d57773d4a09a995503fb6f10b010910529a20abb8db20104778d577f8593dffc

Sharing

Copy URL Twitter E-mail

General

Target

d57773d4a09a995503fb6f10b010910529a20abb8db20104778d577f8593dffc
Size

565KB
MD5

fbc65380d99dbd0c5c2ebb1c804a9af0
SHA1

f170f59ee02627dd2593a48f88bdd146528dbea8
SHA256

d57773d4a09a995503fb6f10b010910529a20abb8db20104778d577f8593dffc
SHA512

0f953496f3483dcd94d0cd010a61859358b3cc1a3d59472741fab94f86d788849c3a826ae02d9e1203fee59e999b2c7be9f4b04d48c7425fa94b3da9ead70086
SSDEEP

12288:weZ6XUUOSuN6OcnXWPS+H9VTaQ6dIqCZ2PSFIfpKOa48qh+TH:wu6XUUOBN6O4X5+H9ZaQ6dIqCZ2PSFIu

Score

1^/10

Malware Config

Signatures

Files

d57773d4a09a995503fb6f10b010910529a20abb8db20104778d577f8593dffc
.dll windows:5 windows x86 arch:x86

94e7d9f42172a4713f893fa9c26ba65a

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Not Before

13/04/2011, 10:00

Not After

28/01/2028, 12:00

Subject

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:21:06:a0:81:d3:3f:d8:7a:e5:82:4c:c1:6b:52:09:4e:03
Certificate

Issuer

CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE

Not Before

03/02/2015, 00:00

Not After

03/03/2026, 00:00

Subject

CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

1b:86:12:67:7a:e1:9d
Certificate

Issuer

CN=StartCom Certification Authority,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

14/10/2007, 22:03

Not After

14/10/2022, 22:03

Subject

CN=StartCom Class 3 Primary Intermediate Object CA,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

11:bf:f1:b8:5c:2c:da
Certificate

Issuer

CN=StartCom Class 3 Primary Intermediate Object CA,OU=Secure Digital Certificate Signing,O=StartCom Ltd.,C=IL

Not Before

01/06/2015, 04:53

Not After

31/05/2018, 10:05

Subject

CN=The Document Foundation,O=The Document Foundation,L=Berlin,ST=Berlin,C=DE,1.2.840.113549.1.9.1=#0c1b696e666f40646f63756d656e74666f756e646174696f6e2e6f7267

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftKernelCodeSigning

Key Usages

KeyUsageDigitalSignature

22:06:9b:53:9a:e1:21:3c:05:68:23:d3:f3:ab:94:3a:d3:a7:c7:5b
Signer

Actual PE Digest

22:06:9b:53:9a:e1:21:3c:05:68:23:d3:f3:ab:94:3a:d3:a7:c7:5b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\cygwin64\home\buildslave\r\workdir\LinkTarget\Library\xstor.pdb

Imports

comphelper

??0SequenceAsHashMap@comphelper@@QAE@ABV01@@Z
?IsValidZipEntryFileName@OStorageHelper@comphelper@@SA_NABVOUString@rtl@@_N@Z
?getComponentContext@comphelper@@YA?AV?$Reference@VXComponentContext@uno@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@3456@@Z
??4SequenceAsHashMap@comphelper@@QAEAAV01@ABV01@@Z
??1SequenceAsHashMap@comphelper@@QAE@XZ
??0SequenceAsHashMap@comphelper@@QAE@ABV?$Sequence@UNamedValue@beans@star@sun@com@@@uno@star@sun@com@@@Z
??0SequenceAsHashMap@comphelper@@QAE@XZ
?CreatePackageEncryptionData@OStorageHelper@comphelper@@SA?AV?$Sequence@UNamedValue@beans@star@sun@com@@@uno@star@sun@com@@ABVOUString@rtl@@@Z
?CopyInputToOutput@OStorageHelper@comphelper@@SAXABV?$Reference@VXInputStream@io@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXOutputStream@io@star@sun@com@@@4567@@Z
?getProcessComponentContext@comphelper@@YA?AV?$Reference@VXComponentContext@uno@star@sun@com@@@uno@star@sun@com@@XZ
?WriteRelationsInfoSequence@OFOPXMLHelper@comphelper@@SAXABV?$Reference@VXOutputStream@io@star@sun@com@@@uno@star@sun@com@@ABV?$Sequence@V?$Sequence@UStringPair@beans@star@sun@com@@@uno@star@sun@com@@@4567@V?$Reference@VXComponentContext@uno@star@sun@com@@@4567@@Z
?ReadRelationsInfoSequence@OFOPXMLHelper@comphelper@@SA?AV?$Sequence@V?$Sequence@UStringPair@beans@star@sun@com@@@uno@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXInputStream@io@star@sun@com@@@4567@ABVOUString@rtl@@V?$Reference@VXComponentContext@uno@star@sun@com@@@4567@@Z
?getAsConstNamedValueList@SequenceAsHashMap@comphelper@@QBE?BV?$Sequence@UNamedValue@beans@star@sun@com@@@uno@star@sun@com@@XZ

cppu3

uno_any_destruct
typelib_typedescription_new
typelib_typedescription_newMIInterface
typelib_typedescription_newInterfaceMethod
typelib_typedescription_release
typelib_typedescription_register
typelib_typedescriptionreference_new
typelib_typedescriptionreference_release
typelib_static_type_getByTypeClass
typelib_static_sequence_type_init
uno_type_sequence_destroy
uno_type_assignData
uno_type_any_assign
uno_any_construct
uno_type_any_construct
typelib_typedescription_newEnum
typelib_typedescription_newStruct
typelib_typedescriptionreference_equals
typelib_static_type_init
uno_type_sequence_assign
uno_type_sequence_construct
uno_type_sequence_reference2One
uno_type_sequence_realloc
cppu_unsatisfied_iquery_msg
cppu_unsatisfied_iset_msg
typelib_typedescriptionreference_acquire

cppuhelper3msc

??1OWeakObject@cppu@@MAE@XZ
??0OTypeCollection@cppu@@QAE@ABVType@uno@star@sun@com@@000000ABV?$Sequence@VType@uno@star@sun@com@@@3456@@Z
??0OTypeCollection@cppu@@QAE@ABVType@uno@star@sun@com@@00000ABV?$Sequence@VType@uno@star@sun@com@@@3456@@Z
?supportsService@cppu@@YA_NPAVXServiceInfo@lang@star@sun@com@@ABVOUString@rtl@@@Z
??BOWeakObject@cppu@@QAA?AV?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@XZ
?createOneInstanceFactory@cppu@@YA?AV?$Reference@VXSingleServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@3456@ABVOUString@rtl@@P6A?AV?$Reference@VXInterface@uno@star@sun@com@@@3456@0@ZABV?$Sequence@VOUString@rtl@@@3456@PAU_rtl_ModuleCount@@@Z
?disposeAndClear@OMultiTypeInterfaceContainerHelper@cppu@@QAAXABUEventObject@lang@star@sun@com@@@Z
?removeInterface@OMultiTypeInterfaceContainerHelper@cppu@@QAAJABVType@uno@star@sun@com@@ABV?$Reference@VXInterface@uno@star@sun@com@@@4567@@Z
?addInterface@OMultiTypeInterfaceContainerHelper@cppu@@QAAJABVType@uno@star@sun@com@@ABV?$Reference@VXInterface@uno@star@sun@com@@@4567@@Z
?getContainer@OMultiTypeInterfaceContainerHelper@cppu@@QBAPAVOInterfaceContainerHelper@2@ABVType@uno@star@sun@com@@@Z
??1OMultiTypeInterfaceContainerHelper@cppu@@QAE@XZ
??0OMultiTypeInterfaceContainerHelper@cppu@@QAE@AAVMutex@osl@@@Z
?next@OInterfaceIteratorHelper@cppu@@QAAPAVXInterface@uno@star@sun@com@@XZ
??1OInterfaceIteratorHelper@cppu@@QAE@XZ
??0OInterfaceIteratorHelper@cppu@@QAE@AAVOInterfaceContainerHelper@1@@Z
??0OTypeCollection@cppu@@QAE@ABVType@uno@star@sun@com@@00000000000ABV?$Sequence@VType@uno@star@sun@com@@@3456@@Z
??0OTypeCollection@cppu@@QAE@ABVType@uno@star@sun@com@@0000000000ABV?$Sequence@VType@uno@star@sun@com@@@3456@@Z
??0OTypeCollection@cppu@@QAE@ABVType@uno@star@sun@com@@000000000ABV?$Sequence@VType@uno@star@sun@com@@@3456@@Z
??0OTypeCollection@cppu@@QAE@ABVType@uno@star@sun@com@@00000000ABV?$Sequence@VType@uno@star@sun@com@@@3456@@Z
??0OTypeCollection@cppu@@QAE@ABVType@uno@star@sun@com@@0000000ABV?$Sequence@VType@uno@star@sun@com@@@3456@@Z
??3OTypeCollection@cppu@@SAXPAX@Z
??2OTypeCollection@cppu@@SAPAXI@Z
?getCaughtException@cppu@@YA?AVAny@uno@star@sun@com@@XZ
??1OTypeCollection@cppu@@QAE@XZ
?getTypes@OTypeCollection@cppu@@QAA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@XZ
??3OWeakObject@cppu@@SAXPAX@Z
?get@WeakReferenceHelper@uno@star@sun@com@@QBA?AV?$Reference@VXInterface@uno@star@sun@com@@@2345@XZ
??1WeakReferenceHelper@uno@star@sun@com@@QAE@XZ
??0WeakReferenceHelper@uno@star@sun@com@@QAE@ABV?$Reference@VXInterface@uno@star@sun@com@@@1234@@Z
??0WeakReferenceHelper@uno@star@sun@com@@QAE@ABV01234@@Z
??0WeakReferenceHelper@uno@star@sun@com@@QAE@XZ
??2OWeakObject@cppu@@SAPAXI@Z
?disposeAndClear@OInterfaceContainerHelper@cppu@@QAAXABUEventObject@lang@star@sun@com@@@Z
?removeInterface@OInterfaceContainerHelper@cppu@@QAAJABV?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@@Z
?addInterface@OInterfaceContainerHelper@cppu@@QAAJABV?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@@Z
??1OInterfaceContainerHelper@cppu@@QAE@XZ
??0OInterfaceContainerHelper@cppu@@QAE@AAVMutex@osl@@@Z
??3OInterfaceContainerHelper@cppu@@SAXPAX@Z
?queryInterface@OWeakObject@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?queryAdapter@OWeakObject@cppu@@UAA?AV?$Reference@VXAdapter@uno@star@sun@com@@@uno@star@sun@com@@XZ
?WeakImplHelper_getTypes@cppu@@YA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@PAUclass_data@1@@Z
?WeakImplHelper_query@cppu@@YA?AVAny@uno@star@sun@com@@ABVType@3456@PAUclass_data@1@PAXPAVOWeakObject@1@@Z
?ImplHelper_getImplementationId@cppu@@YA?AV?$Sequence@C@uno@star@sun@com@@PAUclass_data@1@@Z
?release@OWeakObject@cppu@@UAAXXZ
?acquire@OWeakObject@cppu@@UAAXXZ
??4OWeakObject@cppu@@QAAAAV01@ABV01@@Z
??0OWeakObject@cppu@@QAE@ABV01@@Z
??0OWeakObject@cppu@@QAE@XZ
??0OTypeCollection@cppu@@QAE@ABVType@uno@star@sun@com@@ABV?$Sequence@VType@uno@star@sun@com@@@3456@@Z

sal3

osl_decrementInterlockedCount
rtl_uString_release
rtl_uString_newFromLiteral
rtl_allocateMemory
rtl_freeMemory
osl_createMutex
osl_destroyMutex
osl_acquireMutex
osl_releaseMutex
osl_getGlobalMutex
osl_incrementInterlockedCount
rtl_ustr_reverseCompare_WithLength
rtl_ustr_asciil_reverseEquals_WithLength
rtl_uString_acquire
rtl_uString_new
rtl_uString_assign
rtl_ustr_hashCode_WithLength
rtl_ustr_compareIgnoreAsciiCase_WithLength
rtl_ustr_compare_WithLength
rtl_uString_newFromSubString
rtl_ustr_ascii_compareIgnoreAsciiCase_WithLengths
rtl_uString_newFromAscii
rtl_uString_newConcat
rtl_uString_alloc
rtl_uString2String
rtl_string_release
rtl_uString_getToken
sal_detail_log

msvcp110

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?flags@ios_base@std@@QBEHXZ
?good@ios_base@std@@QBE_NXZ
?_Syserror_map@std@@YAPBDH@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Add_vtordisp2@?$basic_ostream@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Add_vtordisp1@?$basic_ios@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?uncaught_exception@std@@YA_NXZ
?_BADOFF@std@@3_JB
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Winerror_map@std@@YAPBDH@Z
??0id@locale@std@@QAE@I@Z
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z

msvcr110

??_V@YAXPAX@Z
__CxxFrameHandler3
??2@YAPAXI@Z
??3@YAXPAX@Z
memmove
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
_CxxThrowException
memcpy
ceil
floor
abort
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__CppXcptFilter
_amsg_exit
free
_malloc_crt
_initterm
_initterm_e
_except_handler4_common
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__clean_type_info_names_internal
_purecall

kernel32

DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
EncodePointer

Exports

Exports

??0?$WeakImplHelper1@VXDocumentHandler@sax@xml@star@sun@com@@@cppu@@QAE@ABV01@@Z
??0?$WeakImplHelper1@VXDocumentHandler@sax@xml@star@sun@com@@@cppu@@QAE@XZ
??0?$WeakImplHelper1@VXEventListener@lang@star@sun@com@@@cppu@@QAE@ABV01@@Z
??0?$WeakImplHelper1@VXEventListener@lang@star@sun@com@@@cppu@@QAE@XZ
??0?$WeakImplHelper1@VXTransactionListener@embed@star@sun@com@@@cppu@@QAE@ABV01@@Z
??0?$WeakImplHelper1@VXTransactionListener@embed@star@sun@com@@@cppu@@QAE@XZ
??0?$WeakImplHelper2@VXInputStream@io@star@sun@com@@VXSeekable@2345@@cppu@@QAE@ABV01@@Z
??0?$WeakImplHelper2@VXInputStream@io@star@sun@com@@VXSeekable@2345@@cppu@@QAE@XZ
??0?$WeakImplHelper2@VXSingleServiceFactory@lang@star@sun@com@@VXServiceInfo@2345@@cppu@@QAE@ABV01@@Z
??0?$WeakImplHelper2@VXSingleServiceFactory@lang@star@sun@com@@VXServiceInfo@2345@@cppu@@QAE@XZ
??1?$WeakImplHelper1@VXDocumentHandler@sax@xml@star@sun@com@@@cppu@@UAE@XZ
??1?$WeakImplHelper1@VXEventListener@lang@star@sun@com@@@cppu@@UAE@XZ
??1?$WeakImplHelper1@VXTransactionListener@embed@star@sun@com@@@cppu@@UAE@XZ
??1?$WeakImplHelper2@VXInputStream@io@star@sun@com@@VXSeekable@2345@@cppu@@UAE@XZ
??1?$WeakImplHelper2@VXSingleServiceFactory@lang@star@sun@com@@VXServiceInfo@2345@@cppu@@UAE@XZ
??4?$WeakImplHelper1@VXDocumentHandler@sax@xml@star@sun@com@@@cppu@@QAEAAV01@ABV01@@Z
??4?$WeakImplHelper1@VXEventListener@lang@star@sun@com@@@cppu@@QAEAAV01@ABV01@@Z
??4?$WeakImplHelper1@VXTransactionListener@embed@star@sun@com@@@cppu@@QAEAAV01@ABV01@@Z
??4?$WeakImplHelper2@VXInputStream@io@star@sun@com@@VXSeekable@2345@@cppu@@QAEAAV01@ABV01@@Z
??4?$WeakImplHelper2@VXSingleServiceFactory@lang@star@sun@com@@VXServiceInfo@2345@@cppu@@QAEAAV01@ABV01@@Z
?acquire@?$WeakImplHelper1@VXDocumentHandler@sax@xml@star@sun@com@@@cppu@@UAAXXZ
?acquire@?$WeakImplHelper1@VXEventListener@lang@star@sun@com@@@cppu@@UAAXXZ
?acquire@?$WeakImplHelper1@VXTransactionListener@embed@star@sun@com@@@cppu@@UAAXXZ
?acquire@?$WeakImplHelper2@VXInputStream@io@star@sun@com@@VXSeekable@2345@@cppu@@UAAXXZ
?acquire@?$WeakImplHelper2@VXSingleServiceFactory@lang@star@sun@com@@VXServiceInfo@2345@@cppu@@UAAXXZ
?getImplementationId@?$WeakImplHelper1@VXDocumentHandler@sax@xml@star@sun@com@@@cppu@@UAA?AV?$Sequence@C@uno@star@sun@com@@XZ
?getImplementationId@?$WeakImplHelper1@VXEventListener@lang@star@sun@com@@@cppu@@UAA?AV?$Sequence@C@uno@star@sun@com@@XZ
?getImplementationId@?$WeakImplHelper1@VXTransactionListener@embed@star@sun@com@@@cppu@@UAA?AV?$Sequence@C@uno@star@sun@com@@XZ
?getImplementationId@?$WeakImplHelper2@VXInputStream@io@star@sun@com@@VXSeekable@2345@@cppu@@UAA?AV?$Sequence@C@uno@star@sun@com@@XZ
?getImplementationId@?$WeakImplHelper2@VXSingleServiceFactory@lang@star@sun@com@@VXServiceInfo@2345@@cppu@@UAA?AV?$Sequence@C@uno@star@sun@com@@XZ
?getTypes@?$WeakImplHelper1@VXDocumentHandler@sax@xml@star@sun@com@@@cppu@@UAA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@XZ
?getTypes@?$WeakImplHelper1@VXEventListener@lang@star@sun@com@@@cppu@@UAA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@XZ
?getTypes@?$WeakImplHelper1@VXTransactionListener@embed@star@sun@com@@@cppu@@UAA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@XZ
?getTypes@?$WeakImplHelper2@VXInputStream@io@star@sun@com@@VXSeekable@2345@@cppu@@UAA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@XZ
?getTypes@?$WeakImplHelper2@VXSingleServiceFactory@lang@star@sun@com@@VXServiceInfo@2345@@cppu@@UAA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@XZ
?queryInterface@?$WeakImplHelper1@VXDocumentHandler@sax@xml@star@sun@com@@@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?queryInterface@?$WeakImplHelper1@VXEventListener@lang@star@sun@com@@@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?queryInterface@?$WeakImplHelper1@VXTransactionListener@embed@star@sun@com@@@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?queryInterface@?$WeakImplHelper2@VXInputStream@io@star@sun@com@@VXSeekable@2345@@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?queryInterface@?$WeakImplHelper2@VXSingleServiceFactory@lang@star@sun@com@@VXServiceInfo@2345@@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?release@?$WeakImplHelper1@VXDocumentHandler@sax@xml@star@sun@com@@@cppu@@UAAXXZ
?release@?$WeakImplHelper1@VXEventListener@lang@star@sun@com@@@cppu@@UAAXXZ
?release@?$WeakImplHelper1@VXTransactionListener@embed@star@sun@com@@@cppu@@UAAXXZ
?release@?$WeakImplHelper2@VXInputStream@io@star@sun@com@@VXSeekable@2345@@cppu@@UAAXXZ
?release@?$WeakImplHelper2@VXSingleServiceFactory@lang@star@sun@com@@VXServiceInfo@2345@@cppu@@UAAXXZ
xstor_component_getFactory

Sections

.text
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

94e7d9f42172a4713f893fa9c26ba65a

Code Sign

04:00:00:00:00:01:2f:4e:e1:52:d7Certificate

Key Usages

11:21:06:a0:81:d3:3f:d8:7a:e5:82:4c:c1:6b:52:09:4e:03Certificate

Extended Key Usages

Key Usages

1b:86:12:67:7a:e1:9dCertificate

Key Usages

11:bf:f1:b8:5c:2c:daCertificate

Extended Key Usages

Key Usages

22:06:9b:53:9a:e1:21:3c:05:68:23:d3:f3:ab:94:3a:d3:a7:c7:5bSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

comphelper

cppu3

cppuhelper3msc

sal3

msvcp110

msvcr110

kernel32

Exports

Exports

Sections

.text Size: 386KB - Virtual size: 385KB

.rdata Size: 124KB - Virtual size: 123KB

.data Size: 5KB - Virtual size: 6KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 41KB - Virtual size: 40KB

04:00:00:00:00:01:2f:4e:e1:52:d7
Certificate

11:21:06:a0:81:d3:3f:d8:7a:e5:82:4c:c1:6b:52:09:4e:03
Certificate

1b:86:12:67:7a:e1:9d
Certificate

11:bf:f1:b8:5c:2c:da
Certificate

22:06:9b:53:9a:e1:21:3c:05:68:23:d3:f3:ab:94:3a:d3:a7:c7:5b
Signer

.text
Size: 386KB - Virtual size: 385KB

.rdata
Size: 124KB - Virtual size: 123KB

.data
Size: 5KB - Virtual size: 6KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 41KB - Virtual size: 40KB