libfontconfig-1[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

libfontconfig-1.dll
Size

216KB
MD5

2fe740279653ea99527806a1d5903044
SHA1

2f155a8ea61b69526b0428d6ffd50005f7f3eae2
SHA256

09301d0394efa888f991ec20c8869357209b8623692d5a27279e2e5bb031e91d
SHA512

550ce4bf4808383e8f8badd0628cbbf7312c4a8045d843da56801210887d1a702caca1f4573e5cc2e230288c80500effdcef3e5919e2d35463bd3e4640e61621
SSDEEP

3072:j44YIDVnz2GOfJV2KpjPQo0yg45pr2kkfew1RNbHsVR1aCOn:j44zlAPJ0yg45pak7wxHsVR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
libfontconfig-1.dll

Files

libfontconfig-1.dll
.dll windows:4 windows x86 arch:x86

0cb0df44dc59fd2b4c059f1f2ebb72f0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateFileMappingA
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileAttributesA
GetFileAttributesExA
GetFullPathNameA
GetLastError
GetLongPathNameA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTempPathA
GetTickCount
GetWindowsDirectoryA
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MapViewOfFile
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualProtect
VirtualQuery
VirtualQueryEx

msvcr90

__dllonexit
_access
_amsg_exit
_chmod
_close
_errno
_exit
_fdopen
_findclose
_findfirst64
_findnext64
_fullpath
_get_osfhandle
_initterm
_iob
_lock
_mbsrchr
_mkdir
_onexit
_open
_read
_rmdir
_snwprintf
_sopen
_stat64
_strdup
_time64
_unlink
_unlock
_vsnprintf
_write
abort
atoi
calloc
fclose
fflush
fprintf
fputc
fputs
free
fwprintf
fwrite
getenv
isalpha
isspace
localeconv
malloc
memcmp
memcpy
memmove
perror
printf
putchar
puts
qsort
raise
rand
realloc
rename
sprintf
srand
sscanf
strcat
strchr
strcmp
strcpy
strlen
strncat
strncmp
strncpy
strpbrk
strrchr
strstr
strtol
vfprintf
wcscpy

user32

MessageBoxW

libxmlxpat

XML_ErrorString
XML_GetBuffer
XML_GetCurrentLineNumber
XML_GetErrorCode
XML_ParseBuffer
XML_ParserCreate
XML_ParserFree
XML_SetCharacterDataHandler
XML_SetDoctypeDeclHandler
XML_SetElementHandler
XML_SetUserData

libfreetype-6

FT_Done_Face
FT_Done_FreeType
FT_Get_BDF_Property
FT_Get_Char_Index
FT_Get_First_Char
FT_Get_Glyph_Name
FT_Get_Next_Char
FT_Get_PS_Font_Info
FT_Get_Postscript_Name
FT_Get_Sfnt_Name
FT_Get_Sfnt_Name_Count
FT_Get_Sfnt_Table
FT_Get_X11_Font_Format
FT_Has_PS_Glyph_Names
FT_Init_FreeType
FT_Load_Glyph
FT_Load_Sfnt_Table
FT_New_Face
FT_Select_Charmap
FT_Select_Size

libintl-8

iconv
iconv_close
iconv_open

Exports

Exports

FcAtomicCreate
FcAtomicDeleteNew
FcAtomicDestroy
FcAtomicLock
FcAtomicNewFile
FcAtomicOrigFile
FcAtomicReplaceOrig
FcAtomicUnlock
FcBlanksAdd
FcBlanksCreate
FcBlanksDestroy
FcBlanksIsMember
FcCacheCopySet
FcCacheCreateTagFile
FcCacheDir
FcCacheNumFont
FcCacheNumSubdir
FcCacheSubdir
FcCharSetAddChar
FcCharSetCopy
FcCharSetCount
FcCharSetCoverage
FcCharSetCreate
FcCharSetDelChar
FcCharSetDestroy
FcCharSetEqual
FcCharSetFirstPage
FcCharSetHasChar
FcCharSetIntersect
FcCharSetIntersectCount
FcCharSetIsSubset
FcCharSetMerge
FcCharSetNew
FcCharSetNextPage
FcCharSetSubtract
FcCharSetSubtractCount
FcCharSetUnion
FcConfigAppFontAddDir
FcConfigAppFontAddFile
FcConfigAppFontClear
FcConfigBuildFonts
FcConfigCreate
FcConfigDestroy
FcConfigEnableHome
FcConfigFilename
FcConfigGetBlanks
FcConfigGetCache
FcConfigGetCacheDirs
FcConfigGetConfigDirs
FcConfigGetConfigFiles
FcConfigGetCurrent
FcConfigGetFontDirs
FcConfigGetFonts
FcConfigGetRescanInterval
FcConfigGetRescanInverval
FcConfigGetSysRoot
FcConfigHome
FcConfigParseAndLoad
FcConfigReference
FcConfigSetCurrent
FcConfigSetRescanInterval
FcConfigSetRescanInverval
FcConfigSetSysRoot
FcConfigSubstitute
FcConfigSubstituteWithPat
FcConfigUptoDate
FcDefaultSubstitute
FcDirCacheClean
FcDirCacheLoad
FcDirCacheLoadFile
FcDirCacheRead
FcDirCacheRescan
FcDirCacheUnlink
FcDirCacheUnload
FcDirCacheValid
FcDirSave
FcDirScan
FcFileIsDir
FcFileScan
FcFini
FcFontList
FcFontMatch
FcFontRenderPrepare
FcFontSetAdd
FcFontSetCreate
FcFontSetDestroy
FcFontSetList
FcFontSetMatch
FcFontSetPrint
FcFontSetSort
FcFontSetSortDestroy
FcFontSort
FcFreeTypeCharIndex
FcFreeTypeCharSet
FcFreeTypeCharSetAndSpacing
FcFreeTypeQuery
FcFreeTypeQueryFace
FcGetDefaultLangs
FcGetLangs
FcGetVersion
FcInit
FcInitBringUptoDate
FcInitLoadConfig
FcInitLoadConfigAndFonts
FcInitReinitialize
FcLangGetCharSet
FcLangNormalize
FcLangSetAdd
FcLangSetCompare
FcLangSetContains
FcLangSetCopy
FcLangSetCreate
FcLangSetDel
FcLangSetDestroy
FcLangSetEqual
FcLangSetGetLangs
FcLangSetHasLang
FcLangSetHash
FcLangSetSubtract
FcLangSetUnion
FcMatrixCopy
FcMatrixEqual
FcMatrixMultiply
FcMatrixRotate
FcMatrixScale
FcMatrixShear
FcNameConstant
FcNameGetConstant
FcNameGetObjectType
FcNameParse
FcNameRegisterConstants
FcNameRegisterObjectTypes
FcNameUnparse
FcNameUnregisterConstants
FcNameUnregisterObjectTypes
FcObjectSetAdd
FcObjectSetBuild
FcObjectSetCreate
FcObjectSetDestroy
FcObjectSetVaBuild
FcPatternAdd
FcPatternAddBool
FcPatternAddCharSet
FcPatternAddDouble
FcPatternAddFTFace
FcPatternAddInteger
FcPatternAddLangSet
FcPatternAddMatrix
FcPatternAddRange
FcPatternAddString
FcPatternAddWeak
FcPatternBuild
FcPatternCreate
FcPatternDel
FcPatternDestroy
FcPatternDuplicate
FcPatternEqual
FcPatternEqualSubset
FcPatternFilter
FcPatternFormat
FcPatternGet
FcPatternGetBool
FcPatternGetCharSet
FcPatternGetDouble
FcPatternGetFTFace
FcPatternGetInteger
FcPatternGetLangSet
FcPatternGetMatrix
FcPatternGetRange
FcPatternGetString
FcPatternHash
FcPatternPrint
FcPatternReference
FcPatternRemove
FcPatternVaBuild
FcRangeCopy
FcRangeCreateDouble
FcRangeCreateInteger
FcRangeDestroy
FcRangeGetDouble
FcStrBasename
FcStrCmp
FcStrCmpIgnoreCase
FcStrCopy
FcStrCopyFilename
FcStrDirname
FcStrDowncase
FcStrFree
FcStrListCreate
FcStrListDone
FcStrListFirst
FcStrListNext
FcStrPlus
FcStrSetAdd
FcStrSetAddFilename
FcStrSetCreate
FcStrSetDel
FcStrSetDestroy
FcStrSetEqual
FcStrSetMember
FcStrStr
FcStrStrIgnoreCase
FcUcs4ToUtf8
FcUtf16Len
FcUtf16ToUcs4
FcUtf8Len
FcUtf8ToUcs4
FcValueDestroy
FcValueEqual
FcValuePrint
FcValueSave
FcWeightFromOpenType
FcWeightToOpenType

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0cb0df44dc59fd2b4c059f1f2ebb72f0

Headers

File Characteristics

Imports

kernel32

msvcr90

user32

libxmlxpat

libfreetype-6

libintl-8

Exports

Exports

Sections

.text Size: 119KB - Virtual size: 118KB

.data Size: 16KB - Virtual size: 16KB

.rdata Size: 62KB - Virtual size: 62KB

.bss Size: - Virtual size: 5KB

.edata Size: 6KB - Virtual size: 5KB

.idata Size: 4KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 119KB - Virtual size: 118KB

.data
Size: 16KB - Virtual size: 16KB

.rdata
Size: 62KB - Virtual size: 62KB

.bss
Size: - Virtual size: 5KB

.edata
Size: 6KB - Virtual size: 5KB

.idata
Size: 4KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 5KB - Virtual size: 4KB