libgmpxx-4[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

libgmpxx-4.dll
Size

32KB
MD5

f4a393ee226789975b79f86f73a75b20
SHA1

0c8f34e93022b1ddb7ca1bfc7685d621f9a6dfca
SHA256

1edbe3b236e2ba48919412716c26df122bfc8128c458e0bac496c335d2ad0c3e
SHA512

db6e5b514c37ea5f742b912be92220b7b90a826841b9b4947f8e173c26ca7f192cf97f0c29ba4c9559524d9baedb9dc9a034589fc844622b08fd1e591f8c05b7
SSDEEP

384:Xj9vbpM47A1ibI5Sp6A22K01gCWGjlGDe0a/c0VDlkf11V7Cm:5zBA1lTcWGAe0a/27r

Score

1^/10

Malware Config

Signatures

Files

libgmpxx-4.dll
.dll windows x64

ba85517f684cb971b750764e6dace9ad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

libgmp-10

__gmp_allocate_func
__gmp_asprintf_final
__gmp_asprintf_memory
__gmp_asprintf_reps
__gmp_doprnt_integer
__gmp_doprnt_mpf2
__gmp_free_func
__gmpf_set_str
__gmpq_get_str
__gmpz_get_str
__gmpz_set_str
__gmpz_set_ui

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
__iob_func
_amsg_exit
_initterm
_lock
_onexit
_unlock
abort
calloc
free
fwrite
isxdigit
localeconv
malloc
memcpy
signal
strlen
strncmp
vfprintf

libgcc_s_seh-1

_Unwind_Resume

libstdc++-6

_ZNKSt5ctypeIcE13_M_widen_initEv
_ZNSi3getERc
_ZNSi7putbackEc
_ZNSo5writeEPKcx
_ZNSt6localeC1ERKS_
_ZNSt6localeD1Ev
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE10_M_replaceEyyPKcy
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_appendEPKcy
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_mutateEyyPKcy
_ZNSt8ios_base4InitC1Ev
_ZNSt8ios_base4InitD1Ev
_ZNSt9basic_iosIcSt11char_traitsIcEE5clearESt12_Ios_Iostate
_ZSt16__throw_bad_castv
_ZSt20__throw_length_errorPKc
_ZSt9use_facetINSt7__cxx118numpunctIcEEERKT_RKSt6locale
_ZSt9use_facetISt5ctypeIcEERKT_RKSt6locale
_ZdlPv
__gxx_personality_seh0

Exports

Exports

_Z22__gmp_istream_set_baseRSiRcRbS1_
_Z24__gmp_istream_set_digitsRNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERSiRcRbi
_Z26__gmpz_operator_in_nowhiteRSiP12__mpz_structc
_Z28__gmp_doprnt_integer_ostreamRSoP15doprnt_params_tPc
_Z28__gmp_doprnt_params_from_iosP15doprnt_params_tRSt9basic_iosIcSt11char_traitsIcEE
_ZNKSt5ctypeIcE8do_widenEc
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpf_structS2_EE10has_denormE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpf_structS2_EE10is_boundedE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpf_structS2_EE10is_integerE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpf_structS2_EE11round_styleE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpf_structS2_EE12has_infinityE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpf_structS2_EE12max_digits10E
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpf_structS2_EE12max_exponentE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpf_structS2_EE12min_exponentE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpf_structS2_EE13has_quiet_NaNE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpf_structS2_EE14is_specializedE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpf_structS2_EE14max_exponent10E
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpf_structS2_EE14min_exponent10E
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpf_structS2_EE15has_denorm_lossE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpf_structS2_EE15tinyness_beforeE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpf_structS2_EE17has_signaling_NaNE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpf_structS2_EE5radixE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpf_structS2_EE5trapsE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpf_structS2_EE6digitsE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpf_structS2_EE8digits10E
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpf_structS2_EE8is_exactE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpf_structS2_EE9is_iec559E
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpf_structS2_EE9is_moduloE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpf_structS2_EE9is_signedE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpq_structS2_EE10has_denormE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpq_structS2_EE10is_boundedE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpq_structS2_EE10is_integerE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpq_structS2_EE11round_styleE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpq_structS2_EE12has_infinityE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpq_structS2_EE12max_digits10E
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpq_structS2_EE12max_exponentE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpq_structS2_EE12min_exponentE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpq_structS2_EE13has_quiet_NaNE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpq_structS2_EE14is_specializedE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpq_structS2_EE14max_exponent10E
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpq_structS2_EE14min_exponent10E
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpq_structS2_EE15has_denorm_lossE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpq_structS2_EE15tinyness_beforeE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpq_structS2_EE17has_signaling_NaNE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpq_structS2_EE5radixE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpq_structS2_EE5trapsE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpq_structS2_EE6digitsE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpq_structS2_EE8digits10E
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpq_structS2_EE8is_exactE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpq_structS2_EE9is_iec559E
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpq_structS2_EE9is_moduloE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpq_structS2_EE9is_signedE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpz_structS2_EE10has_denormE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpz_structS2_EE10is_boundedE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpz_structS2_EE10is_integerE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpz_structS2_EE11round_styleE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpz_structS2_EE12has_infinityE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpz_structS2_EE12max_digits10E
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpz_structS2_EE12max_exponentE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpz_structS2_EE12min_exponentE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpz_structS2_EE13has_quiet_NaNE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpz_structS2_EE14is_specializedE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpz_structS2_EE14max_exponent10E
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpz_structS2_EE14min_exponent10E
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpz_structS2_EE15has_denorm_lossE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpz_structS2_EE15tinyness_beforeE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpz_structS2_EE17has_signaling_NaNE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpz_structS2_EE5radixE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpz_structS2_EE5trapsE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpz_structS2_EE6digitsE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpz_structS2_EE8digits10E
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpz_structS2_EE8is_exactE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpz_structS2_EE9is_iec559E
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpz_structS2_EE9is_moduloE
_ZNSt14numeric_limitsI10__gmp_exprIA1_12__mpz_structS2_EE9is_signedE
_ZlsRSoPK12__mpf_struct
_ZlsRSoPK12__mpq_struct
_ZlsRSoPK12__mpz_struct
_ZrsRSiP12__mpf_struct
_ZrsRSiP12__mpq_struct
_ZrsRSiP12__mpz_struct
__gmp_asprintf_funs_noformat

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ba85517f684cb971b750764e6dace9ad

Headers

File Characteristics

Imports

libgmp-10

kernel32

msvcrt

libgcc_s_seh-1

libstdc++-6

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 88B

.rdata Size: 2KB - Virtual size: 2KB

.pdata Size: 1024B - Virtual size: 900B

.xdata Size: 1024B - Virtual size: 836B

.bss Size: - Virtual size: 2KB

.edata Size: 6KB - Virtual size: 6KB

.idata Size: 3KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 104B

.reloc Size: 512B - Virtual size: 132B

.text
Size: 11KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 88B

.rdata
Size: 2KB - Virtual size: 2KB

.pdata
Size: 1024B - Virtual size: 900B

.xdata
Size: 1024B - Virtual size: 836B

.bss
Size: - Virtual size: 2KB

.edata
Size: 6KB - Virtual size: 6KB

.idata
Size: 3KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 104B

.reloc
Size: 512B - Virtual size: 132B