e6971fd15e372c2e9f4850738b5707130d65efc77d662db3844e60ee5f76497e

Sharing

Copy URL

Twitter E-mail

General

Target

e6971fd15e372c2e9f4850738b5707130d65efc77d662db3844e60ee5f76497e
Size

892KB
MD5

d4d69b0a86e1588b3e067ff5d4a98050
SHA1

d9e37eba910d5e944505851558f8963255b6feb8
SHA256

e6971fd15e372c2e9f4850738b5707130d65efc77d662db3844e60ee5f76497e
SHA512

204a47ad528d74e87a3b5547efef907b40493e80f6c39e6961457a5f6cfe74a8b013fe4529e1a6c4a47902ae4faff6d28215a11eae77f63549b6e40bfc282925
SSDEEP

12288:ddyZkgt30XQFTi2Vwih0iQ6KYqsnP7Cyhw7ZnPVv0R2CxsmUPoFgbfk:z20XQhi2Vwia63n+yoPWR2Cxj4+

Score

N/A

Malware Config

Signatures

Files

e6971fd15e372c2e9f4850738b5707130d65efc77d662db3844e60ee5f76497e
.dll windows x86

4d1bbc256b71b900b7c596abf80a840f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateSemaphoreA
CloseHandle
WaitForSingleObject
ReleaseSemaphore
CreateEventA
SetEvent
ResetEvent
GetCurrentThreadId
DisableThreadLibraryCalls
GetLastError
CreateMutexA
GetCurrentProcessId
QueryPerformanceCounter
GetSystemInfo
HeapCreate
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapValidate
VirtualAlloc
VirtualFree
Sleep
SuspendThread
GetCurrentThread
ResumeThread
FreeLibraryAndExitThread
LoadLibraryA
GetModuleFileNameA
VirtualQuery
SetThreadPriority
QueryPerformanceFrequency
SetPriorityClass
GetThreadPriority
GetPriorityClass
GetCurrentProcess
GetFileSize
SetFilePointer
SetEndOfFile
FindClose
FindFirstFileA
ReadFile
WriteFile
GetLogicalDrives
DeleteFileA
CreateDirectoryA
RemoveDirectoryA
CreateFileA
FindNextFileA
GetDriveTypeA
GetCurrentDirectoryA
OutputDebugStringA

user32

wsprintfA
MessageBoxA

msvcp71

?_Nomemory@std@@YAXXZ
?find@?$char_traits@D@std@@SAPBDPBDIABD@Z
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEXXZ
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??1_Lockit@std@@QAE@XZ
?_Register@facet@locale@std@@QAEXXZ
?_Incref@facet@locale@std@@QAEXXZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@@Z
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
??Bid@locale@std@@QAEIXZ
?id@?$ctype@D@std@@2V0locale@2@A
??0_Lockit@std@@QAE@H@Z
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@@Z
?id@?$ctype@G@std@@2V0locale@2@A
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IG@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
?good@ios_base@std@@QBE_NXZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?width@ios_base@std@@QAEHH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?is@?$ctype@D@std@@QBE_NFD@Z
?to_char_type@?$char_traits@D@std@@SADABH@Z
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?eof@?$char_traits@D@std@@SAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?width@ios_base@std@@QBEHXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1locale@std@@QAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?to_int_type@?$char_traits@D@std@@SAHABD@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?flags@ios_base@std@@QBEHXZ
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
?is@?$ctype@G@std@@QBE_NFG@Z
?to_char_type@?$char_traits@G@std@@SAGABG@Z
?eq_int_type@?$char_traits@G@std@@SA_NABG0@Z
?eof@?$char_traits@G@std@@SAGXZ
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?max_size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?to_int_type@?$char_traits@G@std@@SAGABG@Z
??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEABGI@Z
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?compare@?$char_traits@D@std@@SAHPBD0I@Z
?_Xran@_String_base@std@@QBEXXZ
?assign@?$char_traits@D@std@@SAXAADABD@Z
?move@?$char_traits@D@std@@SAPADPADPBDI@Z
?copy@?$char_traits@D@std@@SAPADPADPBDI@Z
?_Xlen@_String_base@std@@QBEXXZ
?length@?$char_traits@D@std@@SAIPBD@Z
?assign@?$char_traits@D@std@@SAPADPADID@Z

msvcr71

free
__CppXcptFilter
_adjust_fdiv
??3@YAXPAX@Z
??_V@YAXPAX@Z
_purecall
??0exception@@QAE@ABV0@@Z
??0bad_cast@@QAE@ABV0@@Z
??1bad_cast@@UAE@XZ
??0bad_cast@@QAE@PBD@Z
__CxxFrameHandler
_CxxThrowException
??1exception@@UAE@XZ
??0exception@@QAE@XZ
printf
abort
_vsnprintf
_snprintf
malloc
realloc
_beginthreadex
memmove
strchr
strstr
sprintf
strncmp
_snscanf
atoi
_callnewh
?terminate@@YAXXZ
_except_handler3
??1type_info@@UAE@XZ
__dllonexit
_onexit
_initterm

Exports

Exports

??0?$GenericSerializer@UInputStream@ubi@@UReader@2@@ubi@@QAE@ABV01@@Z
??0?$GenericSerializer@UInputStream@ubi@@UReader@2@@ubi@@QAE@PAUInputStream@1@PAVSerializer@1@@Z
??0?$GenericSerializer@UOutputStream@ubi@@UWriter@2@@ubi@@QAE@ABV01@@Z
??0?$GenericSerializer@UOutputStream@ubi@@UWriter@2@@ubi@@QAE@PAUOutputStream@1@PAVSerializer@1@@Z
??0?$GenericStream@UInputStreamBase@ubi@@@ubi@@QAE@ABU01@@Z
??0?$GenericStream@UInputStreamBase@ubi@@@ubi@@QAE@PAVProvider@1@@Z
??0?$GenericStream@UOutputStreamBase@ubi@@@ubi@@QAE@ABU01@@Z
??0?$GenericStream@UOutputStreamBase@ubi@@@ubi@@QAE@PAVProvider@1@@Z
??0Allocator@ubi@@QAE@XZ
??0AllocatorStatMarker@ubi@@QAE@K@Z
??0AllocatorStatMarker@ubi@@QAE@XZ
??0Archive@ubi@@QAE@ABV01@@Z
??0Archive@ubi@@QAE@XZ
??0BinaryReader@ubi@@QAE@ABU01@@Z
??0BinaryReader@ubi@@QAE@PAUInputStream@1@PAVSerializer@1@@Z
??0BinarySwapperReader@ubi@@QAE@ABU01@@Z
??0BinarySwapperReader@ubi@@QAE@PAUInputStream@1@PAVSerializer@1@@Z
??0BinarySwapperWriter@ubi@@QAE@ABU01@@Z
??0BinarySwapperWriter@ubi@@QAE@PAUOutputStream@1@PAVSerializer@1@@Z
??0BinaryWriter@ubi@@QAE@ABU01@@Z
??0BinaryWriter@ubi@@QAE@PAUOutputStream@1@PAVSerializer@1@@Z
??0BoundingMesh@ubi@@QAE@ABV01@@Z
??0BoundingMesh@ubi@@QAE@XZ
??0BoundingSphere@ubi@@QAE@AAV01@@Z
??0BoundingSphere@ubi@@QAE@ABVVector3@1@M@Z
??0BoundingSphere@ubi@@QAE@XZ
??0BoundingVolume@ubi@@QAE@ABV01@@Z
??0BoundingVolume@ubi@@QAE@XZ
??0BoundingVolumeInfinite@ubi@@QAE@ABV01@@Z
??0BoundingVolumeInfinite@ubi@@QAE@XZ
??0ClassDescriptor@ubi@@QAE@ABV01@@Z
??0ClassDescriptor@ubi@@QAE@PBD@Z
??0Clock@ubi@@AAE@XZ
??0ClockNative@ubi@@IAE@XZ
??0CriticalSection@ubi@@QAE@XZ
??0Cylinder@ubi@@QAE@ABVVector3@1@0M@Z
??0Cylinder@ubi@@QAE@XZ
??0DebuggerProvider@ubi@@QAE@ABV01@@Z
??0DebuggerProvider@ubi@@QAE@XZ
??0DebuggerStream@ubi@@QAE@ABV01@@Z
??0DebuggerStream@ubi@@QAE@XZ
??0DiskCache@ubi@@AAE@XZ
??0DiskDrive@ubi@@QAE@ABV01@@Z
??0DiskDrive@ubi@@QAE@XZ
??0DiskDriveWin32@ubi@@QAE@XZ
??0DiskIndex@ubi@@QAE@PAVFile@1@K@Z
??0DiskPage@ubi@@QAE@PAX@Z
??0ErrorManager@ubi@@QAE@XZ
??0Event@ubi@@QAE@_N@Z
??0Exception@ubi@@QAE@PBD@Z
??0Exception@ubi@@QAE@XZ
??0Factory@ubi@@AAE@XZ
??0File@ubi@@QAE@ABV01@@Z
??0File@ubi@@QAE@PAVDiskDrive@1@@Z
??0FileArchive@ubi@@QAE@ABV01@@Z
??0FileArchive@ubi@@QAE@KPBD0@Z
??0FileArchiveDatabase@ubi@@QAE@ABV01@@Z
??0FileArchiveDatabase@ubi@@QAE@PAUOutputStream@1@@Z
??0FileManager@ubi@@AAE@XZ
??0FilePage@ubi@@QAE@PAVDiskPage@1@@Z
??0FileReadRequestWin32@ubi@@QAE@PAVFile@1@KK@Z
??0FileRequest@ubi@@QAE@XZ
??0FileRequestWin32@ubi@@QAE@PAVFile@1@K@Z
??0FileWin32@ubi@@QAE@ABV01@@Z
??0FileWin32@ubi@@QAE@PAVDiskDrive@1@PAX@Z
??0FileWriteRequestWin32@ubi@@QAE@PAVFile@1@PAPAVDiskPage@1@K@Z
??0GenericReader@ubi@@QAE@ABU01@@Z
??0GenericReader@ubi@@QAE@PAUInputStream@1@PAVSerializer@1@@Z
??0GenericWriter@ubi@@QAE@ABU01@@Z
??0GenericWriter@ubi@@QAE@PAUOutputStream@1@PAVSerializer@1@@Z
??0HeapAllocator@ubi@@QAE@XZ
??0HybridAllocator@ubi@@QAE@PAVAllocator@1@_N01@Z
??0InputBufferProvider@ubi@@QAE@ABV01@@Z
??0InputBufferProvider@ubi@@QAE@PAX0@Z
??0InputBufferProvider@ubi@@QAE@XZ
??0InputBufferStream@ubi@@QAE@ABV01@@Z
??0InputBufferStream@ubi@@QAE@PAX0@Z
??0InputBufferStream@ubi@@QAE@XZ
??0InputFileProvider@ubi@@QAE@ABV01@@Z
??0InputFileProvider@ubi@@QAE@PAVFile@1@@Z
??0InputFileStream@ubi@@QAE@ABV01@@Z
??0InputFileStream@ubi@@QAE@PAVFile@1@@Z
??0InputFileStream@ubi@@QAE@PBD@Z
??0InputStream@ubi@@QAE@ABU01@@Z
??0InputStream@ubi@@QAE@PAVProvider@1@@Z
??0InstanceManager@ubi@@AAE@XZ
??0Interface@ubi@@QAE@ABU01@@Z
??0Interface@ubi@@QAE@XZ
??0Loader@ubi@@AAE@XZ
??0LoaderHandler@ubi@@QAE@ABV01@@Z
??0LoaderHandler@ubi@@QAE@PBD@Z
??0MallocAllocator@ubi@@QAE@XZ
??0MarkupSTL@ubi@@QAE@ABV01@@Z
??0MarkupSTL@ubi@@QAE@PBD@Z
??0MarkupSTL@ubi@@QAE@XZ
??0MemChunkTree@ubi@@QAE@K@Z
??0MemoryException@ubi@@QAE@XZ
??0OrientedBox3D@ubi@@QAE@AAV01@@Z
??0OrientedBox3D@ubi@@QAE@ABVVector3@1@0000@Z
??0OrientedBox3D@ubi@@QAE@XZ
??0OutputBufferProvider@ubi@@QAE@ABV01@@Z
??0OutputBufferProvider@ubi@@QAE@PAX00@Z
??0OutputBufferProvider@ubi@@QAE@XZ
??0OutputBufferStream@ubi@@QAE@ABV01@@Z
??0OutputBufferStream@ubi@@QAE@PAX00@Z
??0OutputBufferStream@ubi@@QAE@XZ
??0OutputFileProvider@ubi@@QAE@ABV01@@Z
??0OutputFileProvider@ubi@@QAE@PAVFile@1@@Z
??0OutputFileStream@ubi@@QAE@ABV01@@Z
??0OutputFileStream@ubi@@QAE@PAVFile@1@@Z
??0OutputFileStream@ubi@@QAE@PBD@Z
??0OutputFileStream@ubi@@QAE@PBDK@Z
??0OutputStream@ubi@@QAE@ABU01@@Z
??0OutputStream@ubi@@QAE@PAVProvider@1@@Z
??0PackedAllocator@ubi@@QAE@PBDK@Z
??0PageAllocator@ubi@@QAE@XZ
??0ParsedComment@ubi@@QAE@ABU01@@Z
??0ParsedComment@ubi@@QAE@PAVParsedRoot@1@@Z
??0ParsedEntry@ubi@@QAE@ABV01@@Z
??0ParsedEntry@ubi@@QAE@PAVParsedRoot@1@@Z
??0ParsedFile@ubi@@QAE@ABU01@@Z
??0ParsedFile@ubi@@QAE@PAVParsedRoot@1@@Z
??0ParsedNode@ubi@@QAE@ABV01@@Z
??0ParsedNode@ubi@@QAE@PAVParsedRoot@1@K@Z
??0ParsedRoot@ubi@@QAE@ABV01@@Z
??0ParsedRoot@ubi@@QAE@PAV01@K@Z
??0ParsedSection@ubi@@QAE@ABV01@@Z
??0ParsedSection@ubi@@QAE@PAVParsedRoot@1@@Z
??0ParsedString@ubi@@QAE@ABV01@@Z
??0ParsedString@ubi@@QAE@PBD@Z
??0ParsedStringPool@ubi@@AAE@XZ
??0Parser@ubi@@AAE@XZ
??0ParserPool@ubi@@AAE@XZ
??0Plane@ubi@@QAE@ABV01@@Z
??0Plane@ubi@@QAE@ABVVector3@1@00@Z
??0Plane@ubi@@QAE@ABVVector3@1@0@Z
??0Plane@ubi@@QAE@ABVVector3@1@M@Z
??0Plane@ubi@@QAE@MMMM@Z
??0Plane@ubi@@QAE@PBVVector3@1@ABV21@1@Z
??0Plane@ubi@@QAE@XZ
??0PoolAllocator@ubi@@QAE@XZ
??0RandomNormal@ubi@@QAE@MM_J@Z
??0RandomUniform@ubi@@QAE@_J@Z
??0Reader@ubi@@QAE@ABU01@@Z
??0Reader@ubi@@QAE@XZ
??0ResourceManager@ubi@@AAE@XZ
??0Semaphore@ubi@@QAE@KK@Z
??0Serializer@ubi@@QAE@ABV01@@Z
??0Serializer@ubi@@QAE@XZ
??0StopWatch@ubi@@QAE@_N@Z
??0TextOutputDevice@ubi@@QAE@ABV01@@Z
??0TextOutputDevice@ubi@@QAE@_N@Z
??0TextOutputDeviceAnsi@ubi@@QAE@ABV01@@Z
??0TextOutputDeviceAnsi@ubi@@QAE@_N@Z
??0TextOutputDeviceDebugger@ubi@@QAE@ABV01@@Z
??0TextOutputDeviceDebugger@ubi@@QAE@_N@Z
??0TextOutputDeviceNull@ubi@@QAE@ABV01@@Z
??0TextOutputDeviceNull@ubi@@QAE@_N@Z
??0TextWriter@ubi@@QAE@ABV01@@Z
??0TextWriter@ubi@@QAE@PAUOutputStream@1@@Z
??0ThreadManager@ubi@@QAE@XZ
??0ThreadMutex@ubi@@QAE@XZ
??0Triangle@ubi@@QAE@ABV01@@Z
??0Triangle@ubi@@QAE@XZ
??0Writer@ubi@@QAE@ABU01@@Z
??0Writer@ubi@@QAE@XZ
??0XMLReader@ubi@@QAE@ABV01@@Z
??0XMLReader@ubi@@QAE@PAUInputStream@1@@Z
??0XMLWriter@ubi@@QAE@ABV01@@Z
??0XMLWriter@ubi@@QAE@PAUOutputStream@1@@Z
??1?$GenericSerializer@UInputStream@ubi@@UReader@2@@ubi@@UAE@XZ
??1?$GenericSerializer@UOutputStream@ubi@@UWriter@2@@ubi@@UAE@XZ
??1?$GenericStream@UInputStreamBase@ubi@@@ubi@@UAE@XZ
??1?$GenericStream@UOutputStreamBase@ubi@@@ubi@@UAE@XZ
??1Allocator@ubi@@UAE@XZ
??1Archive@ubi@@UAE@XZ
??1BinaryReader@ubi@@UAE@XZ
??1BinarySwapperReader@ubi@@UAE@XZ
??1BinarySwapperWriter@ubi@@UAE@XZ
??1BinaryWriter@ubi@@UAE@XZ
??1BoundingMesh@ubi@@UAE@XZ
??1BoundingSphere@ubi@@UAE@XZ
??1BoundingVolume@ubi@@UAE@XZ
??1BoundingVolumeInfinite@ubi@@UAE@XZ
??1ClassDescriptor@ubi@@QAE@XZ
??1CriticalSection@ubi@@QAE@XZ
??1DebuggerProvider@ubi@@UAE@XZ
??1DebuggerStream@ubi@@UAE@XZ
??1DiskCache@ubi@@AAE@XZ
??1DiskDrive@ubi@@UAE@XZ
??1DiskDriveWin32@ubi@@UAE@XZ
??1ErrorManager@ubi@@QAE@XZ
??1Event@ubi@@QAE@XZ
??1Factory@ubi@@AAE@XZ
??1File@ubi@@UAE@XZ
??1FileArchive@ubi@@UAE@XZ
??1FileArchiveDatabase@ubi@@UAE@XZ
??1FileManager@ubi@@QAE@XZ
??1FileReadRequestWin32@ubi@@UAE@XZ
??1FileRequest@ubi@@UAE@XZ
??1FileRequestWin32@ubi@@UAE@XZ
??1FileWin32@ubi@@UAE@XZ
??1FileWriteRequestWin32@ubi@@UAE@XZ
??1GenericReader@ubi@@UAE@XZ
??1GenericWriter@ubi@@UAE@XZ
??1HeapAllocator@ubi@@UAE@XZ
??1HybridAllocator@ubi@@UAE@XZ
??1InputBufferProvider@ubi@@UAE@XZ
??1InputBufferStream@ubi@@UAE@XZ
??1InputFileProvider@ubi@@UAE@XZ
??1InputFileStream@ubi@@UAE@XZ
??1InputStream@ubi@@UAE@XZ
??1InstanceManager@ubi@@AAE@XZ
??1Interface@ubi@@UAE@XZ
??1Loader@ubi@@AAE@XZ
??1MallocAllocator@ubi@@UAE@XZ
??1MarkupSTL@ubi@@UAE@XZ
??1MemChunkTree@ubi@@QAE@XZ
??1Mutex@ubi@@QAE@XZ
??1OrientedBox3D@ubi@@UAE@XZ
??1OutputBufferProvider@ubi@@UAE@XZ
??1OutputBufferStream@ubi@@UAE@XZ
??1OutputFileProvider@ubi@@UAE@XZ
??1OutputFileStream@ubi@@UAE@XZ
??1OutputStream@ubi@@UAE@XZ
??1PackedAllocator@ubi@@UAE@XZ
??1PageAllocator@ubi@@UAE@XZ
??1ParsedComment@ubi@@UAE@XZ
??1ParsedEntry@ubi@@UAE@XZ
??1ParsedFile@ubi@@UAE@XZ
??1ParsedNode@ubi@@UAE@XZ
??1ParsedRoot@ubi@@UAE@XZ
??1ParsedSection@ubi@@UAE@XZ
??1ParsedString@ubi@@QAE@XZ
??1ParsedStringPool@ubi@@AAE@XZ
??1Parser@ubi@@AAE@XZ
??1ParserPool@ubi@@AAE@XZ
??1PoolAllocator@ubi@@UAE@XZ
??1Reader@ubi@@UAE@XZ
??1ResourceManager@ubi@@AAE@XZ
??1Semaphore@ubi@@QAE@XZ
??1Serializer@ubi@@UAE@XZ
??1TextOutputDevice@ubi@@UAE@XZ
??1TextOutputDeviceAnsi@ubi@@UAE@XZ
??1TextOutputDeviceDebugger@ubi@@UAE@XZ
??1TextOutputDeviceNull@ubi@@UAE@XZ
??1TextWriter@ubi@@UAE@XZ
??1ThreadManager@ubi@@UAE@XZ
??1ThreadMutex@ubi@@QAE@XZ
??1Writer@ubi@@UAE@XZ
??1XMLReader@ubi@@UAE@XZ
??1XMLWriter@ubi@@UAE@XZ
??2BoundingSphere@ubi@@SAPAXI@Z
??2BoundingSphere@ubi@@SAPAXIPAVAllocator@1@@Z
??2BoundingSphere@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2BoundingSphere@ubi@@SAPAXIPAX@Z
??2BoundingSphere@ubi@@SAPAXIPBDK@Z
??2BoundingVolume@ubi@@SAPAXI@Z
??2BoundingVolume@ubi@@SAPAXIPAVAllocator@1@@Z
??2BoundingVolume@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2BoundingVolume@ubi@@SAPAXIPAX@Z
??2BoundingVolume@ubi@@SAPAXIPBDK@Z
??2BoundingVolumeInfinite@ubi@@SAPAXI@Z
??2BoundingVolumeInfinite@ubi@@SAPAXIPAVAllocator@1@@Z
??2BoundingVolumeInfinite@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2BoundingVolumeInfinite@ubi@@SAPAXIPAX@Z
??2BoundingVolumeInfinite@ubi@@SAPAXIPBDK@Z
??2DiskCache@ubi@@SAPAXI@Z
??2DiskCache@ubi@@SAPAXIPAVAllocator@1@@Z
??2DiskCache@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2DiskCache@ubi@@SAPAXIPAX@Z
??2DiskCache@ubi@@SAPAXIPBDK@Z
??2DiskDrive@ubi@@SAPAXI@Z
??2DiskDrive@ubi@@SAPAXIPAVAllocator@1@@Z
??2DiskDrive@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2DiskDrive@ubi@@SAPAXIPAX@Z
??2DiskDrive@ubi@@SAPAXIPBDK@Z
??2DiskDriveWin32@ubi@@SAPAXI@Z
??2DiskDriveWin32@ubi@@SAPAXIPAVAllocator@1@@Z
??2DiskDriveWin32@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2DiskDriveWin32@ubi@@SAPAXIPAX@Z
??2DiskDriveWin32@ubi@@SAPAXIPBDK@Z
??2DiskIndex@ubi@@SAPAXI@Z
??2DiskIndex@ubi@@SAPAXIPAVAllocator@1@@Z
??2DiskIndex@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2DiskIndex@ubi@@SAPAXIPAX@Z
??2DiskIndex@ubi@@SAPAXIPBDK@Z
??2DiskPage@ubi@@SAPAXI@Z
??2DiskPage@ubi@@SAPAXIPAVAllocator@1@@Z
??2DiskPage@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2DiskPage@ubi@@SAPAXIPAX@Z
??2DiskPage@ubi@@SAPAXIPBDK@Z
??2Factory@ubi@@SAPAXI@Z
??2Factory@ubi@@SAPAXIPAVAllocator@1@@Z
??2Factory@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2Factory@ubi@@SAPAXIPAX@Z
??2Factory@ubi@@SAPAXIPBDK@Z
??2File@ubi@@SAPAXI@Z
??2File@ubi@@SAPAXIPAVAllocator@1@@Z
??2File@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2File@ubi@@SAPAXIPAX@Z
??2File@ubi@@SAPAXIPBDK@Z
??2FileArchive@ubi@@SAPAXI@Z
??2FileArchive@ubi@@SAPAXIPAVAllocator@1@@Z
??2FileArchive@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2FileArchive@ubi@@SAPAXIPAX@Z
??2FileArchive@ubi@@SAPAXIPBDK@Z
??2FileArchiveDatabase@ubi@@SAPAXI@Z
??2FileArchiveDatabase@ubi@@SAPAXIPAVAllocator@1@@Z
??2FileArchiveDatabase@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2FileArchiveDatabase@ubi@@SAPAXIPAX@Z
??2FileArchiveDatabase@ubi@@SAPAXIPBDK@Z
??2FileManager@ubi@@SAPAXI@Z
??2FileManager@ubi@@SAPAXIPAVAllocator@1@@Z
??2FileManager@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2FileManager@ubi@@SAPAXIPAX@Z
??2FileManager@ubi@@SAPAXIPBDK@Z
??2FilePage@ubi@@SAPAXI@Z
??2FilePage@ubi@@SAPAXIPAVAllocator@1@@Z
??2FilePage@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2FilePage@ubi@@SAPAXIPAX@Z
??2FilePage@ubi@@SAPAXIPBDK@Z
??2FileReadRequestWin32@ubi@@SAPAXI@Z
??2FileReadRequestWin32@ubi@@SAPAXIPAVAllocator@1@@Z
??2FileReadRequestWin32@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2FileReadRequestWin32@ubi@@SAPAXIPAX@Z
??2FileReadRequestWin32@ubi@@SAPAXIPBDK@Z
??2FileRequest@ubi@@SAPAXI@Z
??2FileRequest@ubi@@SAPAXIPAVAllocator@1@@Z
??2FileRequest@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2FileRequest@ubi@@SAPAXIPAX@Z
??2FileRequest@ubi@@SAPAXIPBDK@Z
??2FileRequestWin32@ubi@@SAPAXI@Z
??2FileRequestWin32@ubi@@SAPAXIPAVAllocator@1@@Z
??2FileRequestWin32@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2FileRequestWin32@ubi@@SAPAXIPAX@Z
??2FileRequestWin32@ubi@@SAPAXIPBDK@Z
??2FileWin32@ubi@@SAPAXI@Z
??2FileWin32@ubi@@SAPAXIPAVAllocator@1@@Z
??2FileWin32@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2FileWin32@ubi@@SAPAXIPAX@Z
??2FileWin32@ubi@@SAPAXIPBDK@Z
??2FileWriteRequestWin32@ubi@@SAPAXI@Z
??2FileWriteRequestWin32@ubi@@SAPAXIPAVAllocator@1@@Z
??2FileWriteRequestWin32@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2FileWriteRequestWin32@ubi@@SAPAXIPAX@Z
??2FileWriteRequestWin32@ubi@@SAPAXIPBDK@Z
??2Loader@ubi@@SAPAXI@Z
??2Loader@ubi@@SAPAXIPAVAllocator@1@@Z
??2Loader@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2Loader@ubi@@SAPAXIPAX@Z
??2Loader@ubi@@SAPAXIPBDK@Z
??2MarkupSTL@ubi@@SAPAXI@Z
??2MarkupSTL@ubi@@SAPAXIPAVAllocator@1@@Z
??2MarkupSTL@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2MarkupSTL@ubi@@SAPAXIPAX@Z
??2MarkupSTL@ubi@@SAPAXIPBDK@Z
??2OrientedBox3D@ubi@@SAPAXI@Z
??2OrientedBox3D@ubi@@SAPAXIPAVAllocator@1@@Z
??2OrientedBox3D@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2OrientedBox3D@ubi@@SAPAXIPAX@Z
??2OrientedBox3D@ubi@@SAPAXIPBDK@Z
??2ParsedNode@ubi@@SAPAXI@Z
??2ParsedNode@ubi@@SAPAXIPAVAllocator@1@@Z
??2ParsedNode@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2ParsedNode@ubi@@SAPAXIPAX@Z
??2ParsedNode@ubi@@SAPAXIPBDK@Z
??2ParsedStringPool@ubi@@SAPAXI@Z
??2ParsedStringPool@ubi@@SAPAXIPAVAllocator@1@@Z
??2ParsedStringPool@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2ParsedStringPool@ubi@@SAPAXIPAX@Z
??2ParsedStringPool@ubi@@SAPAXIPBDK@Z
??2Parser@ubi@@SAPAXI@Z
??2Parser@ubi@@SAPAXIPAVAllocator@1@@Z
??2Parser@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2Parser@ubi@@SAPAXIPAX@Z
??2Parser@ubi@@SAPAXIPBDK@Z
??2ParserPool@ubi@@SAPAXI@Z
??2ParserPool@ubi@@SAPAXIPAVAllocator@1@@Z
??2ParserPool@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2ParserPool@ubi@@SAPAXIPAX@Z
??2ParserPool@ubi@@SAPAXIPBDK@Z
??2Plane@ubi@@SAPAXI@Z
??2Plane@ubi@@SAPAXIPAVAllocator@1@@Z
??2Plane@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2Plane@ubi@@SAPAXIPAX@Z
??2Plane@ubi@@SAPAXIPBDK@Z
??2ResourceManager@ubi@@SAPAXI@Z
??2ResourceManager@ubi@@SAPAXIPAVAllocator@1@@Z
??2ResourceManager@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2ResourceManager@ubi@@SAPAXIPAX@Z
??2ResourceManager@ubi@@SAPAXIPBDK@Z
??2Serializer@ubi@@SAPAXI@Z
??2Serializer@ubi@@SAPAXIPAVAllocator@1@@Z
??2Serializer@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2Serializer@ubi@@SAPAXIPAX@Z
??2Serializer@ubi@@SAPAXIPBDK@Z
??2TextOutputDevice@ubi@@SAPAXI@Z
??2TextOutputDevice@ubi@@SAPAXIPAX@Z
??2TextOutputDevice@ubi@@SAPAXIPBDK@Z
??2TextOutputDeviceAnsi@ubi@@SAPAXI@Z
??2TextOutputDeviceAnsi@ubi@@SAPAXIPAX@Z
??2TextOutputDeviceAnsi@ubi@@SAPAXIPBDK@Z
??2TextOutputDeviceDebugger@ubi@@SAPAXI@Z
??2TextOutputDeviceDebugger@ubi@@SAPAXIPAX@Z
??2TextOutputDeviceDebugger@ubi@@SAPAXIPBDK@Z
??2TextOutputDeviceNull@ubi@@SAPAXI@Z
??2TextOutputDeviceNull@ubi@@SAPAXIPAX@Z
??2TextOutputDeviceNull@ubi@@SAPAXIPBDK@Z
??2ThreadManager@ubi@@SAPAXI@Z
??2ThreadManager@ubi@@SAPAXIPAX@Z
??2ThreadManager@ubi@@SAPAXIPBDK@Z
??2Triangle@ubi@@SAPAXI@Z
??2Triangle@ubi@@SAPAXIPAVAllocator@1@@Z
??2Triangle@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2Triangle@ubi@@SAPAXIPAX@Z
??2Triangle@ubi@@SAPAXIPBDK@Z
??2XMLReader@ubi@@SAPAXI@Z
??2XMLReader@ubi@@SAPAXIPAVAllocator@1@@Z
??2XMLReader@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2XMLReader@ubi@@SAPAXIPAX@Z
??2XMLReader@ubi@@SAPAXIPBDK@Z
??2XMLWriter@ubi@@SAPAXI@Z
??2XMLWriter@ubi@@SAPAXIPAVAllocator@1@@Z
??2XMLWriter@ubi@@SAPAXIPAVAllocator@1@PBDK@Z
??2XMLWriter@ubi@@SAPAXIPAX@Z
??2XMLWriter@ubi@@SAPAXIPBDK@Z
??3BoundingSphere@ubi@@SAXPAX0@Z
??3BoundingSphere@ubi@@SAXPAX@Z
??3BoundingSphere@ubi@@SAXPAXPAVAllocator@1@@Z
??3BoundingSphere@ubi@@SAXPAXPAVAllocator@1@PBDK@Z
??3BoundingSphere@ubi@@SAXPAXPBDK@Z
??3BoundingVolume@ubi@@SAXPAX0@Z
??3BoundingVolume@ubi@@SAXPAX@Z
??3BoundingVolume@ubi@@SAXPAXPAVAllocator@1@@Z
??3BoundingVolume@ubi@@SAXPAXPAVAllocator@1@PBDK@Z
??3BoundingVolume@ubi@@SAXPAXPBDK@Z
??3BoundingVolumeInfinite@ubi@@SAXPAX0@Z
??3BoundingVolumeInfinite@ubi@@SAXPAX@Z
??3BoundingVolumeInfinite@ubi@@SAXPAXPAVAllocator@1@@Z
??3BoundingVolumeInfinite@ubi@@SAXPAXPAVAllocator@1@PBDK@Z
??3BoundingVolumeInfinite@ubi@@SAXPAXPBDK@Z
??3DiskCache@ubi@@SAXPAX0@Z
??3DiskCache@ubi@@SAXPAX@Z
??3DiskCache@ubi@@SAXPAXPAVAllocator@1@@Z
??3DiskCache@ubi@@SAXPAXPAVAllocator@1@PBDK@Z
??3DiskCache@ubi@@SAXPAXPBDK@Z
??3DiskDrive@ubi@@SAXPAX0@Z
??3DiskDrive@ubi@@SAXPAX@Z
??3DiskDrive@ubi@@SAXPAXPAVAllocator@1@@Z
??3DiskDrive@ubi@@SAXPAXPAVAllocator@1@PBDK@Z
??3DiskDrive@ubi@@SAXPAXPBDK@Z
??3DiskDriveWin32@ubi@@SAXPAX0@Z
??3DiskDriveWin32@ubi@@SAXPAX@Z
??3DiskDriveWin32@ubi@@SAXPAXPAVAllocator@1@@Z
??3DiskDriveWin32@ubi@@SAXPAXPAVAllocator@1@PBDK@Z
??3DiskDriveWin32@ubi@@SAXPAXPBDK@Z
??3DiskIndex@ubi@@SAXPAX0@Z
??3DiskIndex@ubi@@SAXPAX@Z
??3DiskIndex@ubi@@SAXPAXPAVAllocator@1@@Z
??3DiskIndex@ubi@@SAXPAXPAVAllocator@1@PBDK@Z
??3DiskIndex@ubi@@SAXPAXPBDK@Z
??3DiskPage@ubi@@SAXPAX0@Z
??3DiskPage@ubi@@SAXPAX@Z
??3DiskPage@ubi@@SAXPAXPAVAllocator@1@@Z
??3DiskPage@ubi@@SAXPAXPAVAllocator@1@PBDK@Z
??3DiskPage@ubi@@SAXPAXPBDK@Z
??3Factory@ubi@@SAXPAX0@Z
??3Factory@ubi@@SAXPAX@Z
??3Factory@ubi@@SAXPAXPAVAllocator@1@@Z
??3Factory@ubi@@SAXPAXPAVAllocator@1@PBDK@Z
??3Factory@ubi@@SAXPAXPBDK@Z
??3File@ubi@@SAXPAX0@Z
??3File@ubi@@SAXPAX@Z
??3File@ubi@@SAXPAXPAVAllocator@1@@Z
??3File@ubi@@SAXPAXPAVAllocator@1@PBDK@Z
??3File@ubi@@SAXPAXPBDK@Z
??3FileArchive@ubi@@SAXPAX0@Z
??3FileArchive@ubi@@SAXPAX@Z
??3FileArchive@ubi@@SAXPAXPAVAllocator@1@@Z
??3FileArchive@ubi@@SAXPAXPAVAllocator@1@PBDK@Z
??3FileArchive@ubi@@SAXPAXPBDK@Z
??3FileArchiveDatabase@ubi@@SAXPAX0@Z
??3FileArchiveDatabase@ubi@@SAXPAX@Z
??3FileArchiveDatabase@ubi@@SAXPAXPAVAllocator@1@@Z
??3FileArchiveDatabase@ubi@@SAXPAXPAVAllocator@1@PBDK@Z
??3FileArchiveDatabase@ubi@@SAXPAXPBDK@Z
??3FileManager@ubi@@SAXPAX0@Z
??3FileManager@ubi@@SAXPAX@Z
??3FileManager@ubi@@SAXPAXPAVAllocator@1@@Z
??3FileManager@ubi@@SAXPAXPAVAllocator@1@PBDK@Z
??3FileManager@ubi@@SAXPAXPBDK@Z
??3FilePage@ubi@@SAXPAX0@Z
??3FilePage@ubi@@SAXPAX@Z
??3FilePage@ubi@@SAXPAXPAVAllocator@1@@Z
??3FilePage@ubi@@SAXPAXPAVAllocator@1@PBDK@Z
??3FilePage@ubi@@SAXPAXPBDK@Z
??3FileReadRequestWin32@ubi@@SAXPAX0@Z
??3FileReadRequestWin32@ubi@@SAXPAX@Z
??3FileReadRequestWin32@ubi@@SAXPAXPAVAllocator@1@@Z

Sections

.text
Size: 560KB - Virtual size: 559KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 176KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4d1bbc256b71b900b7c596abf80a840f

Headers

File Characteristics

Imports

kernel32

user32

msvcp71

msvcr71

Exports

Exports

Sections

.text Size: 560KB - Virtual size: 559KB

.rdata Size: 176KB - Virtual size: 172KB

.data Size: 4KB - Virtual size: 19KB

.idata Size: 12KB - Virtual size: 10KB

.reloc Size: 24KB - Virtual size: 22KB

.text Size: 112KB - Virtual size: 112KB

.text
Size: 560KB - Virtual size: 559KB

.rdata
Size: 176KB - Virtual size: 172KB

.data
Size: 4KB - Virtual size: 19KB

.idata
Size: 12KB - Virtual size: 10KB

.reloc
Size: 24KB - Virtual size: 22KB

.text
Size: 112KB - Virtual size: 112KB