G:\php-sdk\lib_builds\vc9\x86\repo\enchant_work\bin\Release\libenchant.pdb
Static task
static1
Behavioral task
behavioral1
Sample
libenchant.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
libenchant.dll
Resource
win10v2004-20240508-en
General
-
Target
libenchant.dll
-
Size
42KB
-
MD5
04d4f6f4e2b11b342ed0f8c3e8e2bf8d
-
SHA1
e338b75463a7bad4eaa8ed66432bd94151657e18
-
SHA256
898aa7df92d5dd030b0706217282fbae15b0f45cbf7516e2a0d88453131e59f4
-
SHA512
17e6c372889ecaae657b6b3bd5fee31417057c9740c239ace57d8b603f9a36a67e28da9132b622ba7b0dd7cdfc579c1d5f4140be0cdb2135d921d553fc2cf25c
-
SSDEEP
768:/1hCoQd0qfDh796JmWa4oZzCd/+hb6xobTE/b4:/1UoQd0qn34oZ+dy66b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource libenchant.dll
Files
-
libenchant.dll.dll windows:5 windows x86 arch:x86
06f1bf471d2e0547ebe2e7638c787b87
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
glib-2
g_strconcat
g_hash_table_foreach
g_utf8_strup
g_utf8_to_ucs4_fast
g_utf8_get_char
g_unichar_to_utf8
g_unichar_type
g_list_free
g_utf8_strlen
g_stat
g_unichar_totitle
g_utf8_strdown
g_realloc
g_utf8_skip
g_file_get_contents_utf8
g_malloc
g_slist_find_custom
g_slist_append
g_dir_close
g_strfreev
g_hash_table_remove
g_ascii_table
g_str_hash
g_slist_foreach
g_slist_prepend
g_hash_table_size
g_free
g_utf8_to_utf16
g_slist_free
g_strdup_printf
g_dir_open_utf8
g_build_filename
g_utf8_collate
g_strchomp
g_remove
g_utf8_normalize
g_hash_table_destroy
g_win32_getlocale
g_mkdir_with_parents
g_str_equal
g_hash_table_new_full
g_slist_find
g_get_user_config_dir
g_strndup
g_hash_table_lookup
g_utf8_validate
g_dir_read_name_utf8
g_strsplit
g_path_get_dirname
g_log
g_malloc0
g_strchug
g_file_test_utf8
g_ascii_toupper
g_get_home_dir_utf8
g_hash_table_insert
g_getenv_utf8
g_utf16_to_utf8
g_ascii_tolower
g_strdup
g_slist_reverse
g_hash_table_get_keys
g_ascii_strcasecmp
gmodule-2
g_module_error
g_module_close
g_module_supported
g_module_open_utf8
g_module_symbol
g_module_name_utf8
kernel32
Sleep
InterlockedExchange
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
InterlockedCompareExchange
IsDebuggerPresent
SetUnhandledExceptionFilter
GetModuleFileNameW
UnlockFileEx
LockFileEx
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
msvcr90
free
_malloc_crt
_encode_pointer
_get_osfhandle
fwrite
_encoded_null
strncmp
feof
fclose
setlocale
strcmp
fgets
_errno
_wfopen
strchr
strlen
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
strstr
_fileno
Exports
Exports
enchant_broker_describe
enchant_broker_dict_exists
enchant_broker_free
enchant_broker_free_dict
enchant_broker_get_error
enchant_broker_get_param
enchant_broker_init
enchant_broker_list_dicts
enchant_broker_request_dict
enchant_broker_request_pwl_dict
enchant_broker_set_ordering
enchant_broker_set_param
enchant_dict_add
enchant_dict_add_to_personal
enchant_dict_add_to_pwl
enchant_dict_add_to_session
enchant_dict_check
enchant_dict_describe
enchant_dict_free_string_list
enchant_dict_free_suggestions
enchant_dict_get_error
enchant_dict_is_added
enchant_dict_is_in_session
enchant_dict_is_removed
enchant_dict_remove
enchant_dict_remove_from_session
enchant_dict_set_error
enchant_dict_store_replacement
enchant_dict_suggest
enchant_fopen
enchant_get_dirs_from_param
enchant_get_prefix_dir
enchant_get_registry_value
enchant_get_user_config_dirs
enchant_get_user_language
enchant_provider_set_error
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ