b016c9668536c4305d6f48127fd2381a0ec4076f4d8261140e2b8fe355dd492c

Sharing

Copy URL

Twitter E-mail

General

Target

b016c9668536c4305d6f48127fd2381a0ec4076f4d8261140e2b8fe355dd492c
Size

257KB
MD5

7002ca4134d2ef548d1a683636ddafee
SHA1

a92c703c8d8042bbc70dee83c7f65dab7883d662
SHA256

b016c9668536c4305d6f48127fd2381a0ec4076f4d8261140e2b8fe355dd492c
SHA512

2032007b55bba64d2dbe631c2e6532aa021750e27428b9df0ed6054f33b30554668068ab3ae5a439aa1a1e2f7805efbbe2a4fefb2faa082db802e61367547c50
SSDEEP

6144:qxYrUoG5LQ/Dhw8UkVidDltxzHFr0LHfoLeKSw:qxYrUoGi1eDlrWLkeKSw

Score

N/A

Malware Config

Signatures

Files

b016c9668536c4305d6f48127fd2381a0ec4076f4d8261140e2b8fe355dd492c
.exe windows x86

495d4836050c788783f97e5b5ff072fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

libgimpui-2.0-0

gimp_drawable_combo_box_new
gimp_ui_init
gimp_window_set_transient

libgimpconfig-2.0-0

gimp_config_build_data_path
gimp_config_path_expand

kernel32

DeleteCriticalSection
EnterCriticalSection
ExitProcess
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetUnhandledExceptionFilter
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__getmainargs
__p___argc
__p___argv
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_onexit
_setmode
_winmajor
abort
atan2
atexit
atoi
calloc
cos
fclose
fgets
fread
free
fseek
fwrite
memcpy
memset
pow
signal
sin
sqrt
strchr
strcmp
strlen
strncmp
strrchr
strstr
vfprintf

libgimp-2.0-0

gimp_displays_flush
gimp_drawable_bpp
gimp_drawable_detach
gimp_drawable_flush
gimp_drawable_get
gimp_drawable_has_alpha
gimp_drawable_is_gray
gimp_drawable_is_rgb
gimp_drawable_mask_bounds
gimp_drawable_merge_shadow
gimp_drawable_update
gimp_gimprc_query
gimp_install_procedure
gimp_main
gimp_pixel_rgn_get_row
gimp_pixel_rgn_init
gimp_pixel_rgns_process
gimp_pixel_rgns_register
gimp_plugin_menu_register
gimp_procedural_db_get_data
gimp_procedural_db_set_data
gimp_progress_init
gimp_progress_update

libgimpbase-2.0-0

gimp_directory
gimp_filename_to_utf8
gimp_locale_directory
gimp_path_parse
gimp_personal_rc_file

libgimpcolor-2.0-0

gimp_rgb_get_uchar
gimp_rgba_set_uchar

libgimpwidgets-2.0-0

gimp_color_button_get_color
gimp_color_button_get_type
gimp_color_button_new
gimp_color_button_set_color
gimp_dialog_new
gimp_double_adjustment_update
gimp_frame_new
gimp_help_set_help_data
gimp_int_adjustment_update
gimp_int_combo_box_connect
gimp_int_combo_box_get_active
gimp_int_combo_box_get_type
gimp_int_radio_group_new
gimp_label_set_attributes
gimp_preview_area_draw
gimp_preview_area_get_type
gimp_preview_area_new
gimp_radio_button_update
gimp_scale_entry_new
gimp_standard_help_func

libglib-2.0-0

g_ascii_formatd
g_ascii_strcasecmp
g_ascii_strtod
g_ascii_table
g_ascii_tolower
g_build_filename
g_dir_close
g_dir_open_utf8
g_dir_read_name_utf8
g_file_test_utf8
g_filename_display_basename
g_filename_from_utf8_utf8
g_fopen
g_free
g_list_append
g_list_foreach
g_list_free
g_list_insert_sorted
g_list_length
g_list_nth
g_list_remove
g_log
g_malloc
g_malloc0
g_malloc_n
g_memdup
g_mkdir
g_path_is_absolute
g_printerr
g_rand_double_range
g_rand_free
g_rand_int_range
g_rand_new
g_return_if_fail_warning
g_snprintf
g_strchomp
g_strcompress
g_strconcat
g_strdup
g_strdup_printf
g_strerror
g_strescape
g_strlcpy
g_unlink

libgobject-2.0-0

g_object_get_data
g_object_set
g_object_unref
g_signal_connect_data
g_type_check_instance_cast
g_type_check_instance_is_a

libgtk-win32-2.0-0

gtk_adjustment_get_type
gtk_adjustment_get_value
gtk_adjustment_new
gtk_adjustment_set_value
gtk_box_get_type
gtk_box_pack_end
gtk_box_pack_start
gtk_box_set_spacing
gtk_button_get_type
gtk_button_new_from_stock
gtk_button_new_with_label
gtk_button_new_with_mnemonic
gtk_button_set_image
gtk_cell_renderer_text_new
gtk_check_button_new_with_label
gtk_check_button_new_with_mnemonic
gtk_container_add
gtk_container_get_type
gtk_container_set_border_width
gtk_dialog_get_type
gtk_dialog_set_alternative_button_order
gtk_dialog_set_default_response
gtk_entry_get_text
gtk_entry_get_type
gtk_entry_new
gtk_entry_set_text
gtk_event_box_new
gtk_events_pending
gtk_file_chooser_dialog_new
gtk_file_chooser_get_filename_utf8
gtk_file_chooser_get_type
gtk_file_chooser_set_current_folder_utf8
gtk_file_chooser_set_do_overwrite_confirmation
gtk_frame_get_type
gtk_frame_new
gtk_frame_set_shadow_type
gtk_hbox_new
gtk_hscale_new
gtk_image_new_from_stock
gtk_label_get_type
gtk_label_new
gtk_label_new_with_mnemonic
gtk_label_set_line_wrap
gtk_label_set_text
gtk_list_store_append
gtk_list_store_clear
gtk_list_store_get_type
gtk_list_store_new
gtk_list_store_set
gtk_main
gtk_main_iteration
gtk_main_quit
gtk_misc_get_type
gtk_misc_set_alignment
gtk_notebook_append_page_menu
gtk_notebook_get_type
gtk_notebook_new
gtk_radio_button_get_group
gtk_radio_button_get_type
gtk_radio_button_new_with_label
gtk_scale_get_type
gtk_scale_set_digits
gtk_scale_set_draw_value
gtk_scrolled_window_get_type
gtk_scrolled_window_new
gtk_scrolled_window_set_policy
gtk_scrolled_window_set_shadow_type
gtk_size_group_add_widget
gtk_size_group_new
gtk_table_attach
gtk_table_attach_defaults
gtk_table_get_type
gtk_table_new
gtk_table_set_col_spacings
gtk_table_set_row_spacings
gtk_text_buffer_get_bounds
gtk_text_buffer_get_text
gtk_text_buffer_new
gtk_text_buffer_set_text
gtk_text_view_new_with_buffer
gtk_toggle_button_get_active
gtk_toggle_button_get_type
gtk_toggle_button_set_active
gtk_tree_model_get
gtk_tree_model_get_iter_first
gtk_tree_model_get_path
gtk_tree_model_get_type
gtk_tree_model_iter_next
gtk_tree_path_free
gtk_tree_selection_get_selected
gtk_tree_selection_select_iter
gtk_tree_selection_set_mode
gtk_tree_view_append_column
gtk_tree_view_column_new_with_attributes
gtk_tree_view_get_model
gtk_tree_view_get_selection
gtk_tree_view_get_type
gtk_tree_view_new_with_model
gtk_tree_view_scroll_to_cell
gtk_tree_view_set_headers_visible
gtk_vbox_new
gtk_vscale_new
gtk_widget_add_events
gtk_widget_destroy
gtk_widget_destroyed
gtk_widget_get_toplevel
gtk_widget_get_type
gtk_widget_grab_focus
gtk_widget_hide
gtk_widget_queue_draw
gtk_widget_set_sensitive
gtk_widget_set_size_request
gtk_widget_show
gtk_window_get_type
gtk_window_present

intl

libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_fprintf
libintl_gettext
libintl_textdomain

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 72KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

495d4836050c788783f97e5b5ff072fb

Headers

File Characteristics

Imports

libgimpui-2.0-0

libgimpconfig-2.0-0

kernel32

msvcrt

libgimp-2.0-0

libgimpbase-2.0-0

libgimpcolor-2.0-0

libgimpwidgets-2.0-0

libglib-2.0-0

libgobject-2.0-0

libgtk-win32-2.0-0

intl

Sections

.text Size: 85KB - Virtual size: 85KB

.data Size: 4KB - Virtual size: 4KB

.rdata Size: 9KB - Virtual size: 8KB

.bss Size: - Virtual size: 15KB

.idata Size: 10KB - Virtual size: 9KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 72KB - Virtual size: 76KB

.text
Size: 85KB - Virtual size: 85KB

.data
Size: 4KB - Virtual size: 4KB

.rdata
Size: 9KB - Virtual size: 8KB

.bss
Size: - Virtual size: 15KB

.idata
Size: 10KB - Virtual size: 9KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 72KB - Virtual size: 76KB