4872f2ba49af9b5f9e840b055f258780

Sharing

Copy URL Twitter E-mail

General

Target

4872f2ba49af9b5f9e840b055f258780
Size

136KB
MD5

4872f2ba49af9b5f9e840b055f258780
SHA1

661fe11a17b710876501037bcb4a7a57933d7765
SHA256

148686b79b11516363e2727c93d811c1a670a7c1fb691a74d7138872fd9913a2
SHA512

a120fc6dd5ab92c712099e7c6701e4694c8811e9f4f459c91b1cd449e257ff88777b136596099a4053cbb55aceea9b0e41ef94c3283bddb2bbf79dc53af937ac
SSDEEP

3072:5rv3VBl/N4FLvctp8n8/H8eLmyYYdOKLHp23H1:5rlDGjctpfH8sm4OKwV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4872f2ba49af9b5f9e840b055f258780

Files

4872f2ba49af9b5f9e840b055f258780
.dll windows:5 windows x86 arch:x86

9ba88f4515a449ed50738f5ccb283eea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

cppuhelper3msc

?getCaughtException@cppu@@YA?AVAny@uno@star@sun@com@@XZ
?ImplHelper_getImplementationId@cppu@@YA?AV?$Sequence@C@uno@star@sun@com@@PAUclass_data@1@@Z
?WeakImplHelper_getTypes@cppu@@YA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@PAUclass_data@1@@Z
??1OWeakObject@cppu@@MAE@XZ
?WeakImplHelper_query@cppu@@YA?AVAny@uno@star@sun@com@@ABVType@3456@PAUclass_data@1@PAXPAVOWeakObject@1@@Z
?queryAdapter@OWeakObject@cppu@@UAA?AV?$Reference@VXAdapter@uno@star@sun@com@@@uno@star@sun@com@@XZ
?queryInterface@OWeakObject@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
??0OWeakObject@cppu@@QAE@XZ
?release@OWeakObject@cppu@@UAAXXZ
?acquire@OWeakObject@cppu@@UAAXXZ

cppu3

cppu_unsatisfied_iquery_msg
uno_type_sequence_realloc
uno_type_any_assign
uno_any_construct
uno_type_sequence_reference2One
uno_type_sequence_construct
uno_type_any_construct
typelib_typedescriptionreference_acquire
typelib_typedescriptionreference_isAssignableFrom
typelib_typedescriptionreference_release
cppu_Any_extraction_failure_msg
uno_type_assignData
uno_type_destructData
typelib_static_sequence_type_init
typelib_static_type_init
uno_any_destruct
typelib_static_type_getByTypeClass

sal3

rtl_ustr_shortenedCompare_WithLength
rtl_ustr_asciil_reverseEquals_WithLength
rtl_ustr_indexOfChar_WithLength
rtl_byte_sequence_construct
rtl_byte_sequence_assign
rtl_byte_sequence_release
rtl_ustr_compare_WithLength
rtl_uString2String
rtl_string_release
rtl_ustr_compareIgnoreAsciiCase_WithLength
rtl_ustr_indexOfStr_WithLength
rtl_uString_newReplaceStrAt
osl_incrementInterlockedCount
rtl_allocateMemory
osl_destroyMutex
osl_createMutex
rtl_uString_getToken
osl_getExecutableFile
rtl_random_createPool
osl_executeProcess
rtl_digest_create
rtl_digest_queryLength
rtl_digest_init
rtl_digest_update
rtl_digest_get
rtl_digest_destroy
osl_waitThread
osl_releasePipe
osl_createPipe
osl_freeSecurityHandle
osl_getCurrentSecurity
osl_getFileStatus
osl_getDirectoryItem
osl_releaseDirectoryItem
rtl_fillMemory
rtl_bootstrap_args_close
rtl_bootstrap_args_open
rtl_bootstrap_get
rtl_bootstrap_expandMacros
rtl_bootstrap_expandMacros_from_handle
rtl_uriDecode
rtl_getUriCharClass
rtl_uriEncode
rtl_freeMemory
osl_getGlobalMutex
osl_releaseMutex
osl_acquireMutex
rtl_ustr_valueOfInt32
rtl_uStringbuffer_insert_ascii
rtl_uStringbuffer_insert
rtl_uString_new_WithLength
rtl_uString_newTrim
rtl_uString_newConcat
rtl_ustr_lastIndexOfChar_WithLength
rtl_ustr_ascii_shortenedCompare_WithLength
rtl_ustr_reverseCompare_WithLength
rtl_uString_assign
rtl_uString_release
rtl_string2UString
rtl_uString_newFromStr_WithLength
rtl_uString_acquire
rtl_uString_new
rtl_random_getBytes

tl

?CreateResMgr@ResMgr@@SAPAV1@PBDULocale@lang@star@sun@com@@@Z
?SearchAndReplaceAllAscii@String@@QAEXPBDABV1@@Z
?Assign@String@@QAEAAV1@ABVOUString@rtl@@@Z
??0String@@QAE@XZ
?SearchAscii@String@@QBEGPBDG@Z
??0String@@QAE@ABVResId@@@Z
??BString@@QBE?AVOUString@rtl@@XZ
??1String@@QAE@XZ

ucbhelper4msc

?setCommandEnvironment@Content@ucbhelper@@QAEXABV?$Reference@VXCommandEnvironment@ucb@star@sun@com@@@uno@star@sun@com@@@Z
??1Content@ucbhelper@@QAE@XZ
??0Content@ucbhelper@@QAE@ABVOUString@rtl@@ABV?$Reference@VXCommandEnvironment@ucb@star@sun@com@@@uno@star@sun@com@@@Z
?executeCommand@Content@ucbhelper@@QAE?AVAny@uno@star@sun@com@@ABVOUString@rtl@@ABV34567@@Z
??0Content@ucbhelper@@QAE@XZ
?openStream@Content@ucbhelper@@QAEEABV?$Reference@VXOutputStream@io@star@sun@com@@@uno@star@sun@com@@@Z
?insertNewContent@Content@ucbhelper@@QAEEABVOUString@rtl@@ABV?$Sequence@VOUString@rtl@@@uno@star@sun@com@@ABV?$Sequence@VAny@uno@star@sun@com@@@6789@AAV12@@Z
?queryCreatableContentsInfo@Content@ucbhelper@@QAE?AV?$Sequence@UContentInfo@ucb@star@sun@com@@@uno@star@sun@com@@XZ
??4Content@ucbhelper@@QAEAAV01@ABV01@@Z
?openStream@Content@ucbhelper@@QAE?AV?$Reference@VXInputStream@io@star@sun@com@@@uno@star@sun@com@@XZ
?isFolder@Content@ucbhelper@@QAEEXZ

utl

?GetDirectConfigProperty@ConfigManager@utl@@SA?AVAny@uno@star@sun@com@@W4ConfigProperty@12@@Z
?locateUserInstallation@Bootstrap@utl@@SA?AW4PathStatus@12@AAVOUString@rtl@@@Z

xcr

?createOutputStream@xmlscript@@YA?AV?$Reference@VXOutputStream@io@star@sun@com@@@uno@star@sun@com@@PAVByteSequence@rtl@@@Z

comphelpmsc

comphelper_getProcessComponentContext

msvcr90

__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBDH@Z
__CxxFrameHandler3
_initterm
_encoded_null
free
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
??2@YAPAXI@Z
??_U@YAPAXI@Z
_purecall
??_V@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
??3@YAXPAX@Z
?what@exception@std@@UBEPBDXZ
_initterm_e

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
ReadFile
GetStdHandle
WriteFile

stlport_vc7145

?_Rebalance@?$_Rb_global@_N@_STL@@SAXPAU_Rb_tree_node_base@2@AAPAU32@@Z
?_M_increment@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@@Z
?_M_decrement@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@@Z
?deallocate@?$__node_alloc@$00$0A@@_STL@@SAXPAXI@Z
?allocate@?$__node_alloc@$00$0A@@_STL@@SAPAXI@Z

Exports

Exports

??0?$WeakImplHelper1@VXAbortChannel@task@star@sun@com@@@cppu@@QAE@ABV01@@Z
??0?$WeakImplHelper1@VXAbortChannel@task@star@sun@com@@@cppu@@QAE@XZ
??0AbortChannel@dp_misc@@QAE@ABV01@@Z
??0AbortChannel@dp_misc@@QAE@XZ
??0DescriptionInfoset@dp_misc@@QAE@ABV01@@Z
??0DescriptionInfoset@dp_misc@@QAE@ABV?$Reference@VXComponentContext@uno@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXNode@dom@xml@star@sun@com@@@3456@@Z
??0SimpleLicenseAttributes@dp_misc@@QAE@ABU01@@Z
??0SimpleLicenseAttributes@dp_misc@@QAE@XZ
??1?$WeakImplHelper1@VXAbortChannel@task@star@sun@com@@@cppu@@UAE@XZ
??1AbortChannel@dp_misc@@UAE@XZ
??1DescriptionInfoset@dp_misc@@QAE@XZ
??1SimpleLicenseAttributes@dp_misc@@QAE@XZ
??4?$StaticWithInit@$$CBVOUString@rtl@@UStrTitle@dp_misc@@U34@$$CBV12@@rtl@@QAEAAV01@ABV01@@Z
??4?$WeakImplHelper1@VXAbortChannel@task@star@sun@com@@@cppu@@QAEAAV01@ABV01@@Z
??4AbortChannel@dp_misc@@QAEAAV01@ABV01@@Z
??4DescriptionInfoset@dp_misc@@QAEAAV01@ABV01@@Z
??4SimpleLicenseAttributes@dp_misc@@QAEAAU01@ABU01@@Z
??4StrTitle@dp_misc@@QAEAAU01@ABU01@@Z
??RStrTitle@dp_misc@@QAE?BVOUString@rtl@@XZ
??_7AbortChannel@dp_misc@@6BOWeakObject@cppu@@@
??_7AbortChannel@dp_misc@@6BXAbortChannel@task@star@sun@com@@@
??_7AbortChannel@dp_misc@@6BXTypeProvider@lang@star@sun@com@@@
?TRACE@dp_misc@@YAXABVOString@rtl@@@Z
?TRACE@dp_misc@@YAXABVOUString@rtl@@@Z
?acquire@?$WeakImplHelper1@VXAbortChannel@task@star@sun@com@@@cppu@@UAAXXZ
?check@Dependencies@dp_misc@@YA?AV?$Sequence@V?$Reference@VXElement@dom@xml@star@sun@com@@@uno@star@sun@com@@@uno@star@sun@com@@ABVDescriptionInfoset@2@@Z
?checkBlacklist@DescriptionInfoset@dp_misc@@ABEXXZ
?checkBlacklistVersion@DescriptionInfoset@dp_misc@@ABE_NVOUString@rtl@@ABV?$Sequence@VOUString@rtl@@@uno@star@sun@com@@@Z
?compareVersions@dp_misc@@YA?AW4Order@1@ABVOUString@rtl@@0@Z
?create_folder@dp_misc@@YA_NPAVContent@ucbhelper@@ABVOUString@rtl@@ABV?$Reference@VXCommandEnvironment@ucb@star@sun@com@@@uno@star@sun@com@@_N@Z
?create_ucb_content@dp_misc@@YA_NPAVContent@ucbhelper@@ABVOUString@rtl@@ABV?$Reference@VXCommandEnvironment@ucb@star@sun@com@@@uno@star@sun@com@@_N@Z
?erase_path@dp_misc@@YA_NABVOUString@rtl@@ABV?$Reference@VXCommandEnvironment@ucb@star@sun@com@@@uno@star@sun@com@@_N@Z
?expandUnoRcTerm@dp_misc@@YA?AVOUString@rtl@@ABV23@@Z
?expandUnoRcUrl@dp_misc@@YA?AVOUString@rtl@@ABV23@@Z
?generateIdentifier@dp_misc@@YA?AVOUString@rtl@@ABV?$optional@VOUString@rtl@@@boost@@ABV23@@Z
?generateLegacyIdentifier@dp_misc@@YA?AVOUString@rtl@@ABV23@@Z
?generateRandomPipeId@dp_misc@@YA?AVOUString@rtl@@XZ
?get@?$StaticWithInit@$$CBVOUString@rtl@@UStrTitle@dp_misc@@U34@$$CBV12@@rtl@@SAABVOUString@2@XZ
?get@AbortChannel@dp_misc@@SAPAV12@ABV?$Reference@VXAbortChannel@task@star@sun@com@@@uno@star@sun@com@@@Z
?getChildWithDefaultLocale@DescriptionInfoset@dp_misc@@ABE?AV?$Reference@VXNode@dom@xml@star@sun@com@@@uno@star@sun@com@@ABV34567@@Z
?getDependencies@DescriptionInfoset@dp_misc@@QBE?AV?$Reference@VXNodeList@dom@xml@star@sun@com@@@uno@star@sun@com@@XZ
?getDescriptionInfoset@dp_misc@@YA?AVDescriptionInfoset@1@ABVOUString@rtl@@@Z
?getErrorText@Dependencies@dp_misc@@YA?AVOUString@rtl@@ABV?$Reference@VXElement@dom@xml@star@sun@com@@@uno@star@sun@com@@@Z
?getExtensionDefaultUpdateURL@dp_misc@@YA?AVOUString@rtl@@XZ
?getExtensionWithHighestVersion@dp_misc@@YA?AV?$Reference@VXPackage@deployment@star@sun@com@@@uno@star@sun@com@@ABV?$Sequence@V?$Reference@VXPackage@deployment@star@sun@com@@@uno@star@sun@com@@@3456@@Z
?getHighestVersion@dp_misc@@YA?AVOUString@rtl@@ABV23@000@Z
?getIconURL@DescriptionInfoset@dp_misc@@QBE?AVOUString@rtl@@E@Z
?getIdentifier@DescriptionInfoset@dp_misc@@QBE?AV?$optional@VOUString@rtl@@@boost@@XZ
?getIdentifier@dp_misc@@YA?AVOUString@rtl@@ABV?$Reference@VXPackage@deployment@star@sun@com@@@uno@star@sun@com@@@Z
?getImplementationId@?$WeakImplHelper1@VXAbortChannel@task@star@sun@com@@@cppu@@UAA?AV?$Sequence@C@uno@star@sun@com@@XZ
?getLocalizedChild@DescriptionInfoset@dp_misc@@ABE?AV?$Reference@VXNode@dom@xml@star@sun@com@@@uno@star@sun@com@@ABVOUString@rtl@@@Z
?getLocalizedDescriptionURL@DescriptionInfoset@dp_misc@@QBE?AVOUString@rtl@@XZ
?getLocalizedDisplayName@DescriptionInfoset@dp_misc@@QBE?AVOUString@rtl@@XZ
?getLocalizedHREFAttrFromChild@DescriptionInfoset@dp_misc@@ABE?AVOUString@rtl@@ABV34@PA_N@Z
?getLocalizedLicenseURL@DescriptionInfoset@dp_misc@@QBE?AVOUString@rtl@@XZ
?getLocalizedPublisherNameAndURL@DescriptionInfoset@dp_misc@@QBE?AU?$pair@VOUString@rtl@@V12@@_STL@@XZ
?getLocalizedReleaseNotesURL@DescriptionInfoset@dp_misc@@QBE?AVOUString@rtl@@XZ
?getLocalizedUpdateWebsiteURL@DescriptionInfoset@dp_misc@@QBE?AV?$optional@VOUString@rtl@@@boost@@XZ
?getNodeValueFromExpression@DescriptionInfoset@dp_misc@@ABE?AVOUString@rtl@@ABV34@@Z
?getOfficeLocale@dp_misc@@YA?AULocale@lang@star@sun@com@@XZ
?getOfficeLocaleString@dp_misc@@YA?AVOUString@rtl@@XZ
?getOnlineUpdateInfos@dp_misc@@YA?AV?$map@VOUString@rtl@@UUpdateInfo@dp_misc@@U?$less@VOUString@rtl@@@_STL@@V?$allocator@U?$pair@$$CBVOUString@rtl@@UUpdateInfo@dp_misc@@@_STL@@@6@@_STL@@ABV?$Reference@VXComponentContext@uno@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXExtensionManager@deployment@star@sun@com@@@5678@ABV?$Reference@VXUpdateInformationProvider@deployment@star@sun@com@@@5678@PBV?$vector@V?$Reference@VXPackage@deployment@star@sun@com@@@uno@star@sun@com@@V?$allocator@V?$Reference@VXPackage@deployment@star@sun@com@@@uno@star@sun@com@@@_STL@@@3@AAV?$vector@U?$pair@V?$Reference@VXPackage@deployment@star@sun@com@@@uno@star@sun@com@@VAny@2345@@_STL@@V?$allocator@U?$pair@V?$Reference@VXPackage@deployment@star@sun@com@@@uno@star@sun@com@@VAny@2345@@_STL@@@2@@3@@Z
?getOptionalValue@DescriptionInfoset@dp_misc@@ABE?AV?$optional@VOUString@rtl@@@boost@@ABVOUString@rtl@@@Z
?getPlatformString@dp_misc@@YAABVOUString@rtl@@XZ
?getResourceString@dp_misc@@YA?AVString@@G@Z
?getSimpleLicenseAttributes@DescriptionInfoset@dp_misc@@QBE?AV?$optional@USimpleLicenseAttributes@dp_misc@@@boost@@XZ
?getSupportedPlaforms@DescriptionInfoset@dp_misc@@QBE?AV?$Sequence@VOUString@rtl@@@uno@star@sun@com@@XZ
?getTypes@?$WeakImplHelper1@VXAbortChannel@task@star@sun@com@@@cppu@@UAA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@XZ
?getUpdateDownloadUrls@DescriptionInfoset@dp_misc@@QBE?AV?$Sequence@VOUString@rtl@@@uno@star@sun@com@@XZ
?getUpdateInformationUrls@DescriptionInfoset@dp_misc@@QBE?AV?$Sequence@VOUString@rtl@@@uno@star@sun@com@@XZ
?getUrls@DescriptionInfoset@dp_misc@@ABE?AV?$Sequence@VOUString@rtl@@@uno@star@sun@com@@ABVOUString@rtl@@@Z
?getVersion@DescriptionInfoset@dp_misc@@QBE?AVOUString@rtl@@XZ
?hasDescription@DescriptionInfoset@dp_misc@@QBE_NXZ
?hasValidPlatform@dp_misc@@YA_NABV?$Sequence@VOUString@rtl@@@uno@star@sun@com@@@Z
?interactContinuation@dp_misc@@YA_NABVAny@uno@star@sun@com@@ABVType@3456@ABV?$Reference@VXCommandEnvironment@ucb@star@sun@com@@@3456@PA_N3@Z
?isAborted@AbortChannel@dp_misc@@QBE_NXZ
?isUpdateSharedExtension@dp_misc@@YA?AW4UPDATE_SOURCE@1@_NABVOUString@rtl@@11@Z
?isUpdateUserExtension@dp_misc@@YA?AW4UPDATE_SOURCE@1@_NABVOUString@rtl@@111@Z
?makeRcTerm@dp_misc@@YA?AVOUString@rtl@@ABV23@@Z
?makeURL@dp_misc@@YA?AVOUString@rtl@@ABV23@0@Z
?makeURLAppendSysPathSegment@dp_misc@@YA?AVOUString@rtl@@ABV23@0@Z
?matchCountryAndLanguage@DescriptionInfoset@dp_misc@@ABE?AV?$Reference@VXNode@dom@xml@star@sun@com@@@uno@star@sun@com@@ABV34567@ABULocale@lang@567@@Z
?matchFullLocale@DescriptionInfoset@dp_misc@@ABE?AV?$Reference@VXNode@dom@xml@star@sun@com@@@uno@star@sun@com@@ABV34567@ABVOUString@rtl@@@Z
?matchLanguage@DescriptionInfoset@dp_misc@@ABE?AV?$Reference@VXNode@dom@xml@star@sun@com@@@uno@star@sun@com@@ABV34567@ABULocale@lang@567@@Z
?office_is_running@dp_misc@@YA_NXZ
?platform_fits@dp_misc@@YA_NABVOUString@rtl@@@Z
?queryInterface@?$WeakImplHelper1@VXAbortChannel@task@star@sun@com@@@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?raiseProcess@dp_misc@@YAPAXABVOUString@rtl@@ABV?$Sequence@VOUString@rtl@@@uno@star@sun@com@@@Z
?readConsole@dp_misc@@YA?AVOUString@rtl@@XZ
?readFile@dp_misc@@YA?AVByteSequence@rtl@@AAVContent@ucbhelper@@@Z
?readLine@dp_misc@@YA_NPAVOUString@rtl@@ABV23@AAVContent@ucbhelper@@G@Z
?readProperties@dp_misc@@YA_NAAV?$list@U?$pair@VOUString@rtl@@V12@@_STL@@V?$allocator@U?$pair@VOUString@rtl@@V12@@_STL@@@2@@_STL@@AAVContent@ucbhelper@@@Z
?release@?$WeakImplHelper1@VXAbortChannel@task@star@sun@com@@@cppu@@UAAXXZ
?resolveUnoURL@dp_misc@@YA?AV?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@ABVOUString@rtl@@ABV?$Reference@VXComponentContext@uno@star@sun@com@@@3456@PAVAbortChannel@1@@Z
?sendAbort@AbortChannel@dp_misc@@UAAXXZ
?syncRepositories@dp_misc@@YAXABV?$Reference@VXCommandEnvironment@ucb@star@sun@com@@@uno@star@sun@com@@@Z
?toLocale@dp_misc@@YA?AULocale@lang@star@sun@com@@ABVOUString@rtl@@@Z
?writeConsole@dp_misc@@YAXABVOString@rtl@@@Z
?writeConsole@dp_misc@@YAXABVOUString@rtl@@@Z
?writeConsoleError@dp_misc@@YAXABVOString@rtl@@@Z
?writeConsoleError@dp_misc@@YAXABVOUString@rtl@@@Z
GetVersionInfo

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ba88f4515a449ed50738f5ccb283eea

Headers

DLL Characteristics

File Characteristics

Imports

cppuhelper3msc

cppu3

sal3

tl

ucbhelper4msc

utl

xcr

comphelpmsc

msvcr90

kernel32

stlport_vc7145

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 76KB

.rdata Size: 47KB - Virtual size: 47KB

.data Size: 2KB - Virtual size: 3KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 76KB - Virtual size: 76KB

.rdata
Size: 47KB - Virtual size: 47KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 7KB - Virtual size: 6KB