1ebece58dfc17790c501362af57c75ea0c01453c5eec371501d5868fcbde8ac4

Sharing

Copy URL Twitter E-mail

General

Target

1ebece58dfc17790c501362af57c75ea0c01453c5eec371501d5868fcbde8ac4
Size

23KB
MD5

29bbf8ae5849c6c701abc930990b9524
SHA1

b0129eeb977282f065f4d21429fa50f00da69941
SHA256

1ebece58dfc17790c501362af57c75ea0c01453c5eec371501d5868fcbde8ac4
SHA512

204f29f694fe4cf77fddbcee25f6946fa181a5d076520fdf2aa2dd628b612040228bf697597b014c8d6cff258d127212e0a3fa202b07e35d36c961189ba92a43
SSDEEP

384:JfmwsaybrbAc3HM1Ia/txcIDGatsMKf3BdNKh+wYz7:JgaybAc3HM1IwcIS0awD+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ebece58dfc17790c501362af57c75ea0c01453c5eec371501d5868fcbde8ac4

Files

1ebece58dfc17790c501362af57c75ea0c01453c5eec371501d5868fcbde8ac4
.dll windows x86

e65d34a498f12b661bf9602c73206767

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
InitializeCriticalSection
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
Sleep
TerminateProcess
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

_amsg_exit
_initterm
_iob
_lock
_unlock
_write
abort
calloc
free
fwrite
realloc
strlen
strncmp
vfprintf

libgio-2.0-0

g_io_error_quark
g_io_extension_point_implement
g_io_extension_point_register
g_proxy_resolver_get_type
g_task_get_source_tag
g_task_is_valid
g_task_new
g_task_propagate_pointer
g_task_return_error
g_task_return_error_if_cancelled
g_task_return_pointer
g_task_run_in_thread
g_task_run_in_thread_sync
g_task_set_name
g_task_set_return_on_cancel
g_task_set_source_tag
g_task_set_task_data

libglib-2.0-0

g_build_filename
g_clear_error
g_dgettext
g_free
g_getenv
g_log_structured_standard
g_malloc_n
g_return_if_fail_warning
g_set_error_literal
g_strcmp0
g_strdup
g_strdup_printf
g_strdupv
g_strfreev
g_uri_is_valid
g_win32_get_package_installation_directory_of_module

libgobject-2.0-0

g_object_unref
g_type_class_adjust_private_offset
g_type_class_peek_parent
g_type_module_add_interface
g_type_module_register_type

libintl-8

libintl_bind_textdomain_codeset
libintl_bindtextdomain

libproxy-1

px_proxy_factory_free
px_proxy_factory_free_proxies
px_proxy_factory_get_proxies
px_proxy_factory_new

Exports

Exports

g_io_libproxy_load
g_io_libproxy_query
g_io_libproxy_unload
g_libproxy_resolver_get_type
g_libproxy_resolver_register

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 160B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 227B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e65d34a498f12b661bf9602c73206767

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

libgio-2.0-0

libglib-2.0-0

libgobject-2.0-0

libintl-8

libproxy-1

Exports

Exports

Sections

.text Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 44B

.rdata Size: 2KB - Virtual size: 2KB

/4 Size: 3KB - Virtual size: 2KB

.bss Size: - Virtual size: 160B

.edata Size: 512B - Virtual size: 227B

.idata Size: 3KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 1024B - Virtual size: 752B

.text
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 44B

.rdata
Size: 2KB - Virtual size: 2KB

/4
Size: 3KB - Virtual size: 2KB

.bss
Size: - Virtual size: 160B

.edata
Size: 512B - Virtual size: 227B

.idata
Size: 3KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 1024B - Virtual size: 752B