libpangowin32-1[.]0-0[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

libpangowin32-1.0-0.dll
Size

53KB
MD5

db2e0d176c1c1f1c3b044167dbc426e4
SHA1

2da1f4d85830656e0ad2e7f3c0454e8eb9f3722a
SHA256

70be5b34f51e15609153ecbd17b34ce426f369b5bbed82f43a7b861f682d09bc
SHA512

3d34e02bb4794fe9114052148414434d6a0beb0438a8ae11d03de92b95bd093cb5d643073b7f552552540edf0d6ca8364f90388e038f936eab425537c593232b
SSDEEP

1536:PbgfECoxtXbPm9rymWHR1a6lSyGGM/Txjoz:PbIEC6oryO/Txjo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
libpangowin32-1.0-0.dll

Files

libpangowin32-1.0-0.dll
.dll windows:4 windows x86 arch:x86

3af6f78efda1b4de38b43b7f021f37cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libpango-1.0-0

pango_context_set_font_description
pango_context_set_language
pango_coverage_get
pango_coverage_new
pango_coverage_ref
pango_coverage_set
pango_coverage_unref
pango_engine_shape_get_type
pango_font_describe
pango_font_describe_with_absolute_size
pango_font_description_better_match
pango_font_description_copy
pango_font_description_copy_static
pango_font_description_free
pango_font_description_get_family
pango_font_description_get_size
pango_font_description_get_size_is_absolute
pango_font_description_get_style
pango_font_description_get_weight
pango_font_description_new
pango_font_description_set_absolute_size
pango_font_description_set_family
pango_font_description_set_family_static
pango_font_description_set_size
pango_font_description_set_stretch
pango_font_description_set_style
pango_font_description_set_variant
pango_font_description_set_weight
pango_font_description_to_string
pango_font_description_unset_fields
pango_font_face_describe
pango_font_face_get_type
pango_font_family_get_type
pango_font_get_glyph_extents
pango_font_get_type
pango_font_map_create_context
pango_font_map_get_type
pango_font_metrics_new
pango_font_metrics_ref
pango_font_metrics_unref
pango_fontset_simple_append
pango_fontset_simple_new
pango_fontset_simple_size
pango_glyph_string_extents
pango_glyph_string_set_size
pango_is_zero_width
pango_language_get_sample_string
pango_language_matches
pango_layout_get_iter
pango_layout_get_lines_readonly
pango_layout_get_type
pango_layout_iter_free
pango_layout_iter_get_baseline
pango_layout_iter_get_line_extents
pango_layout_iter_get_line_readonly
pango_layout_iter_next_line
pango_layout_line_get_extents
pango_layout_new
pango_layout_set_text
pango_scan_string
pango_skip_space

gdi32

CreateDCA
CreateFontIndirectA
CreateFontIndirectW
CreatePen
CreateSolidBrush
DeleteObject
EnumFontFamiliesExW
ExtTextOutW
GetDeviceCaps
GetFontData
GetFontUnicodeRanges
GetGlyphIndicesW
GetGlyphOutlineA
GetGraphicsMode
GetStockObject
GetTextMetricsA
GetWorldTransform
Polyline
Rectangle
SelectObject
SetBkMode
SetGraphicsMode
SetTextColor
SetWorldTransform

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
InitializeCriticalSection
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcr90

__dllonexit
_amsg_exit
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
free
fwrite
getenv
malloc
sprintf
strlen
strncmp
vfprintf
wcscmp
wcscpy
wcslen

user32

SystemParametersInfoA

usp10

ScriptIsComplex
ScriptItemize
ScriptPlace
ScriptShape

libglib-2.0-0

g_ascii_strcasecmp
g_ascii_strdown
g_assertion_message_expr
g_convert
g_direct_equal
g_direct_hash
g_free
g_hash_table_destroy
g_hash_table_foreach
g_hash_table_insert
g_hash_table_lookup
g_hash_table_new
g_hash_table_new_full
g_hash_table_remove
g_int64_equal
g_int64_hash
g_intern_static_string
g_list_foreach
g_list_free
g_list_free_1
g_list_prepend
g_locale_to_utf8
g_log
g_malloc
g_malloc0
g_malloc_n
g_mutex_lock
g_mutex_unlock
g_once_init_enter
g_once_init_leave
g_print
g_queue_delete_link
g_queue_find
g_queue_free
g_queue_new
g_queue_pop_tail
g_queue_push_head
g_realloc
g_return_if_fail_warning
g_slice_alloc
g_slice_alloc0
g_slice_free1
g_slist_append
g_slist_foreach
g_slist_free
g_slist_free_full
g_slist_length
g_slist_prepend
g_slist_remove
g_str_equal
g_str_hash
g_strdup
g_strfreev
g_string_assign
g_string_free
g_string_new
g_strsplit
g_unichar_get_mirror_char
g_unichar_type
g_utf16_to_utf8
g_utf8_get_char
g_utf8_skip
g_utf8_strlen
g_utf8_to_utf16
g_win32_error_message

libgobject-2.0-0

g_object_new
g_object_ref
g_object_remove_weak_pointer
g_object_unref
g_type_check_instance_is_a
g_type_class_adjust_private_offset
g_type_class_peek_parent
g_type_register_static_simple
g_weak_ref_get
g_weak_ref_set

Exports

Exports

_pango_win32_font_get_hfont
_pango_win32_font_get_type
_pango_win32_font_map_get_type
_pango_win32_fontmap_cache_remove
_pango_win32_get_name_header
_pango_win32_get_name_record
_pango_win32_make_matching_logfontw
_pango_win32_shape
pango_win32_font_cache_free
pango_win32_font_cache_load
pango_win32_font_cache_loadw
pango_win32_font_cache_new
pango_win32_font_cache_unload
pango_win32_font_description_from_logfont
pango_win32_font_description_from_logfontw
pango_win32_font_done_font
pango_win32_font_get_glyph_index
pango_win32_font_get_metrics_factor
pango_win32_font_logfont
pango_win32_font_logfontw
pango_win32_font_map_for_display
pango_win32_font_map_get_font_cache
pango_win32_font_select_font
pango_win32_get_context
pango_win32_get_dc
pango_win32_get_debug_flag
pango_win32_get_unknown_glyph
pango_win32_render
pango_win32_render_layout
pango_win32_render_layout_line
pango_win32_render_transformed
pango_win32_shutdown_display

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3af6f78efda1b4de38b43b7f021f37cd

Headers

File Characteristics

Imports

libpango-1.0-0

gdi32

kernel32

msvcr90

user32

usp10

libglib-2.0-0

libgobject-2.0-0

Exports

Exports

Sections

.text Size: 31KB - Virtual size: 31KB

.data Size: 512B - Virtual size: 68B

.rdata Size: 5KB - Virtual size: 5KB

.bss Size: - Virtual size: 1KB

.edata Size: 1KB - Virtual size: 1KB

.idata Size: 7KB - Virtual size: 7KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 31KB - Virtual size: 31KB

.data
Size: 512B - Virtual size: 68B

.rdata
Size: 5KB - Virtual size: 5KB

.bss
Size: - Virtual size: 1KB

.edata
Size: 1KB - Virtual size: 1KB

.idata
Size: 7KB - Virtual size: 7KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB