cheirotherium[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

cheirotherium.dll
Size

481KB
MD5

27abb413f6543e7a627880ec2b6bd91f
SHA1

deffa882e0011edf87e2d141e63bc86318d223e2
SHA256

dde364f762284b712008127922d3ab75a79687f2a03406ce87175c496cb3ae46
SHA512

bc1b18e77dc91e52c74359b0ad9d92117ed96dde01ee4564db88e4b3e5043575caa3f21c06e1f4b4db4c60fffa5cb254bd274c1bd16d522d00bf954ea058b693
SSDEEP

12288:FNg5j3vw+WqFlWJfkmVwe1UL4hsao3Oowg9Pdz:M55F4lhrgOon9J

Score

1^/10

Malware Config

Signatures

Files

cheirotherium.dll
.dll windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Exports

Exports

Cpgme_addrspec_from_uid
Cpgme_cancel
Cpgme_cancel_async
Cpgme_check_version
Cpgme_check_version_internal
Cpgme_conf_arg_new
Cpgme_conf_arg_release
Cpgme_conf_opt_change
Cpgme_conf_release
Cpgme_ctx_get_engine_info
Cpgme_ctx_set_engine_info
Cpgme_data_get_encoding
Cpgme_data_get_file_name
Cpgme_data_identify
Cpgme_data_new
Cpgme_data_new_from_cbs
Cpgme_data_new_from_estream
Cpgme_data_new_from_fd
Cpgme_data_new_from_file
Cpgme_data_new_from_filepart
Cpgme_data_new_from_mem
Cpgme_data_new_from_stream
Cpgme_data_new_with_read_cb
Cpgme_data_read
Cpgme_data_release
Cpgme_data_release_and_get_mem
Cpgme_data_rewind
Cpgme_data_seek
Cpgme_data_set_encoding
Cpgme_data_set_file_name
Cpgme_data_set_flag
Cpgme_data_write
Cpgme_engine_check_version
Cpgme_err_code_from_errno
Cpgme_err_code_from_syserror
Cpgme_err_code_to_errno
Cpgme_err_make_from_errno
Cpgme_err_set_errno
Cpgme_error_from_errno
Cpgme_free
Cpgme_get_armor
Cpgme_get_ctx_flag
Cpgme_get_dirinfo
Cpgme_get_engine_info
Cpgme_get_fdptr
Cpgme_get_giochannel
Cpgme_get_include_certs
Cpgme_get_io_cbs
Cpgme_get_key
Cpgme_get_keylist_mode
Cpgme_get_offline
Cpgme_get_passphrase_cb
Cpgme_get_pinentry_mode
Cpgme_get_progress_cb
Cpgme_get_protocol
Cpgme_get_protocol_name
Cpgme_get_sender
Cpgme_get_sig_key
Cpgme_get_sig_status
Cpgme_get_sig_string_attr
Cpgme_get_sig_ulong_attr
Cpgme_get_status_cb
Cpgme_get_sub_protocol
Cpgme_get_textmode
Cpgme_hash_algo_name
Cpgme_io_read
Cpgme_io_write
Cpgme_io_writen
Cpgme_key_from_uid
Cpgme_key_get_string_attr
Cpgme_key_get_ulong_attr
Cpgme_key_ref
Cpgme_key_release
Cpgme_key_sig_get_string_attr
Cpgme_key_sig_get_ulong_attr
Cpgme_key_unref
Cpgme_new
Cpgme_op_adduid
Cpgme_op_adduid_start
Cpgme_op_assuan_result
Cpgme_op_assuan_transact
Cpgme_op_assuan_transact_ext
Cpgme_op_assuan_transact_start
Cpgme_op_card_edit
Cpgme_op_card_edit_start
Cpgme_op_conf_dir
Cpgme_op_conf_load
Cpgme_op_conf_save
Cpgme_op_createkey
Cpgme_op_createkey_start
Cpgme_op_createsubkey
Cpgme_op_createsubkey_start
Cpgme_op_decrypt
Cpgme_op_decrypt_ext
Cpgme_op_decrypt_ext_start
Cpgme_op_decrypt_result
Cpgme_op_decrypt_start
Cpgme_op_decrypt_verify
Cpgme_op_decrypt_verify_start
Cpgme_op_delete
Cpgme_op_delete_ext
Cpgme_op_delete_ext_start
Cpgme_op_delete_start
Cpgme_op_edit
Cpgme_op_edit_start
Cpgme_op_encrypt
Cpgme_op_encrypt_ext
Cpgme_op_encrypt_ext_start
Cpgme_op_encrypt_result
Cpgme_op_encrypt_sign
Cpgme_op_encrypt_sign_ext
Cpgme_op_encrypt_sign_ext_start
Cpgme_op_encrypt_sign_start
Cpgme_op_encrypt_start
Cpgme_op_export
Cpgme_op_export_ext
Cpgme_op_export_ext_start
Cpgme_op_export_keys
Cpgme_op_export_keys_start
Cpgme_op_export_start
Cpgme_op_genkey
Cpgme_op_genkey_result
Cpgme_op_genkey_start
Cpgme_op_getauditlog
Cpgme_op_getauditlog_start
Cpgme_op_import
Cpgme_op_import_ext
Cpgme_op_import_keys
Cpgme_op_import_keys_start
Cpgme_op_import_result
Cpgme_op_import_start
Cpgme_op_interact
Cpgme_op_interact_start
Cpgme_op_keylist_end
Cpgme_op_keylist_ext_start
Cpgme_op_keylist_from_data_start
Cpgme_op_keylist_next
Cpgme_op_keylist_result
Cpgme_op_keylist_start
Cpgme_op_keysign
Cpgme_op_keysign_start
Cpgme_op_passwd
Cpgme_op_passwd_start
Cpgme_op_query_swdb
Cpgme_op_query_swdb_result
Cpgme_op_revsig
Cpgme_op_revsig_start
Cpgme_op_revuid
Cpgme_op_revuid_start
Cpgme_op_set_uid_flag
Cpgme_op_set_uid_flag_start
Cpgme_op_setexpire
Cpgme_op_setexpire_start
Cpgme_op_sign
Cpgme_op_sign_result
Cpgme_op_sign_start
Cpgme_op_spawn
Cpgme_op_spawn_start
Cpgme_op_tofu_policy
Cpgme_op_tofu_policy_start
Cpgme_op_trustlist_end
Cpgme_op_trustlist_next
Cpgme_op_trustlist_start
Cpgme_op_verify
Cpgme_op_verify_result
Cpgme_op_verify_start
Cpgme_op_vfs_create
Cpgme_op_vfs_mount
Cpgme_op_vfs_mount_result
Cpgme_pubkey_algo_name
Cpgme_pubkey_algo_string
Cpgme_release
Cpgme_result_ref
Cpgme_result_unref
Cpgme_set_armor
Cpgme_set_ctx_flag
Cpgme_set_engine_info
Cpgme_set_global_flag
Cpgme_set_include_certs
Cpgme_set_io_cbs
Cpgme_set_keylist_mode
Cpgme_set_locale
Cpgme_set_offline
Cpgme_set_passphrase_cb
Cpgme_set_pinentry_mode
Cpgme_set_progress_cb
Cpgme_set_protocol
Cpgme_set_sender
Cpgme_set_status_cb
Cpgme_set_sub_protocol
Cpgme_set_textmode
Cpgme_sig_notation_add
Cpgme_sig_notation_clear
Cpgme_sig_notation_get
Cpgme_signers_add
Cpgme_signers_clear
Cpgme_signers_count
Cpgme_signers_enum
Cpgme_strerror
Cpgme_strerror_r
Cpgme_strsource
Cpgme_trust_item_get_int_attr
Cpgme_trust_item_get_string_attr
Cpgme_trust_item_ref
Cpgme_trust_item_release
Cpgme_trust_item_unref
Cpgme_wait
GL70

Sections

.text
Size: 253KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 152KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Exports

Exports

Sections

.text Size: 253KB - Virtual size: 252KB

.data Size: 3KB - Virtual size: 3KB

.rdata Size: 33KB - Virtual size: 32KB

.bss Size: - Virtual size: 17KB

.edata Size: 6KB - Virtual size: 6KB

.idata Size: 5KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 152KB - Virtual size: 148KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 253KB - Virtual size: 252KB

.data
Size: 3KB - Virtual size: 3KB

.rdata
Size: 33KB - Virtual size: 32KB

.bss
Size: - Virtual size: 17KB

.edata
Size: 6KB - Virtual size: 6KB

.idata
Size: 5KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 152KB - Virtual size: 148KB

.reloc
Size: 9KB - Virtual size: 9KB