL@@QBEXPAGI@Z
?allocate@?$allocator@G@_STL@@QBEPAGIPBX@Z
?_Rebalance_for_erase@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@AAPAU32@11@Z
??1?$allocator@PAX@_STL@@QAE@XZ
??1?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@XZ
?swap@?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAEXAAV12@@Z
??0?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@IABQAXABV?$allocator@PAX@1@@Z
?get_allocator@?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QBE?AV?$allocator@PAX@2@XZ
?_M_fill_insert@?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAEXPAPAXIABQAX@Z
?reserve@?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAEXI@Z
??0?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@ABV?$allocator@PAX@1@@Z

Exports

Exports

??0?$WeakImplHelper2@VXExtendedFilterDetection@document@star@sun@com@@VXServiceInfo@lang@345@@cppu@@QAE@ABV01@@Z
??0?$WeakImplHelper2@VXExtendedFilterDetection@document@star@sun@com@@VXServiceInfo@lang@345@@cppu@@QAE@XZ
??0?$WeakImplHelper5@VXServiceInfo@lang@star@sun@com@@VXInitialization@2345@VXImporter@document@345@VXExporter@8345@VXFilter@8345@@cppu@@QAE@ABV01@@Z
??0?$WeakImplHelper5@VXServiceInfo@lang@star@sun@com@@VXInitialization@2345@VXImporter@document@345@VXExporter@8345@VXFilter@8345@@cppu@@QAE@XZ
??0ChartConverter@chart@drawingml@oox@@QAE@XZ
??0FilterBase@core@oox@@QAE@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@@Z
??0FilterDetect@core@oox@@QAE@ABV012@@Z
??0FilterDetect@core@oox@@QAE@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@@Z
??0StorageBase@oox@@IAE@ABV01@ABVOUString@rtl@@@Z
??0StorageBase@oox@@QAE@ABV?$Reference@VXInputStream@io@star@sun@com@@@uno@star@sun@com@@_N@Z
??0StorageBase@oox@@QAE@ABV?$Reference@VXStream@io@star@sun@com@@@uno@star@sun@com@@_N@Z
??0XmlFilterBase@core@oox@@QAE@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@@Z
??1?$WeakImplHelper2@VXExtendedFilterDetection@document@star@sun@com@@VXServiceInfo@lang@345@@cppu@@UAE@XZ
??1?$WeakImplHelper5@VXServiceInfo@lang@star@sun@com@@VXInitialization@2345@VXImporter@document@345@VXExporter@8345@VXFilter@8345@@cppu@@UAE@XZ
??1ChartConverter@chart@drawingml@oox@@UAE@XZ
??1FilterBase@core@oox@@UAE@XZ
??1FilterDetect@core@oox@@UAE@XZ
??1StorageBase@oox@@UAE@XZ
??1XmlFilterBase@core@oox@@UAE@XZ
??4?$WeakImplHelper2@VXExtendedFilterDetection@document@star@sun@com@@VXServiceInfo@lang@345@@cppu@@QAEAAV01@ABV01@@Z
??4?$WeakImplHelper5@VXServiceInfo@lang@star@sun@com@@VXInitialization@2345@VXImporter@document@345@VXExporter@8345@VXFilter@8345@@cppu@@QAEAAV01@ABV01@@Z
??4FilterDetect@core@oox@@QAEAAV012@ABV012@@Z
??_7ChartConverter@chart@drawingml@oox@@6B@
??_7FilterBase@core@oox@@6BOWeakObject@cppu@@@
??_7FilterBase@core@oox@@6BXExporter@document@star@sun@com@@@
??_7FilterBase@core@oox@@6BXFilter@document@star@sun@com@@@
??_7FilterBase@core@oox@@6BXImporter@document@star@sun@com@@@
??_7FilterBase@core@oox@@6BXInitialization@lang@star@sun@com@@@
??_7FilterBase@core@oox@@6BXServiceInfo@lang@star@sun@com@@@
??_7FilterBase@core@oox@@6BXTypeProvider@lang@star@sun@com@@@
??_7FilterDetect@core@oox@@6BOWeakObject@cppu@@@
??_7FilterDetect@core@oox@@6BXExtendedFilterDetection@document@star@sun@com@@@
??_7FilterDetect@core@oox@@6BXServiceInfo@lang@star@sun@com@@@
??_7FilterDetect@core@oox@@6BXTypeProvider@lang@star@sun@com@@@
??_7StorageBase@oox@@6B@
??_7XmlFilterBase@core@oox@@6BOWeakObject@cppu@@@
??_7XmlFilterBase@core@oox@@6BXExporter@document@star@sun@com@@@
??_7XmlFilterBase@core@oox@@6BXFilter@document@star@sun@com@@@
??_7XmlFilterBase@core@oox@@6BXImporter@document@star@sun@com@@@
??_7XmlFilterBase@core@oox@@6BXInitialization@lang@star@sun@com@@@
??_7XmlFilterBase@core@oox@@6BXServiceInfo@lang@star@sun@com@@@
??_7XmlFilterBase@core@oox@@6BXTypeProvider@lang@star@sun@com@@@
?GetUniqueId@XmlFilterBase@core@oox@@QAEJXZ
?GetUniqueIdOString@XmlFilterBase@core@oox@@QAE?AVOString@rtl@@XZ
?GetUniqueIdOUString@XmlFilterBase@core@oox@@QAE?AVOUString@rtl@@XZ
?acquire@?$WeakImplHelper2@VXExtendedFilterDetection@document@star@sun@com@@VXServiceInfo@lang@345@@cppu@@UAAXXZ
?acquire@?$WeakImplHelper5@VXServiceInfo@lang@star@sun@com@@VXInitialization@2345@VXImporter@document@345@VXExporter@8345@VXFilter@8345@@cppu@@UAAXXZ
?addRelation@XmlFilterBase@core@oox@@QAE?AVOUString@rtl@@ABV45@0_N@Z
?addRelation@XmlFilterBase@core@oox@@QAE?AVOUString@rtl@@V?$Reference@VXOutputStream@io@star@sun@com@@@uno@star@sun@com@@ABV45@1_N@Z
?cancel@FilterBase@core@oox@@UAAXXZ
?commit@StorageBase@oox@@QAEXXZ
?commitStorage@FilterBase@core@oox@@QBEXXZ
?convertFromModel@ChartConverter@chart@drawingml@oox@@QAEXAAVXmlFilterBase@core@4@AAUChartSpaceModel@234@ABV?$Reference@VXChartDocument@chart2@star@sun@com@@@uno@star@sun@com@@@Z
?convertScreenPixelX@FilterBase@core@oox@@QBEJN@Z
?convertScreenPixelY@FilterBase@core@oox@@QBEJN@Z
?createDataProvider@ChartConverter@chart@drawingml@oox@@UAEXABV?$Reference@VXChartDocument@chart2@star@sun@com@@@uno@star@sun@com@@@Z
?createDataSequence@ChartConverter@chart@drawingml@oox@@UAE?AV?$Reference@VXDataSequence@data@chart2@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXDataProvider@data@chart2@star@sun@com@@@6789@ABUDataSequenceModel@234@@Z
?detect@FilterDetect@core@oox@@UAA?AVOUString@rtl@@AAV?$Sequence@UPropertyValue@beans@star@sun@com@@@uno@star@sun@com@@@Z
?exportDocumentProperties@XmlFilterBase@core@oox@@QAEAAV123@V?$Reference@VXDocumentProperties@document@star@sun@com@@@uno@star@sun@com@@@Z
?extractUnencryptedPackage@FilterDetect@core@oox@@QBE?AV?$Reference@VXInputStream@io@star@sun@com@@@uno@star@sun@com@@AAVMediaDescriptor@comphelper@@@Z
?filter@FilterBase@core@oox@@UAAEABV?$Sequence@UPropertyValue@beans@star@sun@com@@@uno@star@sun@com@@@Z
?getAbsoluteUrl@FilterBase@core@oox@@QBE?AVOUString@rtl@@ABV45@@Z
?getArgument@FilterBase@core@oox@@QBE?AVAny@uno@star@sun@com@@ABVOUString@rtl@@@Z
?getDeviceInfo@FilterBase@core@oox@@QBEABUDeviceInfo@awt@star@sun@com@@XZ
?getElementNames@StorageBase@oox@@QBEXAAV?$vector@VOUString@rtl@@V?$allocator@VOUString@rtl@@@_STL@@@_STL@@@Z
?getFileUrl@FilterBase@core@oox@@QBEABVOUString@rtl@@XZ
?getFragmentPathFromFirstType@XmlFilterBase@core@oox@@QAE?AVOUString@rtl@@ABV45@@Z
?getGlobalFactory@FilterBase@core@oox@@QBEABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@XZ
?getGraphicHelper@FilterBase@core@oox@@QBEAAVGraphicHelper@3@XZ
?getImplementationId@?$WeakImplHelper2@VXExtendedFilterDetection@document@star@sun@com@@VXServiceInfo@lang@345@@cppu@@UAA?AV?$Sequence@C@uno@star@sun@com@@XZ
?getImplementationId@?$WeakImplHelper5@VXServiceInfo@lang@star@sun@com@@VXInitialization@2345@VXImporter@document@345@VXExporter@8345@VXFilter@8345@@cppu@@UAA?AV?$Sequence@C@uno@star@sun@com@@XZ
?getImplementationName@FilterBase@core@oox@@UAA?AVOUString@rtl@@XZ
?getImplementationName@FilterDetect@core@oox@@UAA?AVOUString@rtl@@XZ
?getInteractionHandler@FilterBase@core@oox@@QBEABV?$Reference@VXInteractionHandler@task@star@sun@com@@@uno@star@sun@com@@XZ
?getMediaDescriptor@FilterBase@core@oox@@QBEAAVMediaDescriptor@comphelper@@XZ
?getModel@FilterBase@core@oox@@QBEABV?$Reference@VXModel@frame@star@sun@com@@@uno@star@sun@com@@XZ
?getModelFactory@FilterBase@core@oox@@QBEABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@XZ
?getModelObjectHelper@FilterBase@core@oox@@QBEAAVModelObjectHelper@3@XZ
?getName@StorageBase@oox@@QBEABVOUString@rtl@@XZ
?getOleObjectHelper@FilterBase@core@oox@@QBEAAVOleObjectHelper@ole@3@XZ
?getPaletteColor@FilterBase@core@oox@@UBEJJ@Z
?getPath@StorageBase@oox@@QBE?AVOUString@rtl@@XZ
?getSchemeColor@FilterBase@core@oox@@UBEJJ@Z
?getStatusIndicator@FilterBase@core@oox@@QBEABV?$Reference@VXStatusIndicator@task@star@sun@com@@@uno@star@sun@com@@XZ
?getStorage@FilterBase@core@oox@@QBE?AV?$shared_ptr@VStorageBase@oox@@@boost@@XZ
?getSubStorage@StorageBase@oox@@AAE?AV?$shared_ptr@VStorageBase@oox@@@boost@@ABVOUString@rtl@@_N@Z
?getSupportedServiceNames@FilterBase@core@oox@@UAA?AV?$Sequence@VOUString@rtl@@@uno@star@sun@com@@XZ
?getSupportedServiceNames@FilterDetect@core@oox@@UAA?AV?$Sequence@VOUString@rtl@@@uno@star@sun@com@@XZ
?getSystemColor@FilterBase@core@oox@@QBEJJJ@Z
?getTextFieldStack@XmlFilterBase@core@oox@@QBEAAV?$vector@UTextField@core@oox@@V?$allocator@UTextField@core@oox@@@_STL@@@_STL@@XZ
?getTypes@?$WeakImplHelper2@VXExtendedFilterDetection@document@star@sun@com@@VXServiceInfo@lang@345@@cppu@@UAA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@XZ
?getTypes@?$WeakImplHelper5@VXServiceInfo@lang@star@sun@com@@VXInitialization@2345@VXImporter@document@345@VXExporter@8345@VXFilter@8345@@cppu@@UAA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@XZ
?getXStorage@StorageBase@oox@@QBE?AV?$Reference@VXStorage@embed@star@sun@com@@@uno@star@sun@com@@XZ
?implCreateStorage@XmlFilterBase@core@oox@@EBE?AV?$shared_ptr@VStorageBase@oox@@@boost@@ABV?$Reference@VXInputStream@io@star@sun@com@@@uno@star@sun@com@@@Z
?implCreateStorage@XmlFilterBase@core@oox@@EBE?AV?$shared_ptr@VStorageBase@oox@@@boost@@ABV?$Reference@VXStream@io@star@sun@com@@@uno@star@sun@com@@@Z
?implGetInputStream@FilterBase@core@oox@@MBE?AV?$Reference@VXInputStream@io@star@sun@com@@@uno@star@sun@com@@AAVMediaDescriptor@comphelper@@@Z
?implGetInputStream@XmlFilterBase@core@oox@@MBE?AV?$Reference@VXInputStream@io@star@sun@com@@@uno@star@sun@com@@AAVMediaDescriptor@comphelper@@@Z
?implGetOutputStream@FilterBase@core@oox@@MBE?AV?$Reference@VXStream@io@star@sun@com@@@uno@star@sun@com@@AAVMediaDescriptor@comphelper@@@Z
?importBinaryData@FilterBase@core@oox@@QAE_NAAV?$Sequence@C@uno@star@sun@com@@ABVOUString@rtl@@@Z
?importEmbeddedGraphic@FilterBase@core@oox@@QBE?AV?$Reference@VXGraphic@graphic@star@sun@com@@@uno@star@sun@com@@ABVOUString@rtl@@@Z
?importEmbeddedGraphicObject@FilterBase@core@oox@@QBE?AVOUString@rtl@@ABV45@@Z
?importFragment@XmlFilterBase@core@oox@@QAE_NABV?$Reference@VFragmentHandler@core@oox@@@rtl@@@Z
?importRelations@XmlFilterBase@core@oox@@QAE?AV?$shared_ptr@VRelations@core@oox@@@boost@@ABVOUString@rtl@@@Z
?initialize@FilterBase@core@oox@@UAAXABV?$Sequence@VAny@uno@star@sun@com@@@uno@star@sun@com@@@Z
?isExportFilter@FilterBase@core@oox@@QBE_NXZ
?isImportFilter@FilterBase@core@oox@@QBE_NXZ
?isStorage@StorageBase@oox@@QBE_NXZ
?openFragmentStream@XmlFilterBase@core@oox@@QAE?AV?$Reference@VXOutputStream@io@star@sun@com@@@uno@star@sun@com@@ABVOUString@rtl@@0@Z
?openFragmentStreamWithSerializer@XmlFilterBase@core@oox@@QAE?AV?$shared_ptr@VFastSerializerHelper@sax_fastparser@@@boost@@ABVOUString@rtl@@0@Z
?openInputStream@FilterBase@core@oox@@QBE?AV?$Reference@VXInputStream@io@star@sun@com@@@uno@star@sun@com@@ABVOUString@rtl@@@Z
?openInputStream@StorageBase@oox@@QAE?AV?$Reference@VXInputStream@io@star@sun@com@@@uno@star@sun@com@@ABVOUString@rtl@@@Z
?openOutputStream@FilterBase@core@oox@@QBE?AV?$Reference@VXOutputStream@io@star@sun@com@@@uno@star@sun@com@@ABVOUString@rtl@@@Z
?openOutputStream@StorageBase@oox@@QAE?AV?$Reference@VXOutputStream@io@star@sun@com@@@uno@star@sun@com@@ABVOUString@rtl@@@Z
?openSubStorage@FilterBase@core@oox@@QBE?AV?$shared_ptr@VStorageBase@oox@@@boost@@ABVOUString@rtl@@_N@Z
?openSubStorage@StorageBase@oox@@QAE?AV?$shared_ptr@VStorageBase@oox@@@boost@@ABVOUString@rtl@@_N@Z
?queryInterface@?$WeakImplHelper2@VXExtendedFilterDetection@document@star@sun@com@@VXServiceInfo@lang@345@@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?queryInterface@?$WeakImplHelper5@VXServiceInfo@lang@star@sun@com@@VXInitialization@2345@VXImporter@document@345@VXExporter@8345@VXFilter@8345@@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?release@?$WeakImplHelper2@VXExtendedFilterDetection@document@star@sun@com@@VXServiceInfo@lang@345@@cppu@@UAAXXZ
?release@?$WeakImplHelper5@VXServiceInfo@lang@star@sun@com@@VXInitialization@2345@VXImporter@document@345@VXExporter@8345@VXFilter@8345@@cppu@@UAAXXZ
?requestPassword@FilterBase@core@oox@@QBE?AVOUString@rtl@@AAVIDocPasswordVerifier@comphelper@@@Z
?setMediaDescriptor@FilterBase@core@oox@@AAEXABV?$Sequence@UPropertyValue@beans@star@sun@com@@@uno@star@sun@com@@@Z
?setSourceDocument@FilterBase@core@oox@@UAAXABV?$Reference@VXComponent@lang@star@sun@com@@@uno@star@sun@com@@@Z
?setTargetDocument@FilterBase@core@oox@@UAAXABV?$Reference@VXComponent@lang@star@sun@com@@@uno@star@sun@com@@@Z
?supportsService@FilterBase@core@oox@@UAAEABVOUString@rtl@@@Z
?supportsService@FilterDetect@core@oox@@UAAEABVOUString@rtl@@@Z
GetVersionInfo
component_getFactory
component_getImplementationEnvironment
component_writeInfo

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 861KB - Virtual size: 860KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 84KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8aa35c0eb2ba542cc014ddd21ad1fdd2

Headers

File Characteristics

Imports

cppu3

cppuhelper3msc

comphelp4msc

sal3

basegfxmi

saxmi

libeay32

msvcr90

uwinapi

kernel32

stlport_vc7145

Exports

Exports

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 861KB - Virtual size: 860KB

.data Size: 1.2MB - Virtual size: 1.2MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 161KB - Virtual size: 161KB

.text Size: 84KB - Virtual size: 88KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 861KB - Virtual size: 860KB

.data
Size: 1.2MB - Virtual size: 1.2MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 161KB - Virtual size: 161KB

.text
Size: 84KB - Virtual size: 88KB