librsvg-2-2[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

librsvg-2-2.dll
Size

253KB
MD5

3d76acd449ef332e8ff377479e2691f4
SHA1

453a33af72ca209c7dc95e3aa00b83a388251cbf
SHA256

16264d9bdf9b0c41e5f36e6ddd3872e50e96700f9b4d999735143dad45b722cb
SHA512

3b564938b02df029a231594e53ef22aff232cf6f10f161c4d8a264d4240c68d0e92f40a91b672f20d72ea658d0eda09c1e0422974295db1af74bb3c74311911b
SSDEEP

3072:+2dlcfHBHskVpZdwSWTEy9UU2pHKjJNIRR1a1H0Q8b769cFMfB5i+euIrrI7xHYl:xcZtpWTEj81H0QVJfkrg47eAmhQlkVk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
librsvg-2-2.dll

Files

librsvg-2-2.dll
.dll windows:4 windows x86 arch:x86

1abb022af88ee8aa52818b1b38c1ff24

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcr90

__dllonexit
__setusermatherr
_amsg_exit
_errno
_initterm
_iob
_lock
_onexit
_unlock
_wfullpath
abort
acos
atof
atoi
bsearch
calloc
fclose
feof
fopen
fprintf
fputc
fputs
fread
free
fwrite
malloc
memmove
setlocale
strchr
strcmp
strlen
strncmp
strstr
tan
vfprintf

libcairo-gobject-2

cairo_append_path
cairo_clip
cairo_create
cairo_destroy
cairo_fill
cairo_fill_extents
cairo_fill_preserve
cairo_get_matrix
cairo_get_target
cairo_get_tolerance
cairo_identity_matrix
cairo_image_surface_create
cairo_image_surface_get_data
cairo_image_surface_get_format
cairo_image_surface_get_height
cairo_image_surface_get_stride
cairo_image_surface_get_width
cairo_mask_surface
cairo_matrix_init
cairo_matrix_init_identity
cairo_matrix_init_rotate
cairo_matrix_init_scale
cairo_matrix_init_translate
cairo_matrix_invert
cairo_matrix_multiply
cairo_matrix_transform_point
cairo_move_to
cairo_new_path
cairo_paint
cairo_paint_with_alpha
cairo_pattern_add_color_stop_rgba
cairo_pattern_create_for_surface
cairo_pattern_create_linear
cairo_pattern_create_radial
cairo_pattern_destroy
cairo_pattern_set_extend
cairo_pattern_set_filter
cairo_pattern_set_matrix
cairo_rectangle
cairo_restore
cairo_rotate
cairo_save
cairo_scale
cairo_set_antialias
cairo_set_dash
cairo_set_fill_rule
cairo_set_line_cap
cairo_set_line_join
cairo_set_line_width
cairo_set_matrix
cairo_set_miter_limit
cairo_set_operator
cairo_set_source
cairo_set_source_rgba
cairo_set_source_surface
cairo_set_tolerance
cairo_stroke
cairo_stroke_extents
cairo_surface_create_similar
cairo_surface_destroy
cairo_surface_flush
cairo_surface_get_content
cairo_surface_get_type
cairo_surface_mark_dirty
cairo_surface_reference
cairo_surface_set_mime_data
cairo_surface_status
cairo_translate

libgdk_pixbuf-2.0-0

gdk_pixbuf_error_quark
gdk_pixbuf_format_get_mime_types
gdk_pixbuf_get_has_alpha
gdk_pixbuf_get_height
gdk_pixbuf_get_n_channels
gdk_pixbuf_get_pixels
gdk_pixbuf_get_rowstride
gdk_pixbuf_get_width
gdk_pixbuf_loader_close
gdk_pixbuf_loader_get_format
gdk_pixbuf_loader_get_pixbuf
gdk_pixbuf_loader_new
gdk_pixbuf_loader_new_with_mime_type
gdk_pixbuf_loader_write
gdk_pixbuf_new

libgio-2.0-0

g_buffered_input_stream_fill
g_buffered_input_stream_get_type
g_buffered_input_stream_new
g_buffered_input_stream_peek_buffer
g_cancellable_get_type
g_content_type_get_mime_type
g_content_type_guess
g_converter_get_type
g_converter_input_stream_new
g_file_get_parent
g_file_get_path
g_file_get_type
g_file_get_uri
g_file_has_uri_scheme
g_file_info_get_content_type
g_file_input_stream_query_info
g_file_load_contents
g_file_new_for_uri
g_file_read
g_file_resolve_relative_path
g_input_stream_close
g_input_stream_get_type
g_input_stream_read
g_io_error_quark
g_memory_input_stream_add_data
g_memory_input_stream_new
g_memory_input_stream_new_from_data
g_zlib_decompressor_new

libglib-2.0-0

g_array_append_vals
g_array_free
g_array_sized_new
g_ascii_dtostr
g_ascii_strcasecmp
g_ascii_strncasecmp
g_ascii_strtod
g_ascii_strup
g_ascii_table
g_assertion_message_expr
g_base64_decode_inplace
g_build_filename
g_clear_error
g_convert
g_error_matches
g_file_get_contents_utf8
g_file_test_utf8
g_filename_from_uri_utf8
g_filename_to_uri_utf8
g_free
g_get_current_dir_utf8
g_getenv_utf8
g_hash_table_destroy
g_hash_table_foreach
g_hash_table_insert
g_hash_table_iter_init
g_hash_table_iter_next
g_hash_table_lookup
g_hash_table_new
g_hash_table_new_full
g_hash_table_ref
g_hash_table_size
g_hash_table_unref
g_intern_static_string
g_list_append
g_list_delete_link
g_list_free
g_list_last
g_list_prepend
g_log
g_malloc
g_malloc0
g_malloc_n
g_memdup
g_once_init_enter
g_once_init_leave
g_path_get_dirname
g_path_is_absolute
g_printerr
g_propagate_error
g_ptr_array_add
g_ptr_array_free
g_ptr_array_new
g_quark_from_string
g_realloc
g_return_if_fail_warning
g_set_error
g_set_error_literal
g_slice_alloc
g_slice_free1
g_slist_delete_link
g_slist_find
g_slist_free
g_slist_prepend
g_slist_remove
g_str_equal
g_str_has_prefix
g_str_hash
g_strchomp
g_strchug
g_strconcat
g_strdup
g_strdup_printf
g_strfreev
g_string_append
g_string_append_len
g_string_append_printf
g_string_append_unichar
g_string_assign
g_string_erase
g_string_free
g_string_insert_c
g_string_new
g_string_new_len
g_string_sized_new
g_strjoinv
g_strndup
g_strrstr
g_strsplit
g_strv_length
g_try_malloc
g_uri_parse_scheme
g_utf16_to_utf8
g_utf8_to_utf16
g_utf8_validate
g_warn_message
g_win32_getlocale

libgobject-2.0-0

g_enum_register_static
g_flags_register_static
g_object_class_install_property
g_object_new
g_object_ref
g_object_unref
g_param_spec_double
g_param_spec_flags
g_param_spec_int
g_param_spec_string
g_type_check_class_cast
g_type_check_instance_cast
g_type_check_instance_is_a
g_type_class_add_private
g_type_class_adjust_private_offset
g_type_class_peek_parent
g_type_instance_get_private
g_type_name
g_type_register_static_simple
g_value_get_double
g_value_get_flags
g_value_get_string
g_value_set_double
g_value_set_flags
g_value_set_int
g_value_set_string

libpango-1.0-0

pango_attr_letter_spacing_new
pango_attr_list_insert
pango_attr_list_new
pango_attr_list_unref
pango_attr_strikethrough_new
pango_attr_underline_new
pango_context_get_font_description
pango_context_get_gravity
pango_context_set_base_dir
pango_context_set_base_gravity
pango_context_set_language
pango_font_description_copy
pango_font_description_free
pango_font_description_set_family_static
pango_font_description_set_size
pango_font_description_set_stretch
pango_font_description_set_style
pango_font_description_set_variant
pango_font_description_set_weight
pango_font_map_create_context
pango_gravity_to_rotation
pango_language_from_string
pango_layout_get_context
pango_layout_get_extents
pango_layout_get_iter
pango_layout_get_size
pango_layout_iter_free
pango_layout_iter_get_baseline
pango_layout_new
pango_layout_set_alignment
pango_layout_set_attributes
pango_layout_set_font_description
pango_layout_set_text

libpangocairo-1.0-0

pango_cairo_context_set_resolution
pango_cairo_font_map_get_default
pango_cairo_layout_path
pango_cairo_show_layout
pango_cairo_update_context

libxmlxpat

xmlBuildRelativeURI
xmlCharStrndup
xmlCleanupParser
xmlCreatePushParserCtxt
xmlCtxtGetLastError
xmlFree
xmlFreeDoc
xmlFreeInputStream
xmlFreeNode
xmlFreeParserCtxt
xmlInitParser
xmlNewEntity
xmlNewIOInputStream
xmlParseChunk
xmlParseDocument
xmlParserInputBufferCreateIO
xmlPushInput
xmlSAX2InitDefaultSAXHandler

Exports

Exports

librsvg_major_version
librsvg_micro_version
librsvg_minor_version
librsvg_version
rsvg_SAX_handler_struct_init
rsvg_acquire_node
rsvg_add_clipping_rect
rsvg_bbox_clip
rsvg_bbox_init
rsvg_bbox_insert
rsvg_cairo_add_clipping_rect
rsvg_cairo_clip
rsvg_cairo_create_pango_context
rsvg_cairo_get_surface_of_node
rsvg_cairo_new_drawing_ctx
rsvg_cairo_path_destroy
rsvg_cairo_pop_discrete_layer
rsvg_cairo_push_discrete_layer
rsvg_cairo_render_new
rsvg_cairo_render_pango_layout
rsvg_cairo_render_path
rsvg_cairo_render_surface
rsvg_cairo_surface_from_pixbuf
rsvg_cairo_surface_new_from_href
rsvg_cairo_surface_to_pixbuf
rsvg_cairo_to_pixbuf
rsvg_cleanup
rsvg_css_parse_angle
rsvg_css_parse_aspect_ratio
rsvg_css_parse_color
rsvg_css_parse_font_family
rsvg_css_parse_font_stretch
rsvg_css_parse_font_style
rsvg_css_parse_font_variant
rsvg_css_parse_font_weight
rsvg_css_parse_frequency
rsvg_css_parse_list
rsvg_css_parse_number_list
rsvg_css_parse_number_optional_number
rsvg_css_parse_opacity
rsvg_css_parse_overflow
rsvg_css_parse_time
rsvg_css_parse_vbox
rsvg_css_parse_xml_attribute_string
rsvg_current_state
rsvg_defs_free
rsvg_defs_lookup
rsvg_defs_new
rsvg_defs_register_memory
rsvg_defs_register_name
rsvg_defs_set
rsvg_dpi_percentage
rsvg_drawing_ctx_free
rsvg_error_get_type
rsvg_error_quark
rsvg_eval_switch_attributes
rsvg_filter_render
rsvg_get_base_uri_from_filename
rsvg_get_surface_of_node
rsvg_get_url_string
rsvg_handle_close
rsvg_handle_flags_get_type
rsvg_handle_free
rsvg_handle_get_base_uri
rsvg_handle_get_desc
rsvg_handle_get_dimensions
rsvg_handle_get_dimensions_sub
rsvg_handle_get_metadata
rsvg_handle_get_pixbuf
rsvg_handle_get_pixbuf_sub
rsvg_handle_get_position_sub
rsvg_handle_get_title
rsvg_handle_get_type
rsvg_handle_has_sub
rsvg_handle_new
rsvg_handle_new_from_data
rsvg_handle_new_from_file
rsvg_handle_new_from_gfile_sync
rsvg_handle_new_from_stream_sync
rsvg_handle_new_with_flags
rsvg_handle_read_stream_sync
rsvg_handle_render_cairo
rsvg_handle_render_cairo_sub
rsvg_handle_set_base_gfile
rsvg_handle_set_base_uri
rsvg_handle_set_dpi
rsvg_handle_set_dpi_x_y
rsvg_handle_set_size_callback
rsvg_handle_write
rsvg_init
rsvg_internal_dpi_x
rsvg_internal_dpi_y
rsvg_linear_gradient_fix_fallback
rsvg_make_valid_utf8
rsvg_new_circle
rsvg_new_clip_path
rsvg_new_defs
rsvg_new_ellipse
rsvg_new_filter
rsvg_new_filter_primitive_blend
rsvg_new_filter_primitive_color_matrix
rsvg_new_filter_primitive_component_transfer
rsvg_new_filter_primitive_composite
rsvg_new_filter_primitive_convolve_matrix
rsvg_new_filter_primitive_diffuse_lighting
rsvg_new_filter_primitive_displacement_map
rsvg_new_filter_primitive_erode
rsvg_new_filter_primitive_flood
rsvg_new_filter_primitive_gaussian_blur
rsvg_new_filter_primitive_image
rsvg_new_filter_primitive_merge
rsvg_new_filter_primitive_merge_node
rsvg_new_filter_primitive_offset
rsvg_new_filter_primitive_specular_lighting
rsvg_new_filter_primitive_tile
rsvg_new_filter_primitive_turbulence
rsvg_new_group
rsvg_new_image
rsvg_new_line
rsvg_new_linear_gradient
rsvg_new_marker
rsvg_new_mask
rsvg_new_node_component_transfer_function
rsvg_new_node_light_source
rsvg_new_path
rsvg_new_pattern
rsvg_new_polygon
rsvg_new_polyline
rsvg_new_radial_gradient
rsvg_new_rect
rsvg_new_stop
rsvg_new_svg
rsvg_new_switch
rsvg_new_symbol
rsvg_new_text
rsvg_new_tref
rsvg_new_tspan
rsvg_new_use
rsvg_node_draw
rsvg_node_group_pack
rsvg_node_set_atts
rsvg_paint_server_parse
rsvg_paint_server_ref
rsvg_paint_server_unref
rsvg_parse_cssbuffer
rsvg_parse_path
rsvg_parse_style
rsvg_parse_style_attrs
rsvg_parse_style_pairs
rsvg_parse_transform
rsvg_path_builder_arc
rsvg_path_builder_close_path
rsvg_path_builder_curve_to
rsvg_path_builder_finish
rsvg_path_builder_init
rsvg_path_builder_line_to
rsvg_path_builder_move_to
rsvg_pattern_fix_fallback
rsvg_pixbuf_from_data_with_size_data
rsvg_pixbuf_from_file
rsvg_pixbuf_from_file_at_max_size
rsvg_pixbuf_from_file_at_size
rsvg_pixbuf_from_file_at_zoom
rsvg_pixbuf_from_file_at_zoom_with_max
rsvg_pop_def_group
rsvg_pop_discrete_layer
rsvg_preserve_aspect_ratio
rsvg_property_bag_dup
rsvg_property_bag_enumerate
rsvg_property_bag_free
rsvg_property_bag_lookup
rsvg_property_bag_new
rsvg_property_bag_size
rsvg_push_discrete_layer
rsvg_radial_gradient_fix_fallback
rsvg_release_node
rsvg_render_free
rsvg_render_markers
rsvg_render_path
rsvg_render_surface
rsvg_return_if_fail_warning
rsvg_set_default_dpi
rsvg_set_default_dpi_x_y
rsvg_state_clone
rsvg_state_dominate
rsvg_state_finalize
rsvg_state_free_all
rsvg_state_inherit
rsvg_state_init
rsvg_state_override
rsvg_state_parent
rsvg_state_pop
rsvg_state_push
rsvg_state_reconstruct
rsvg_state_reinherit
rsvg_state_reinherit_top
rsvg_state_reinit
rsvg_term
rsvg_viewport_percentage

Sections

.text
Size: 189KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1abb022af88ee8aa52818b1b38c1ff24

Headers

File Characteristics

Imports

kernel32

msvcr90

libcairo-gobject-2

libgdk_pixbuf-2.0-0

libgio-2.0-0

libglib-2.0-0

libgobject-2.0-0

libpango-1.0-0

libpangocairo-1.0-0

libxmlxpat

Exports

Exports

Sections

.text Size: 189KB - Virtual size: 188KB

.data Size: 512B - Virtual size: 252B

.rdata Size: 34KB - Virtual size: 33KB

.bss Size: - Virtual size: 1KB

.edata Size: 7KB - Virtual size: 6KB

.idata Size: 12KB - Virtual size: 12KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 189KB - Virtual size: 188KB

.data
Size: 512B - Virtual size: 252B

.rdata
Size: 34KB - Virtual size: 33KB

.bss
Size: - Virtual size: 1KB

.edata
Size: 7KB - Virtual size: 6KB

.idata
Size: 12KB - Virtual size: 12KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 7KB - Virtual size: 7KB