libOtherImage[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

libOtherImage.dll
Size

191KB
MD5

d043d5730001c289557a53728187706e
SHA1

e5db692c4186fce162dc4d8dba1833aaca81afff
SHA256

91c4d101b56a2352c60d4064ea03212e307cbc9ac5943df26203ffe36fb74825
SHA512

95a880a467c99927b591990e853e883720d6cfa7fcec3027b512147861c033ec08cc852ac8b41cbe005074983a34b8cdd79340db3781e7be055dfa40081315a0
SSDEEP

3072:NPo3A1XaDXb9s3zpfwfmAWiFd9SFaQrK9f9gL3a8gdSOojjxhn:1x1Xai3FouAWiFTSFNrK4Lq8goO6R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
libOtherImage.dll

Files

libOtherImage.dll
.dll windows:4 windows x86 arch:x86

eaf2cfe15993fca7e6359508e0c2c8f1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libcairo-2

cairo_create
cairo_destroy
cairo_fill
cairo_font_extents
cairo_get_matrix
cairo_get_source
cairo_image_surface_create
cairo_image_surface_create_for_data
cairo_move_to
cairo_paint
cairo_pattern_destroy
cairo_pattern_reference
cairo_pop_group_to_source
cairo_push_group
cairo_rectangle
cairo_restore
cairo_save
cairo_scale
cairo_set_matrix
cairo_set_operator
cairo_set_source
cairo_set_source_rgba
cairo_set_source_surface
cairo_show_text
cairo_status
cairo_status_to_string
cairo_stroke
cairo_surface_destroy
cairo_text_extents
cairo_translate

libgdk_pixbuf-2.0-0

gdk_pixbuf_get_bits_per_sample
gdk_pixbuf_get_colorspace
gdk_pixbuf_get_has_alpha
gdk_pixbuf_get_height
gdk_pixbuf_get_n_channels
gdk_pixbuf_get_pixels
gdk_pixbuf_get_rowstride
gdk_pixbuf_get_width
gdk_pixbuf_loader_close
gdk_pixbuf_loader_get_pixbuf
gdk_pixbuf_loader_new_with_type
gdk_pixbuf_loader_write

libgio-2.0-0

g_data_input_stream_new
g_data_input_stream_read_uint32
g_data_input_stream_set_byte_order
g_memory_input_stream_new_from_data
g_seekable_get_type
g_seekable_seek

libglib-2.0-0

g_ascii_dtostr
g_ascii_strcasecmp
g_ascii_strtod
g_ascii_strtoll
g_ascii_strtoull
g_assertion_message_expr
g_base64_decode
g_build_filename
g_checksum_free
g_checksum_get_string
g_checksum_new
g_checksum_update
g_clear_error
g_cond_free
g_cond_new
g_cond_signal
g_cond_timed_wait
g_cond_wait
g_direct_equal
g_direct_hash
g_error_free
g_error_matches
g_error_new
g_file_error_from_errno
g_file_error_quark
g_file_test_utf8
g_free
g_get_current_time
g_getenv_utf8
g_hash_table_destroy
g_hash_table_foreach
g_hash_table_get_keys
g_hash_table_insert
g_hash_table_lookup
g_hash_table_lookup_extended
g_hash_table_new_full
g_hash_table_remove
g_hash_table_remove_all
g_hash_table_replace
g_hash_table_size
g_hash_table_steal
g_hash_table_steal_all
g_hash_table_unref
g_int64_equal
g_int64_hash
g_int_equal
g_int_hash
g_key_file_free
g_key_file_get_double
g_key_file_get_groups
g_key_file_get_integer
g_key_file_get_keys
g_key_file_get_string
g_key_file_get_value
g_key_file_has_group
g_key_file_load_from_data
g_key_file_new
g_list_delete_link
g_list_free
g_list_prepend
g_list_sort
g_log
g_logv
g_malloc
g_malloc0
g_malloc0_n
g_malloc_n
g_mutex_free
g_mutex_lock
g_mutex_new
g_mutex_unlock
g_once_impl
g_path_get_dirname
g_prefix_error
g_propagate_error
g_propagate_prefixed_error
g_ptr_array_add
g_ptr_array_free
g_ptr_array_new
g_ptr_array_sort
g_quark_from_string
g_queue_delete_link
g_queue_free
g_queue_get_length
g_queue_new
g_queue_peek_head_link
g_queue_peek_tail
g_queue_pop_head
g_queue_push_head
g_queue_push_head_link
g_queue_push_tail
g_queue_sort
g_queue_unlink
g_realloc
g_return_if_fail_warning
g_set_error
g_slice_alloc
g_slice_alloc0
g_slice_free1
g_str_equal
g_str_has_prefix
g_str_has_suffix
g_str_hash
g_strchomp
g_strchug
g_strconcat
g_strdelimit
g_strdup
g_strdup_printf
g_strdup_vprintf
g_strerror
g_strfreev
g_string_append
g_string_append_printf
g_string_free
g_string_new
g_strndup
g_strrstr
g_strsplit
g_strsplit_set
g_strv_length
g_thread_create
g_thread_join
g_time_val_add
g_timer_destroy
g_timer_elapsed
g_timer_new
g_timer_start
g_try_malloc
g_try_malloc_n
g_warn_message

libgobject-2.0-0

g_object_unref
g_signal_connect_data
g_type_check_instance_cast
g_type_init

libjpeg-62

jpeg_CreateCompress
jpeg_CreateDecompress
jpeg_calc_output_dimensions
jpeg_default_colorspace
jpeg_destroy_compress
jpeg_destroy_decompress
jpeg_read_header
jpeg_read_scanlines
jpeg_resync_to_restart
jpeg_save_markers
jpeg_set_defaults
jpeg_start_decompress
jpeg_std_error

libopenjp2

opj_create_decompress@4
opj_decode@12
opj_destroy_codec@4
opj_image_destroy@4
opj_read_header@12
opj_set_default_decoder_parameters@4
opj_set_error_handler@12
opj_set_warning_handler@12
opj_setup_decoder@8
opj_stream_create@8
opj_stream_destroy@4
opj_stream_set_read_function@8
opj_stream_set_user_data@12
opj_stream_set_user_data_length@12

libpng16-16

png_create_info_struct
png_create_read_struct
png_destroy_read_struct
png_error
png_get_color_type
png_get_error_ptr
png_get_image_height
png_get_image_width
png_get_io_ptr
png_get_rowbytes
png_read_end
png_read_image
png_read_info
png_read_update_info
png_set_bgr
png_set_expand
png_set_filler
png_set_gray_to_rgb
png_set_read_fn
png_set_scale_16

libsqlite3-0

sqlite3_bind_text
sqlite3_busy_timeout
sqlite3_close
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_count
sqlite3_column_double
sqlite3_column_text
sqlite3_db_handle
sqlite3_errmsg
sqlite3_finalize
sqlite3_initialize
sqlite3_open_v2
sqlite3_prepare_v2
sqlite3_reset
sqlite3_sql
sqlite3_step

libtiff-5

TIFFClientOpen
TIFFClose
TIFFComputeTile
TIFFCurrentDirectory
TIFFFileName
TIFFGetField
TIFFGetFieldDefaulted
TIFFIsCODECConfigured
TIFFIsTiled
TIFFRGBAImageBegin
TIFFRGBAImageEnd
TIFFRGBAImageGet
TIFFRGBAImageOK
TIFFReadDirectory
TIFFReadRawTile
TIFFSetDirectory

libxml2-2

xmlDocGetRootElement
xmlFirstElementChild
xmlFree
xmlFreeDoc
xmlGetNoNsProp
xmlGetProp
xmlInitParser
xmlNodeGetContent
xmlReadMemory
xmlStrcmp
xmlXPathCastToString
xmlXPathEvalExpression
xmlXPathFreeContext
xmlXPathFreeObject
xmlXPathNewContext
xmlXPathRegisterNs

zlib1

inflate
inflateEnd
inflateInit_
zError

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
__doserrno
__pioinfo
_amsg_exit
_errno
_filelengthi64
_fileno
_initterm
_iob
_lock
_lseeki64
_onexit
_setjmp3
calloc
fclose
ferror
fflush
fgetc
fgetpos
fopen
fread
free
fsetpos
fwrite
getc
malloc
memchr
memcmp
memcpy
memset
printf
putchar
qsort
rewind
strcmp
strlen
strncmp
strstr
_unlock
_write
abort
vfprintf
longjmp

Exports

Exports

openslide_can_open
openslide_cancel_prefetch_hint
openslide_close
openslide_detect_vendor
openslide_get_associated_image_dimensions
openslide_get_associated_image_names
openslide_get_best_layer_for_downsample
openslide_get_best_level_for_downsample
openslide_get_comment
openslide_get_error
openslide_get_layer0_dimensions
openslide_get_layer_count
openslide_get_layer_dimensions
openslide_get_layer_downsample
openslide_get_level0_dimensions
openslide_get_level_count
openslide_get_level_dimensions
openslide_get_level_downsample
openslide_get_property_names
openslide_get_property_value
openslide_get_version
openslide_give_prefetch_hint
openslide_open
openslide_read_associated_image
openslide_read_region

Sections

.text
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 964B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 1018B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eaf2cfe15993fca7e6359508e0c2c8f1

Headers

DLL Characteristics

File Characteristics

Imports

libcairo-2

libgdk_pixbuf-2.0-0

libgio-2.0-0

libglib-2.0-0

libgobject-2.0-0

libjpeg-62

libopenjp2

libpng16-16

libsqlite3-0

libtiff-5

libxml2-2

zlib1

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 141KB - Virtual size: 140KB

.data Size: 512B - Virtual size: 92B

.rdata Size: 28KB - Virtual size: 28KB

.bss Size: - Virtual size: 964B

.edata Size: 1024B - Virtual size: 1018B

.idata Size: 11KB - Virtual size: 11KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 4KB

/4 Size: 512B - Virtual size: 32B

.text
Size: 141KB - Virtual size: 140KB

.data
Size: 512B - Virtual size: 92B

.rdata
Size: 28KB - Virtual size: 28KB

.bss
Size: - Virtual size: 964B

.edata
Size: 1024B - Virtual size: 1018B

.idata
Size: 11KB - Virtual size: 11KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB

/4
Size: 512B - Virtual size: 32B