libpangoft2-1[.]0-0[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

libpangoft2-1.0-0.dll
Size

65KB
MD5

800be01f6d5aa04e3efe28edc03f9fef
SHA1

1a0e9619f52445fef2a0802f3c2cc1f44c989c5d
SHA256

bdf12f345723570c360abae3054efab0aa3924ee471a54ab1bf8d3553f27cb2c
SHA512

6600c93f02f05f3036652600578db6b884b373076a9f0e5d949dc24f77c579649a83437223236f2559adb89de2de08c4976428c5f587bab4ed444c8dcd8cef96
SSDEEP

1536:kcgl0Tw0/vpneSjY1oPeDDGDsnWlUGzj:k6wAn61oPeDDGIWlUGv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
libpangoft2-1.0-0.dll

Files

libpangoft2-1.0-0.dll
.dll windows:4 windows x86 arch:x86

a0f5406b8e0a945c596b76c8b382c8d7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libpango-1.0-0

pango_context_get_font_map
pango_context_get_language
pango_context_get_matrix
pango_context_set_language
pango_coverage_get
pango_coverage_new
pango_coverage_ref
pango_coverage_set
pango_coverage_unref
pango_engine_shape_get_type
pango_font_describe_with_absolute_size
pango_font_description_copy
pango_font_description_copy_static
pango_font_description_equal
pango_font_description_free
pango_font_description_get_family
pango_font_description_get_gravity
pango_font_description_get_size
pango_font_description_get_size_is_absolute
pango_font_description_get_stretch
pango_font_description_get_style
pango_font_description_get_weight
pango_font_description_hash
pango_font_description_new
pango_font_description_set_absolute_size
pango_font_description_set_family
pango_font_description_set_gravity
pango_font_description_set_size
pango_font_description_set_stretch
pango_font_description_set_style
pango_font_description_set_variant
pango_font_description_set_weight
pango_font_description_to_string
pango_font_description_unset_fields
pango_font_face_get_type
pango_font_family_get_type
pango_font_get_coverage
pango_font_get_glyph_extents
pango_font_get_metrics
pango_font_get_type
pango_font_map_changed
pango_font_map_create_context
pango_font_map_get_type
pango_font_map_load_fontset
pango_font_metrics_new
pango_font_metrics_ref
pango_font_metrics_unref
pango_fontset_foreach
pango_fontset_get_type
pango_glyph_string_set_size
pango_gravity_get_type
pango_language_from_string
pango_language_get_sample_string
pango_layout_get_context
pango_layout_get_extents
pango_layout_get_lines_readonly
pango_layout_get_type
pango_layout_new
pango_layout_set_font_description
pango_layout_set_text
pango_matrix_get_font_scale_factor
pango_matrix_get_font_scale_factors
pango_quantize_line_geometry
pango_renderer_draw_glyphs
pango_renderer_draw_layout
pango_renderer_draw_layout_line
pango_renderer_get_type
pango_renderer_set_matrix
pango_version

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcr90

__dllonexit
_amsg_exit
_initterm
_iob
_lock
_onexit
_unlock
abort
bsearch
calloc
free
fwrite
malloc
memcmp
strchr
strcmp
strlen
strncmp
vfprintf

libfontconfig-1

FcCharSetFirstPage
FcCharSetHasChar
FcCharSetNextPage
FcConfigDestroy
FcConfigReference
FcConfigSubstitute
FcDefaultSubstitute
FcFontList
FcFontMatch
FcFontRenderPrepare
FcFontSetDestroy
FcFontSort
FcFreeTypeCharIndex
FcMatrixMultiply
FcObjectSetAdd
FcObjectSetBuild
FcObjectSetCreate
FcObjectSetDestroy
FcPatternAddDouble
FcPatternAddMatrix
FcPatternAddString
FcPatternBuild
FcPatternCreate
FcPatternDel
FcPatternDestroy
FcPatternDuplicate
FcPatternEqual
FcPatternGet
FcPatternGetBool
FcPatternGetCharSet
FcPatternGetDouble
FcPatternGetInteger
FcPatternGetMatrix
FcPatternGetString
FcPatternHash
FcPatternReference
FcWeightFromOpenType
FcWeightToOpenType

libfreetype-6

FT_Done_Face
FT_Done_FreeType
FT_Get_Kerning
FT_Get_Sfnt_Table
FT_Init_FreeType
FT_Load_Glyph
FT_MulFix
FT_New_Face
FT_Render_Glyph
FT_Set_Char_Size
FT_Set_Transform
FT_Vector_Transform

libglib-2.0-0

g_array_append_vals
g_array_free
g_array_new
g_array_sort
g_ascii_strcasecmp
g_assertion_message_expr
g_free
g_get_prgname
g_hash_table_destroy
g_hash_table_foreach
g_hash_table_foreach_remove
g_hash_table_insert
g_hash_table_lookup
g_hash_table_new
g_hash_table_new_full
g_hash_table_remove
g_intern_static_string
g_list_prepend
g_list_remove_link
g_log
g_malloc
g_malloc0
g_malloc0_n
g_malloc_n
g_memdup
g_mutex_trylock
g_mutex_unlock
g_once_init_enter
g_once_init_leave
g_ptr_array_add
g_ptr_array_free
g_ptr_array_new
g_queue_free
g_queue_new
g_queue_pop_tail
g_queue_push_head_link
g_realloc_n
g_return_if_fail_warning
g_slice_alloc
g_slice_alloc0
g_slice_free1
g_slist_append
g_slist_delete_link
g_slist_foreach
g_slist_free
g_slist_prepend
g_sprintf
g_str_equal
g_str_hash
g_strdup
g_strfreev
g_strsplit
g_unichar_iswide
g_unichar_iszerowidth
g_utf8_get_char
g_utf8_skip

libgobject-2.0-0

g_enum_get_value
g_enum_get_value_by_nick
g_object_class_install_property
g_object_new
g_object_ref
g_object_set
g_object_unref
g_param_spec_object
g_param_spec_pointer
g_type_check_instance_is_a
g_type_class_add_private
g_type_class_adjust_private_offset
g_type_class_peek_parent
g_type_class_ref
g_type_instance_get_private
g_type_name
g_type_register_static_simple
g_value_get_object
g_value_get_pointer
g_value_set_pointer
g_value_take_object
g_weak_ref_clear
g_weak_ref_get
g_weak_ref_set

libharfbuzz-0

hb_buffer_add
hb_buffer_add_utf8
hb_buffer_create
hb_buffer_destroy
hb_buffer_get_direction
hb_buffer_get_glyph_infos
hb_buffer_get_glyph_positions
hb_buffer_get_length
hb_buffer_reset
hb_buffer_reverse
hb_buffer_set_cluster_level
hb_buffer_set_direction
hb_buffer_set_flags
hb_buffer_set_language
hb_buffer_set_script
hb_buffer_set_unicode_funcs
hb_face_destroy
hb_feature_from_string
hb_font_create
hb_font_destroy
hb_font_funcs_create
hb_font_funcs_set_glyph_contour_point_func
hb_font_funcs_set_glyph_extents_func
hb_font_funcs_set_glyph_h_advance_func
hb_font_funcs_set_glyph_h_kerning_func
hb_font_funcs_set_glyph_h_origin_func
hb_font_funcs_set_glyph_v_advance_func
hb_font_funcs_set_glyph_v_origin_func
hb_font_funcs_set_nominal_glyph_func
hb_font_set_funcs
hb_font_set_ppem
hb_font_set_scale
hb_ft_face_create
hb_ft_face_create_cached
hb_glib_get_unicode_funcs
hb_glib_script_from_script
hb_glib_script_to_script
hb_language_from_string
hb_language_to_string
hb_ot_layout_language_find_feature
hb_ot_layout_language_get_feature_tags
hb_ot_layout_language_get_required_feature_index
hb_ot_layout_script_find_language
hb_ot_layout_script_get_language_tags
hb_ot_layout_table_find_script
hb_ot_layout_table_get_script_tags
hb_ot_tag_from_language
hb_ot_tag_to_language
hb_ot_tag_to_script
hb_ot_tags_from_script
hb_shape

Exports

Exports

pango_fc_decoder_get_charset
pango_fc_decoder_get_glyph
pango_fc_decoder_get_type
pango_fc_font_create_base_metrics_for_context
pango_fc_font_description_from_pattern
pango_fc_font_get_glyph
pango_fc_font_get_raw_extents
pango_fc_font_get_type
pango_fc_font_get_unknown_glyph
pango_fc_font_has_char
pango_fc_font_kern_glyphs
pango_fc_font_key_get_context_key
pango_fc_font_key_get_matrix
pango_fc_font_key_get_pattern
pango_fc_font_lock_face
pango_fc_font_map_add_decoder_find_func
pango_fc_font_map_cache_clear
pango_fc_font_map_config_changed
pango_fc_font_map_create_context
pango_fc_font_map_find_decoder
pango_fc_font_map_get_config
pango_fc_font_map_get_type
pango_fc_font_map_set_config
pango_fc_font_map_shutdown
pango_fc_font_unlock_face
pango_fc_fontset_key_get_absolute_size
pango_fc_fontset_key_get_context_key
pango_fc_fontset_key_get_description
pango_fc_fontset_key_get_language
pango_fc_fontset_key_get_matrix
pango_fc_fontset_key_get_resolution
pango_ft2_font_get_coverage
pango_ft2_font_get_face
pango_ft2_font_get_kerning
pango_ft2_font_get_type
pango_ft2_font_map_create_context
pango_ft2_font_map_for_display
pango_ft2_font_map_get_type
pango_ft2_font_map_new
pango_ft2_font_map_set_default_substitute
pango_ft2_font_map_set_resolution
pango_ft2_font_map_substitute_changed
pango_ft2_get_context
pango_ft2_get_unknown_glyph
pango_ft2_render
pango_ft2_render_layout
pango_ft2_render_layout_line
pango_ft2_render_layout_line_subpixel
pango_ft2_render_layout_subpixel
pango_ft2_render_transformed
pango_ft2_renderer_get_type
pango_ft2_shutdown_display
pango_ot_buffer_add_glyph
pango_ot_buffer_clear
pango_ot_buffer_destroy
pango_ot_buffer_get_glyphs
pango_ot_buffer_new
pango_ot_buffer_output
pango_ot_buffer_set_rtl
pango_ot_buffer_set_zero_width_marks
pango_ot_info_find_feature
pango_ot_info_find_language
pango_ot_info_find_script
pango_ot_info_get
pango_ot_info_get_type
pango_ot_info_list_features
pango_ot_info_list_languages
pango_ot_info_list_scripts
pango_ot_ruleset_add_feature
pango_ot_ruleset_description_copy
pango_ot_ruleset_description_equal
pango_ot_ruleset_description_free
pango_ot_ruleset_description_hash
pango_ot_ruleset_get_feature_count
pango_ot_ruleset_get_for_description
pango_ot_ruleset_get_type
pango_ot_ruleset_maybe_add_feature
pango_ot_ruleset_maybe_add_features
pango_ot_ruleset_new
pango_ot_ruleset_new_for
pango_ot_ruleset_new_from_description
pango_ot_ruleset_position
pango_ot_ruleset_substitute
pango_ot_tag_from_language
pango_ot_tag_from_script
pango_ot_tag_to_language
pango_ot_tag_to_script

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a0f5406b8e0a945c596b76c8b382c8d7

Headers

File Characteristics

Imports

libpango-1.0-0

kernel32

msvcr90

libfontconfig-1

libfreetype-6

libglib-2.0-0

libgobject-2.0-0

libharfbuzz-0

Exports

Exports

Sections

.text Size: 35KB - Virtual size: 35KB

.data Size: 512B - Virtual size: 76B

.rdata Size: 8KB - Virtual size: 7KB

.bss Size: - Virtual size: 1KB

.edata Size: 3KB - Virtual size: 3KB

.idata Size: 11KB - Virtual size: 10KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 35KB - Virtual size: 35KB

.data
Size: 512B - Virtual size: 76B

.rdata
Size: 8KB - Virtual size: 7KB

.bss
Size: - Virtual size: 1KB

.edata
Size: 3KB - Virtual size: 3KB

.idata
Size: 11KB - Virtual size: 10KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB