libatk-1[.]0-0[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

libatk-1.0-0.dll
Size

102KB
MD5

23ca6f7b55cf3bdfa5172f076f0cd4fc
SHA1

2e7baacf47a7c7af2958e2e8d0d1b6289d59f75e
SHA256

eccdbc2738b255528ff0ff6d8fa3db722be0eab185176d2f40b08e185db67a03
SHA512

ee896706a3fe45072a1b83f53919080f522a5aec312ad105c61977618b50983184cac6390d0de7f12f82fd0ae644e7cb094ed2e1ad17b4cd967d65f42dd98d73
SSDEEP

1536:inY/ZQxS0DsN5kkXQseSUxRhF67hubherq7YrecZm4BHwQb/S:ihxS0oN5ksQso16Rre1mK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
libatk-1.0-0.dll

Files

libatk-1.0-0.dll
.dll windows:4 windows x86 arch:x86

fcbd91577696d46903489d3cd4a8b871

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcr90

__dllonexit
_amsg_exit
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
strcmp
strlen
strncmp
vfprintf

libglib-2.0-0

g_array_append_vals
g_array_remove_index
g_array_sized_new
g_assertion_message_expr
g_build_filename
g_dgettext
g_free
g_getenv_utf8
g_hash_table_destroy
g_hash_table_insert
g_hash_table_lookup
g_hash_table_new
g_hash_table_new_full
g_hash_table_remove
g_int_equal
g_int_hash
g_intern_static_string
g_log
g_malloc
g_malloc0
g_once_init_enter
g_once_init_leave
g_ptr_array_add
g_ptr_array_free
g_ptr_array_new
g_ptr_array_remove
g_ptr_array_sized_new
g_quark_from_static_string
g_quark_from_string
g_realloc
g_return_if_fail_warning
g_slice_alloc0
g_slice_free1
g_slist_free
g_strdup
g_strfreev
g_strsplit
g_strv_length
g_utf8_strlen
g_win32_get_package_installation_directory_of_module
g_win32_locale_filename_from_utf8

libgobject-2.0-0

g_boxed_type_register_static
g_cclosure_marshal_VOID__BOOLEAN
g_cclosure_marshal_VOID__BOXED
g_cclosure_marshal_VOID__INT
g_cclosure_marshal_VOID__POINTER
g_cclosure_marshal_VOID__UINT_POINTER
g_cclosure_marshal_VOID__VOID
g_enum_get_value
g_enum_get_value_by_nick
g_enum_register_static
g_flags_register_static
g_object_class_install_property
g_object_get_property
g_object_get_qdata
g_object_new
g_object_notify
g_object_ref
g_object_set_qdata
g_object_unref
g_object_weak_ref
g_object_weak_unref
g_param_spec_boolean
g_param_spec_double
g_param_spec_enum
g_param_spec_int
g_param_spec_object
g_param_spec_string
g_param_spec_value_array
g_signal_add_emission_hook
g_signal_emit
g_signal_lookup
g_signal_new
g_signal_remove_emission_hook
g_type_add_interface_static
g_type_check_class_cast
g_type_check_class_is_a
g_type_check_instance_cast
g_type_check_instance_is_a
g_type_check_instance_is_fundamentally_a
g_type_check_value
g_type_class_adjust_private_offset
g_type_class_peek
g_type_class_peek_parent
g_type_class_ref
g_type_class_unref
g_type_create_instance
g_type_free_instance
g_type_from_name
g_type_interface_add_prerequisite
g_type_interface_peek
g_type_name
g_type_parent
g_type_register_static
g_type_register_static_simple
g_value_array_append
g_value_array_free
g_value_array_get_nth
g_value_array_new
g_value_get_boxed
g_value_get_enum
g_value_get_int
g_value_get_object
g_value_get_string
g_value_init
g_value_peek_pointer
g_value_set_boolean
g_value_set_boxed
g_value_set_enum
g_value_set_int
g_value_set_object
g_value_set_string
g_value_unset

libintl-8

libintl_bindtextdomain
libintl_dgettext
libintl_setlocale

Exports

Exports

atk_action_do_action
atk_action_get_description
atk_action_get_keybinding
atk_action_get_localized_name
atk_action_get_n_actions
atk_action_get_name
atk_action_get_type
atk_action_set_description
atk_add_focus_tracker
atk_add_global_event_listener
atk_add_key_event_listener
atk_attribute_set_free
atk_component_add_focus_handler
atk_component_contains
atk_component_get_alpha
atk_component_get_extents
atk_component_get_layer
atk_component_get_mdi_zorder
atk_component_get_position
atk_component_get_size
atk_component_get_type
atk_component_grab_focus
atk_component_ref_accessible_at_point
atk_component_remove_focus_handler
atk_component_set_extents
atk_component_set_position
atk_component_set_size
atk_coord_type_get_type
atk_document_get_attribute_value
atk_document_get_attributes
atk_document_get_current_page_number
atk_document_get_document
atk_document_get_document_type
atk_document_get_locale
atk_document_get_page_count
atk_document_get_type
atk_document_set_attribute_value
atk_editable_text_copy_text
atk_editable_text_cut_text
atk_editable_text_delete_text
atk_editable_text_get_type
atk_editable_text_insert_text
atk_editable_text_paste_text
atk_editable_text_set_run_attributes
atk_editable_text_set_text_contents
atk_focus_tracker_init
atk_focus_tracker_notify
atk_get_binary_age
atk_get_default_registry
atk_get_focus_object
atk_get_interface_age
atk_get_major_version
atk_get_micro_version
atk_get_minor_version
atk_get_root
atk_get_toolkit_name
atk_get_toolkit_version
atk_get_version
atk_gobject_accessible_for_object
atk_gobject_accessible_get_object
atk_gobject_accessible_get_type
atk_hyperlink_get_end_index
atk_hyperlink_get_n_anchors
atk_hyperlink_get_object
atk_hyperlink_get_start_index
atk_hyperlink_get_type
atk_hyperlink_get_uri
atk_hyperlink_impl_get_hyperlink
atk_hyperlink_impl_get_type
atk_hyperlink_is_inline
atk_hyperlink_is_selected_link
atk_hyperlink_is_valid
atk_hyperlink_state_flags_get_type
atk_hypertext_get_link
atk_hypertext_get_link_index
atk_hypertext_get_n_links
atk_hypertext_get_type
atk_image_get_image_description
atk_image_get_image_locale
atk_image_get_image_position
atk_image_get_image_size
atk_image_get_type
atk_image_set_image_description
atk_implementor_get_type
atk_implementor_ref_accessible
atk_key_event_type_get_type
atk_layer_get_type
atk_misc_get_instance
atk_misc_get_type
atk_misc_instance
atk_misc_threads_enter
atk_misc_threads_leave
atk_no_op_object_factory_get_type
atk_no_op_object_factory_new
atk_no_op_object_get_type
atk_no_op_object_new
atk_object_add_relationship
atk_object_connect_property_change_handler
atk_object_factory_create_accessible
atk_object_factory_get_accessible_type
atk_object_factory_get_type
atk_object_factory_invalidate
atk_object_get_attributes
atk_object_get_description
atk_object_get_index_in_parent
atk_object_get_layer
atk_object_get_mdi_zorder
atk_object_get_n_accessible_children
atk_object_get_name
atk_object_get_object_locale
atk_object_get_parent
atk_object_get_role
atk_object_get_type
atk_object_initialize
atk_object_notify_state_change
atk_object_peek_parent
atk_object_ref_accessible_child
atk_object_ref_relation_set
atk_object_ref_state_set
atk_object_remove_property_change_handler
atk_object_remove_relationship
atk_object_set_description
atk_object_set_name
atk_object_set_parent
atk_object_set_role
atk_plug_get_id
atk_plug_get_type
atk_plug_new
atk_range_copy
atk_range_free
atk_range_get_description
atk_range_get_lower_limit
atk_range_get_type
atk_range_get_upper_limit
atk_range_new
atk_rectangle_get_type
atk_registry_get_factory
atk_registry_get_factory_type
atk_registry_get_type
atk_registry_set_factory_type
atk_relation_add_target
atk_relation_get_relation_type
atk_relation_get_target
atk_relation_get_type
atk_relation_new
atk_relation_remove_target
atk_relation_set_add
atk_relation_set_add_relation_by_type
atk_relation_set_contains
atk_relation_set_contains_target
atk_relation_set_get_n_relations
atk_relation_set_get_relation
atk_relation_set_get_relation_by_type
atk_relation_set_get_type
atk_relation_set_new
atk_relation_set_remove
atk_relation_type_for_name
atk_relation_type_get_name
atk_relation_type_get_type
atk_relation_type_register
atk_remove_focus_tracker
atk_remove_global_event_listener
atk_remove_key_event_listener
atk_role_for_name
atk_role_get_localized_name
atk_role_get_name
atk_role_get_type
atk_role_register
atk_selection_add_selection
atk_selection_clear_selection
atk_selection_get_selection_count
atk_selection_get_type
atk_selection_is_child_selected
atk_selection_ref_selection
atk_selection_remove_selection
atk_selection_select_all_selection
atk_socket_embed
atk_socket_get_type
atk_socket_is_occupied
atk_socket_new
atk_state_set_add_state
atk_state_set_add_states
atk_state_set_and_sets
atk_state_set_clear_states
atk_state_set_contains_state
atk_state_set_contains_states
atk_state_set_get_type
atk_state_set_is_empty
atk_state_set_new
atk_state_set_or_sets
atk_state_set_remove_state
atk_state_set_xor_sets
atk_state_type_for_name
atk_state_type_get_name
atk_state_type_get_type
atk_state_type_register
atk_streamable_content_get_mime_type
atk_streamable_content_get_n_mime_types
atk_streamable_content_get_stream
atk_streamable_content_get_type
atk_streamable_content_get_uri
atk_table_add_column_selection
atk_table_add_row_selection
atk_table_cell_get_column_header_cells
atk_table_cell_get_column_span
atk_table_cell_get_position
atk_table_cell_get_row_column_span
atk_table_cell_get_row_header_cells
atk_table_cell_get_row_span
atk_table_cell_get_table
atk_table_cell_get_type
atk_table_get_caption
atk_table_get_column_at_index
atk_table_get_column_description
atk_table_get_column_extent_at
atk_table_get_column_header
atk_table_get_index_at
atk_table_get_n_columns
atk_table_get_n_rows
atk_table_get_row_at_index
atk_table_get_row_description
atk_table_get_row_extent_at
atk_table_get_row_header
atk_table_get_selected_columns
atk_table_get_selected_rows
atk_table_get_summary
atk_table_get_type
atk_table_is_column_selected
atk_table_is_row_selected
atk_table_is_selected
atk_table_ref_at
atk_table_remove_column_selection
atk_table_remove_row_selection
atk_table_set_caption
atk_table_set_column_description
atk_table_set_column_header
atk_table_set_row_description
atk_table_set_row_header
atk_table_set_summary
atk_text_add_selection
atk_text_attribute_for_name
atk_text_attribute_get_name
atk_text_attribute_get_type
atk_text_attribute_get_value
atk_text_attribute_register
atk_text_boundary_get_type
atk_text_clip_type_get_type
atk_text_free_ranges
atk_text_get_bounded_ranges
atk_text_get_caret_offset
atk_text_get_character_at_offset
atk_text_get_character_count
atk_text_get_character_extents
atk_text_get_default_attributes
atk_text_get_n_selections
atk_text_get_offset_at_point
atk_text_get_range_extents
atk_text_get_run_attributes
atk_text_get_selection
atk_text_get_string_at_offset
atk_text_get_text
atk_text_get_text_after_offset
atk_text_get_text_at_offset
atk_text_get_text_before_offset
atk_text_get_type
atk_text_granularity_get_type
atk_text_range_get_type
atk_text_remove_selection
atk_text_set_caret_offset
atk_text_set_selection
atk_util_get_type
atk_value_get_current_value
atk_value_get_increment
atk_value_get_maximum_value
atk_value_get_minimum_increment
atk_value_get_minimum_value
atk_value_get_range
atk_value_get_sub_ranges
atk_value_get_type
atk_value_get_value_and_text
atk_value_set_current_value
atk_value_set_value
atk_value_type_get_localized_name
atk_value_type_get_name
atk_value_type_get_type
atk_window_get_type

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fcbd91577696d46903489d3cd4a8b871

Headers

File Characteristics

Imports

kernel32

msvcr90

libglib-2.0-0

libgobject-2.0-0

libintl-8

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 51KB

.data Size: 512B - Virtual size: 72B

.rdata Size: 25KB - Virtual size: 25KB

.bss Size: - Virtual size: 1KB

.edata Size: 10KB - Virtual size: 10KB

.idata Size: 5KB - Virtual size: 5KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 52KB - Virtual size: 51KB

.data
Size: 512B - Virtual size: 72B

.rdata
Size: 25KB - Virtual size: 25KB

.bss
Size: - Virtual size: 1KB

.edata
Size: 10KB - Virtual size: 10KB

.idata
Size: 5KB - Virtual size: 5KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB