CORE_RL_LIBRSVG_[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

CORE_RL_LIBRSVG_.dll
Size

526KB
MD5

af167d4d2baa124e4ffda71e60d28b62
SHA1

f026a84d58817db5af1e8247299054de10f5a62c
SHA256

2c2ea75bdc9960e0be76f81bd3f0107371ca08cc01dec5dfe7e3d5a787069efe
SHA512

66dcdd421163b660627dc814822d9247239901247856395f217d8822c32a3943a919d86cf1f02cabb85190b2f6e39ab3025517dd94f3971c4c4782a0c0388d8b
SSDEEP

12288:LfRINxPfJPJNpPBVYPF2z2LpqK6u39RWPoZhp2mt:LZINxfT0PF2zUp9p9RWgZhp9t

Score

1^/10

Malware Config

Signatures

Files

CORE_RL_LIBRSVG_.dll
.dll windows:5 windows x64 arch:x64

e3fa2116fb66bf55ca0f8f6aa9673736

Code Sign

0d:65:50:75:ec:c1:01:71:b5:42:cd:05:db:d2:c7:be
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

26/04/2021, 00:00

Not After

01/05/2024, 23:59

Subject

CN=LLC 1C-Soft,OU=LLC 1C-Soft,O=LLC 1C-Soft,L=Moscow,C=RU

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

21:e9:ae:fb:ab:ba:62:76:78:66:63:7c:f3:73:cb:bf:10:56:3c:10:40:84:12:da:09:d9:8f:ab:1d:7d:bd:b4
Signer

Actual PE Digest

21:e9:ae:fb:ab:ba:62:76:78:66:63:7c:f3:73:cb:bf:10:56:3c:10:40:84:12:da:09:d9:8f:ab:1d:7d:bd:b4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

core_rl_cairo_

cairo_create
cairo_destroy
cairo_save
cairo_restore
cairo_surface_destroy
cairo_surface_get_type
cairo_image_surface_create
cairo_matrix_invert
cairo_matrix_multiply
cairo_set_fill_rule
cairo_rotate
cairo_set_matrix
cairo_move_to
cairo_clip
cairo_append_path
cairo_matrix_init
cairo_set_operator
cairo_set_source
cairo_set_source_rgba
cairo_set_source_surface
cairo_set_tolerance
cairo_set_antialias
cairo_set_line_width
cairo_set_line_cap
cairo_set_line_join
cairo_set_dash
cairo_set_miter_limit
cairo_scale
cairo_identity_matrix
cairo_new_path
cairo_rectangle
cairo_paint
cairo_paint_with_alpha
cairo_mask_surface
cairo_stroke
cairo_fill
cairo_fill_preserve
cairo_stroke_extents
cairo_fill_extents
cairo_get_tolerance
cairo_get_target
cairo_surface_create_similar
cairo_surface_status
cairo_surface_get_content
cairo_surface_mark_dirty
cairo_image_surface_get_data
cairo_image_surface_get_width
cairo_image_surface_get_height
cairo_image_surface_get_stride
cairo_pattern_create_for_surface
cairo_pattern_create_linear
cairo_pattern_create_radial
cairo_pattern_destroy
cairo_pattern_add_color_stop_rgba
cairo_pattern_set_matrix
cairo_pattern_set_extend
cairo_pattern_set_filter
cairo_matrix_init_identity
cairo_matrix_init_translate
cairo_matrix_init_scale
cairo_get_matrix
cairo_matrix_transform_point
cairo_translate
cairo_surface_reference
cairo_surface_flush
cairo_image_surface_get_format
cairo_surface_set_mime_data
cairo_matrix_init_rotate

core_rl_glib_

g_enum_register_static
g_flags_register_static
g_set_error
g_free
g_object_unref
g_file_get_uri
g_io_error_quark
g_quark_from_string
g_propagate_error
g_clear_error
g_convert
g_filename_from_uri
g_filename_to_uri
g_build_filename
g_path_is_absolute
g_get_current_dir
g_malloc_n
g_malloc0_n
g_hash_table_insert
g_hash_table_lookup
g_str_equal
g_slist_free
g_slist_prepend
g_slist_remove
g_slist_delete_link
g_slist_find
g_utf8_to_utf16
g_utf16_to_utf8
g_utf8_validate
g_string_new
g_string_new_len
g_string_free
g_string_append
g_string_append_len
g_string_append_printf
g_return_if_fail_warning
g_warn_message
g_str_has_prefix
g_ascii_strcasecmp
g_strdup
g_memdup
g_strfreev
g_assertion_message_expr
g_uri_parse_scheme
g_type_check_instance_cast
g_type_check_instance_is_a
g_object_ref
g_input_stream_get_type
g_buffered_input_stream_get_type
g_buffered_input_stream_new
g_buffered_input_stream_peek_buffer
g_buffered_input_stream_fill
g_cancellable_get_type
g_converter_get_type
g_converter_input_stream_new
g_file_get_type
g_file_new_for_uri
g_file_get_path
g_file_get_parent
g_file_resolve_relative_path
g_file_has_uri_scheme
g_file_read
g_memory_input_stream_get_type
g_memory_input_stream_new
g_memory_input_stream_add_data
g_zlib_decompressor_new
g_list_prepend
g_list_delete_link
g_getenv
g_ascii_strncasecmp
g_win32_getlocale
g_ptr_array_new
g_ptr_array_free
g_ptr_array_add
g_ascii_strtod
g_strdup_printf
g_ascii_table
g_hash_table_new_full
g_hash_table_destroy
g_str_hash
g_strrstr
g_strsplit
g_list_last
g_string_assign
g_intern_static_string
g_once_init_enter
g_once_init_leave
g_log
g_type_name
g_type_class_peek_parent
g_type_register_static_simple
g_type_class_add_private
g_type_instance_get_private
g_type_class_adjust_private_offset
g_type_check_class_cast
g_object_class_install_property
g_object_new
g_value_set_flags
g_value_get_flags
g_param_spec_int
g_param_spec_flags
g_param_spec_double
g_param_spec_string
g_value_set_int
g_value_set_double
g_value_get_double
g_value_set_string
g_value_get_string
g_error_matches
g_set_error_literal
g_base64_decode_inplace
g_file_get_contents
g_strndup
g_content_type_get_mime_type
g_content_type_guess
g_file_load_contents
g_file_info_get_content_type
g_file_input_stream_query_info
g_memory_input_stream_new_from_data
g_array_sized_new
g_array_free
g_array_append_vals
g_hash_table_new
g_hash_table_foreach
g_hash_table_size
g_hash_table_iter_init
g_hash_table_iter_next
g_hash_table_ref
g_hash_table_unref
g_string_insert_c
g_slice_alloc
g_slice_free1
g_strchug
g_strchomp
g_strjoinv
g_strv_length
g_string_sized_new
g_string_erase
g_input_stream_read
g_input_stream_close
g_filename_display_name
g_file_error_quark
g_file_error_from_errno
g_dgettext
g_get_current_time
g_strerror
g_resources_open_stream
g_task_get_type
g_task_new
g_task_set_source_tag
g_task_set_name
g_task_get_source_tag
g_task_get_name
g_task_run_in_thread
g_task_return_pointer
g_task_return_error
g_task_propagate_pointer
g_fopen
g_bytes_new
g_bytes_new_take
g_bytes_new_from_bytes
g_bytes_get_data
g_bytes_get_size
g_bytes_ref
g_bytes_unref
g_malloc
g_slist_free_full
g_slist_append
g_error_free
g_mutex_lock
g_mutex_unlock
g_file_open_tmp
g_realloc
g_try_malloc
g_try_realloc
g_slice_alloc0
g_slice_copy
g_strdupv
g_signal_connect_data
g_boxed_type_register_static
g_object_set_data_full
g_output_stream_get_type
g_output_stream_write
g_resources_lookup_data
g_resources_get_info
g_task_set_task_data
g_task_get_task_data
g_task_is_valid
g_task_set_return_on_cancel
g_task_return_boolean
g_task_return_new_error
g_task_propagate_boolean
g_task_had_error
g_unlink
g_slist_length
g_slist_nth_data
g_cclosure_marshal_VOID__VOID
g_signal_new
g_signal_emit
g_value_peek_pointer
g_printerr
g_quark_from_static_string
g_object_get_qdata
g_object_set_qdata_full
g_list_free
g_list_append
g_list_length
g_object_notify
g_param_spec_boolean
g_value_set_boolean
g_value_get_boolean
g_ascii_strtoll
g_ptr_array_new_full
g_ptr_array_unref
g_bytes_unref_to_data
g_realloc_n
g_try_malloc_n
g_direct_hash
g_direct_equal
g_variant_new_from_bytes
g_variant_new
g_type_add_interface_static
g_bytes_get_type
g_value_set_boxed
g_value_get_boxed
g_value_dup_boxed
g_object_notify_by_pspec
g_object_steal_qdata
g_object_dup_qdata
g_value_set_enum
g_value_get_enum
g_param_spec_enum
g_param_spec_boxed
g_param_spec_pointer
g_value_get_int
g_value_set_pointer
g_value_get_pointer
g_icon_get_type
g_loadable_icon_get_type
g_memory_input_stream_new_from_bytes
g_dngettext
g_ascii_strup
g_try_malloc0_n
g_malloc0
g_list_find
g_list_first
g_print
g_byte_array_new
g_byte_array_free
g_byte_array_append
g_try_malloc0
g_snprintf
g_list_free_full
g_list_insert_sorted
g_slist_foreach
g_strcmp0
g_base64_encode
g_base64_decode
g_strconcat
g_ascii_xdigit_value
g_ascii_dtostr
g_string_append_unichar

core_rl_jpeg_

jpeg_CreateDecompress
jpeg_destroy_compress
jpeg_destroy_decompress
jpeg_stdio_dest
jpeg_set_defaults
jpeg_set_quality
jpeg_start_compress
jpeg_write_scanlines
jpeg_finish_compress
jpeg_write_marker
jpeg_read_header
jpeg_start_decompress
jpeg_read_scanlines
jpeg_finish_decompress
jpeg_start_output
jpeg_finish_output
jpeg_input_complete
jpeg_calc_output_dimensions
jpeg_save_markers
jpeg_resync_to_restart
jpeg_std_error
jpeg_CreateCompress

core_rl_libxml_

xmlCtxtGetLastError
xmlNewEntity
xmlParseDocument
xmlFreeParserCtxt
xmlCreatePushParserCtxt
xmlParseChunk
xmlCtxtUseOptions
xmlBuildRelativeURI
xmlFree
xmlSAX2InitDefaultSAXHandler
xmlFreeNode
xmlInitParser
xmlCreateIOParserCtxt
xmlFreeDoc
xmlCharStrndup

core_rl_pango_

pango_layout_get_context
pango_cairo_update_layout
pango_cairo_layout_path
pango_font_map_create_context
pango_layout_get_extents
pango_cairo_font_map_get_default
pango_cairo_update_context
pango_cairo_context_set_resolution
pango_cairo_show_layout
pango_language_from_string
pango_font_description_copy
pango_font_description_free
pango_font_description_set_family_static
pango_font_description_set_style
pango_font_description_set_variant
pango_font_description_set_weight
pango_font_description_set_stretch
pango_font_description_set_size
pango_attr_underline_new
pango_attr_strikethrough_new
pango_attr_letter_spacing_new
pango_attr_list_new
pango_attr_list_unref
pango_attr_list_insert
pango_context_get_font_description
pango_context_set_language
pango_context_set_base_dir
pango_context_set_base_gravity
pango_layout_new
pango_layout_set_attributes
pango_layout_set_text
pango_layout_set_font_description
pango_context_get_gravity
pango_layout_get_size
pango_layout_get_iter
pango_layout_iter_free
pango_layout_iter_get_baseline
pango_gravity_to_rotation
pango_layout_set_alignment

core_rl_png_

png_set_longjmp_fn
png_create_info_struct
png_write_info
png_read_info
png_set_expand
png_set_gray_to_rgb
png_set_packing
png_set_shift
png_set_interlace_handling
png_set_strip_16
png_read_update_info
png_read_image
png_write_rows
png_write_end
png_read_end
png_destroy_read_struct
png_destroy_write_struct
png_set_compression_level
png_init_io
png_get_error_ptr
png_set_write_fn
png_get_io_ptr
png_set_progressive_read_fn
png_get_progressive_ptr
png_process_data
png_progressive_combine_row
png_error
png_get_valid
png_get_channels
png_get_bit_depth
png_get_IHDR
png_set_IHDR
png_get_pHYs
png_set_pHYs
png_set_sBIT
png_create_write_struct
png_set_iCCP
png_get_text
png_set_text
png_create_read_struct_2
png_get_iCCP

core_rl_tiff_

TIFFGetField
TIFFReadDirectory
TIFFSetField
TIFFWriteScanline
TIFFReadRGBAImageOriented
TIFFClose
TIFFClientOpen
TIFFSetErrorHandler
TIFFSetWarningHandler
TIFFIsCODECConfigured
TIFFFdOpen

vcruntime140

strchr
__std_type_info_destroy_list
__C_specific_handler
__intrinsic_setjmp
strrchr
strstr
longjmp
memmove
memcpy
memset

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-filesystem-l1-1-0

_wfullpath

api-ms-win-crt-string-l1-1-0

strncat
strncmp
strcmp
strncpy

api-ms-win-crt-math-l1-1-0

sin
round
fmod
exp
cos
_dclass
pow
tan
ceilf
floor
ceil
lrint
acos
sqrt
atan2
_fdopen

api-ms-win-crt-utility-l1-1-0

bsearch

api-ms-win-crt-locale-l1-1-0

setlocale

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_seh_filter_dll
_initterm_e
_initterm
_errno

api-ms-win-crt-convert-l1-1-0

strtol
atol
atoi
atof

api-ms-win-crt-stdio-l1-1-0

fclose
_fileno
feof
__stdio_common_vfscanf
getc
fgets
fflush
_lseek
ferror
rewind
fwrite
fseek
fread
__stdio_common_vsscanf

kernel32

IsProcessorFeaturePresent
GetCurrentProcess
IsDebuggerPresent
InitializeSListHead
SetUnhandledExceptionFilter
UnhandledExceptionFilter
DisableThreadLibraryCalls
RtlVirtualUnwind
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
RtlCaptureContext
RtlLookupFunctionEntry
TerminateProcess

Exports

Exports

gdk_colorspace_get_type
gdk_interp_type_get_type
gdk_pixbuf_add_alpha
gdk_pixbuf_alpha_mode_get_type
gdk_pixbuf_animation_get_height
gdk_pixbuf_animation_get_iter
gdk_pixbuf_animation_get_static_image
gdk_pixbuf_animation_get_type
gdk_pixbuf_animation_get_width
gdk_pixbuf_animation_is_static_image
gdk_pixbuf_animation_iter_advance
gdk_pixbuf_animation_iter_get_delay_time
gdk_pixbuf_animation_iter_get_pixbuf
gdk_pixbuf_animation_iter_get_type
gdk_pixbuf_animation_iter_on_currently_loading_frame
gdk_pixbuf_animation_new_from_file
gdk_pixbuf_animation_new_from_file_utf8
gdk_pixbuf_animation_new_from_resource
gdk_pixbuf_animation_new_from_stream
gdk_pixbuf_animation_new_from_stream_async
gdk_pixbuf_animation_new_from_stream_finish
gdk_pixbuf_animation_ref
gdk_pixbuf_animation_unref
gdk_pixbuf_apply_embedded_orientation
gdk_pixbuf_calculate_rowstride
gdk_pixbuf_composite
gdk_pixbuf_composite_color
gdk_pixbuf_composite_color_simple
gdk_pixbuf_copy
gdk_pixbuf_copy_area
gdk_pixbuf_copy_options
gdk_pixbuf_error_get_type
gdk_pixbuf_error_quark
gdk_pixbuf_fill
gdk_pixbuf_flip
gdk_pixbuf_format_copy
gdk_pixbuf_format_free
gdk_pixbuf_format_get_description
gdk_pixbuf_format_get_extensions
gdk_pixbuf_format_get_license
gdk_pixbuf_format_get_mime_types
gdk_pixbuf_format_get_name
gdk_pixbuf_format_get_type
gdk_pixbuf_format_is_disabled
gdk_pixbuf_format_is_save_option_supported
gdk_pixbuf_format_is_scalable
gdk_pixbuf_format_is_writable
gdk_pixbuf_format_set_disabled
gdk_pixbuf_from_pixdata
gdk_pixbuf_get_bits_per_sample
gdk_pixbuf_get_byte_length
gdk_pixbuf_get_colorspace
gdk_pixbuf_get_file_info
gdk_pixbuf_get_file_info_async
gdk_pixbuf_get_file_info_finish
gdk_pixbuf_get_formats
gdk_pixbuf_get_has_alpha
gdk_pixbuf_get_height
gdk_pixbuf_get_n_channels
gdk_pixbuf_get_option
gdk_pixbuf_get_options
gdk_pixbuf_get_pixels
gdk_pixbuf_get_pixels_with_length
gdk_pixbuf_get_rowstride
gdk_pixbuf_get_type
gdk_pixbuf_get_width
gdk_pixbuf_loader_close
gdk_pixbuf_loader_get_animation
gdk_pixbuf_loader_get_format
gdk_pixbuf_loader_get_pixbuf
gdk_pixbuf_loader_get_type
gdk_pixbuf_loader_new
gdk_pixbuf_loader_new_with_mime_type
gdk_pixbuf_loader_new_with_type
gdk_pixbuf_loader_set_size
gdk_pixbuf_loader_write
gdk_pixbuf_loader_write_bytes
gdk_pixbuf_new
gdk_pixbuf_new_from_bytes
gdk_pixbuf_new_from_data
gdk_pixbuf_new_from_file
gdk_pixbuf_new_from_file_at_scale
gdk_pixbuf_new_from_file_at_scale_utf8
gdk_pixbuf_new_from_file_at_size
gdk_pixbuf_new_from_file_at_size_utf8
gdk_pixbuf_new_from_file_utf8
gdk_pixbuf_new_from_inline
gdk_pixbuf_new_from_resource
gdk_pixbuf_new_from_resource_at_scale
gdk_pixbuf_new_from_stream
gdk_pixbuf_new_from_stream_async
gdk_pixbuf_new_from_stream_at_scale
gdk_pixbuf_new_from_stream_at_scale_async
gdk_pixbuf_new_from_stream_finish
gdk_pixbuf_new_from_xpm_data
gdk_pixbuf_new_subpixbuf
gdk_pixbuf_non_anim_get_type
gdk_pixbuf_non_anim_new
gdk_pixbuf_read_pixel_bytes
gdk_pixbuf_read_pixels
gdk_pixbuf_ref
gdk_pixbuf_remove_option
gdk_pixbuf_rotate_simple
gdk_pixbuf_rotation_get_type
gdk_pixbuf_saturate_and_pixelate
gdk_pixbuf_save_to_buffer
gdk_pixbuf_save_to_bufferv
gdk_pixbuf_save_to_callback
gdk_pixbuf_save_to_callbackv
gdk_pixbuf_save_to_stream
gdk_pixbuf_save_to_stream_async
gdk_pixbuf_save_to_stream_finish
gdk_pixbuf_save_to_streamv
gdk_pixbuf_save_to_streamv_async
gdk_pixbuf_save_utf8
gdk_pixbuf_savev
gdk_pixbuf_savev_utf8
gdk_pixbuf_scale
gdk_pixbuf_scale_simple
gdk_pixbuf_set_option
gdk_pixbuf_simple_anim_add_frame
gdk_pixbuf_simple_anim_get_loop
gdk_pixbuf_simple_anim_get_type
gdk_pixbuf_simple_anim_iter_get_type
gdk_pixbuf_simple_anim_new
gdk_pixbuf_simple_anim_set_loop
gdk_pixbuf_unref
gdk_pixdata_deserialize
gdk_pixdata_from_pixbuf
gdk_pixdata_serialize
gdk_pixdata_to_csource
librsvg_major_version
librsvg_micro_version
librsvg_minor_version
librsvg_version
rsvg_handle_close
rsvg_handle_get_base_uri
rsvg_handle_get_dimensions
rsvg_handle_new
rsvg_handle_new_with_flags
rsvg_handle_render_cairo
rsvg_handle_set_base_uri
rsvg_handle_set_dpi_x_y
rsvg_handle_write

Sections

.text
Size: 355KB - Virtual size: 355KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e3fa2116fb66bf55ca0f8f6aa9673736

Code Sign

0d:65:50:75:ec:c1:01:71:b5:42:cd:05:db:d2:c7:beCertificate

Extended Key Usages

Key Usages

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39Certificate

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

21:e9:ae:fb:ab:ba:62:76:78:66:63:7c:f3:73:cb:bf:10:56:3c:10:40:84:12:da:09:d9:8f:ab:1d:7d:bd:b4Signer

Headers

DLL Characteristics

File Characteristics

Imports

core_rl_cairo_

core_rl_glib_

core_rl_jpeg_

core_rl_libxml_

core_rl_pango_

core_rl_png_

core_rl_tiff_

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 355KB - Virtual size: 355KB

.rdata Size: 126KB - Virtual size: 126KB

.data Size: 1KB - Virtual size: 4KB

.pdata Size: 28KB - Virtual size: 28KB

.gfids Size: 512B - Virtual size: 16B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 796B

0d:65:50:75:ec:c1:01:71:b5:42:cd:05:db:d2:c7:be
Certificate

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

21:e9:ae:fb:ab:ba:62:76:78:66:63:7c:f3:73:cb:bf:10:56:3c:10:40:84:12:da:09:d9:8f:ab:1d:7d:bd:b4
Signer

.text
Size: 355KB - Virtual size: 355KB

.rdata
Size: 126KB - Virtual size: 126KB

.data
Size: 1KB - Virtual size: 4KB

.pdata
Size: 28KB - Virtual size: 28KB

.gfids
Size: 512B - Virtual size: 16B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 796B