5ee9e18c5084c6564e1ce1cd7464f57cc5e461cf0649788b2081ab5d5d4ecca7

Sharing

Copy URL Twitter E-mail

General

Target

5ee9e18c5084c6564e1ce1cd7464f57cc5e461cf0649788b2081ab5d5d4ecca7
Size

259KB
MD5

ea462129f7e4620ddf17e6ccdd9badaa
SHA1

4a82742c1b1916f0830e5d23f71a0b4e58e3e101
SHA256

5ee9e18c5084c6564e1ce1cd7464f57cc5e461cf0649788b2081ab5d5d4ecca7
SHA512

f3cafd9ec3af9bf3e1c313744a73b87b15419153e21cfcef8e0f6944fdbc41fafbef07e5e5ca92a80d1915f8ff16a3398459c858cf9300e00c4ff902bf1b975f
SSDEEP

6144:9tZY4LPpzqRj496cwrXIOYBMEp2nI2kXQ9mnPOSrPD1g:9tZY4tOj496cwrXIXGEuI2kHnPY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ee9e18c5084c6564e1ce1cd7464f57cc5e461cf0649788b2081ab5d5d4ecca7

Files

5ee9e18c5084c6564e1ce1cd7464f57cc5e461cf0649788b2081ab5d5d4ecca7
.dll windows x86

83b558aeab1f08891295e2220be34d84

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libgcc_s_dw2-1

_Unwind_Resume
__deregister_frame_info
__register_frame_info
__udivdi3

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__mb_cur_max
__setusermatherr
_amsg_exit
_errno
_initterm
_iob
_lock
_unlock
abort
atoi
calloc
fputc
free
fwrite
localeconv
malloc
memcpy
memset
memcmp
realloc
setlocale
strchr
strerror
strlen
strncmp
vfprintf
wcslen

libstdc++-6

_ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE4findEcj
_ZNSdD2Ev
_ZNSi10_M_extractIyEERSiRT_
_ZNSi3getEv
_ZNSi4peekEv
_ZNSo3putEc
_ZNSo9_M_insertIlEERSoT_
_ZNSo9_M_insertImEERSoT_
_ZNSo9_M_insertIyEERSoT_
_ZNSt16invalid_argumentC1EPKc
_ZNSt16invalid_argumentD1Ev
_ZNSt6localeC1Ev
_ZNSt6localeD1Ev
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE10_M_disposeEv
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE10_M_replaceEjjPKcj
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE12_M_constructEjc
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_assignERKS4_
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_createERjj
_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE10_M_disposeEv
_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE12_M_constructEjw
_ZNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEE9_M_createERjj
_ZNSt7__cxx1115basic_stringbufIcSt11char_traitsIcESaIcEE7_M_syncEPcjj
_ZNSt7__cxx1118basic_stringstreamIcSt11char_traitsIcESaIcEED1Ev
_ZNSt7__cxx1119basic_ostringstreamIcSt11char_traitsIcESaIcEED1Ev
_ZNSt8__detail15_List_node_base7_M_hookEPS0_
_ZNSt8ios_baseC2Ev
_ZNSt8ios_baseD2Ev
_ZNSt9basic_iosIcSt11char_traitsIcEE4initEPSt15basic_streambufIcS1_E
_ZNSt9basic_iosIcSt11char_traitsIcEE5clearESt12_Ios_Iostate
_ZNSt9exceptionD1Ev
_ZSt16__ostream_insertIcSt11char_traitsIcEERSt13basic_ostreamIT_T0_ES6_PKS3_i
_ZSt19__throw_logic_errorPKc
_ZSt24__throw_out_of_range_fmtPKcz
_ZSt28__throw_bad_array_new_lengthv
_ZTTNSt7__cxx1118basic_stringstreamIcSt11char_traitsIcESaIcEEE
_ZTTNSt7__cxx1119basic_ostringstreamIcSt11char_traitsIcESaIcEEE
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVNSt7__cxx1115basic_stringbufIcSt11char_traitsIcESaIcEEE
_ZTVNSt7__cxx1118basic_stringstreamIcSt11char_traitsIcESaIcEEE
_ZTVNSt7__cxx1119basic_ostringstreamIcSt11char_traitsIcESaIcEEE
_ZTVSt15basic_streambufIcSt11char_traitsIcEE
_ZTVSt9basic_iosIcSt11char_traitsIcEE
_ZTVSt9exception
_ZdlPv
_Znwj
__cxa_allocate_exception
__cxa_begin_catch
__cxa_end_catch
__cxa_free_exception
__cxa_rethrow
__cxa_throw
__gxx_personality_v0

libexiv2

_ZN5Exiv210BasicErrorIcE6setMsgEv
_ZN5Exiv210ExifParser6decodeERNS_8ExifDataEPKhj
_ZN5Exiv210ExifParser6encodeERSt6vectorIhSaIhEEPKhjNS_9ByteOrderERKNS_8ExifDataE
_ZN5Exiv210enableBMFFEb
_ZN5Exiv212ImageFactory4openEPKhl
_ZN5Exiv212ImageFactory4openERKNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEEEb
_ZN5Exiv212ImageFactory4openESt8auto_ptrINS_7BasicIoEE
_ZN5Exiv212ImageFactory6createEi
_ZN5Exiv212ImageFactory6createEiRKNSt7__cxx1112basic_stringIwSt11char_traitsIwESaIwEEE
_ZN5Exiv212IptcDataSets11dataSetDescEtt
_ZN5Exiv212IptcDataSets11dataSetTypeEtt
_ZN5Exiv212IptcDataSets12dataSetTitleEtt
_ZN5Exiv212IptcDataSets17dataSetRepeatableEtt
_ZN5Exiv212PreviewImageD1Ev
_ZN5Exiv212XmpTextValue4readERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5Exiv212XmpTextValueC1ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5Exiv213XmpProperties10registerNsERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEES8_
_ZN5Exiv213XmpProperties12propertyDescERKNS_6XmpKeyE
_ZN5Exiv213XmpProperties12propertyTypeERKNS_6XmpKeyE
_ZN5Exiv213XmpProperties12unregisterNsERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5Exiv213XmpProperties12unregisterNsEv
_ZN5Exiv213XmpProperties13propertyTitleERKNS_6XmpKeyE
_ZN5Exiv213XmpProperties2nsERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5Exiv213XmpProperties6prefixERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5Exiv214PreviewManagerC1ERKNS_5ImageE
_ZN5Exiv219floatToRationalCastEf
_ZN5Exiv25MemIoC1Ev
_ZN5Exiv25Value6createENS_6TypeIdE
_ZN5Exiv25ValueD2Ev
_ZN5Exiv26LogMsg10setHandlerEPFviPKcE
_ZN5Exiv26LogMsg14defaultHandlerEiPKc
_ZN5Exiv26LogMsg5levelEv
_ZN5Exiv26LogMsg8setLevelENS0_5LevelE
_ZN5Exiv26XmpKeyC1ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5Exiv26XmpKeyD1Ev
_ZN5Exiv27BasicIoD2Ev
_ZN5Exiv27DataBuf5resetESt4pairIPhlE
_ZN5Exiv27DataBufC1ERKNS_10DataBufRefE
_ZN5Exiv27DataBufC1El
_ZN5Exiv27DataBufD1Ev
_ZN5Exiv27DataBufcvNS_10DataBufRefEEv
_ZN5Exiv27ExifKeyC1ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5Exiv27ExifKeyD1Ev
_ZN5Exiv27IptcKeyC1ERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5Exiv27IptcKeyD1Ev
_ZN5Exiv27XmpData3addERKNS_6XmpKeyEPKNS_5ValueE
_ZN5Exiv27XmpData3endEv
_ZN5Exiv27XmpData5beginEv
_ZN5Exiv27XmpData5clearEv
_ZN5Exiv27XmpData5eraseEN9__gnu_cxx17__normal_iteratorIPNS_8XmpdatumESt6vectorIS3_SaIS3_EEEE
_ZN5Exiv27XmpData7findKeyERKNS_6XmpKeyE
_ZN5Exiv27XmpDataixERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5Exiv28AnyErrorC2Ev
_ZN5Exiv28AnyErrorD2Ev
_ZN5Exiv28ExifData5clearEv
_ZN5Exiv28ExifData5eraseESt14_List_iteratorINS_9ExifdatumEE
_ZN5Exiv28ExifData7findKeyERKNS_7ExifKeyE
_ZN5Exiv28ExifData9sortByKeyEv
_ZN5Exiv28ExifDataixERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5Exiv28IptcData3addERKNS_7IptcKeyEPNS_5ValueE
_ZN5Exiv28IptcData5eraseEN9__gnu_cxx17__normal_iteratorIPNS_9IptcdatumESt6vectorIS3_SaIS3_EEEE
_ZN5Exiv28IptcDataixERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5Exiv28TypeInfo6typeIdERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5Exiv28TypeInfo8typeNameENS_6TypeIdE
_ZN5Exiv28XmpValue15setXmpArrayTypeENS0_12XmpArrayTypeE
_ZN5Exiv28XmpdatumC1ERKS0_
_ZN5Exiv28XmpdatumD1Ev
_ZN5Exiv28XmpdatumaSERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5Exiv28XmpdatumaSERKS0_
_ZN5Exiv29ExifThumb16setJpegThumbnailEPKhl
_ZN5Exiv29ExifThumb16setJpegThumbnailERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5Exiv29ExifThumb5eraseEv
_ZN5Exiv29ExifThumbC1ERNS_8ExifDataE
_ZN5Exiv29ExifdatumC1ERKS0_
_ZN5Exiv29ExifdatumaSERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5Exiv29ExifdatumaSERKSt4pairIiiE
_ZN5Exiv29ExifdatumaSERKi
_ZN5Exiv29ExifdatumaSERKj
_ZN5Exiv29ExifdatumaSERKt
_ZN5Exiv29IptcdatumC1ERKS0_
_ZN5Exiv29IptcdatumD1Ev
_ZN5Exiv29IptcdatumaSERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN5Exiv29IptcdatumaSERKS0_
_ZN5Exiv29XmpParser10initializeEPFvPvbES1_
_ZN5Exiv29XmpParser6encodeERNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEERKNS_7XmpDataEtj
_ZNK5Exiv210ExifThumbC4copyEv
_ZNK5Exiv212PreviewImage4sizeEv
_ZNK5Exiv212PreviewImage5pDataEv
_ZNK5Exiv212PreviewImage5widthEv
_ZNK5Exiv212PreviewImage6heightEv
_ZNK5Exiv212PreviewImage8mimeTypeB5cxx11Ev
_ZNK5Exiv212PreviewImage9extensionB5cxx11Ev
_ZNK5Exiv212PreviewImage9writeFileERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZNK5Exiv214PreviewManager15getPreviewImageERKNS_17PreviewPropertiesE
_ZNK5Exiv214PreviewManager20getPreviewPropertiesEv
_ZNK5Exiv25Image4goodEv
_ZNK5Exiv25Image9checkModeENS_10MetadataIdE
_ZNK5Exiv26XmpKey3keyB5cxx11Ev
_ZNK5Exiv27ExifKey13defaultTypeIdEv
_ZNK5Exiv27ExifKey7tagDescB5cxx11Ev
_ZNK5Exiv27ExifKey8tagLabelB5cxx11Ev
_ZNK5Exiv27IptcKey3keyB5cxx11Ev
_ZNK5Exiv27IptcKey3tagEv
_ZNK5Exiv27IptcKey6recordEv
_ZNK5Exiv27XmpData3endEv
_ZNK5Exiv27XmpData5emptyEv
_ZNK5Exiv27XmpData7findKeyERKNS_6XmpKeyE
_ZNK5Exiv28IptcData7findKeyERKNS_7IptcKeyE
_ZTVN5Exiv210BasicErrorIcEE
_ZTVN5Exiv212XmpTextValueE
_ZTVN5Exiv28XmpValueE

libgio-2.0-0

g_input_stream_read
g_input_stream_skip
g_seekable_can_seek
g_seekable_get_type
g_seekable_seek
g_seekable_tell

libglib-2.0-0

g_ascii_strcasecmp
g_assertion_message_expr
g_byte_array_append
g_byte_array_free_to_bytes
g_byte_array_new
g_byte_array_set_size
g_bytes_new_take
g_clear_error
g_free
g_intern_static_string
g_intern_string
g_log
g_malloc
g_malloc0
g_malloc_n
g_once_init_enter
g_once_init_leave
g_propagate_error
g_quark_from_string
g_return_if_fail_warning
g_set_error_literal
g_slist_free
g_slist_free_full
g_slist_prepend
g_strchomp
g_strcmp0
g_strdup
g_strfreev
g_strsplit
g_strv_length
g_utf8_strlen
g_utf8_to_utf16

libgobject-2.0-0

g_enum_register_static
g_flags_register_static
g_object_new
g_object_ref
g_object_unref
g_type_add_instance_private
g_type_check_instance_is_a
g_type_class_adjust_private_offset
g_type_class_peek_parent
g_type_register_static_simple

Exports

Exports

_ZN5Exiv210BasicErrorIcEC1IPKcEENS_9ErrorCodeERKT_
_ZN5Exiv210BasicErrorIcED0Ev
_ZN5Exiv210BasicErrorIcED1Ev
_ZN5Exiv27BasicIo16populateFakeDataEv
_ZN6detail11collate_keyERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN6detail12sortMetadataIN5Exiv27XmpDataEEEvRT_
_ZN6detail12sortMetadataIN5Exiv28IptcDataEEEvRT_
_ZN8StreamIo4getbEv
_ZN8StreamIo4mmapEb
_ZN8StreamIo4openEv
_ZN8StreamIo4putbEh
_ZN8StreamIo4readEPhl
_ZN8StreamIo4readEl
_ZN8StreamIo4seekElN5Exiv27BasicIo8PositionE
_ZN8StreamIo5closeEv
_ZN8StreamIo5writeEPKhl
_ZN8StreamIo5writeERN5Exiv27BasicIoE
_ZN8StreamIo6munmapEv
_ZN8StreamIo8transferERN5Exiv27BasicIoE
_ZN8StreamIoC1EP23_ManagedStreamCallbacks
_ZN8StreamIoC2EP23_ManagedStreamCallbacks
_ZN8StreamIoD0Ev
_ZN8StreamIoD1Ev
_ZN8StreamIoD2Ev
_ZNK5Exiv210BasicErrorIcE4codeEv
_ZNK5Exiv210BasicErrorIcE4whatEv
_ZNK5Exiv210BasicErrorIcE5wwhatEv
_ZNK5Exiv28PgfImage8mimeTypeB5cxx11Ev
_ZNK8StreamIo3eofEv
_ZNK8StreamIo4pathB5cxx11Ev
_ZNK8StreamIo4sizeEv
_ZNK8StreamIo4tellEv
_ZNK8StreamIo5errorEv
_ZNK8StreamIo5wpathB5cxx11Ev
_ZNK8StreamIo6isopenEv
_ZNK8StreamIo9temporaryEv
_ZNSt6vectorIN5Exiv217PreviewPropertiesESaIS1_EED1Ev
_ZNSt6vectorIN5Exiv28XmpdatumESaIS1_EED1Ev
_ZNSt7__cxx1110_List_baseIN5Exiv29ExifdatumESaIS2_EE8_M_clearEv
_ZNSt7__cxx1115basic_stringbufIcSt11char_traitsIcESaIcEED1Ev
_ZNSt8auto_ptrIN5Exiv25ImageEED1Ev
_ZNSt8auto_ptrIN5Exiv25ValueEED1Ev
_ZNSt8auto_ptrIN5Exiv27BasicIoEED1Ev
_ZSt13__adjust_heapIN9__gnu_cxx17__normal_iteratorIPN5Exiv28XmpdatumESt6vectorIS3_SaIS3_EEEEiS3_NS0_5__ops15_Iter_comp_iterIZN6detail12sortMetadataINS2_7XmpDataEEEvRT_EUlRNS2_9MetadatumESH_E_EEEvSE_T0_SK_T1_T2_
_ZSt13__adjust_heapIN9__gnu_cxx17__normal_iteratorIPN5Exiv29IptcdatumESt6vectorIS3_SaIS3_EEEEiS3_NS0_5__ops15_Iter_comp_iterIZN6detail12sortMetadataINS2_8IptcDataEEEvRT_EUlRNS2_9MetadatumESH_E_EEEvSE_T0_SK_T1_T2_
_ZSt16__insertion_sortIN9__gnu_cxx17__normal_iteratorIPN5Exiv28XmpdatumESt6vectorIS3_SaIS3_EEEENS0_5__ops15_Iter_comp_iterIZN6detail12sortMetadataINS2_7XmpDataEEEvRT_EUlRNS2_9MetadatumESH_E_EEEvSE_SE_T0_
_ZSt16__insertion_sortIN9__gnu_cxx17__normal_iteratorIPN5Exiv29IptcdatumESt6vectorIS3_SaIS3_EEEENS0_5__ops15_Iter_comp_iterIZN6detail12sortMetadataINS2_8IptcDataEEEvRT_EUlRNS2_9MetadatumESH_E_EEEvSE_SE_T0_
_ZSt16__introsort_loopIN9__gnu_cxx17__normal_iteratorIPN5Exiv28XmpdatumESt6vectorIS3_SaIS3_EEEEiNS0_5__ops15_Iter_comp_iterIZN6detail12sortMetadataINS2_7XmpDataEEEvRT_EUlRNS2_9MetadatumESH_E_EEEvSE_SE_T0_T1_
_ZSt16__introsort_loopIN9__gnu_cxx17__normal_iteratorIPN5Exiv29IptcdatumESt6vectorIS3_SaIS3_EEEEiNS0_5__ops15_Iter_comp_iterIZN6detail12sortMetadataINS2_8IptcDataEEEvRT_EUlRNS2_9MetadatumESH_E_EEEvSE_SE_T0_T1_
_ZSt25__unguarded_linear_insertIN9__gnu_cxx17__normal_iteratorIPN5Exiv28XmpdatumESt6vectorIS3_SaIS3_EEEENS0_5__ops14_Val_comp_iterIZN6detail12sortMetadataINS2_7XmpDataEEEvRT_EUlRNS2_9MetadatumESH_E_EEEvSE_T0_
_ZSt25__unguarded_linear_insertIN9__gnu_cxx17__normal_iteratorIPN5Exiv29IptcdatumESt6vectorIS3_SaIS3_EEEENS0_5__ops14_Val_comp_iterIZN6detail12sortMetadataINS2_8IptcDataEEEvRT_EUlRNS2_9MetadatumESH_E_EEEvSE_T0_
_ZTI8StreamIo
_ZTIN5Exiv210BasicErrorIcEE
_ZTIN5Exiv210BasicErrorIwEE
_ZTIN5Exiv27BasicIoE
_ZTIN5Exiv28AnyErrorE
_ZTISt11logic_error
_ZTISt16invalid_argument
_ZTISt9exception
_ZTS8StreamIo
_ZTSN5Exiv210BasicErrorIcEE
_ZTSN5Exiv210BasicErrorIwEE
_ZTSN5Exiv27BasicIoE
_ZTSN5Exiv28AnyErrorE
_ZTSSt11logic_error
_ZTSSt16invalid_argument
_ZTSSt9exception
_ZTV8StreamIo
_nm___ZTVN5Exiv210BasicErrorIcEE
_nm___ZTVN5Exiv212XmpTextValueE
_nm___ZTVN5Exiv28XmpValueE
gexiv2_get_version
gexiv2_gexiv2_byte_order_get_type
gexiv2_gexiv2_log_level_get_type
gexiv2_gexiv2_orientation_get_type
gexiv2_gexiv2_structure_type_get_type
gexiv2_gexiv2_xmp_format_flags_get_type
gexiv2_initialize
gexiv2_log_get_default_handler
gexiv2_log_get_handler
gexiv2_log_get_level
gexiv2_log_is_handler_installed
gexiv2_log_set_handler
gexiv2_log_set_level
gexiv2_log_use_glib_logging
gexiv2_metadata_clear
gexiv2_metadata_clear_comment
gexiv2_metadata_clear_exif
gexiv2_metadata_clear_exif_tag
gexiv2_metadata_clear_iptc
gexiv2_metadata_clear_iptc_tag
gexiv2_metadata_clear_tag
gexiv2_metadata_clear_xmp
gexiv2_metadata_clear_xmp_tag
gexiv2_metadata_delete_gps_info
gexiv2_metadata_erase_exif_thumbnail
gexiv2_metadata_exif_tag_supports_multiple_values
gexiv2_metadata_free
gexiv2_metadata_from_app1_segment
gexiv2_metadata_from_stream
gexiv2_metadata_generate_xmp_packet
gexiv2_metadata_get_comment
gexiv2_metadata_get_exif_data
gexiv2_metadata_get_exif_tag_description
gexiv2_metadata_get_exif_tag_interpreted_string
gexiv2_metadata_get_exif_tag_label
gexiv2_metadata_get_exif_tag_long
gexiv2_metadata_get_exif_tag_multiple
gexiv2_metadata_get_exif_tag_rational
gexiv2_metadata_get_exif_tag_rational_as_double
gexiv2_metadata_get_exif_tag_raw
gexiv2_metadata_get_exif_tag_string
gexiv2_metadata_get_exif_tag_type
gexiv2_metadata_get_exif_tags
gexiv2_metadata_get_exif_thumbnail
gexiv2_metadata_get_exposure_time
gexiv2_metadata_get_fnumber
gexiv2_metadata_get_focal_length
gexiv2_metadata_get_gps_altitude
gexiv2_metadata_get_gps_info
gexiv2_metadata_get_gps_latitude
gexiv2_metadata_get_gps_longitude
gexiv2_metadata_get_iptc_tag_description
gexiv2_metadata_get_iptc_tag_interpreted_string
gexiv2_metadata_get_iptc_tag_label
gexiv2_metadata_get_iptc_tag_multiple
gexiv2_metadata_get_iptc_tag_raw
gexiv2_metadata_get_iptc_tag_string
gexiv2_metadata_get_iptc_tag_type
gexiv2_metadata_get_iptc_tags
gexiv2_metadata_get_iso_speed
gexiv2_metadata_get_metadata_pixel_height
gexiv2_metadata_get_metadata_pixel_width
gexiv2_metadata_get_mime_type
gexiv2_metadata_get_orientation
gexiv2_metadata_get_pixel_height
gexiv2_metadata_get_pixel_width
gexiv2_metadata_get_preview_image
gexiv2_metadata_get_preview_properties
gexiv2_metadata_get_supports_exif
gexiv2_metadata_get_supports_iptc
gexiv2_metadata_get_supports_xmp
gexiv2_metadata_get_tag_description
gexiv2_metadata_get_tag_interpreted_string
gexiv2_metadata_get_tag_label
gexiv2_metadata_get_tag_long
gexiv2_metadata_get_tag_multiple
gexiv2_metadata_get_tag_raw
gexiv2_metadata_get_tag_string
gexiv2_metadata_get_tag_type
gexiv2_metadata_get_type
gexiv2_metadata_get_xmp_namespace_for_tag
gexiv2_metadata_get_xmp_packet
gexiv2_metadata_get_xmp_tag_description
gexiv2_metadata_get_xmp_tag_interpreted_string
gexiv2_metadata_get_xmp_tag_label
gexiv2_metadata_get_xmp_tag_long
gexiv2_metadata_get_xmp_tag_multiple
gexiv2_metadata_get_xmp_tag_multiple_deprecated
gexiv2_metadata_get_xmp_tag_raw
gexiv2_metadata_get_xmp_tag_string
gexiv2_metadata_get_xmp_tag_type
gexiv2_metadata_get_xmp_tags
gexiv2_metadata_has_exif
gexiv2_metadata_has_exif_tag
gexiv2_metadata_has_iptc
gexiv2_metadata_has_iptc_tag
gexiv2_metadata_has_tag
gexiv2_metadata_has_xmp
gexiv2_metadata_has_xmp_tag
gexiv2_metadata_iptc_tag_supports_multiple_values
gexiv2_metadata_is_exif_tag
gexiv2_metadata_is_iptc_tag
gexiv2_metadata_is_xmp_tag
gexiv2_metadata_new
gexiv2_metadata_open_buf
gexiv2_metadata_open_path
gexiv2_metadata_open_stream
gexiv2_metadata_register_xmp_namespace
gexiv2_metadata_save_external
gexiv2_metadata_save_file
gexiv2_metadata_save_stream
gexiv2_metadata_set_comment
gexiv2_metadata_set_exif_tag_long
gexiv2_metadata_set_exif_tag_multiple
gexiv2_metadata_set_exif_tag_rational
gexiv2_metadata_set_exif_tag_string
gexiv2_metadata_set_exif_thumbnail_from_buffer
gexiv2_metadata_set_exif_thumbnail_from_file
gexiv2_metadata_set_gps_info
gexiv2_metadata_set_iptc_tag_multiple
gexiv2_metadata_set_iptc_tag_string
gexiv2_metadata_set_metadata_pixel_height
gexiv2_metadata_set_metadata_pixel_width
gexiv2_metadata_set_orientation
gexiv2_metadata_set_tag_long
gexiv2_metadata_set_tag_multiple
gexiv2_metadata_set_tag_string
gexiv2_metadata_set_xmp_tag_long
gexiv2_metadata_set_xmp_tag_multiple
gexiv2_metadata_set_xmp_tag_string
gexiv2_metadata_set_xmp_tag_struct
gexiv2_metadata_try_clear_tag
gexiv2_metadata_try_delete_gps_info
gexiv2_metadata_try_erase_exif_thumbnail
gexiv2_metadata_try_generate_xmp_packet
gexiv2_metadata_try_get_comment
gexiv2_metadata_try_get_exif_tag_rational
gexiv2_metadata_try_get_exposure_time
gexiv2_metadata_try_get_fnumber
gexiv2_metadata_try_get_focal_length
gexiv2_metadata_try_get_gps_altitude
gexiv2_metadata_try_get_gps_info
gexiv2_metadata_try_get_gps_latitude
gexiv2_metadata_try_get_gps_longitude
gexiv2_metadata_try_get_iso_speed
gexiv2_metadata_try_get_metadata_pixel_height
gexiv2_metadata_try_get_metadata_pixel_width
gexiv2_metadata_try_get_orientation
gexiv2_metadata_try_get_preview_image
gexiv2_metadata_try_get_tag_description
gexiv2_metadata_try_get_tag_interpreted_string
gexiv2_metadata_try_get_tag_label
gexiv2_metadata_try_get_tag_long
gexiv2_metadata_try_get_tag_multiple
gexiv2_metadata_try_get_tag_raw
gexiv2_metadata_try_get_tag_string
gexiv2_metadata_try_get_tag_type
gexiv2_metadata_try_get_xmp_namespace_for_tag
gexiv2_metadata_try_get_xmp_packet
gexiv2_metadata_try_has_tag
gexiv2_metadata_try_register_xmp_namespace
gexiv2_metadata_try_set_comment
gexiv2_metadata_try_set_exif_tag_rational
gexiv2_metadata_try_set_exif_thumbnail_from_buffer
gexiv2_metadata_try_set_gps_info
gexiv2_metadata_try_set_metadata_pixel_height
gexiv2_metadata_try_set_metadata_pixel_width
gexiv2_metadata_try_set_orientation
gexiv2_metadata_try_set_tag_long
gexiv2_metadata_try_set_tag_multiple
gexiv2_metadata_try_set_tag_string
gexiv2_metadata_try_set_xmp_tag_struct
gexiv2_metadata_try_tag_supports_multiple_values
gexiv2_metadata_try_unregister_all_xmp_namespaces
gexiv2_metadata_try_unregister_xmp_namespace
gexiv2_metadata_try_update_gps_info
gexiv2_metadata_unregister_all_xmp_namespaces
gexiv2_metadata_unregister_xmp_namespace
gexiv2_metadata_update_gps_info
gexiv2_metadata_xmp_tag_supports_multiple_values
gexiv2_preview_image_free
gexiv2_preview_image_get_data
gexiv2_preview_image_get_extension
gexiv2_preview_image_get_height
gexiv2_preview_image_get_mime_type
gexiv2_preview_image_get_type
gexiv2_preview_image_get_width
gexiv2_preview_image_new
gexiv2_preview_image_try_write_file
gexiv2_preview_image_write_file
gexiv2_preview_properties_free
gexiv2_preview_properties_get_extension
gexiv2_preview_properties_get_height
gexiv2_preview_properties_get_mime_type
gexiv2_preview_properties_get_size
gexiv2_preview_properties_get_type
gexiv2_preview_properties_get_width
gexiv2_preview_properties_new

Sections

.text
Size: 154KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

83b558aeab1f08891295e2220be34d84

Headers

DLL Characteristics

File Characteristics

Imports

libgcc_s_dw2-1

kernel32

msvcrt

libstdc++-6

libexiv2

libgio-2.0-0

libglib-2.0-0

libgobject-2.0-0

Exports

Exports

Sections

.text Size: 154KB - Virtual size: 154KB

.data Size: 512B - Virtual size: 144B

.rdata Size: 24KB - Virtual size: 23KB

/4 Size: 28KB - Virtual size: 27KB

.bss Size: - Virtual size: 2KB

.edata Size: 13KB - Virtual size: 12KB

.idata Size: 13KB - Virtual size: 12KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 154KB - Virtual size: 154KB

.data
Size: 512B - Virtual size: 144B

.rdata
Size: 24KB - Virtual size: 23KB

/4
Size: 28KB - Virtual size: 27KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 13KB - Virtual size: 12KB

.idata
Size: 13KB - Virtual size: 12KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 8KB - Virtual size: 7KB