2b50c3456637c6a1c5c2168ff173ee0b_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

2b50c3456637c6a1c5c2168ff173ee0b_JaffaCakes118
Size

421KB
MD5

2b50c3456637c6a1c5c2168ff173ee0b
SHA1

e103838713fa3e9bda608d027d9d343c3baf0ce8
SHA256

9f1f864666d3e8b6a32d9a44f685e4e92f1df6b58ada41e7dd3cb070b98d8769
SHA512

62a6ed96c8920ec342cb24a582de36a8a72ec3f997555a33b6ff38ff7ed07ccb82f7f8c9ef347f8e3778dae32af99b1f26b74074e641e6dacb5f3852c034cbdb
SSDEEP

12288:6Ihtql1Ta327hT8sSXsbNYk2AvBVnXH3nXH3nXHd4PmYm1Au:6IvqjTa327hT8sSXsmk2AvBVnXH3nXHm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b50c3456637c6a1c5c2168ff173ee0b_JaffaCakes118

Files

2b50c3456637c6a1c5c2168ff173ee0b_JaffaCakes118
.dll windows:5 windows x86 arch:x86

880759c3fa51d63a2a360db10879f485

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

q:\GoOO-3.2-13\build\ooo320-m12\cppuhelper\wntmsci12.pro\bin\cppuhelper3MSC.pdb

Imports

sal3

osl_acquireMutex
rtl_ustr_ascii_shortenedCompareIgnoreAsciiCase_WithLength
rtl_bootstrap_expandMacros_from_handle
osl_loadModule
osl_unloadModule
rtl_registerModuleForUnloading
osl_getFunctionSymbol
rtl_str_getLength
rtl_ustr_compareIgnoreAsciiCase_WithLength
rtl_string_getToken
rtl_str_reverseCompare_WithLength
rtl_string_newFromStr
rtl_ustr_hashCode_WithLength
rtl_uString_getToken
rtl_ustr_indexOfStr_WithLength
rtl_ustr_ascii_compare_WithLength
rtl_uString_newFromStr
rtl_ustr_compare_WithLength
rtl_string_release
rtl_uString2String
rtl_byte_sequence_constructFromArray
rtl_ustr_reverseCompare_WithLength
osl_decrementInterlockedCount
rtl_ustr_compare
osl_destroyMutex
osl_createMutex
osl_getThreadTextEncoding
rtl_convertStringToUString
rtl_random_createPool
rtl_random_getBytes
rtl_random_destroyPool
osl_executeProcess
osl_freeProcessHandle
osl_waitThread
osl_freeSecurityHandle
osl_getCurrentSecurity
osl_getModuleURLFromFunctionAddress
osl_getFileURLFromSystemPath
rtl_uriDecode
rtl_ustr_valueOfInt32
rtl_bootstrap_encode
rtl_bootstrap_get_iniName_from_handle
rtl_bootstrap_args_open
rtl_bootstrap_set
rtl_bootstrap_get
rtl_uString_newFromAscii
rtl_uString_newToAsciiUpperCase
rtl_uString_newToAsciiLowerCase
rtl_ustr_lastIndexOfChar_WithLength
rtl_ustr_indexOfChar_WithLength
rtl_uString_newConcat
osl_getProcessWorkingDir
osl_getAbsoluteFileURL
rtl_bootstrap_get_from_handle
rtl_bootstrap_args_close
rtl_uStringbuffer_insert_ascii
rtl_uStringbuffer_insert
rtl_uString_new_WithLength
rtl_ustr_toInt32
rtl_uString_newFromStr_WithLength
rtl_ustr_asciil_reverseEquals_WithLength
rtl_ustr_ascii_shortenedCompare_WithLength
rtl_uString_assign
rtl_uString_release
rtl_string2UString
rtl_uString_acquire
rtl_uString_new
rtl_createUuid
osl_incrementInterlockedCount
rtl_freeMemory
rtl_allocateMemory
osl_getGlobalMutex
osl_releaseMutex

salhelper3msc

??2SimpleReferenceObject@salhelper@@SAPAXI@Z
??1SimpleReferenceObject@salhelper@@MAE@XZ
??3SimpleReferenceObject@salhelper@@SAXPAX@Z

cppu3

typelib_typedescription_newUnion
typelib_typedescription_newInterfaceAttribute
uno_Environment_invoke_v
uno_any_clear
uno_type_sequence_assign
uno_type_sequence_realloc
typelib_typedescriptionreference_acquire
cppu_unsatisfied_iquery_msg
uno_type_assignData
typelib_typedescription_newExtendedInterfaceAttribute
uno_type_any_assign
typelib_typedescription_newStruct
typelib_typedescription_newEnum
uno_type_any_constructAndConvert
typelib_typedescription_newMIInterface
typelib_typedescription_newInterfaceMethod
typelib_typedescription_new
typelib_typedescription_register
typelib_typedescriptionreference_getDescription
uno_getMapping
typelib_typedescription_registerCallback
uno_type_isAssignableFromData
typelib_typedescription_revokeCallback
typelib_static_type_getByTypeClass
typelib_typedescriptionreference_assign
typelib_static_sequence_type_init
uno_type_sequence_construct
uno_type_destructData
uno_type_sequence_reference2One
typelib_typedescriptionreference_release
typelib_typedescriptionreference_equals
typelib_typedescriptionreference_new
uno_any_construct
uno_type_any_construct
uno_any_destruct
uno_getEnvironment
uno_getCurrentEnvironment
typelib_typedescription_release

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

msvcr90

_initterm_e
_initterm
_encoded_null
free
_malloc_crt
?terminate@@YAXXZ
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
malloc
getenv
qsort
??_U@YAPAXI@Z
??2@YAPAXI@Z
??_V@YAXPAX@Z
bsearch
_purecall
_amsg_exit
_CxxThrowException
??3@YAXPAX@Z
?what@exception@std@@UBEPBDXZ
__CxxFrameHandler3
??0exception@std@@QAE@ABQBDH@Z
??1exception@std@@UAE@XZ
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
??0exception@std@@QAE@ABV01@@Z

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
Sleep
InterlockedExchange
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
QueryPerformanceCounter
InterlockedCompareExchange
GetTickCount
GetCurrentThreadId

stlport_vc7145

?allocate@?$__node_alloc@$00$0A@@_STL@@SAPAXI@Z
?deallocate@?$__node_alloc@$00$0A@@_STL@@SAXPAXI@Z
??1?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@XZ
?_M_fill_insert@?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAEXPAPAXIABQAX@Z
?reserve@?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAEXI@Z
??1?$allocator@PAX@_STL@@QAE@XZ
?swap@?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAEXAAV12@@Z
??0?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@IABQAXABV?$allocator@PAX@1@@Z
?get_allocator@?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QBE?AV?$allocator@PAX@2@XZ
??0?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@ABV?$allocator@PAX@1@@Z
?_M_decrement@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@@Z
?_Rebalance@?$_Rb_global@_N@_STL@@SAXPAU_Rb_tree_node_base@2@AAPAU32@@Z
?_M_increment@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@@Z
?_Rebalance_for_erase@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@AAPAU32@11@Z

Exports

Exports

??0AccessControl@cppu@@QAE@ABV01@@Z
??0AccessControl@cppu@@QAE@ABV?$Reference@VXAccessController@security@star@sun@com@@@uno@star@sun@com@@@Z
??0AccessControl@cppu@@QAE@ABV?$Reference@VXComponentContext@uno@star@sun@com@@@uno@star@sun@com@@@Z
??0BootstrapException@cppu@@QAE@ABV01@@Z
??0BootstrapException@cppu@@QAE@ABVOUString@rtl@@@Z
??0BootstrapException@cppu@@QAE@XZ
??0BoundListeners@PropertySetMixinImpl@cppu@@QAE@XZ
??0ClassDataBase@cppu@@QAE@J@Z
??0ClassDataBase@cppu@@QAE@XZ
??0OComponentHelper@cppu@@QAE@AAVMutex@osl@@@Z
??0OInterfaceContainerHelper@cppu@@QAE@AAVMutex@osl@@@Z
??0OInterfaceIteratorHelper@cppu@@QAE@AAVOInterfaceContainerHelper@1@@Z
??0OMultiTypeInterfaceContainerHelper@cppu@@QAE@AAVMutex@osl@@@Z
??0OMultiTypeInterfaceContainerHelperInt32@cppu@@QAE@AAVMutex@osl@@@Z
??0OPropertyArrayHelper@cppu@@QAE@ABV?$Sequence@UProperty@beans@star@sun@com@@@uno@star@sun@com@@E@Z
??0OPropertyArrayHelper@cppu@@QAE@PAUProperty@beans@star@sun@com@@JE@Z
??0OPropertySetHelper@cppu@@QAE@AAU?$OBroadcastHelperVar@VOMultiTypeInterfaceContainerHelper@cppu@@VType@uno@star@sun@com@@@1@@Z
??0OPropertySetHelper@cppu@@QAE@AAU?$OBroadcastHelperVar@VOMultiTypeInterfaceContainerHelper@cppu@@VType@uno@star@sun@com@@@1@PAVIEventNotificationHook@1@_N@Z
??0OPropertySetHelper@cppu@@QAE@AAU?$OBroadcastHelperVar@VOMultiTypeInterfaceContainerHelper@cppu@@VType@uno@star@sun@com@@@1@_N@Z
??0OTypeCollection@cppu@@QAE@ABVType@uno@star@sun@com@@00000000000ABV?$Sequence@VType@uno@star@sun@com@@@3456@@Z
??0OTypeCollection@cppu@@QAE@ABVType@uno@star@sun@com@@0000000000ABV?$Sequence@VType@uno@star@sun@com@@@3456@@Z
??0OTypeCollection@cppu@@QAE@ABVType@uno@star@sun@com@@000000000ABV?$Sequence@VType@uno@star@sun@com@@@3456@@Z
??0OTypeCollection@cppu@@QAE@ABVType@uno@star@sun@com@@00000000ABV?$Sequence@VType@uno@star@sun@com@@@3456@@Z
??0OTypeCollection@cppu@@QAE@ABVType@uno@star@sun@com@@0000000ABV?$Sequence@VType@uno@star@sun@com@@@3456@@Z
??0OTypeCollection@cppu@@QAE@ABVType@uno@star@sun@com@@000000ABV?$Sequence@VType@uno@star@sun@com@@@3456@@Z
??0OTypeCollection@cppu@@QAE@ABVType@uno@star@sun@com@@00000ABV?$Sequence@VType@uno@star@sun@com@@@3456@@Z
??0OTypeCollection@cppu@@QAE@ABVType@uno@star@sun@com@@0000ABV?$Sequence@VType@uno@star@sun@com@@@3456@@Z
??0OTypeCollection@cppu@@QAE@ABVType@uno@star@sun@com@@000ABV?$Sequence@VType@uno@star@sun@com@@@3456@@Z
??0OTypeCollection@cppu@@QAE@ABVType@uno@star@sun@com@@00ABV?$Sequence@VType@uno@star@sun@com@@@3456@@Z
??0OTypeCollection@cppu@@QAE@ABVType@uno@star@sun@com@@0ABV?$Sequence@VType@uno@star@sun@com@@@3456@@Z
??0OTypeCollection@cppu@@QAE@ABVType@uno@star@sun@com@@ABV?$Sequence@VType@uno@star@sun@com@@@3456@@Z
??0OWeakObject@cppu@@QAE@XZ
??0PropertySetMixinImpl@cppu@@AAE@ABV?$Reference@VXComponentContext@uno@star@sun@com@@@uno@star@sun@com@@W4Implements@01@ABV?$Sequence@VOUString@rtl@@@3456@ABVType@3456@@Z
??0UnoUrl@cppu@@QAE@ABV01@@Z
??0UnoUrl@cppu@@QAE@ABVOUString@rtl@@@Z
??0UnoUrlDescriptor@cppu@@QAE@ABV01@@Z
??0UnoUrlDescriptor@cppu@@QAE@ABVOUString@rtl@@@Z
??0WeakAggComponentImplHelperBase@cppu@@IAE@AAVMutex@osl@@@Z
??0WeakComponentImplHelperBase@cppu@@IAE@AAVMutex@osl@@@Z
??0WeakReferenceHelper@uno@star@sun@com@@QAE@ABV01234@@Z
??0WeakReferenceHelper@uno@star@sun@com@@QAE@ABV?$Reference@VXInterface@uno@star@sun@com@@@1234@@Z
??1BootstrapException@cppu@@UAE@XZ
??1BoundListeners@PropertySetMixinImpl@cppu@@QAE@XZ
??1ClassDataBase@cppu@@QAE@XZ
??1IPropertyArrayHelper@cppu@@UAE@XZ
??1OComponentHelper@cppu@@UAE@XZ
??1OImplementationId@cppu@@QAE@XZ
??1OInterfaceContainerHelper@cppu@@QAE@XZ
??1OInterfaceIteratorHelper@cppu@@QAE@XZ
??1OMultiTypeInterfaceContainerHelper@cppu@@QAE@XZ
??1OMultiTypeInterfaceContainerHelperInt32@cppu@@QAE@XZ
??1OPropertyArrayHelper@cppu@@UAE@XZ
??1OPropertySetHelper@cppu@@QAE@XZ
??1OTypeCollection@cppu@@QAE@XZ
??1OWeakAggObject@cppu@@MAE@XZ
??1OWeakObject@cppu@@MAE@XZ
??1PropertySetMixinImpl@cppu@@AAE@XZ
??1UnoUrl@cppu@@QAE@XZ
??1UnoUrlDescriptor@cppu@@QAE@XZ
??1WeakAggComponentImplHelperBase@cppu@@UAE@XZ
??1WeakComponentImplHelperBase@cppu@@UAE@XZ
??1WeakReferenceHelper@uno@star@sun@com@@QAE@XZ
??4BootstrapException@cppu@@QAEAAV01@ABV01@@Z
??4UnoUrl@cppu@@QAEAAV01@ABV01@@Z
??4UnoUrlDescriptor@cppu@@QAEAAV01@ABV01@@Z
??4WeakReferenceHelper@uno@star@sun@com@@QAAAAV01234@ABV01234@@Z
??4WeakReferenceHelper@uno@star@sun@com@@QAAAAV01234@ABV?$Reference@VXInterface@uno@star@sun@com@@@1234@@Z
??BOWeakObject@cppu@@QAA?AV?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@XZ
??BWeakReferenceHelper@uno@star@sun@com@@QBA?AV?$Reference@VXInterface@uno@star@sun@com@@@1234@XZ
??_7IPropertyArrayHelper@cppu@@6B@
??_7OComponentHelper@cppu@@6BOWeakObject@1@@
??_7OComponentHelper@cppu@@6BXAggregation@uno@star@sun@com@@@
??_7OComponentHelper@cppu@@6BXComponent@lang@star@sun@com@@@
??_7OComponentHelper@cppu@@6BXTypeProvider@lang@star@sun@com@@@
??_7OPropertyArrayHelper@cppu@@6B@
??_7OPropertySetHelper@cppu@@6BXFastPropertySet@beans@star@sun@com@@@
??_7OPropertySetHelper@cppu@@6BXMultiPropertySet@beans@star@sun@com@@@
??_7OPropertySetHelper@cppu@@6BXPropertySet@beans@star@sun@com@@@
??_7OWeakAggObject@cppu@@6BOWeakObject@1@@
??_7OWeakAggObject@cppu@@6BXAggregation@uno@star@sun@com@@@
??_7OWeakObject@cppu@@6B@
??_GIPropertyArrayHelper@cppu@@UAEPAXI@Z
??_GOComponentHelper@cppu@@UAEPAXI@Z
??_GOPropertyArrayHelper@cppu@@UAEPAXI@Z
??_GOWeakAggObject@cppu@@MAEPAXI@Z
??_GOWeakObject@cppu@@MAEPAXI@Z
?ImplHelper_getImplementationId@cppu@@YA?AV?$Sequence@C@uno@star@sun@com@@PAUclass_data@1@@Z
?ImplHelper_getTypes@cppu@@YA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@PAUclass_data@1@@Z
?ImplHelper_query@cppu@@YA?AVAny@uno@star@sun@com@@ABVType@3456@PAUclass_data@1@PAX@Z
?ImplHelper_queryNoXInterface@cppu@@YA?AVAny@uno@star@sun@com@@ABVType@3456@PAUclass_data@1@PAX@Z
?ImplInhHelper_getTypes@cppu@@YA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@PAUclass_data@1@ABV23456@@Z
?WeakAggComponentImplHelper_getTypes@cppu@@YA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@PAUclass_data@1@@Z
?WeakAggComponentImplHelper_queryAgg@cppu@@YA?AVAny@uno@star@sun@com@@ABVType@3456@PAUclass_data@1@PAXPAVWeakAggComponentImplHelperBase@1@@Z
?WeakAggImplHelper_getTypes@cppu@@YA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@PAUclass_data@1@@Z
?WeakAggImplHelper_queryAgg@cppu@@YA?AVAny@uno@star@sun@com@@ABVType@3456@PAUclass_data@1@PAXPAVOWeakAggObject@1@@Z
?WeakComponentImplHelper_getTypes@cppu@@YA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@PAUclass_data@1@@Z
?WeakComponentImplHelper_query@cppu@@YA?AVAny@uno@star@sun@com@@ABVType@3456@PAUclass_data@1@PAXPAVWeakComponentImplHelperBase@1@@Z
?WeakImplHelper_getTypes@cppu@@YA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@PAUclass_data@1@@Z
?WeakImplHelper_query@cppu@@YA?AVAny@uno@star@sun@com@@ABVType@3456@PAUclass_data@1@PAXPAVOWeakObject@1@@Z
?acquire@OComponentHelper@cppu@@UAAXXZ
?acquire@OWeakAggObject@cppu@@UAAXXZ
?acquire@OWeakObject@cppu@@UAAXXZ
?acquire@WeakAggComponentImplHelperBase@cppu@@UAAXXZ
?acquire@WeakComponentImplHelperBase@cppu@@UAAXXZ
?addEventListener@OComponentHelper@cppu@@UAAXABV?$Reference@VXEventListener@lang@star@sun@com@@@uno@star@sun@com@@@Z
?addEventListener@WeakAggComponentImplHelperBase@cppu@@UAAXABV?$Reference@VXEventListener@lang@star@sun@com@@@uno@star@sun@com@@@Z
?addEventListener@WeakComponentImplHelperBase@cppu@@UAAXABV?$Reference@VXEventListener@lang@star@sun@com@@@uno@star@sun@com@@@Z
?addInterface@OInterfaceContainerHelper@cppu@@QAAJABV?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@@Z
?addInterface@OMultiTypeInterfaceContainerHelper@cppu@@QAAJABVType@uno@star@sun@com@@ABV?$Reference@VXInterface@uno@star@sun@com@@@4567@@Z
?addInterface@OMultiTypeInterfaceContainerHelperInt32@cppu@@QAAJABJABV?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@@Z
?addListener@?$OBroadcastHelperVar@VOMultiTypeInterfaceContainerHelper@cppu@@VType@uno@star@sun@com@@@cppu@@QAEXABVType@uno@star@sun@com@@ABV?$Reference@VXInterface@uno@star@sun@com@@@4567@@Z
?addPropertiesChangeListener@OPropertySetHelper@cppu@@UAAXABV?$Sequence@VOUString@rtl@@@uno@star@sun@com@@ABV?$Reference@VXPropertiesChangeListener@beans@star@sun@com@@@4567@@Z
?addPropertyChangeListener@OPropertySetHelper@cppu@@UAAXABVOUString@rtl@@ABV?$Reference@VXPropertyChangeListener@beans@star@sun@com@@@uno@star@sun@com@@@Z
?addPropertyChangeListener@PropertySetMixinImpl@cppu@@MAAXABVOUString@rtl@@ABV?$Reference@VXPropertyChangeListener@beans@star@sun@com@@@uno@star@sun@com@@@Z
?addVetoableChangeListener@OPropertySetHelper@cppu@@UAAXABVOUString@rtl@@ABV?$Reference@VXVetoableChangeListener@beans@star@sun@com@@@uno@star@sun@com@@@Z
?addVetoableChangeListener@PropertySetMixinImpl@cppu@@MAAXABVOUString@rtl@@ABV?$Reference@VXVetoableChangeListener@beans@star@sun@com@@@uno@star@sun@com@@@Z
?bootstrap@cppu@@YA?AV?$Reference@VXComponentContext@uno@star@sun@com@@@uno@star@sun@com@@XZ
?bootstrap_InitialComponentContext@cppu@@YA?AV?$Reference@VXComponentContext@uno@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXSimpleRegistry@registry@star@sun@com@@@3456@ABVOUString@rtl@@@Z
?bootstrap_expandUri@cppu@@YA?AVOUString@rtl@@ABV23@@Z
?checkFilePermission@AccessControl@cppu@@QAAXABVOUString@rtl@@0@Z
?checkRuntimePermission@AccessControl@cppu@@QAAXABVOUString@rtl@@@Z
?checkSocketPermission@AccessControl@cppu@@QAAXABVOUString@rtl@@0@Z
?clear@OInterfaceContainerHelper@cppu@@QAAXXZ
?clear@OMultiTypeInterfaceContainerHelper@cppu@@QAAXXZ
?clear@OMultiTypeInterfaceContainerHelperInt32@cppu@@QAAXXZ
?component_getFactoryHelper@cppu@@YAPAXPBDPAX1QBUImplementationEntry@1@@Z
?component_writeInfoHelper@cppu@@YAEPAX0QBUImplementationEntry@1@@Z
?copyAndResetInUse@OInterfaceContainerHelper@cppu@@AAEXXZ
?createComponentContext@cppu@@YA?AV?$Reference@VXComponentContext@uno@star@sun@com@@@uno@star@sun@com@@PBUContextEntry_Init@1@JABV23456@@Z
?createFactoryProxy@cppu@@YA?AV?$Reference@VXSingleServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@3456@ABV23456@@Z
?createNestedRegistry@cppu@@YA?AV?$Reference@VXSimpleRegistry@registry@star@sun@com@@@uno@star@sun@com@@ABVOUString@rtl@@@Z
?createOneInstanceFactory@cppu@@YA?AV?$Reference@VXSingleServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@3456@ABVOUString@rtl@@P6A?AV?$Reference@VXInterface@uno@star@sun@com@@@3456@0@ZABV?$Sequence@VOUString@rtl@@@3456@PAU_rtl_ModuleCount@@@Z
?createOneInstanceRegistryFactory@cppu@@YA?AV?$Reference@VXSingleServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@3456@ABVOUString@rtl@@ABV?$Reference@VXRegistryKey@registry@star@sun@com@@@3456@@Z
?createPropertySetInfo@OPropertySetHelper@cppu@@SA?AV?$Reference@VXPropertySetInfo@beans@star@sun@com@@@uno@star@sun@com@@AAVIPropertyArrayHelper@2@@Z
?createRegistryServiceFactory@cppu@@YA?AV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@ABVOUString@rtl@@0E0@Z
?createSimpleRegistry@cppu@@YA?AV?$Reference@VXSimpleRegistry@registry@star@sun@com@@@uno@star@sun@com@@ABVOUString@rtl@@@Z
?createSingleComponentFactory@cppu@@YA?AV?$Reference@VXSingleComponentFactory@lang@star@sun@com@@@uno@star@sun@com@@P6A?AV?$Reference@VXInterface@uno@star@sun@com@@@3456@ABV?$Reference@VXComponentContext@uno@star@sun@com@@@3456@@ZABVOUString@rtl@@ABV?$Sequence@VOUString@rtl@@@3456@PAU_rtl_ModuleCount@@@Z
?createSingleFactory@cppu@@YA?AV?$Reference@VXSingleServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@3456@ABVOUString@rtl@@P6A?AV?$Reference@VXInterface@uno@star@sun@com@@@3456@0@ZABV?$Sequence@VOUString@rtl@@@3456@PAU_rtl_ModuleCount@@@Z
?createSingleRegistryFactory@cppu@@YA?AV?$Reference@VXSingleServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@3456@ABVOUString@rtl@@ABV?$Reference@VXRegistryKey@registry@star@sun@com@@@3456@@Z
?createStandardClassWithSequence@cppu@@YAPAVXIdlClass@reflection@star@sun@com@@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@uno@456@ABVOUString@rtl@@ABV?$Reference@VXIdlClass@reflection@star@sun@com@@@8456@ABV?$Sequence@VOUString@rtl@@@8456@@Z
?defaultBootstrap_InitialComponentContext@cppu@@YA?AV?$Reference@VXComponentContext@uno@star@sun@com@@@uno@star@sun@com@@ABVOUString@rtl@@@Z
?defaultBootstrap_InitialComponentContext@cppu@@YA?AV?$Reference@VXComponentContext@uno@star@sun@com@@@uno@star@sun@com@@XZ
?dispose@OComponentHelper@cppu@@UAAXXZ
?dispose@PropertySetMixinImpl@cppu@@IAEXXZ
?dispose@WeakAggComponentImplHelperBase@cppu@@UAAXXZ
?dispose@WeakComponentImplHelperBase@cppu@@UAAXXZ
?disposeAndClear@OInterfaceContainerHelper@cppu@@QAAXABUEventObject@lang@star@sun@com@@@Z
?disposeAndClear@OMultiTypeInterfaceContainerHelper@cppu@@QAAXABUEventObject@lang@star@sun@com@@@Z
?disposeAndClear@OMultiTypeInterfaceContainerHelperInt32@cppu@@QAAXABUEventObject@lang@star@sun@com@@@Z
?disposing@OComponentHelper@cppu@@MAAXXZ
?disposing@OPropertySetHelper@cppu@@QAAXXZ
?disposing@WeakAggComponentImplHelperBase@cppu@@MAAXXZ
?disposing@WeakComponentImplHelperBase@cppu@@MAAXXZ
?fillHandles@OPropertyArrayHelper@cppu@@UAAJPAJABV?$Sequence@VOUString@rtl@@@uno@star@sun@com@@@Z
?fillPropertyMembersByHandle@OPropertyArrayHelper@cppu@@UAAEPAVOUString@rtl@@PAFJ@Z
?fire@OPropertySetHelper@cppu@@IAAXPAJPBVAny@uno@star@sun@com@@1JE@Z
?firePropertiesChangeEvent@OPropertySetHelper@cppu@@UAAXABV?$Sequence@VOUString@rtl@@@uno@star@sun@com@@ABV?$Reference@VXPropertiesChangeListener@beans@star@sun@com@@@4567@@Z
?get@WeakReferenceHelper@uno@star@sun@com@@QBA?AV?$Reference@VXInterface@uno@star@sun@com@@@2345@XZ
?getCaughtException@cppu@@YA?AVAny@uno@star@sun@com@@XZ
?getConnection@UnoUrl@cppu@@QBEABVUnoUrlDescriptor@2@XZ
?getContainedTypes@OMultiTypeInterfaceContainerHelper@cppu@@QBA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@XZ
?getContainedTypes@OMultiTypeInterfaceContainerHelperInt32@cppu@@QBA?AV?$Sequence@J@uno@star@sun@com@@XZ
?getContainer@OMultiTypeInterfaceContainerHelper@cppu@@QBAPAVOInterfaceContainerHelper@2@ABVType@uno@star@sun@com@@@Z
?getContainer@OMultiTypeInterfaceContainerHelperInt32@cppu@@QBAPAVOInterfaceContainerHelper@2@ABJ@Z
?getCount@OPropertyArrayHelper@cppu@@QBAJXZ
?getDescriptor@UnoUrlDescriptor@cppu@@QBEABVOUString@rtl@@XZ
?getElements@OInterfaceContainerHelper@cppu@@QBA?AV?$Sequence@V?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@@uno@star@sun@com@@XZ
?getFastPropertyValue@OPropertySetHelper@cppu@@UAA?AVAny@uno@star@sun@com@@J@Z
?getFastPropertyValue@PropertySetMixinImpl@cppu@@MAA?AVAny@uno@star@sun@com@@J@Z
?getHandleByName@OPropertyArrayHelper@cppu@@UAAJABVOUString@rtl@@@Z
?getImplHelperInitMutex@cppu@@YAAAVMutex@osl@@XZ
?getImplementationId@ClassData@cppu@@QAA?AV?$Sequence@C@uno@star@sun@com@@XZ
?getImplementationId@OImplementationId@cppu@@QBA?AV?$Sequence@C@uno@star@sun@com@@XZ
?getLength@OInterfaceContainerHelper@cppu@@QBAJXZ
?getMessage@BootstrapException@cppu@@QBEABVOUString@rtl@@XZ
?getName@UnoUrlDescriptor@cppu@@QBEABVOUString@rtl@@XZ
?getObjectName@UnoUrl@cppu@@QBEABVOUString@rtl@@XZ
?getParameter@UnoUrlDescriptor@cppu@@QBE?AVOUString@rtl@@ABV34@@Z
?getProperties@OPropertyArrayHelper@cppu@@UAA?AV?$Sequence@UProperty@beans@star@sun@com@@@uno@star@sun@com@@XZ
?getPropertyByName@OPropertyArrayHelper@cppu@@UAA?AUProperty@beans@star@sun@com@@ABVOUString@rtl@@@Z
?getPropertySetInfo@PropertySetMixinImpl@cppu@@MAA?AV?$Reference@VXPropertySetInfo@beans@star@sun@com@@@uno@star@sun@com@@XZ
?getPropertyValue@OPropertySetHelper@cppu@@UAA?AVAny@uno@star@sun@com@@ABVOUString@rtl@@@Z
?getPropertyValue@PropertySetMixinImpl@cppu@@MAA?AVAny@uno@star@sun@com@@ABVOUString@rtl@@@Z
?getPropertyValues@OPropertySetHelper@cppu@@UAA?AV?$Sequence@VAny@uno@star@sun@com@@@uno@star@sun@com@@ABV?$Sequence@VOUString@rtl@@@4567@@Z
?getPropertyValues@PropertySetMixinImpl@cppu@@MAA?AV?$Sequence@UPropertyValue@beans@star@sun@com@@@uno@star@sun@com@@XZ
?getProtocol@UnoUrl@cppu@@QBEABVUnoUrlDescriptor@2@XZ
?getTypes@ClassData@cppu@@QAA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@XZ
?getTypes@OComponentHelper@cppu@@UAA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@XZ
?getTypes@OPropertySetHelper@cppu@@QAE?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@XZ
?getTypes@OTypeCollection@cppu@@QAA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@XZ
?hasParameter@UnoUrlDescriptor@cppu@@QBE_NABVOUString@rtl@@@Z
?hasPropertyByName@OPropertyArrayHelper@cppu@@UAAEABVOUString@rtl@@@Z
?init@OPropertyArrayHelper@cppu@@AAEXE@Z
?initTypeProvider@ClassData@cppu@@QAAXXZ
?installTypeDescriptionManager@cppu@@YAEABV?$Reference@VXHierarchicalNameAccess@container@star@sun@com@@@uno@star@sun@com@@@Z
?loadSharedLibComponentFactory@cppu@@YA?AV?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@ABVOUString@rtl@@00ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@3456@ABV?$Reference@VXRegistryKey@registry@star@sun@com@@@3456@@Z
?next@OInterfaceIteratorHelper@cppu@@QAAPAVXInterface@uno@star@sun@com@@XZ
?notify@BoundListeners@PropertySetMixinImpl@cppu@@QBEXXZ
?prepareSet@PropertySetMixinImpl@cppu@@IAEXABVOUString@rtl@@ABVAny@uno@star@sun@com@@1PAVBoundListeners@12@@Z
?query@ClassData@cppu@@QAA?AVAny@uno@star@sun@com@@ABVType@4567@PAVXTypeProvider@lang@567@@Z
?queryAdapter@OWeakObject@cppu@@UAA?AV?$Reference@VXAdapter@uno@star@sun@com@@@uno@star@sun@com@@XZ
?queryAggregation@OComponentHelper@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?queryAggregation@OWeakAggObject@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?queryAggregation@WeakAggComponentImplHelperBase@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?queryInterface@OComponentHelper@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?queryInterface@OPropertySetHelper@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?queryInterface@OPropertySetHelper@cppu@@W3AA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?queryInterface@OPropertySetHelper@cppu@@W7AA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?queryInterface@OWeakAggObject@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?queryInterface@OWeakObject@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?queryInterface@PropertySetMixinImpl@cppu@@MAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?queryInterface@WeakAggComponentImplHelperBase@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?queryInterface@WeakComponentImplHelperBase@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?release@OComponentHelper@cppu@@UAAXXZ
?release@OWeakAggObject@cppu@@UAAXXZ
?release@OWeakObject@cppu@@UAAXXZ
?release@WeakAggComponentImplHelperBase@cppu@@UAAXXZ
?release@WeakComponentImplHelperBase@cppu@@UAAXXZ
?remove@OInterfaceIteratorHelper@cppu@@QAAXXZ
?removeEventListener@OComponentHelper@cppu@@UAAXABV?$Reference@VXEventListener@lang@star@sun@com@@@uno@star@sun@com@@@Z
?removeEventListener@WeakAggComponentImplHelperBase@cppu@@UAAXABV?$Reference@VXEventListener@lang@star@sun@com@@@uno@star@sun@com@@@Z
?removeEventListener@WeakComponentImplHelperBase@cppu@@UAAXABV?$Reference@VXEventListener@lang@star@sun@com@@@uno@star@sun@com@@@Z
?removeInterface@OInterfaceContainerHelper@cppu@@QAAJABV?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@@Z
?removeInterface@OMultiTypeInterfaceContainerHelper@cppu@@QAAJABVType@uno@star@sun@com@@ABV?$Reference@VXInterface@uno@star@sun@com@@@4567@@Z
?removeInterface@OMultiTypeInterfaceContainerHelperInt32@cppu@@QAAJABJABV?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@@Z
?removeListener@?$OBroadcastHelperVar@VOMultiTypeInterfaceContainerHelper@cppu@@VType@uno@star@sun@com@@@cppu@@QAEXABVType@uno@star@sun@com@@ABV?$Reference@VXInterface@uno@star@sun@com@@@4567@@Z
?removePropertiesChangeListener@OPropertySetHelper@cppu@@UAAXABV?$Reference@VXPropertiesChangeListener@beans@star@sun@com@@@uno@star@sun@com@@@Z
?removePropertyChangeListener@OPropertySetHelper@cppu@@UAAXABVOUString@rtl@@ABV?$Reference@VXPropertyChangeListener@beans@star@sun@com@@@uno@star@sun@com@@@Z
?removePropertyChangeListener@PropertySetMixinImpl@cppu@@MAAXABVOUString@rtl@@ABV?$Reference@VXPropertyChangeListener@beans@star@sun@com@@@uno@star@sun@com@@@Z
?removeVetoableChangeListener@OPropertySetHelper@cppu@@UAAXABVOUString@rtl@@ABV?$Reference@VXVetoableChangeListener@beans@star@sun@com@@@uno@star@sun@com@@@Z
?removeVetoableChangeListener@PropertySetMixinImpl@cppu@@MAAXABVOUString@rtl@@ABV?$Reference@VXVetoableChangeListener@beans@star@sun@com@@@uno@star@sun@com@@@Z
?setDelegator@OWeakAggObject@cppu@@UAAXABV?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@@Z
?setFastPropertyValue@OPropertySetHelper@cppu@@UAAXJABVAny@uno@star@sun@com@@@Z
?setFastPropertyValue@PropertySetMixinImpl@cppu@@MAAXJABVAny@uno@star@sun@com@@@Z
?setFastPropertyValues@OPropertySetHelper@cppu@@IAAXJPAJPBVAny@uno@star@sun@com@@J@Z
?setPropertyValue@OPropertySetHelper@cppu@@UAAXABVOUString@rtl@@ABVAny@uno@star@sun@com@@@Z
?setPropertyValue@PropertySetMixinImpl@cppu@@MAAXABVOUString@rtl@@ABVAny@uno@star@sun@com@@@Z
?setPropertyValues@OPropertySetHelper@cppu@@UAAXABV?$Sequence@VOUString@rtl@@@uno@star@sun@com@@ABV?$Sequence@VAny@uno@star@sun@com@@@4567@@Z
?setPropertyValues@PropertySetMixinImpl@cppu@@MAAXABV?$Sequence@UPropertyValue@beans@star@sun@com@@@uno@star@sun@com@@@Z
?throwException@cppu@@YAXABVAny@uno@star@sun@com@@@Z
?writeSharedLibComponentInfo@cppu@@YAXABVOUString@rtl@@0ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXRegistryKey@registry@star@sun@com@@@5678@@Z
?writeTypeOffset@ClassData@cppu@@QAAXABVType@uno@star@sun@com@@J@Z
GetVersionInfo

Sections

.text
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

880759c3fa51d63a2a360db10879f485

Headers

File Characteristics

PDB Paths

Imports

sal3

salhelper3msc

cppu3

advapi32

msvcr90

kernel32

stlport_vc7145

Exports

Exports

Sections

.text Size: 266KB - Virtual size: 265KB

.rdata Size: 125KB - Virtual size: 124KB

.data Size: 5KB - Virtual size: 6KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 22KB - Virtual size: 22KB

.text
Size: 266KB - Virtual size: 265KB

.rdata
Size: 125KB - Virtual size: 124KB

.data
Size: 5KB - Virtual size: 6KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 22KB - Virtual size: 22KB