vc6-re200l[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

vc6-re200l.dll
Size

276KB
MD5

4b72b31762e2eda4f59845a362d80924
SHA1

95ae313180a346b2e40f3a5ff1781607661fa503
SHA256

da26334f93e159c1081fe17290f359efea5aa4179ffb5fc5470ed3d7fae01e88
SHA512

12257d62dad25ab7703e082ec9d47a88b8eb9c5dfa301f2d8a148a3fe8e2f6f94cd513206c3723bdfe9d39ce9ab06a1c362a0b620af205a72f03866ec187f295
SSDEEP

3072:hPC+Vvq/lXRZzx3cbUkbTg+Sk6L0qpm2wosTYDTBU7EEGlVx+eZpBBu0k48lpsJ9:hPEZ93cbUkbTg+RqxDTBlZBBuh4Ckmk

Score

N/A

Malware Config

Signatures

Files

vc6-re200l.dll
.dll windows x86

fde5e648f5be1b5dc92bb7f7fa537325

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileSize
MapViewOfFile
CreateFileMappingA
CreateFileA
CloseHandle
UnmapViewOfFile
FindClose
FindNextFileA
FindFirstFileA
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
FreeLibrary
GetUserDefaultLCID
LCMapStringA
GetStringTypeA
GetStringTypeW
LCMapStringW
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
InitializeCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls

user32

LoadStringA
CharLowerW

msvcp71

?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Unlock@_Mutex@std@@QAEXXZ
?_Lock@_Mutex@std@@QAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?_Register@facet@locale@std@@QAEXXZ
?_Incref@facet@locale@std@@QAEXXZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@@Z
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Id_cnt@id@locale@std@@0HA
??1_Lockit@std@@QAE@XZ
?id@?$ctype@D@std@@2V0locale@2@A
??0_Lockit@std@@QAE@H@Z
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@@Z
?id@?$ctype@G@std@@2V0locale@2@A
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IG@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?_Nomemory@std@@YAXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?clear@ios_base@std@@QAEXH_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1locale@std@@QAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
?is@?$ctype@G@std@@QBE_NFG@Z
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?max_size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AVconst_iterator@12@XZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AVconst_iterator@12@XZ

msvcr71

wcscpy
__CppXcptFilter
??3@YAXPAX@Z
??1exception@@UAE@XZ
??0exception@@QAE@XZ
__CxxFrameHandler
??0exception@@QAE@ABV0@@Z
??4exception@@QAEAAV0@ABV0@@Z
??_V@YAXPAX@Z
_CxxThrowException
??0bad_cast@@QAE@ABV0@@Z
??1bad_cast@@UAE@XZ
??0bad_cast@@QAE@PBD@Z
memmove
sprintf
wcslen
isspace
wcscmp
swprintf
malloc
_callnewh
?terminate@@YAXXZ
_except_handler3
??1type_info@@UAE@XZ
__dllonexit
_onexit
free
_initterm
_adjust_fdiv

Exports

Exports

??0RegEx@jm@@QAE@ABV01@@Z
??0RegEx@jm@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
??0RegEx@jm@@QAE@PBD_N@Z
??0RegEx@jm@@QAE@XZ
??0bad_expression@jm@@QAE@ABV01@@Z
??0bad_expression@jm@@QAE@I@Z
??0directory_iterator@jm@@QAE@ABV01@@Z
??0directory_iterator@jm@@QAE@PBD@Z
??0directory_iterator@jm@@QAE@XZ
??0file_iterator@jm@@QAE@ABV01@@Z
??0file_iterator@jm@@QAE@PBD@Z
??0file_iterator@jm@@QAE@XZ
??0mapfile@jm@@QAE@PBD@Z
??0mapfile@jm@@QAE@XZ
??0regbase@jm@@QAE@ABV01@@Z
??0regbase@jm@@QAE@XZ
??1RegEx@jm@@QAE@XZ
??1bad_expression@jm@@UAE@XZ
??1directory_iterator@jm@@QAE@XZ
??1file_iterator@jm@@QAE@XZ
??1mapfile@jm@@QAE@XZ
??4?$iterator@Uinput_iterator_tag@std@@PBDHPAPBDAAPBD@std@@QAEAAU01@ABU01@@Z
??4RegEx@jm@@QAEAAV01@ABV01@@Z
??4RegEx@jm@@QAEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??4RegEx@jm@@QAEAAV01@PBD@Z
??4bad_expression@jm@@QAEAAV01@ABV01@@Z
??4directory_iterator@jm@@QAEAAV01@ABV01@@Z
??4file_iterator@jm@@QAEAAV01@ABV01@@Z
??4mapfile@jm@@QAEAAV01@ABV01@@Z
??4regbase@jm@@QAEAAV01@ABV01@@Z
??ARegEx@jm@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
??Ddirectory_iterator@jm@@QAEPBDXZ
??Dfile_iterator@jm@@QAEPBDXZ
??Edirectory_iterator@jm@@QAE?AV01@H@Z
??Edirectory_iterator@jm@@QAEAAV01@XZ
??Efile_iterator@jm@@QAE?AV01@H@Z
??Efile_iterator@jm@@QAEAAV01@XZ
??_7bad_expression@jm@@6B@
?Expression@RegEx@jm@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?FindFiles@RegEx@jm@@QAEIP6A_NPBD@Z0_NI@Z
?FindFiles@RegEx@jm@@QAEIP6A_NPBD@ZABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_NI@Z
?Grep@RegEx@jm@@QAEIAAV?$vector@IV?$allocator@I@std@@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@I@Z
?Grep@RegEx@jm@@QAEIAAV?$vector@IV?$allocator@I@std@@@std@@PBDI@Z
?Grep@RegEx@jm@@QAEIAAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@I@Z
?Grep@RegEx@jm@@QAEIAAV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@PBDI@Z
?Grep@RegEx@jm@@QAEIP6A_NABV12@@ZABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z
?Grep@RegEx@jm@@QAEIP6A_NABV12@@ZPBDI@Z
?GrepFiles@RegEx@jm@@QAEIP6A_NPBDABV12@@Z0_NI@Z
?GrepFiles@RegEx@jm@@QAEIP6A_NPBDABV12@@ZABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_NI@Z
?Length@RegEx@jm@@QBEIH@Z
?Line@RegEx@jm@@QBEIXZ
?Marks@RegEx@jm@@QBEIXZ
?Match@RegEx@jm@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z
?Match@RegEx@jm@@QAE_NPBDI@Z
?Merge@RegEx@jm@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@0_NI@Z
?Merge@RegEx@jm@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD0_NI@Z
?Position@RegEx@jm@@QBEIH@Z
?Search@RegEx@jm@@QAE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@I@Z
?Search@RegEx@jm@@QAE_NPBDI@Z
?SetExpression@RegEx@jm@@QAEIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z
?SetExpression@RegEx@jm@@QAEIPBD_N@Z
?What@RegEx@jm@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?_fi_sep@jm@@3PBDB
?_re_get_message@jm@@YIIPADII@Z
?_re_lookup_class@jm@@YIIPBD@Z
?_re_lookup_collate@jm@@YI_NAAV?$re_str@D@1@PBD@Z
?_re_strnarrow@jm@@YIIPADIPBG@Z
?_re_strwiden@jm@@YIIPAGIPBD@Z
?begin@mapfile@jm@@QAEPBDXZ
?close@mapfile@jm@@QAEXXZ
?data@directory_iterator@jm@@QAEPAU_WIN32_FIND_DATAA@@XZ
?data@file_iterator@jm@@QAEPAU_WIN32_FIND_DATAA@@XZ
?do_update_collate@jm@@YIXXZ
?do_update_ctype@jm@@YIXXZ
?end@mapfile@jm@@QAEPBDXZ
?errmsg@regbase@jm@@QBIPBDXZ
?error_code@regbase@jm@@QBIIXZ
?fail@regbase@jm@@QAIXI@Z
?flags@regbase@jm@@QBIIXZ
?get_global_locale_name@jm@@YIPBDH@Z
?init_w@jm@@3V?$re_initialiser@G@1@A
?name@directory_iterator@jm@@QBEPBDXZ
?name@file_iterator@jm@@QBEPBDXZ
?next@directory_iterator@jm@@QAEXXZ
?next@file_iterator@jm@@QAEXXZ
?open@mapfile@jm@@QAEXPBD@Z
?p_re_lock@jm@@3PAVcritical_section@1@A
?path@directory_iterator@jm@@QBEPBDXZ
?path@file_iterator@jm@@QBEPBDXZ
?re_class_map@jm@@3PAGA
?re_custom_error_messages@jm@@3PAPADA
?re_default_error_messages@jm@@3PAPBDA
?re_free@jm@@YIXXZ
?re_free_w@jm@@YIXXZ
?re_get_default_message@jm@@YIIPADII@Z
?re_get_error_str@jm@@YIPBDI@Z
?re_get_syntax_type@jm@@YIIG@Z
?re_init@jm@@YIXXZ
?re_init_w@jm@@YIXXZ
?re_is_combining@jm@@YI_NG@Z
?re_iswclass@jm@@YI_NGI@Z
?re_lock_count@jm@@3IA
?re_lookup_collate@jm@@YI_NAAV?$re_str@G@1@PBG1@Z
?re_lookup_def_collate_name@jm@@YI_NAAV?$re_str@D@1@PBD@Z
?re_lower_case_map@jm@@3PADA
?re_lower_case_map_w@jm@@3PAGA
?re_message_free@jm@@YIXXZ
?re_message_init@jm@@YIXXZ
?re_message_update@jm@@YIXXZ
?re_syntax_map@jm@@3PAEA
?re_ten@jm@@3DA
?re_ten_w@jm@@3GA
?re_transform@jm@@YIXAAV?$re_str@D@1@ABV21@@Z
?re_transform@jm@@YIXAAV?$re_str@G@1@ABV21@@Z
?re_unicode_classes@jm@@3PAGA
?re_update@jm@@YIXXZ
?re_update_w@jm@@YIXXZ
?re_wtolower@jm@@YIGG@Z
?re_zero@jm@@3DA
?re_zero_w@jm@@3GA
?regex_message_catalogue@jm@@3PBDB
?root@directory_iterator@jm@@QBEPBDXZ
?root@file_iterator@jm@@QBEPBDXZ
?separator@directory_iterator@jm@@SAPBDXZ
?size@mapfile@jm@@QAEIXZ
?valid@mapfile@jm@@QAE_NXZ
?what@bad_expression@jm@@UBEPBDXZ
_regcompA@12
_regcompW@12
_regerrorA@16
_regerrorW@16
_regexecA@20
_regexecW@20
_regfreeA@4
_regfreeW@4

Sections

.text
Size: 220KB - Virtual size: 219KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fde5e648f5be1b5dc92bb7f7fa537325

Headers

File Characteristics

Imports

kernel32

user32

msvcp71

msvcr71

Exports

Exports

Sections

.text Size: 220KB - Virtual size: 219KB

.rdata Size: 28KB - Virtual size: 24KB

.data Size: 8KB - Virtual size: 5KB

.idata Size: 8KB - Virtual size: 7KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 220KB - Virtual size: 219KB

.rdata
Size: 28KB - Virtual size: 24KB

.data
Size: 8KB - Virtual size: 5KB

.idata
Size: 8KB - Virtual size: 7KB

.reloc
Size: 8KB - Virtual size: 7KB