69d0dd566890c3aa23855ef45ff4cf8e3f294547983ef8fe23b8a17988fa4f13

Sharing

Copy URL Twitter E-mail

General

Target

69d0dd566890c3aa23855ef45ff4cf8e3f294547983ef8fe23b8a17988fa4f13
Size

41KB
MD5

97a608f9a49a9d75b90b49e16530b072
SHA1

57c1caa9ddb76afa4da8d5554245ed858b5409c1
SHA256

69d0dd566890c3aa23855ef45ff4cf8e3f294547983ef8fe23b8a17988fa4f13
SHA512

e18079d5316e3c098bd373af0c535c7d0e2b1566b8009a59bcb2b943c7abc90863faf7c76be1b85f5baca1bf0a7d9967cc211c7b235a85bc1d6781ccecaecb9f
SSDEEP

768:+64yCvMlGGBrOGS+QW+NUIZSkovoLBBTp0H1H+Tl:IyIG95IW+uIXvp0H1H+T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69d0dd566890c3aa23855ef45ff4cf8e3f294547983ef8fe23b8a17988fa4f13

Files

69d0dd566890c3aa23855ef45ff4cf8e3f294547983ef8fe23b8a17988fa4f13
.dll windows:4 windows x86 arch:x86

9d5d5a3095acefae4bf6e298d2a6cd9d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libglib-2.0-0

g_ascii_strcasecmp
g_assertion_message
g_convert
g_direct_equal
g_direct_hash
g_free
g_hash_table_destroy
g_hash_table_foreach
g_hash_table_insert
g_hash_table_lookup
g_hash_table_new
g_hash_table_new_full
g_hash_table_remove
g_intern_static_string
g_list_foreach
g_list_free
g_list_free_1
g_list_prepend
g_locale_to_utf8
g_log
g_malloc
g_malloc0
g_once_init_enter_impl
g_once_init_leave
g_print
g_quark_from_static_string
g_queue_delete_link
g_queue_find
g_queue_free
g_queue_new
g_queue_pop_tail
g_queue_push_head
g_return_if_fail_warning
g_slice_alloc
g_slice_free1
g_slist_append
g_slist_foreach
g_slist_free
g_slist_length
g_slist_prepend
g_slist_remove
g_strdup
g_utf16_to_utf8
g_win32_error_message

libgobject-2.0-0

g_object_new
g_object_ref
g_object_unref
g_type_check_class_cast
g_type_check_instance_cast
g_type_check_instance_is_a
g_type_class_peek_parent
g_type_init
g_type_register_static
g_type_register_static_simple

libpango-1.0-0

pango_context_new
pango_context_set_font_description
pango_context_set_font_map
pango_context_set_language
pango_coverage_get
pango_coverage_new
pango_coverage_ref
pango_coverage_set
pango_coverage_unref
pango_find_map
pango_font_describe
pango_font_describe_with_absolute_size
pango_font_description_better_match
pango_font_description_copy
pango_font_description_free
pango_font_description_get_family
pango_font_description_get_size
pango_font_description_get_size_is_absolute
pango_font_description_new
pango_font_description_set_absolute_size
pango_font_description_set_family
pango_font_description_set_size
pango_font_description_set_stretch
pango_font_description_set_style
pango_font_description_set_variant
pango_font_description_set_weight
pango_font_description_to_string
pango_font_description_unset_fields
pango_font_face_describe
pango_font_face_get_type
pango_font_family_get_type
pango_font_get_type
pango_font_map_get_type
pango_font_metrics_new
pango_font_metrics_ref
pango_font_metrics_unref
pango_glyph_string_extents
pango_language_get_sample_string
pango_language_matches
pango_layout_get_iter
pango_layout_get_lines_readonly
pango_layout_get_type
pango_layout_iter_free
pango_layout_iter_get_baseline
pango_layout_iter_get_line_extents
pango_layout_iter_get_line_readonly
pango_layout_iter_next_line
pango_layout_line_get_extents
pango_layout_new
pango_layout_set_text
pango_map_get_engine
pango_module_register
pango_script_for_unichar

gdi32

CreateDCA
CreateFontIndirectA
CreateFontIndirectW
CreateSolidBrush
DeleteObject
EnumFontFamiliesExW
ExtTextOutW
GetDeviceCaps
GetFontData
GetFontUnicodeRanges
GetGlyphIndicesW
GetGlyphOutlineA
GetGraphicsMode
GetTextMetricsA
GetWorldTransform
Polyline
Rectangle
SelectObject
SetGraphicsMode
SetWorldTransform

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
InitializeCriticalSection
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

_amsg_exit
_initterm
_iob
_unlock
_lock
abort
calloc
free
fwrite
getenv
realloc
strlen
strncmp
vfprintf
wcscmp
wcscpy
wcslen

user32

SystemParametersInfoA

Exports

Exports

_pango_win32_font_get_type
_pango_win32_font_map_get_type
_pango_win32_fontmap_cache_remove
_pango_win32_make_matching_logfontw
pango_win32_font_cache_free
pango_win32_font_cache_load
pango_win32_font_cache_loadw
pango_win32_font_cache_new
pango_win32_font_cache_unload
pango_win32_font_description_from_logfont
pango_win32_font_description_from_logfontw
pango_win32_font_done_font
pango_win32_font_get_glyph_index
pango_win32_font_get_metrics_factor
pango_win32_font_logfont
pango_win32_font_map_for_display
pango_win32_font_map_get_font_cache
pango_win32_font_select_font
pango_win32_get_context
pango_win32_get_dc
pango_win32_get_debug_flag
pango_win32_get_unknown_glyph
pango_win32_render
pango_win32_render_layout
pango_win32_render_layout_line
pango_win32_render_transformed
pango_win32_shutdown_display

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9d5d5a3095acefae4bf6e298d2a6cd9d

Headers

DLL Characteristics

File Characteristics

Imports

libglib-2.0-0

libgobject-2.0-0

libpango-1.0-0

gdi32

kernel32

msvcrt

user32

Exports

Exports

Sections

.text Size: 25KB - Virtual size: 24KB

.data Size: 512B - Virtual size: 84B

.rdata Size: 3KB - Virtual size: 3KB

.bss Size: - Virtual size: 1KB

.edata Size: 1KB - Virtual size: 1KB

.idata Size: 6KB - Virtual size: 5KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 1024B - Virtual size: 920B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 25KB - Virtual size: 24KB

.data
Size: 512B - Virtual size: 84B

.rdata
Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 1KB

.edata
Size: 1KB - Virtual size: 1KB

.idata
Size: 6KB - Virtual size: 5KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 1024B - Virtual size: 920B

.reloc
Size: 2KB - Virtual size: 1KB