ea390cabe64e72b07a50fa4bbb01a93edeecb73d0d0dd0f78f11a95edf68c8bb

General

Target

ea390cabe64e72b07a50fa4bbb01a93edeecb73d0d0dd0f78f11a95edf68c8bb
Size

80KB
MD5

f72508b76f5a04b5db2ca854e924b1c0
SHA1

1dedb2445745e947e90d774c27fc56b8ba65f17f
SHA256

ea390cabe64e72b07a50fa4bbb01a93edeecb73d0d0dd0f78f11a95edf68c8bb
SHA512

ab34cb1ca7d706bfc63bd432f63ecdf5baffcaf300f353d95a540975c77e201d89d7f0f7321c0f8698aa4cb5088c37d333f24e8de9f0f37a2227573c48d077b6
SSDEEP

1536:/hHnpEvEJ/ueREiUWCNvLCHXJLMq7Mj6rEuXdzzW0tT30w:/lp6rX3Nvu3JLl7+6rV1zWOb

Score

N/A

Malware Config

Signatures

Files

ea390cabe64e72b07a50fa4bbb01a93edeecb73d0d0dd0f78f11a95edf68c8bb
.dll windows x86

7709961c9f0762e8fb433f47bdfb9b45

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

libglib-2.0-0

g_fopen
g_strdup
g_path_get_dirname
g_path_get_basename
g_basename
g_strndup
g_strdup_printf
g_free
g_string_new
g_string_append_printf
g_string_free
g_ascii_formatd

libgobject-2.0-0

g_type_check_class_cast
g_type_class_peek_parent
g_type_register_static
g_type_check_instance_cast
g_object_new
g_object_unref

libxml2

xmlNewDocNode
xmlStrdup
xmlNewChild
xmlSetProp
xmlSetDocCompressMode
xmlFreeDoc
xmlNewDoc
xmlNewNs

intl

libintl_gettext

libdia

data_render
message_error
message_warning
filter_get_by_name
filter_guess_export_filter
pretty_formated_xml
xmlDiaSaveFile
dia_renderer_get_type
dia_svg_renderer_get_type
dia_plugin_info_init
filter_register_export
dia_plugin_check_version
dia_message_filename

msvcrt

_adjust_fdiv
malloc
_initterm
free
_errno
strerror
fclose
strlen
strrchr
strcmp

kernel32

DisableThreadLibraryCalls

Exports

Exports

dia_plugin_init
g_module_check_init

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7709961c9f0762e8fb433f47bdfb9b45

Headers

File Characteristics

Imports

libglib-2.0-0

libgobject-2.0-0

libxml2

intl

libdia

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 60KB - Virtual size: 56KB

.reloc Size: 4KB - Virtual size: 368B

.text
Size: 8KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 60KB - Virtual size: 56KB

.reloc
Size: 4KB - Virtual size: 368B