libgirepository-1[.]0-1[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

libgirepository-1.0-1.dll
Size

178KB
MD5

abf859acb62c23d22e206fb3f45a5e02
SHA1

cb21028d0797c42e865be75da8518b27cb2d7721
SHA256

ecaac178afdd61cf28b5901e1455f72fc4ac344dd086c8ea0f658800d3fb39e6
SHA512

064696aa1b60b3359817ac61a4a8c08063f531aaea24307975b5bfe8acbce146529079d478ffcef2a7f4cbd11587b7f696fb5b1a512ec50ef362e9b880cd0946
SSDEEP

3072:TY7xpVEK2fyQ5Ou96qI98ugLDhj0FYiLfuWfskdaf6drBV/W2DDXHbARop+A4qHk:TYRi6YCbsL6FtDXsRop+A4qHWIPGxixk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
libgirepository-1.0-1.dll

Files

libgirepository-1.0-1.dll
.dll windows:4 windows x86 arch:x86

94be3aed0876dd6e3b303ea30ad37466

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcr90

__dllonexit
__setusermatherr
_amsg_exit
_errno
_exit
_initterm
_iob
_lock
_onexit
_snwprintf
_unlock
abort
bsearch
calloc
exit
fclose
feof
ferror
fgets
fopen
fprintf
fread
free
fwprintf
fwrite
malloc
memchr
memcpy
memset
printf
raise
rand
realloc
rewind
sprintf
strchr
strcmp
strcpy
strerror
strlen
strncmp
strrchr
strspn
strstr
strtol
vfprintf
wcscpy

user32

MessageBoxW

libffi-6

ffi_call
ffi_closure_alloc
ffi_closure_free
ffi_prep_cif
ffi_prep_closure_loc
ffi_type_double
ffi_type_float
ffi_type_pointer
ffi_type_sint16
ffi_type_sint32
ffi_type_sint64
ffi_type_sint8
ffi_type_uint16
ffi_type_uint32
ffi_type_uint64
ffi_type_uint8
ffi_type_void

libgio-2.0-0

g_data_input_stream_new
g_data_input_stream_read_line
g_file_new_for_path
g_file_read
g_file_replace
g_input_stream_close
g_input_stream_get_type
g_io_error_quark
g_output_stream_close
g_output_stream_get_type
g_output_stream_write_all

libglib-2.0-0

g_ascii_table
g_assertion_message_expr
g_build_filename
g_clear_error
g_dir_close
g_dir_open_utf8
g_dir_read_name_utf8
g_direct_equal
g_direct_hash
g_free
g_getenv_utf8
g_hash_table_add
g_hash_table_destroy
g_hash_table_foreach
g_hash_table_insert
g_hash_table_iter_init
g_hash_table_iter_next
g_hash_table_iter_steal
g_hash_table_lookup
g_hash_table_lookup_extended
g_hash_table_new
g_hash_table_new_full
g_hash_table_remove
g_hash_table_size
g_hash_table_unref
g_intern_static_string
g_list_append
g_list_find_custom
g_list_foreach
g_list_free
g_list_length
g_list_prepend
g_log
g_malloc0
g_malloc0_n
g_malloc_n
g_mapped_file_get_contents
g_mapped_file_get_length
g_mapped_file_new
g_mapped_file_unref
g_markup_vprintf_escaped
g_memdup
g_once_init_enter
g_once_init_leave
g_option_group_add_entries
g_option_group_new
g_path_is_absolute
g_prefix_error
g_printerr
g_propagate_error
g_ptr_array_add
g_ptr_array_free
g_ptr_array_new_full
g_quark_from_static_string
g_quark_to_string
g_return_if_fail_warning
g_set_error
g_slice_alloc
g_slice_alloc0
g_slice_free1
g_slist_delete_link
g_slist_foreach
g_slist_free
g_slist_free_full
g_slist_prepend
g_slist_reverse
g_slist_sort
g_str_equal
g_str_has_prefix
g_str_has_suffix
g_str_hash
g_strchomp
g_strcmp0
g_strdup
g_strdup_printf
g_strfreev
g_string_append
g_string_free
g_string_insert_c
g_string_new
g_string_overwrite_len
g_strndup
g_strsplit
g_win32_get_package_installation_directory_of_module

libgmodule-2.0-0

g_module_close
g_module_error
g_module_open_utf8
g_module_symbol

libgobject-2.0-0

g_boxed_type_register_static
g_object_class_list_properties
g_object_interface_list_properties
g_object_new
g_object_ref
g_object_unref
g_signal_list_ids
g_signal_query
g_type_check_class_cast
g_type_check_instance_cast
g_type_check_instance_is_a
g_type_class_add_private
g_type_class_adjust_private_offset
g_type_class_peek_parent
g_type_class_ref
g_type_class_unref
g_type_default_interface_ref
g_type_from_name
g_type_fundamental
g_type_instance_get_private
g_type_interface_peek
g_type_interface_prerequisites
g_type_interfaces
g_type_name
g_type_parent
g_type_register_static_simple
g_type_test_flags
g_value_set_boolean
g_value_set_boxed
g_value_set_double
g_value_set_float
g_value_set_int
g_value_set_int64
g_value_set_long
g_value_set_param
g_value_set_pointer
g_value_set_schar
g_value_set_string
g_value_set_uchar
g_value_set_uint
g_value_set_uint64
g_value_set_ulong

Exports

Exports

g_arg_info_get_closure
g_arg_info_get_destroy
g_arg_info_get_direction
g_arg_info_get_ownership_transfer
g_arg_info_get_scope
g_arg_info_get_type
g_arg_info_is_caller_allocates
g_arg_info_is_optional
g_arg_info_is_return_value
g_arg_info_is_skip
g_arg_info_load_type
g_arg_info_may_be_null
g_base_info_equal
g_base_info_get_attribute
g_base_info_get_container
g_base_info_get_name
g_base_info_get_namespace
g_base_info_get_type
g_base_info_get_typelib
g_base_info_gtype_get_type
g_base_info_is_deprecated
g_base_info_iterate_attributes
g_base_info_ref
g_base_info_unref
g_callable_info_can_throw_gerror
g_callable_info_free_closure
g_callable_info_get_arg
g_callable_info_get_caller_owns
g_callable_info_get_instance_ownership_transfer
g_callable_info_get_n_args
g_callable_info_get_return_attribute
g_callable_info_get_return_type
g_callable_info_invoke
g_callable_info_is_method
g_callable_info_iterate_return_attributes
g_callable_info_load_arg
g_callable_info_load_return_type
g_callable_info_may_return_null
g_callable_info_prepare_closure
g_callable_info_skip_return
g_constant_info_free_value
g_constant_info_get_type
g_constant_info_get_value
g_enum_info_get_error_domain
g_enum_info_get_method
g_enum_info_get_n_methods
g_enum_info_get_n_values
g_enum_info_get_storage_type
g_enum_info_get_value
g_field_info_get_field
g_field_info_get_flags
g_field_info_get_offset
g_field_info_get_size
g_field_info_get_type
g_field_info_set_field
g_function_info_get_flags
g_function_info_get_property
g_function_info_get_symbol
g_function_info_get_vfunc
g_function_info_invoke
g_function_info_prep_invoker
g_function_invoker_destroy
g_function_invoker_new_for_address
g_info_new
g_info_type_to_string
g_interface_info_find_method
g_interface_info_find_signal
g_interface_info_find_vfunc
g_interface_info_get_constant
g_interface_info_get_iface_struct
g_interface_info_get_method
g_interface_info_get_n_constants
g_interface_info_get_n_methods
g_interface_info_get_n_prerequisites
g_interface_info_get_n_properties
g_interface_info_get_n_signals
g_interface_info_get_n_vfuncs
g_interface_info_get_prerequisite
g_interface_info_get_property
g_interface_info_get_signal
g_interface_info_get_vfunc
g_invoke_error_quark
g_irepository_dump
g_irepository_enumerate_versions
g_irepository_error_quark
g_irepository_find_by_error_domain
g_irepository_find_by_gtype
g_irepository_find_by_name
g_irepository_get_c_prefix
g_irepository_get_default
g_irepository_get_dependencies
g_irepository_get_immediate_dependencies
g_irepository_get_info
g_irepository_get_loaded_namespaces
g_irepository_get_n_infos
g_irepository_get_option_group
g_irepository_get_search_path
g_irepository_get_shared_library
g_irepository_get_type
g_irepository_get_typelib_path
g_irepository_get_version
g_irepository_is_registered
g_irepository_load_typelib
g_irepository_prepend_library_path
g_irepository_prepend_search_path
g_irepository_require
g_irepository_require_private
g_object_info_find_method
g_object_info_find_method_using_interfaces
g_object_info_find_signal
g_object_info_find_vfunc
g_object_info_find_vfunc_using_interfaces
g_object_info_get_abstract
g_object_info_get_class_struct
g_object_info_get_constant
g_object_info_get_field
g_object_info_get_fundamental
g_object_info_get_get_value_function
g_object_info_get_get_value_function_pointer
g_object_info_get_interface
g_object_info_get_method
g_object_info_get_n_constants
g_object_info_get_n_fields
g_object_info_get_n_interfaces
g_object_info_get_n_methods
g_object_info_get_n_properties
g_object_info_get_n_signals
g_object_info_get_n_vfuncs
g_object_info_get_parent
g_object_info_get_property
g_object_info_get_ref_function
g_object_info_get_ref_function_pointer
g_object_info_get_set_value_function
g_object_info_get_set_value_function_pointer
g_object_info_get_signal
g_object_info_get_type_init
g_object_info_get_type_name
g_object_info_get_unref_function
g_object_info_get_unref_function_pointer
g_object_info_get_vfunc
g_property_info_get_flags
g_property_info_get_ownership_transfer
g_property_info_get_type
g_registered_type_info_get_g_type
g_registered_type_info_get_type_init
g_registered_type_info_get_type_name
g_signal_info_get_class_closure
g_signal_info_get_flags
g_signal_info_true_stops_emit
g_struct_info_find_field
g_struct_info_find_method
g_struct_info_get_alignment
g_struct_info_get_field
g_struct_info_get_method
g_struct_info_get_n_fields
g_struct_info_get_n_methods
g_struct_info_get_size
g_struct_info_is_foreign
g_struct_info_is_gtype_struct
g_type_info_get_array_fixed_size
g_type_info_get_array_length
g_type_info_get_array_type
g_type_info_get_ffi_type
g_type_info_get_interface
g_type_info_get_param_type
g_type_info_get_tag
g_type_info_is_pointer
g_type_info_is_zero_terminated
g_type_tag_to_string
g_typelib_check_sanity
g_typelib_free
g_typelib_get_namespace
g_typelib_new_from_const_memory
g_typelib_new_from_mapped_file
g_typelib_new_from_memory
g_typelib_symbol
g_typelib_validate
g_union_info_find_method
g_union_info_get_alignment
g_union_info_get_discriminator
g_union_info_get_discriminator_offset
g_union_info_get_discriminator_type
g_union_info_get_field
g_union_info_get_method
g_union_info_get_n_fields
g_union_info_get_n_methods
g_union_info_get_size
g_union_info_is_discriminated
g_value_info_get_value
g_vfunc_info_get_address
g_vfunc_info_get_flags
g_vfunc_info_get_invoker
g_vfunc_info_get_offset
g_vfunc_info_get_signal
g_vfunc_info_invoke
gi_cclosure_marshal_generic
gi_type_info_extract_ffi_return_value
gi_type_tag_get_ffi_type

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1000B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

94be3aed0876dd6e3b303ea30ad37466

Headers

File Characteristics

Imports

kernel32

msvcr90

user32

libffi-6

libgio-2.0-0

libglib-2.0-0

libgmodule-2.0-0

libgobject-2.0-0

Exports

Exports

Sections

.text Size: 129KB - Virtual size: 129KB

.data Size: 512B - Virtual size: 196B

.rdata Size: 25KB - Virtual size: 25KB

.bss Size: - Virtual size: 1000B

.edata Size: 7KB - Virtual size: 7KB

.idata Size: 7KB - Virtual size: 7KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 129KB - Virtual size: 129KB

.data
Size: 512B - Virtual size: 196B

.rdata
Size: 25KB - Virtual size: 25KB

.bss
Size: - Virtual size: 1000B

.edata
Size: 7KB - Virtual size: 7KB

.idata
Size: 7KB - Virtual size: 7KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 5KB - Virtual size: 5KB