1db1f95f89e8223a6234580a2021ffd4c86dad99ee7f9a3a1f51aead6f073390

Sharing

Copy URL Twitter E-mail

General

Target

1db1f95f89e8223a6234580a2021ffd4c86dad99ee7f9a3a1f51aead6f073390
Size

2.5MB
MD5

f70321a38c1e37e7f92c1875e4b0951d
SHA1

a2943bb26f232c36a3a99d52bf9ba72f130c3f90
SHA256

1db1f95f89e8223a6234580a2021ffd4c86dad99ee7f9a3a1f51aead6f073390
SHA512

75ef3770eaee3b82087a4e593d4cc12bb6a97c952ad0c5c25a66e0e224d62ee128164069d33a7702776f06d9a0b933a47792f183ae4d4ac9c87bccc37b050c6d
SSDEEP

49152:gh/5Gd0tZwVJRpVeFJ02P6Ng4CbGMy2ISwvJ/nDxZpFjZfTN6tbdyosPQgiYCsKl:gXGd0MVY0obGMFwh/nDxZpFNfTNUBEhs

Score

N/A

Malware Config

Signatures

Files

1db1f95f89e8223a6234580a2021ffd4c86dad99ee7f9a3a1f51aead6f073390
.dll windows x86

3c4214333b2d8093dcf373f0b1177514

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mozalloc

moz_malloc
moz_xcalloc
moz_xrealloc
?moz_Xlength_error@std@@YAXPBD@Z
?moz_Xout_of_range@std@@YAXPBD@Z
moz_free
moz_xmalloc

kernel32

GetCurrentProcessId
GetCurrentThreadId
EncodePointer
DecodePointer
GetTickCount
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetCurrentProcess
TerminateProcess
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
lstrlenA
ExitProcess
InitializeSListHead
SetThreadPriority
InterlockedPushEntrySList
InterlockedPopEntrySList
DeleteCriticalSection
CreateEventA
InitializeCriticalSection
SetEvent
HeapFree
GetProcessHeap
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
CreateSemaphoreA
WaitForSingleObject
Sleep
ReleaseSemaphore
GetModuleHandleA
GetSystemInfo
LoadLibraryA
FreeLibrary
MultiByteToWideChar
GetModuleHandleW
GetVersionExA
LoadLibraryW
GetProcAddress
GetLastError
FormatMessageW
LocalFree
CloseHandle
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
DisableThreadLibraryCalls

user32

ReleaseDC
GetDC
SystemParametersInfoA
GetClientRect
FillRect

gdi32

GetTextExtentPointI
AddFontMemResourceEx
CreateFontIndirectA
RemoveFontMemResourceEx
FillPath
SetMiterLimit
ExtCreatePen
StrokePath
WidenPath
SetPolyFillMode
PolyBezierTo
LineTo
BeginPath
MoveToEx
CloseFigure
EndPath
SelectClipPath
ExtEscape
GetFontUnicodeRanges
GetCharWidth32A
GetGlyphOutlineW
GetTextMetricsA
GetFontData
GetGlyphIndicesW
SetMapMode
GetOutlineTextMetricsA
CreateFontIndirectW
GetStockObject
CreateCompatibleBitmap
SaveDC
SetTextColor
SetTextAlign
SetBkMode
ExtTextOutW
RestoreDC
CreateSolidBrush
CreatePatternBrush
SetBrushOrgEx
PatBlt
ExtCreateRegion
ExtSelectClipRgn
SelectClipRgn
IntersectClipRect
GetGraphicsMode
GetWorldTransform
ModifyWorldTransform
GetClipBox
SetGraphicsMode
CreateRectRgn
GetClipRgn
SetWorldTransform
StretchDIBits
GetDeviceCaps
DeleteDC
DeleteObject
SelectObject
GdiFlush
CreateDIBSection
CreateCompatibleDC
BitBlt
StretchBlt
SetStretchBltMode

winmm

waveOutPrepareHeader
waveOutPause
waveOutRestart
waveOutClose
waveOutUnprepareHeader
waveOutReset
waveOutGetPosition
waveOutWrite
waveOutOpen

advapi32

RegOpenKeyExA
RegCloseKey

usp10

ScriptShape
ScriptFreeCache
ScriptItemize

ole32

CoCreateGuid

msimg32

GradientFill

msvcr100

sin
tan
longjmp
_setjmp3
fprintf
printf
strtol
sqrt
fmod
rand
_hypot
localeconv
fwrite
ferror
fflush
acos
_malloc_crt
__CppXcptFilter
_encoded_null
fwprintf
__iob_func
ldiv
cos
atan2
log
strcpy
exp
atan
exit
ldexp
log10
_beginthreadex
_wassert
_aligned_free
_aligned_malloc
_initterm
_initterm_e
__clean_type_info_names_internal
_except_handler4_common
_crt_debugger_hook
strcmp
sprintf
sscanf
_purecall
getenv
abort
strstr
qsort
bsearch
strncmp
strncpy
_errno
_snprintf
setlocale
_unlock_file
__CxxFrameHandler3
_HUGE
fabs
_wfopen
fopen
fclose
fread
_onexit
_lock
floor
ceil
pow
abs
memchr
modf
__dllonexit
memcmp
_free_locale
_atof_l
_create_locale
memset
strchr
_byteswap_ulong
_byteswap_ushort
memmove
memcpy
strlen
_invoke_watson
_unlock
_vsnprintf
_vsnprintf_s
setvbuf
memcpy_s
fgetpos
_fseeki64
fsetpos
_controlfp_s
_hypotf
fgetc
fputc
ungetc
_lock_file
_amsg_exit

msvcp100

??0_Lockit@std@@QAE@H@Z
??Bid@locale@std@@QAEIXZ
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Incref@facet@locale@std@@QAEXXZ
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
??1_Lockit@std@@QAE@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?classic@locale@std@@SAABV12@XZ
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?_Raise_handler@std@@3P6AXABVexception@stdext@@@ZA
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
?_Decref@facet@locale@std@@QAEPAV123@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7ios_base@std@@6B@
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_BADOFF@std@@3_JB
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?id@?$codecvt@DDH@std@@2V0locale@2@A

mozglue

frex
MOZ_Z_deflateReset
MOZ_Z_deflateInit2_
MOZ_Z_inflateEnd
MOZ_Z_inflateInit_
MOZ_Z_inflate
MOZ_Z_inflateReset
MOZ_Z_crc32
MOZ_Z_deflateInit_
MOZ_Z_deflateEnd
MOZ_Z_deflate
realloc
malloc
free
calloc
MOZ_Z_uncompress
strdup

Exports

Exports

??0AlphaBoxBlur@gfx@mozilla@@QAE@ABURect@12@ABUIntSize@12@1PBU312@2@Z
??0AlphaBoxBlur@gfx@mozilla@@QAE@PAEABURect@12@HM@Z
??1AlphaBoxBlur@gfx@mozilla@@QAE@XZ
??4AlphaBoxBlur@gfx@mozilla@@QAEAAV012@ABV012@@Z
??4Factory@gfx@mozilla@@QAEAAV012@ABV012@@Z
?Blur@AlphaBoxBlur@gfx@mozilla@@QAEXXZ
?CalculateBlurRadius@AlphaBoxBlur@gfx@mozilla@@SA?AUIntSize@23@ABUPoint@23@@Z
?CreateDWriteGlyphRenderingOptions@Factory@gfx@mozilla@@SA?AV?$TemporaryRef@VGlyphRenderingOptions@gfx@mozilla@@@3@PAUIDWriteRenderingParams@@@Z
?CreateDrawTarget@Factory@gfx@mozilla@@SA?AV?$TemporaryRef@VDrawTarget@gfx@mozilla@@@3@W4BackendType@23@ABUIntSize@23@W4SurfaceFormat@23@@Z
?CreateDrawTargetForCairoSurface@Factory@gfx@mozilla@@SA?AV?$TemporaryRef@VDrawTarget@gfx@mozilla@@@3@PAU_cairo_surface@@ABUIntSize@23@@Z
?CreateDrawTargetForD3D10Texture@Factory@gfx@mozilla@@SA?AV?$TemporaryRef@VDrawTarget@gfx@mozilla@@@3@PAUID3D10Texture2D@@W4SurfaceFormat@23@@Z
?CreateDrawTargetForData@Factory@gfx@mozilla@@SA?AV?$TemporaryRef@VDrawTarget@gfx@mozilla@@@3@W4BackendType@23@PAEABUIntSize@23@HW4SurfaceFormat@23@@Z
?CreateDualDrawTargetForD3D10Textures@Factory@gfx@mozilla@@SA?AV?$TemporaryRef@VDrawTarget@gfx@mozilla@@@3@PAUID3D10Texture2D@@0W4SurfaceFormat@23@@Z
?CreateEventRecorderForFile@Factory@gfx@mozilla@@SA?AV?$TemporaryRef@VDrawEventRecorder@gfx@mozilla@@@3@PBD@Z
?CreateRecordingDrawTarget@Factory@gfx@mozilla@@SA?AV?$TemporaryRef@VDrawTarget@gfx@mozilla@@@3@PAVDrawEventRecorder@23@PAVDrawTarget@23@@Z
?CreateScaledFontForNativeFont@Factory@gfx@mozilla@@SA?AV?$TemporaryRef@VScaledFont@gfx@mozilla@@@3@ABUNativeFont@23@M@Z
?CreateScaledFontForTrueTypeData@Factory@gfx@mozilla@@SA?AV?$TemporaryRef@VScaledFont@gfx@mozilla@@@3@PAEIIMW4FontType@23@@Z
?CreateScaledFontWithCairo@Factory@gfx@mozilla@@SA?AV?$TemporaryRef@VScaledFont@gfx@mozilla@@@3@ABUNativeFont@23@MPAU_cairo_scaled_font@@@Z
?CreateWrappingDataSourceSurface@Factory@gfx@mozilla@@SA?AV?$TemporaryRef@VDataSourceSurface@gfx@mozilla@@@3@PAEHABUIntSize@23@W4SurfaceFormat@23@@Z
?GetD2DVRAMUsageDrawTarget@Factory@gfx@mozilla@@SA_KXZ
?GetD2DVRAMUsageSourceSurface@Factory@gfx@mozilla@@SA_KXZ
?GetData@AlphaBoxBlur@gfx@mozilla@@QAEPAEXZ
?GetDirect3D10Device@Factory@gfx@mozilla@@SAPAUID3D10Device1@@XZ
?GetDirtyRect@AlphaBoxBlur@gfx@mozilla@@QAEPAURect@23@XZ
?GetRect@AlphaBoxBlur@gfx@mozilla@@QAE?AUIntRect@23@XZ
?GetSize@AlphaBoxBlur@gfx@mozilla@@QAE?AUIntSize@23@XZ
?GetStride@AlphaBoxBlur@gfx@mozilla@@QAEHXZ
?HasSSE2@Factory@gfx@mozilla@@SA_NXZ
?NudgeToIntegers@Matrix@gfx@mozilla@@QAEXXZ
?NudgeToIntegers@Rect@gfx@mozilla@@QAEXXZ
?Process@ots@@YA_NPAVOTSStream@1@PBEIP6A_NPAXPBDZZ2_N@Z
?Rotation@Matrix@gfx@mozilla@@SA?AV123@M@Z
?Scale@gfx@mozilla@@YA_NPAEHHH0HHHW4SurfaceFormat@12@@Z
?SetDirect3D10Device@Factory@gfx@mozilla@@SAXPAUID3D10Device1@@@Z
?SetGlobalEventRecorder@Factory@gfx@mozilla@@SAXPAVDrawEventRecorder@23@@Z
?TransformBounds@Matrix@gfx@mozilla@@QBE?AURect@23@ABU423@@Z
?mD3D10Device@Factory@gfx@mozilla@@0PAUID3D10Device1@@A
?mRecorder@Factory@gfx@mozilla@@0PAVDrawEventRecorder@23@A
MOZ_APNG_get_first_frame_is_hidden
MOZ_APNG_get_next_frame_blend_op
MOZ_APNG_get_next_frame_delay_den
MOZ_APNG_get_next_frame_delay_num
MOZ_APNG_get_next_frame_dispose_op
MOZ_APNG_get_next_frame_height
MOZ_APNG_get_next_frame_width
MOZ_APNG_get_next_frame_x_offset
MOZ_APNG_get_next_frame_y_offset
MOZ_APNG_set_acTL
MOZ_APNG_set_first_frame_is_hidden
MOZ_APNG_set_num_plays
MOZ_APNG_set_prog_frame_fn
MOZ_APNG_write_frame_head
MOZ_APNG_write_frame_tail
MOZ_PNG_cr_info_str
MOZ_PNG_cr_read_str
MOZ_PNG_cr_write_str
MOZ_PNG_dest_read_str
MOZ_PNG_dest_write_str
MOZ_PNG_free_data
MOZ_PNG_get_IHDR
MOZ_PNG_get_cHRM
MOZ_PNG_get_channels
MOZ_PNG_get_gAMA
MOZ_PNG_get_iCCP
MOZ_PNG_get_io_ptr
MOZ_PNG_get_progressive_ptr
MOZ_PNG_get_sRGB
MOZ_PNG_get_tRNS
MOZ_PNG_get_valid
MOZ_PNG_longjmp
MOZ_PNG_process_data
MOZ_PNG_progressive_combine_row
MOZ_PNG_read_update_info
MOZ_PNG_set_IHDR
MOZ_PNG_set_cHRM
MOZ_PNG_set_crc_action
MOZ_PNG_set_expand
MOZ_PNG_set_gAMA
MOZ_PNG_set_gamma
MOZ_PNG_set_gray_to_rgb
MOZ_PNG_set_interlace_handling
MOZ_PNG_set_longjmp_fn
MOZ_PNG_set_progressive_read_fn
MOZ_PNG_set_scale_16
MOZ_PNG_set_write_fn
MOZ_PNG_write_end
MOZ_PNG_write_info
MOZ_PNG_write_row
MOZ_XMLCheckQName
MOZ_XMLIsLetter
MOZ_XMLIsNCNameChar
MOZ_XMLTranslateEntity
MOZ_XML_ExternalEntityParserCreate
MOZ_XML_GetBase
MOZ_XML_GetCurrentByteIndex
MOZ_XML_GetCurrentColumnNumber
MOZ_XML_GetCurrentLineNumber
MOZ_XML_GetErrorCode
MOZ_XML_GetIdAttributeIndex
MOZ_XML_GetMismatchedTag
MOZ_XML_GetSpecifiedAttributeCount
MOZ_XML_Parse
MOZ_XML_ParserCreate_MM
MOZ_XML_ParserFree
MOZ_XML_ResumeParser
MOZ_XML_SetBase
MOZ_XML_SetCdataSectionHandler
MOZ_XML_SetCharacterDataHandler
MOZ_XML_SetCommentHandler
MOZ_XML_SetDefaultHandlerExpand
MOZ_XML_SetDoctypeDeclHandler
MOZ_XML_SetElementHandler
MOZ_XML_SetExternalEntityRefHandler
MOZ_XML_SetExternalEntityRefHandlerArg
MOZ_XML_SetNamespaceDeclHandler
MOZ_XML_SetNotationDeclHandler
MOZ_XML_SetParamEntityParsing
MOZ_XML_SetProcessingInstructionHandler
MOZ_XML_SetReturnNSTriplet
MOZ_XML_SetUnparsedEntityDeclHandler
MOZ_XML_SetUserData
MOZ_XML_SetXmlDeclHandler
MOZ_XML_StopParser
ShCompile
ShConstructCompiler
ShDestruct
ShFinalize
ShGetActiveAttrib
ShGetActiveUniform
ShGetInfo
ShGetInfoLog
ShGetObjectCode
ShInitialize
_moz_cairo_append_path
_moz_cairo_arc
_moz_cairo_arc_negative
_moz_cairo_clip
_moz_cairo_clip_extents
_moz_cairo_clip_preserve
_moz_cairo_close_path
_moz_cairo_copy_clip_rectangle_list
_moz_cairo_copy_path
_moz_cairo_copy_path_flat
_moz_cairo_create
_moz_cairo_curve_to
_moz_cairo_debug_reset_static_data
_moz_cairo_destroy
_moz_cairo_device_to_user
_moz_cairo_device_to_user_distance
_moz_cairo_fill
_moz_cairo_fill_extents
_moz_cairo_fill_preserve
_moz_cairo_font_face_destroy
_moz_cairo_font_options_create
_moz_cairo_font_options_destroy
_moz_cairo_font_options_get_hint_metrics
_moz_cairo_font_options_set_antialias
_moz_cairo_format_stride_for_width
_moz_cairo_get_antialias
_moz_cairo_get_current_point
_moz_cairo_get_dash
_moz_cairo_get_dash_count
_moz_cairo_get_fill_rule
_moz_cairo_get_font_matrix
_moz_cairo_get_group_target
_moz_cairo_get_line_cap
_moz_cairo_get_line_join
_moz_cairo_get_line_width
_moz_cairo_get_matrix
_moz_cairo_get_miter_limit
_moz_cairo_get_operator
_moz_cairo_get_scaled_font
_moz_cairo_get_source
_moz_cairo_get_target
_moz_cairo_glyph_extents
_moz_cairo_glyph_path
_moz_cairo_identity_matrix
_moz_cairo_image_surface_create
_moz_cairo_image_surface_create_for_data
_moz_cairo_image_surface_get_data
_moz_cairo_image_surface_get_format
_moz_cairo_image_surface_get_height
_moz_cairo_image_surface_get_stride
_moz_cairo_image_surface_get_width
_moz_cairo_in_fill
_moz_cairo_in_stroke
_moz_cairo_line_to
_moz_cairo_mask
_moz_cairo_mask_surface
_moz_cairo_matrix_init
_moz_cairo_matrix_init_identity
_moz_cairo_matrix_init_scale
_moz_cairo_matrix_invert
_moz_cairo_matrix_multiply
_moz_cairo_matrix_rotate
_moz_cairo_matrix_scale
_moz_cairo_matrix_transform_distance
_moz_cairo_matrix_transform_point
_moz_cairo_matrix_translate
_moz_cairo_move_to
_moz_cairo_new_path
_moz_cairo_new_sub_path
_moz_cairo_paint
_moz_cairo_paint_with_alpha
_moz_cairo_path_destroy
_moz_cairo_path_extents
_moz_cairo_pattern_add_color_stop_rgba
_moz_cairo_pattern_create_for_surface
_moz_cairo_pattern_create_linear
_moz_cairo_pattern_create_radial
_moz_cairo_pattern_create_rgba
_moz_cairo_pattern_destroy
_moz_cairo_pattern_get_color_stop_count
_moz_cairo_pattern_get_color_stop_rgba
_moz_cairo_pattern_get_extend
_moz_cairo_pattern_get_filter
_moz_cairo_pattern_get_linear_points
_moz_cairo_pattern_get_matrix
_moz_cairo_pattern_get_radial_circles
_moz_cairo_pattern_get_rgba
_moz_cairo_pattern_get_surface
_moz_cairo_pattern_get_type
_moz_cairo_pattern_reference
_moz_cairo_pattern_set_extend
_moz_cairo_pattern_set_filter
_moz_cairo_pattern_set_matrix
_moz_cairo_pattern_status
_moz_cairo_pdf_surface_create_for_stream
_moz_cairo_pop_group
_moz_cairo_pop_group_to_source
_moz_cairo_push_group_with_content
_moz_cairo_rectangle
_moz_cairo_rectangle_list_destroy
_moz_cairo_reference
_moz_cairo_reset_clip
_moz_cairo_restore
_moz_cairo_rotate
_moz_cairo_save
_moz_cairo_scale
_moz_cairo_scaled_font_create
_moz_cairo_scaled_font_destroy
_moz_cairo_scaled_font_get_font_matrix
_moz_cairo_scaled_font_get_font_options
_moz_cairo_scaled_font_get_type
_moz_cairo_scaled_font_reference
_moz_cairo_scaled_font_status
_moz_cairo_set_antialias
_moz_cairo_set_dash
_moz_cairo_set_fill_rule
_moz_cairo_set_font_face
_moz_cairo_set_font_size
_moz_cairo_set_line_cap
_moz_cairo_set_line_join
_moz_cairo_set_line_width
_moz_cairo_set_matrix
_moz_cairo_set_miter_limit
_moz_cairo_set_operator
_moz_cairo_set_scaled_font
_moz_cairo_set_source
_moz_cairo_set_source_rgba
_moz_cairo_set_source_surface
_moz_cairo_show_glyphs
_moz_cairo_status
_moz_cairo_stroke
_moz_cairo_stroke_extents
_moz_cairo_stroke_preserve
_moz_cairo_surface_create_similar
_moz_cairo_surface_destroy
_moz_cairo_surface_finish
_moz_cairo_surface_flush
_moz_cairo_surface_get_content
_moz_cairo_surface_get_device_offset
_moz_cairo_surface_get_reference_count
_moz_cairo_surface_get_subpixel_antialiasing
_moz_cairo_surface_get_type
_moz_cairo_surface_get_user_data
_moz_cairo_surface_mark_dirty
_moz_cairo_surface_mark_dirty_rectangle
_moz_cairo_surface_reference
_moz_cairo_surface_set_device_offset
_moz_cairo_surface_set_fallback_resolution
_moz_cairo_surface_set_subpixel_antialiasing
_moz_cairo_surface_set_user_data
_moz_cairo_surface_show_page
_moz_cairo_surface_status
_moz_cairo_tee_surface_add
_moz_cairo_tee_surface_create
_moz_cairo_tee_surface_index
_moz_cairo_transform
_moz_cairo_translate
_moz_cairo_user_to_device
_moz_cairo_user_to_device_distance
_moz_cairo_win32_font_face_create_for_logfontw_hfont
_moz_cairo_win32_printing_surface_create
_moz_cairo_win32_scaled_font_select_font
_moz_cairo_win32_surface_create
_moz_cairo_win32_surface_create_with_ddb
_moz_cairo_win32_surface_create_with_dib
_moz_cairo_win32_surface_get_dc
_moz_cairo_win32_surface_get_image
_moz_pixman_image_composite32
_moz_pixman_image_create_bits
_moz_pixman_image_set_transform
_moz_pixman_image_unref
_moz_pixman_transform_from_pixman_f_transform
_moz_pixman_transform_invert
cairo_d2d_create_device
cairo_d2d_create_device_from_d3d10device
cairo_d2d_device_get_device
cairo_d2d_get_dc
cairo_d2d_get_image_surface_cache_usage
cairo_d2d_get_surface_vram_usage
cairo_d2d_present_backbuffer
cairo_d2d_release_dc
cairo_d2d_scroll
cairo_d2d_surface_create
cairo_d2d_surface_create_for_handle
cairo_d2d_surface_create_for_hwnd
cairo_d2d_surface_create_for_texture
cairo_d2d_surface_get_height
cairo_d2d_surface_get_texture
cairo_d2d_surface_get_width
cairo_dwrite_font_face_create_for_dwrite_fontface
cairo_dwrite_get_cleartype_rendering_mode
cairo_dwrite_scaled_font_allow_manual_show_glyphs
cairo_dwrite_scaled_font_get_force_GDI_classic
cairo_dwrite_scaled_font_set_force_GDI_classic
cairo_dwrite_set_cleartype_params
cairo_null_surface_create
cairo_release_device
cairo_surface_attach_snapshot
cairo_win32_get_dc_with_clip
cairo_win32_get_system_text_quality
cairo_win32_surface_create_with_alpha
cairo_win32_surface_get_height
cairo_win32_surface_get_width
cairo_win32_surface_set_can_convert_to_dib
cubeb_destroy
cubeb_init
cubeb_stream_destroy
cubeb_stream_get_position
cubeb_stream_init
cubeb_stream_start
cubeb_stream_stop
gr_cinfo_after
gr_cinfo_base
gr_cinfo_before
gr_cinfo_break_weight
gr_cinfo_unicode_char
gr_count_unicode_characters
gr_engine_version
gr_face_destroy
gr_face_featureval_for_lang
gr_face_find_fref
gr_face_fref
gr_face_lang_by_index
gr_face_n_fref
gr_face_n_glyphs
gr_face_n_languages
gr_featureval_clone
gr_featureval_destroy
gr_font_destroy
gr_fref_feature_value
gr_fref_id
gr_fref_label
gr_fref_n_values
gr_fref_set_feature_value
gr_fref_value
gr_fref_value_label
gr_label_destroy
gr_make_face
gr_make_font
gr_make_font_with_advance_fn
gr_make_seg
gr_seg_advance_X
gr_seg_advance_Y
gr_seg_cinfo
gr_seg_destroy
gr_seg_first_slot
gr_seg_justify
gr_seg_last_slot
gr_seg_n_cinfo
gr_seg_n_slots
gr_slot_advance_X
gr_slot_advance_Y
gr_slot_after
gr_slot_attached_to
gr_slot_attr
gr_slot_before
gr_slot_can_insert_before
gr_slot_first_attachment
gr_slot_gid
gr_slot_index
gr_slot_linebreak_before
gr_slot_next_in_segment
gr_slot_next_sibling_attachment
gr_slot_origin_X
gr_slot_origin_Y
gr_slot_original
gr_slot_prev_in_segment
gr_str_to_tag
gr_tag_to_str
graphite_start_logging
graphite_stop_logging
hb_blob_create
hb_blob_destroy
hb_blob_get_data
hb_blob_get_empty
hb_blob_get_length
hb_blob_reference
hb_buffer_add_utf16
hb_buffer_create
hb_buffer_destroy
hb_buffer_get_glyph_infos
hb_buffer_get_glyph_positions
hb_buffer_reverse
hb_buffer_set_direction
hb_buffer_set_language
hb_buffer_set_script
hb_buffer_set_unicode_funcs
hb_face_create_for_tables
hb_face_destroy
hb_font_create
hb_font_destroy
hb_font_funcs_create
hb_font_funcs_set_glyph_contour_point_func
hb_font_funcs_set_glyph_func
hb_font_funcs_set_glyph_h_advance_func
hb_font_funcs_set_glyph_h_kerning_func
hb_font_set_funcs
hb_font_set_ppem
hb_font_set_scale
hb_language_from_string
hb_ot_tag_to_language
hb_shape
hb_unicode_funcs_create
hb_unicode_funcs_get_empty
hb_unicode_funcs_set_combining_class_func
hb_unicode_funcs_set_compose_func
hb_unicode_funcs_set_decompose_func
hb_unicode_funcs_set_eastasian_width_func
hb_unicode_funcs_set_general_category_func
hb_unicode_funcs_set_mirroring_func
hb_unicode_funcs_set_script_func
jpeg_CreateCompress
jpeg_CreateDecompress
jpeg_abort
jpeg_abort_decompress
jpeg_calc_output_dimensions
jpeg_consume_input
jpeg_destroy_compress
jpeg_destroy_decompress
jpeg_finish_compress
jpeg_finish_decompress
jpeg_finish_output
jpeg_has_multiple_scans
jpeg_input_complete
jpeg_read_header
jpeg_read_raw_data
jpeg_read_scanlines
jpeg_resync_to_restart
jpeg_save_markers
jpeg_set_defaults
jpeg_set_quality
jpeg_start_compress
jpeg_start_decompress
jpeg_start_output
jpeg_std_error
jpeg_stdio_dest
jpeg_write_raw_data
jpeg_write_scanlines
nestegg_destroy
nestegg_duration
nestegg_free_packet
nestegg_get_cue_point
nestegg_init
nestegg_packet_count
nestegg_packet_data
nestegg_packet_track
nestegg_packet_tstamp
nestegg_read_packet
nestegg_track_audio_params
nestegg_track_codec_data
nestegg_track_codec_data_count
nestegg_track_codec_id
nestegg_track_count
nestegg_track_seek
nestegg_track_type
nestegg_track_video_params
nestegg_tstamp_scale
ogg_page_bos
ogg_page_granulepos
ogg_page_serialno
ogg_stream_check
ogg_stream_clear
ogg_stream_init
ogg_stream_packetout
ogg_stream_pagein
ogg_stream_reset
ogg_sync_buffer

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 389KB - Virtual size: 389KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3c4214333b2d8093dcf373f0b1177514

Headers

DLL Characteristics

File Characteristics

Imports

mozalloc

kernel32

user32

gdi32

winmm

advapi32

usp10

ole32

msimg32

msvcr100

msvcp100

mozglue

Exports

Exports

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rdata Size: 389KB - Virtual size: 389KB

.data Size: 14KB - Virtual size: 164KB

.rodata Size: 3KB - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 864B

.reloc Size: 63KB - Virtual size: 63KB

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 389KB - Virtual size: 389KB

.data
Size: 14KB - Virtual size: 164KB

.rodata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 864B

.reloc
Size: 63KB - Virtual size: 63KB