085f8a469c16a8691feda27ba42bbc8f029df03a15bb061e59a7ba08223570b1

Sharing

Copy URL Twitter E-mail

General

Target

085f8a469c16a8691feda27ba42bbc8f029df03a15bb061e59a7ba08223570b1
Size

178KB
MD5

b902129559499dd17d7bb5a79c726b89
SHA1

2d5bc8bc01673d4b3ea0f99a3c3301cef86d2b44
SHA256

085f8a469c16a8691feda27ba42bbc8f029df03a15bb061e59a7ba08223570b1
SHA512

67d72d72e80c9701a3660c9da854a27653c054162f9c15e242cbcc85bae1a0bdd3f374a0c230490c313117a8014531f9889496bb2f6e12fc6e4702929ef00a38
SSDEEP

3072:WRKgybaMkgx3RFZNuTOP45XHm6rLAojfvm7YpKdYVyt:W3yOMlvPaXDrLvfvm7YpyYV0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
085f8a469c16a8691feda27ba42bbc8f029df03a15bb061e59a7ba08223570b1

Files

085f8a469c16a8691feda27ba42bbc8f029df03a15bb061e59a7ba08223570b1
.dll windows x86

6be15db531a2b819ad6b817ae9cb7feb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
InitializeCriticalSection
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
Sleep
TerminateProcess
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

_amsg_exit
_errno
_initterm
_iob
_lock
_unlock
_write
abort
calloc
free
fwrite
memcpy
memmove
realloc
strchr
strcmp
strlen
strncmp
strtol
strtoul
vfprintf

libgio-2.0-0

g_cancellable_get_type
g_cancellable_set_error_if_cancelled
g_input_stream_get_type
g_input_stream_read
g_io_error_quark
g_output_stream_get_type
g_output_stream_write
g_task_get_task_data
g_task_is_valid
g_task_new
g_task_propagate_boolean
g_task_return_boolean
g_task_return_error
g_task_run_in_thread
g_task_set_task_data

libglib-2.0-0

g_array_append_vals
g_array_free
g_array_new
g_array_set_clear_func
g_array_sized_new
g_array_unref
g_ascii_dtostr
g_ascii_formatd
g_ascii_strtod
g_ascii_strtoll
g_ascii_strtoull
g_assertion_message_expr
g_byte_array_free
g_byte_array_new
g_byte_array_set_size
g_byte_array_unref
g_clear_error
g_datalist_clear
g_datalist_init
g_dgettext
g_double_hash
g_error_free
g_file_get_contents
g_file_set_contents
g_free
g_hash_table_destroy
g_hash_table_foreach
g_hash_table_insert
g_hash_table_iter_init
g_hash_table_iter_next
g_hash_table_lookup
g_hash_table_new
g_hash_table_new_full
g_hash_table_remove
g_hash_table_replace
g_hash_table_size
g_int64_hash
g_intern_static_string
g_list_append
g_list_copy
g_list_foreach
g_list_free
g_list_free_full
g_list_prepend
g_list_reverse
g_log_structured_standard
g_malloc
g_malloc0
g_malloc_n
g_mapped_file_get_contents
g_mapped_file_get_length
g_mapped_file_new
g_mapped_file_unref
g_mutex_lock
g_mutex_unlock
g_once_init_enter
g_once_init_leave
g_propagate_error
g_ptr_array_add
g_ptr_array_free
g_ptr_array_new
g_ptr_array_new_with_free_func
g_ptr_array_remove_index
g_ptr_array_set_free_func
g_ptr_array_sized_new
g_ptr_array_unref
g_quark_from_static_string
g_queue_clear
g_queue_delete_link
g_queue_find_custom
g_queue_free
g_queue_get_length
g_queue_init
g_queue_is_empty
g_queue_new
g_queue_peek_head
g_queue_peek_nth
g_queue_pop_head
g_queue_push_head
g_queue_push_tail
g_return_if_fail_warning
g_set_error
g_set_error_literal
g_slice_alloc
g_slice_free1
g_slist_find_custom
g_slist_insert_sorted
g_snprintf
g_str_equal
g_str_hash
g_strcmp0
g_strconcat
g_strdup
g_strdup_printf
g_strdup_vprintf
g_string_append_len
g_string_append_printf
g_string_append_unichar
g_string_free
g_string_free_and_steal
g_string_insert_c
g_string_insert_len
g_string_new
g_strndup
g_strstr_len
g_strtod
g_strv_length
g_unichar_isspace
g_unichar_type
g_unichar_validate
g_utf8_get_char
g_utf8_prev_char
g_utf8_skip
g_utf8_validate
g_variant_builder_add_value
g_variant_builder_close
g_variant_builder_end
g_variant_builder_new
g_variant_builder_open
g_variant_builder_unref
g_variant_classify
g_variant_get_boolean
g_variant_get_byte
g_variant_get_child_value
g_variant_get_double
g_variant_get_handle
g_variant_get_int16
g_variant_get_int32
g_variant_get_int64
g_variant_get_maybe
g_variant_get_string
g_variant_get_type_string
g_variant_get_uint16
g_variant_get_uint32
g_variant_get_uint64
g_variant_get_variant
g_variant_is_container
g_variant_iter_init
g_variant_iter_next_value
g_variant_new_boolean
g_variant_new_byte
g_variant_new_double
g_variant_new_handle
g_variant_new_int16
g_variant_new_int32
g_variant_new_int64
g_variant_new_maybe
g_variant_new_object_path
g_variant_new_signature
g_variant_new_string
g_variant_new_uint16
g_variant_new_uint32
g_variant_new_uint64
g_variant_new_variant
g_variant_type_checked_
g_variant_type_string_is_valid
g_variant_unref

libgobject-2.0-0

g_boxed_type_register_static
g_enum_get_value_by_name
g_enum_get_value_by_nick
g_enum_register_static
g_flags_get_value_by_name
g_flags_get_value_by_nick
g_object_class_find_property
g_object_class_install_properties
g_object_class_list_properties
g_object_freeze_notify
g_object_get_property
g_object_new
g_object_new_with_properties
g_object_notify_by_pspec
g_object_ref
g_object_set_property
g_object_thaw_notify
g_object_unref
g_param_spec_boolean
g_param_spec_boxed
g_param_spec_uint
g_param_spec_unichar
g_param_value_defaults
g_signal_emit
g_signal_new
g_strv_get_type
g_type_add_instance_private
g_type_check_instance_is_a
g_type_check_instance_is_fundamentally_a
g_type_check_value
g_type_check_value_holds
g_type_class_adjust_private_offset
g_type_class_peek_parent
g_type_class_ref
g_type_class_unref
g_type_fundamental
g_type_interface_add_prerequisite
g_type_interface_peek
g_type_is_a
g_type_name
g_type_register_static_simple
g_type_test_flags
g_value_copy
g_value_get_boolean
g_value_get_boxed
g_value_get_double
g_value_get_enum
g_value_get_flags
g_value_get_float
g_value_get_int
g_value_get_int64
g_value_get_long
g_value_get_object
g_value_get_schar
g_value_get_string
g_value_get_uchar
g_value_get_uint
g_value_get_uint64
g_value_get_ulong
g_value_init
g_value_set_boolean
g_value_set_boxed
g_value_set_double
g_value_set_enum
g_value_set_flags
g_value_set_float
g_value_set_int
g_value_set_int64
g_value_set_long
g_value_set_object
g_value_set_schar
g_value_set_string
g_value_set_uchar
g_value_set_uint
g_value_set_uint64
g_value_set_ulong
g_value_take_boxed
g_value_take_object
g_value_unset

Exports

Exports

json_array_add_array_element
json_array_add_boolean_element
json_array_add_double_element
json_array_add_element
json_array_add_int_element
json_array_add_null_element
json_array_add_object_element
json_array_add_string_element
json_array_dup_element
json_array_equal
json_array_foreach_element
json_array_get_array_element
json_array_get_boolean_element
json_array_get_double_element
json_array_get_element
json_array_get_elements
json_array_get_int_element
json_array_get_length
json_array_get_null_element
json_array_get_object_element
json_array_get_string_element
json_array_get_type
json_array_hash
json_array_is_immutable
json_array_new
json_array_ref
json_array_remove_element
json_array_seal
json_array_sized_new
json_array_unref
json_boxed_can_deserialize
json_boxed_can_serialize
json_boxed_deserialize
json_boxed_register_deserialize_func
json_boxed_register_serialize_func
json_boxed_serialize
json_builder_add_boolean_value
json_builder_add_double_value
json_builder_add_int_value
json_builder_add_null_value
json_builder_add_string_value
json_builder_add_value
json_builder_begin_array
json_builder_begin_object
json_builder_end_array
json_builder_end_object
json_builder_get_root
json_builder_get_type
json_builder_new
json_builder_new_immutable
json_builder_reset
json_builder_set_member_name
json_construct_gobject
json_from_string
json_generator_get_indent
json_generator_get_indent_char
json_generator_get_pretty
json_generator_get_root
json_generator_get_type
json_generator_new
json_generator_set_indent
json_generator_set_indent_char
json_generator_set_pretty
json_generator_set_root
json_generator_to_data
json_generator_to_file
json_generator_to_gstring
json_generator_to_stream
json_gobject_deserialize
json_gobject_from_data
json_gobject_serialize
json_gobject_to_data
json_gvariant_deserialize
json_gvariant_deserialize_data
json_gvariant_serialize
json_gvariant_serialize_data
json_node_alloc
json_node_copy
json_node_dup_array
json_node_dup_object
json_node_dup_string
json_node_equal
json_node_free
json_node_get_array
json_node_get_boolean
json_node_get_double
json_node_get_int
json_node_get_node_type
json_node_get_object
json_node_get_parent
json_node_get_string
json_node_get_type
json_node_get_value
json_node_get_value_type
json_node_hash
json_node_init
json_node_init_array
json_node_init_boolean
json_node_init_double
json_node_init_int
json_node_init_null
json_node_init_object
json_node_init_string
json_node_is_immutable
json_node_is_null
json_node_new
json_node_ref
json_node_seal
json_node_set_array
json_node_set_boolean
json_node_set_double
json_node_set_int
json_node_set_object
json_node_set_parent
json_node_set_string
json_node_set_value
json_node_take_array
json_node_take_object
json_node_type_get_type
json_node_type_name
json_node_unref
json_object_add_member
json_object_dup_member
json_object_equal
json_object_foreach_member
json_object_get_array_member
json_object_get_boolean_member
json_object_get_boolean_member_with_default
json_object_get_double_member
json_object_get_double_member_with_default
json_object_get_int_member
json_object_get_int_member_with_default
json_object_get_member
json_object_get_members
json_object_get_null_member
json_object_get_object_member
json_object_get_size
json_object_get_string_member
json_object_get_string_member_with_default
json_object_get_type
json_object_get_values
json_object_has_member
json_object_hash
json_object_is_immutable
json_object_iter_init
json_object_iter_init_ordered
json_object_iter_next
json_object_iter_next_ordered
json_object_new
json_object_ref
json_object_remove_member
json_object_seal
json_object_set_array_member
json_object_set_boolean_member
json_object_set_double_member
json_object_set_int_member
json_object_set_member
json_object_set_null_member
json_object_set_object_member
json_object_set_string_member
json_object_unref
json_parser_error_get_type
json_parser_error_quark
json_parser_get_current_line
json_parser_get_current_pos
json_parser_get_root
json_parser_get_type
json_parser_has_assignment
json_parser_load_from_data
json_parser_load_from_file
json_parser_load_from_mapped_file
json_parser_load_from_stream
json_parser_load_from_stream_async
json_parser_load_from_stream_finish
json_parser_new
json_parser_new_immutable
json_parser_steal_root
json_path_compile
json_path_error_get_type
json_path_error_quark
json_path_get_type
json_path_match
json_path_new
json_path_query
json_reader_count_elements
json_reader_count_members
json_reader_end_element
json_reader_end_member
json_reader_error_get_type
json_reader_error_quark
json_reader_get_boolean_value
json_reader_get_double_value
json_reader_get_error
json_reader_get_int_value
json_reader_get_member_name
json_reader_get_null_value
json_reader_get_string_value
json_reader_get_type
json_reader_get_value
json_reader_is_array
json_reader_is_object
json_reader_is_value
json_reader_list_members
json_reader_new
json_reader_read_element
json_reader_read_member
json_reader_set_root
json_serializable_default_deserialize_property
json_serializable_default_serialize_property
json_serializable_deserialize_property
json_serializable_find_property
json_serializable_get_property
json_serializable_get_type
json_serializable_list_properties
json_serializable_serialize_property
json_serializable_set_property
json_serialize_gobject
json_string_compare
json_string_equal
json_string_hash
json_to_string

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 404B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6be15db531a2b819ad6b817ae9cb7feb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

libgio-2.0-0

libglib-2.0-0

libgobject-2.0-0

Exports

Exports

Sections

.text Size: 96KB - Virtual size: 96KB

.data Size: 512B - Virtual size: 44B

.rdata Size: 20KB - Virtual size: 19KB

/4 Size: 19KB - Virtual size: 19KB

.bss Size: - Virtual size: 404B

.edata Size: 7KB - Virtual size: 7KB

.idata Size: 10KB - Virtual size: 9KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 96KB - Virtual size: 96KB

.data
Size: 512B - Virtual size: 44B

.rdata
Size: 20KB - Virtual size: 19KB

/4
Size: 19KB - Virtual size: 19KB

.bss
Size: - Virtual size: 404B

.edata
Size: 7KB - Virtual size: 7KB

.idata
Size: 10KB - Virtual size: 9KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 9KB - Virtual size: 9KB