libtiff-5[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

libtiff-5.dll
Size

411KB
MD5

10e7f5fed34b24a046dbfa598731306d
SHA1

cb90e5799be5d50f14cd31980d620f4e37b4ca4c
SHA256

307641dd461b62ce1babc91ee41f41bd77f65a6528cc1cf71f3c9c3f02b00d1b
SHA512

e7dee412d718cc65e9672f7158b885184a1783624248f779b3bf5023a7c807482a8795e553c53f79eca06534c7437eb5398667d6e4d9a0aaa40d0177c425833e
SSDEEP

6144:VFHkVqhF0EQH5i2JFxL6UBYgadAD7ckPdosKYkfQqBj4:VhF055/JzIHaPOT0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
libtiff-5.dll

Files

libtiff-5.dll
.dll windows:4 windows x86 arch:x86

2dc874c9801005fad1962aa8e1d32e73

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libjpeg-62

jpeg_CreateCompress
jpeg_CreateDecompress
jpeg_abort
jpeg_destroy
jpeg_finish_compress
jpeg_finish_decompress
jpeg_read_header
jpeg_read_raw_data
jpeg_read_scanlines
jpeg_resync_to_restart
jpeg_set_colorspace
jpeg_set_defaults
jpeg_set_quality
jpeg_start_compress
jpeg_start_decompress
jpeg_std_error
jpeg_suppress_tables
jpeg_write_raw_data
jpeg_write_scanlines
jpeg_write_tables

zlib1

deflate
deflateEnd
deflateInit_
deflateParams
deflateReset
inflate
inflateEnd
inflateInit_
inflateReset
inflateSync

kernel32

CloseHandle
CreateFileA
CreateFileMappingA
CreateFileW
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileSize
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
MapViewOfFile
QueryPerformanceCounter
ReadFile
SetFilePointer
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteFile

msvcrt

__dllonexit
__setusermatherr
_amsg_exit
_errno
_exit
_initterm
_iob
_lock
_onexit
_setjmp3
_snwprintf
bsearch
calloc
fprintf
fputc
fputs
free
fwprintf
fwrite
isprint
malloc
memcmp
memcpy
memmove
memset
qsort
raise
rand
realloc
sprintf
strchr
strcmp
strcpy
strlen
strncmp
_unlock
_vsnprintf
abort
vfprintf
wcscpy
longjmp

user32

MessageBoxW

Exports

Exports

LogL10fromY
LogL10toY
LogL16fromY
LogL16toY
LogLuv24fromXYZ
LogLuv24toXYZ
LogLuv32fromXYZ
LogLuv32toXYZ
TIFFAccessTagMethods
TIFFCIELabToRGBInit
TIFFCIELabToXYZ
TIFFCheckTile
TIFFCheckpointDirectory
TIFFCleanup
TIFFClientOpen
TIFFClientdata
TIFFClose
TIFFComputeStrip
TIFFComputeTile
TIFFCreateCustomDirectory
TIFFCreateDirectory
TIFFCreateEXIFDirectory
TIFFCurrentDirOffset
TIFFCurrentDirectory
TIFFCurrentRow
TIFFCurrentStrip
TIFFCurrentTile
TIFFDataWidth
TIFFDefaultDirectory
TIFFDefaultStripSize
TIFFDefaultTileSize
TIFFError
TIFFErrorExt
TIFFFaxBlackCodes
TIFFFaxBlackTable
TIFFFaxMainTable
TIFFFaxWhiteCodes
TIFFFaxWhiteTable
TIFFFdOpen
TIFFFieldDataType
TIFFFieldName
TIFFFieldPassCount
TIFFFieldReadCount
TIFFFieldTag
TIFFFieldWithName
TIFFFieldWithTag
TIFFFieldWriteCount
TIFFFileName
TIFFFileno
TIFFFillStrip
TIFFFillTile
TIFFFindCODEC
TIFFFindField
TIFFFlush
TIFFFlushData
TIFFFlushData1
TIFFFreeDirectory
TIFFGetBitRevTable
TIFFGetClientInfo
TIFFGetCloseProc
TIFFGetConfiguredCODECs
TIFFGetField
TIFFGetFieldDefaulted
TIFFGetMapFileProc
TIFFGetMode
TIFFGetReadProc
TIFFGetSeekProc
TIFFGetSizeProc
TIFFGetTagListCount
TIFFGetTagListEntry
TIFFGetUnmapFileProc
TIFFGetVersion
TIFFGetWriteProc
TIFFInitCCITTFax3
TIFFInitCCITTFax4
TIFFInitCCITTRLE
TIFFInitCCITTRLEW
TIFFInitDumpMode
TIFFInitJPEG
TIFFInitLZW
TIFFInitNeXT
TIFFInitOJPEG
TIFFInitPackBits
TIFFInitPixarLog
TIFFInitSGILog
TIFFInitThunderScan
TIFFInitZIP
TIFFIsBigEndian
TIFFIsByteSwapped
TIFFIsCODECConfigured
TIFFIsMSB2LSB
TIFFIsTiled
TIFFIsUpSampled
TIFFLastDirectory
TIFFMergeFieldInfo
TIFFNumberOfDirectories
TIFFNumberOfStrips
TIFFNumberOfTiles
TIFFOpen
TIFFOpenW
TIFFPredictorCleanup
TIFFPredictorInit
TIFFPrintDirectory
TIFFRGBAImageBegin
TIFFRGBAImageEnd
TIFFRGBAImageGet
TIFFRGBAImageOK
TIFFRasterScanlineSize
TIFFRasterScanlineSize64
TIFFRawStripSize
TIFFRawStripSize64
TIFFReadBufferSetup
TIFFReadCustomDirectory
TIFFReadDirectory
TIFFReadEXIFDirectory
TIFFReadEncodedStrip
TIFFReadEncodedTile
TIFFReadRGBAImage
TIFFReadRGBAImageOriented
TIFFReadRGBAStrip
TIFFReadRGBATile
TIFFReadRawStrip
TIFFReadRawTile
TIFFReadScanline
TIFFReadTile
TIFFRegisterCODEC
TIFFReverseBits
TIFFRewriteDirectory
TIFFScanlineSize
TIFFScanlineSize64
TIFFSetClientInfo
TIFFSetClientdata
TIFFSetCompressionScheme
TIFFSetDirectory
TIFFSetErrorHandler
TIFFSetErrorHandlerExt
TIFFSetField
TIFFSetFileName
TIFFSetFileno
TIFFSetMode
TIFFSetSubDirectory
TIFFSetTagExtender
TIFFSetWarningHandler
TIFFSetWarningHandlerExt
TIFFSetWriteOffset
TIFFSetupStrips
TIFFStripSize
TIFFStripSize64
TIFFSwabArrayOfDouble
TIFFSwabArrayOfFloat
TIFFSwabArrayOfLong
TIFFSwabArrayOfLong8
TIFFSwabArrayOfShort
TIFFSwabArrayOfTriples
TIFFSwabDouble
TIFFSwabFloat
TIFFSwabLong
TIFFSwabLong8
TIFFSwabShort
TIFFTileRowSize
TIFFTileRowSize64
TIFFTileSize
TIFFTileSize64
TIFFUnRegisterCODEC
TIFFUnlinkDirectory
TIFFUnsetField
TIFFVGetField
TIFFVGetFieldDefaulted
TIFFVSetField
TIFFVStripSize
TIFFVStripSize64
TIFFVTileSize
TIFFVTileSize64
TIFFWarning
TIFFWarningExt
TIFFWriteBufferSetup
TIFFWriteCheck
TIFFWriteCustomDirectory
TIFFWriteDirectory
TIFFWriteEncodedStrip
TIFFWriteEncodedTile
TIFFWriteRawStrip
TIFFWriteRawTile
TIFFWriteScanline
TIFFWriteTile
TIFFXYZToRGB
TIFFYCbCrToRGBInit
TIFFYCbCrtoRGB
XYZtoRGB24
_TIFFBuiltinCODECS
_TIFFCheckMalloc
_TIFFCheckRealloc
_TIFFCreateAnonField
_TIFFDataSize
_TIFFDefaultStripSize
_TIFFDefaultTileSize
_TIFFFax3fillruns
_TIFFFillStriles
_TIFFFindFieldByName
_TIFFFindOrRegisterField
_TIFFGetExifFields
_TIFFGetFields
_TIFFMergeFields
_TIFFMultiply32
_TIFFMultiply64
_TIFFNoFixupTags
_TIFFNoPostDecode
_TIFFNoPreCode
_TIFFNoRowDecode
_TIFFNoRowEncode
_TIFFNoSeek
_TIFFNoStripDecode
_TIFFNoStripEncode
_TIFFNoTileDecode
_TIFFNoTileEncode
_TIFFPrintFieldInfo
_TIFFRewriteField
_TIFFSetDefaultCompressionState
_TIFFSetupFields
_TIFFSwab16BitData
_TIFFSwab24BitData
_TIFFSwab32BitData
_TIFFSwab64BitData
_TIFFUInt64ToDouble
_TIFFUInt64ToFloat
_TIFFerrorHandler
_TIFFerrorHandlerExt
_TIFFfree
_TIFFgetMode
_TIFFmalloc
_TIFFmemcmp
_TIFFmemcpy
_TIFFmemset
_TIFFprintAscii
_TIFFprintAsciiTag
_TIFFrealloc
_TIFFsetByteArray
_TIFFsetDoubleArray
_TIFFsetFloatArray
_TIFFsetLong8Array
_TIFFsetLongArray
_TIFFsetNString
_TIFFsetShortArray
_TIFFsetString
_TIFFwarningHandler
_TIFFwarningHandlerExt
libport_dummy_function
uv_decode
uv_encode

Sections

.text
Size: 242KB - Virtual size: 242KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2dc874c9801005fad1962aa8e1d32e73

Headers

DLL Characteristics

File Characteristics

Imports

libjpeg-62

zlib1

kernel32

msvcrt

user32

Exports

Exports

Sections

.text Size: 242KB - Virtual size: 242KB

.data Size: 8KB - Virtual size: 7KB

.rdata Size: 138KB - Virtual size: 138KB

.bss Size: - Virtual size: 1KB

.edata Size: 7KB - Virtual size: 6KB

.idata Size: 3KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 32B

.reloc Size: 9KB - Virtual size: 8KB

/4 Size: 512B - Virtual size: 24B

.text
Size: 242KB - Virtual size: 242KB

.data
Size: 8KB - Virtual size: 7KB

.rdata
Size: 138KB - Virtual size: 138KB

.bss
Size: - Virtual size: 1KB

.edata
Size: 7KB - Virtual size: 6KB

.idata
Size: 3KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 32B

.reloc
Size: 9KB - Virtual size: 8KB

/4
Size: 512B - Virtual size: 24B