0c29586db83f394e6395a7dc4a1f9811d611ad2d73a68fb333f6dd7c796fc5f1

Sharing

Copy URL Twitter E-mail

General

Target

0c29586db83f394e6395a7dc4a1f9811d611ad2d73a68fb333f6dd7c796fc5f1
Size

340KB
MD5

d480bbc847373083849b35f8f8424e50
SHA1

6d827c05473d206ec9478fd31d3dac1b3bf630f8
SHA256

0c29586db83f394e6395a7dc4a1f9811d611ad2d73a68fb333f6dd7c796fc5f1
SHA512

84abd6012e9d6e55054bd2e7f54427b69ea977f60f86352877317e7e861cb473e7132ef09a89d19034a0a0b96700f0d3316cd276323bf357f92c0f073af355fd
SSDEEP

6144:lIRWFREk1uZvfG+4QJRO3mS2AaUHdaw0B6+pQF1wylArHFkhtbMFBMyvNh:lICR4vPJPS2AT663a0AHFGtbMPMy1h

Score

N/A

Malware Config

Signatures

Files

0c29586db83f394e6395a7dc4a1f9811d611ad2d73a68fb333f6dd7c796fc5f1
.dll windows x86

d1d44d220f9e79c76fa3a0e7a2a59715

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

spsswcom

pvGetCmnSys
pvGetCmnSym
pvGetCmnStk
pvGetCmnObv
pvGetCmnMcs
pvGetCmnMch
pvGetCmnLoc
pvGetCmnIo
pvGetCmnInc
pvGetCmnGlb
pvGetCmnDmo
pvGetCmnWrk
pvGetCmnDic
pvGetCmaSys
pvGetCmaSym
pvGetCmaObv
pvGetCmaMch
pvGetCmaGlb
pvGetCmaDic
pvGetCmnBpr

spsswdat

ValidateSPSSName
??1DataFreeDataSource@@UAE@XZ
??0DataFreeDataSource@@QAE@XZ

datasrc

?IsLoaded@SPSS_DataSource@@UBE_NXZ
?ObsIndex@SPSS_DataSource@@QBEHH@Z
?GetObsAreaSize@SPSS_DataSource@@UBEIXZ
?GetSplitqSeparate@SPSS_DataSource@@UBE_NXZ
?SystemMissing@SPSS_DataSource@@SANXZ
?GetObsPointer@SPSS_InputCaseIterator@@QBEPATOBS@@I@Z
??0SPSS_DataSource@@QAE@PBV0@@Z
?SetParentSource@SPSS_DataSource@@QAEXPBV1@@Z
?HasExtension@SPSS_DataSource@@QBE_NH@Z
?SetExtension@SPSS_DataSource@@QAEXHVExtension@1@@Z
??0Extension@SPSS_DataSource@@QAE@ABV1@H@Z
??1Extension@SPSS_DataSource@@QAE@XZ
??0SPSS_SparseFileIndex@@QAE@K@Z
?SetSplit@SPSS_DataSource@@QAEXIQBH_N@Z
??1SPSS_SparseFileIndex@@QAE@XZ
?InitCase@SPSS_InputCaseIterator@@QAEXXZ
?GetVariable@SPSS_DataSource@@QAEAAVSPSS_Variable@@H@Z
??0SPSS_Variable@@QAE@ABV0@@Z
?NewID@SPSS_Variable@@QAEXXZ
??0SPSS_Variable@@QAE@H@Z
??1SPSS_Variable@@QAE@XZ
?GetType@SPSS_Variable@@QBEHXZ
?GetFormat@SPSS_Variable@@QBEXAAW4FormatType@1@AAH1@Z
?MakeVariable@SPSS_DataSource@@QAEAAVSPSS_Variable@@ABV2@PAI@Z
?GetPos@SPSS_SparseFileIndex@@QBEX_JAA_J1@Z
?Add@SPSS_SparseFileIndex@@QAEX_J0@Z
??0SPSS_InputCaseIterator@@IAE@ABVSPSS_DataSource@@PATOBS@@@Z
?GetParentSource@SPSS_DataSource@@QBEPBV1@XZ
?SetParent@SPSS_InputCaseIterator@@QAEXPAV1@@Z
?NextCase@SPSS_InputCaseIterator@@QAEHXZ
??1SPSS_InputCaseIterator@@UAE@XZ
?SetErrorMonitor@SPSS_InputCaseIterator@@UAEXPAVErrorMonitor@@@Z
?GetFilterVarIndex@SPSS_DataSource@@QBEHXZ
?SetFilterVar@SPSS_DataSource@@QAEXH@Z
?GetWeightVarIndex@SPSS_DataSource@@QBEHXZ
?SetWeightVar@SPSS_DataSource@@QAEXH@Z
?GetID@SPSS_Variable@@QBE?AVLocallyUniqueID@@XZ
?FindVarIndex@SPSS_DataSource@@QBEHVLocallyUniqueID@@@Z
?GetName@SPSS_Variable@@QBEPBDXZ
?GetLabel@SPSS_Variable@@QBEPBDXZ
?ColumnCount@SPSS_DataSource@@QBEIXZ
?GetVariable@SPSS_DataSource@@QBEABVSPSS_Variable@@H@Z
?FindVarIndex@SPSS_DataSource@@QBEHPBD@Z
?MakeVariable@SPSS_DataSource@@QAEAAVSPSS_Variable@@HPAI@Z
?SetName@SPSS_Variable@@QAEXPBD@Z
?SetLabel@SPSS_Variable@@QAEXPBD@Z
?SetFormat@SPSS_Variable@@QAEXW4FormatType@1@HH@Z
?SetWriteFormat@SPSS_Variable@@QAEXW4FormatType@1@HH@Z
?SetMeasurementLevel@SPSS_Variable@@QAEXW4MeasurementLevel@SPSS_Variable_Enumerations@@@Z
??0SPSS_DataSource@@IAE@ABV0@@Z
??1SPSS_DataSource@@UAE@XZ
?GetNSplitVars@SPSS_DataSource@@UBEIXZ
?GetSplitVarIndex@SPSS_DataSource@@UBEHI@Z
?GetSplitVarID@SPSS_DataSource@@UBE?AVLocallyUniqueID@@I@Z

cpputil

??AObsVector@@QBEABTOBS@@H@Z
?BpError@@YAXABVBpCellText@@W4BpErrorShow@@W4BpErrorLevel@@@Z
?Finish@BpComposite@@QAEXXZ
??1BpString@@UAE@XZ
?Add@BpComposite@@QAEXABVBpCellText@@@Z
??0BpString@@QAE@ABV0@@Z
?PivotTable@BpHeading@@QAE?AVBpPivotTable@@ABVBpCellText@@0_N@Z
??1BpPivotTable@@UAE@XZ
?Extract@ObsVector@@QAEXXZ
??4ObsVector@@QAEAAV0@ABV0@@Z
??8ObsVector@@QAE_NABV0@@Z
?HasNulls@ObsVector@@QBE_NXZ
??0ObsVector@@QAE@ABVSPSS_InputCaseIterator@@ABV?$vector@HV?$allocator@H@std@@@std@@@Z
??0ObsVector@@QAE@ABV0@@Z
??1ObsVector@@QAE@XZ
?Cell@BpCategory@@QAEXABVBpCellText@@@Z
??0BpDataValue@@QAE@ABVSPSS_Variable@@PBTOBS@@W4Preference@0@@Z
??0BpVariable@@QAE@ABVSPSS_Variable@@W4Show@0@@Z
?Dimension@BpPivotTable@@QAE?AVBpDimension@@ABVBpCellText@@W4Sort@1@@Z
?Category@BpGroup@@QAE?AVBpCategory@@ABVBpCellText@@@Z
??1BpCategory@@QAE@XZ
??1BpDimension@@UAE@XZ
??1BpVariable@@UAE@XZ
??1BpDataValue@@UAE@XZ
??0BpComposite@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
??0BpString@@QAE@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
??1BpComposite@@UAE@XZ

indutil

??1ObsVecMap@@QAE@XZ
??RLexLess@ObsVecMap@@QAE_NPBTOBS@@0@Z
??1SpssVarName@@QAE@XZ
??0SpssVarName@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??8SpssVarName@@QBE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0SpssVarName@@QAE@PBD@Z
??0LexLess@ObsVecMap@@QAE@ABV1@@Z
?Sort@ObsVecMap@@QBE?AV?$vector@PATOBS@@V?$allocator@PATOBS@@@std@@@std@@XZ

spssiocv

?ToString@@YAJPBTOBS@@ABVSPSS_Format@@PAD@Z

msvcr71

__CppXcptFilter
_initterm
_purecall
??3@YAXPAX@Z
__CxxFrameHandler
??0exception@@QAE@ABV0@@Z
??0bad_cast@@QAE@ABV0@@Z
??1bad_cast@@UAE@XZ
??0bad_cast@@QAE@PBD@Z
_CxxThrowException
??1exception@@UAE@XZ
??0exception@@QAE@XZ
??2@YAPAXI@Z
_assert
sprintf
memmove
__RTDynamicCast
??_V@YAXPAX@Z
memcmp
memcpy
_onexit
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_except_handler3
malloc
_adjust_fdiv
free

msvcp71

?_Lock@_Mutex@std@@QAEXXZ
?_Register@facet@locale@std@@QAEXXZ
?_Incref@facet@locale@std@@QAEXXZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@@Z
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Id_cnt@id@locale@std@@0HA
??1_Lockit@std@@QAE@XZ
?id@?$ctype@D@std@@2V0locale@2@A
??0_Lockit@std@@QAE@H@Z
?_Unlock@_Mutex@std@@QAEXXZ
?id@?$ctype@G@std@@2V0locale@2@A
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@@Z
??0?$_String_val@DV?$allocator@D@std@@@std@@IAE@V?$allocator@D@1@@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?max_size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?is@?$ctype@G@std@@QBE_NFG@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??1locale@std@@QAE@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?clear@ios_base@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z

kernel32

LoadLibraryA

Exports

Exports

??0C2vDataSource@@QAE@AAVC2vSpecification@@V?$auto_ptr@VObsVecMap@@@std@@_JABV?$vector@HV?$allocator@H@std@@@3@PBVSPSS_DataSource@@3AAVBpHeading@@@Z
??0C2vDataSource@@QAE@ABV0@@Z
??0C2vSpecification@@QAE@XZ
??1C2vDataSource@@UAE@XZ
??1C2vSpecification@@QAE@XZ
??_7C2vDataSource@@6B@
?Autofix@C2vSpecification@@QAEX_N@Z
?Autofix@C2vSpecification@@QBE_NXZ
?CountLabel@C2vSpecification@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?CountLabel@C2vSpecification@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?CountLabeled@C2vSpecification@@QBE_NXZ
?CountSpec@C2vSpecification@@QBE_NXZ
?CountVar@C2vSpecification@@QAEXVSpssVarName@@@Z
?CountVar@C2vSpecification@@QBE?AVSpssVarName@@XZ
?DropVars@C2vSpecification@@QAEXABV?$vector@HV?$allocator@H@std@@@std@@@Z
?DropVars@C2vSpecification@@QBEABV?$vector@HV?$allocator@H@std@@@std@@XZ
?FixedVars@C2vSpecification@@QAEXABV?$vector@HV?$allocator@H@std@@@std@@@Z
?FixedVars@C2vSpecification@@QBEABV?$vector@HV?$allocator@H@std@@@std@@XZ
?GroupByIndex@C2vSpecification@@QAEX_N@Z
?GroupByIndex@C2vSpecification@@QBE_NXZ
?IDVars@C2vSpecification@@QAEXABV?$vector@HV?$allocator@H@std@@@std@@@Z
?IDVars@C2vSpecification@@QBEABV?$vector@HV?$allocator@H@std@@@std@@XZ
?IndexVars@C2vSpecification@@QAEXABV?$vector@HV?$allocator@H@std@@@std@@@Z
?IndexVars@C2vSpecification@@QBEABV?$vector@HV?$allocator@H@std@@@std@@XZ
?Indicator@C2vSpecification@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Indicator@C2vSpecification@@QBE_NXZ
?IndicatorRoot@C2vSpecification@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?MakeIterator@C2vDataSource@@UBEPAVSPSS_InputCaseIterator@@PATOBS@@@Z
?RenameSpecs@C2vSpecification@@QAEXABV?$vector@U?$pair@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@V?$allocator@U?$pair@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@@Z
?RenameSpecs@C2vSpecification@@QBEABV?$vector@U?$pair@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@V?$allocator@U?$pair@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@XZ
?RowCount@C2vDataSource@@UBE_JXZ
?Separator@C2vSpecification@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Separator@C2vSpecification@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 260KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d1d44d220f9e79c76fa3a0e7a2a59715

Headers

File Characteristics

Imports

spsswcom

spsswdat

datasrc

cpputil

indutil

spssiocv

msvcr71

msvcp71

kernel32

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 37KB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 4KB - Virtual size: 600B

.rsrc Size: 4KB - Virtual size: 672B

.reloc Size: 4KB - Virtual size: 3KB

.text Size: 260KB - Virtual size: 260KB

.text
Size: 40KB - Virtual size: 37KB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 4KB - Virtual size: 600B

.rsrc
Size: 4KB - Virtual size: 672B

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 260KB - Virtual size: 260KB