c78fa61adcd1973ae2b6053c7eb40e643889cb5fe64d4ad1613689a8fc581251

Sharing

Copy URL

Twitter E-mail

General

Target

c78fa61adcd1973ae2b6053c7eb40e643889cb5fe64d4ad1613689a8fc581251
Size

271KB
MD5

81f772917faee44c58b5648e0283c1ba
SHA1

754903e43f4ad3236b1fa3b7e95e1b018fc6c917
SHA256

c78fa61adcd1973ae2b6053c7eb40e643889cb5fe64d4ad1613689a8fc581251
SHA512

8befdafeddd6fa7cf0e9a67492793e495c9dde73705e1743cafeeb3cab19ee51911866419ccb4cb5c6901ab5ba4515774ca2686b2931db0b8cee7c7af1e7bcc4
SSDEEP

6144:Qz1t6mJLiwiUH1lWfKz69zMsdZOW/pKOhDZw:41t9JLiwiUH1lWfM65ZOWBZhDZw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c78fa61adcd1973ae2b6053c7eb40e643889cb5fe64d4ad1613689a8fc581251

Files

c78fa61adcd1973ae2b6053c7eb40e643889cb5fe64d4ad1613689a8fc581251
.dll windows:4 windows x64 arch:x64

4a4c17c7850e4ede471b81b72b40a44d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

libgio-2.0-0

g_async_result_get_type
g_cancellable_get_type
g_icon_get_type
g_input_stream_get_type
g_input_stream_read
g_io_error_quark
g_output_stream_get_type
g_output_stream_write
g_resources_get_info
g_resources_lookup_data
g_resources_open_stream
g_simple_async_result_get_op_res_gboolean
g_simple_async_result_get_op_res_gpointer
g_simple_async_result_get_source_tag
g_simple_async_result_get_type
g_simple_async_result_new
g_simple_async_result_propagate_error
g_simple_async_result_run_in_thread
g_simple_async_result_set_op_res_gboolean
g_simple_async_result_set_op_res_gpointer
g_simple_async_result_take_error

libglib-2.0-0

g_ascii_strcasecmp
g_ascii_strtoll
g_ascii_strup
g_ascii_table
g_ascii_xdigit_value
g_assertion_message
g_assertion_message_expr
g_base64_decode
g_base64_encode
g_build_filename
g_byte_array_append
g_byte_array_free
g_byte_array_new
g_bytes_get_data
g_bytes_unref
g_convert
g_dgettext
g_direct_equal
g_direct_hash
g_dngettext
g_error_free
g_file_error_from_errno
g_file_error_quark
g_file_open_tmp_utf8
g_filename_display_name
g_fopen
g_free
g_get_current_time
g_getenv_utf8
g_hash_table_destroy
g_hash_table_insert
g_hash_table_lookup
g_hash_table_new
g_intern_static_string
g_io_channel_new_file_utf8
g_io_channel_read_line
g_io_channel_unref
g_list_append
g_list_find
g_list_first
g_list_free
g_list_free_full
g_list_insert_sorted
g_list_last
g_list_length
g_locale_to_utf8
g_log
g_malloc
g_malloc0
g_malloc0_n
g_malloc_n
g_mutex_lock
g_mutex_unlock
g_once_init_enter
g_once_init_leave
g_print
g_propagate_error
g_quark_from_static_string
g_realloc
g_realloc_n
g_return_if_fail_warning
g_set_error
g_set_error_literal
g_slice_alloc
g_slice_copy
g_slice_free1
g_slist_append
g_slist_foreach
g_slist_free
g_slist_length
g_slist_nth_data
g_slist_prepend
g_snprintf
g_str_equal
g_str_hash
g_strcompress
g_strconcat
g_strdup
g_strdup_printf
g_strdup_vprintf
g_strdupv
g_strerror
g_strfreev
g_string_append
g_string_append_len
g_string_append_printf
g_string_free
g_string_insert_c
g_string_new
g_string_truncate
g_strndup
g_threads_got_initialized
g_try_malloc
g_try_malloc0
g_try_malloc0_n
g_try_malloc_n
g_try_realloc
g_unlink
g_warn_message
g_win32_get_package_installation_directory_of_module
g_win32_locale_filename_from_utf8

libgmodule-2.0-0

g_module_error
g_module_open_utf8
g_module_symbol

libgobject-2.0-0

g_boxed_type_register_static
g_cclosure_marshal_VOID__VOID
g_enum_register_static
g_object_class_install_property
g_object_get_qdata
g_object_new
g_object_notify
g_object_ref
g_object_set_data_full
g_object_set_qdata_full
g_object_steal_qdata
g_object_unref
g_param_spec_boolean
g_param_spec_enum
g_param_spec_int
g_param_spec_pointer
g_signal_connect_data
g_signal_emit
g_signal_new
g_type_add_interface_static
g_type_check_class_cast
g_type_check_instance_cast
g_type_check_instance_is_a
g_type_class_peek_parent
g_type_name
g_type_register_static_simple
g_value_get_boolean
g_value_get_enum
g_value_get_int
g_value_get_pointer
g_value_peek_pointer
g_value_set_boolean
g_value_set_enum
g_value_set_int
g_value_set_pointer

libintl-8

libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_ngettext

libjasper-1

jas_cmprof_createfromclrspc
jas_image_chclrspc
jas_image_decode
jas_image_destroy
jas_image_readcmpt
jas_init
jas_matrix_create
jas_matrix_destroy
jas_stream_close
jas_stream_memopen
jas_stream_rewind
jas_stream_write

libjpeg-8

jpeg_CreateCompress
jpeg_CreateDecompress
jpeg_calc_output_dimensions
jpeg_destroy_compress
jpeg_destroy_decompress
jpeg_finish_compress
jpeg_finish_decompress
jpeg_finish_output
jpeg_input_complete
jpeg_read_header
jpeg_read_scanlines
jpeg_resync_to_restart
jpeg_save_markers
jpeg_set_defaults
jpeg_set_quality
jpeg_start_compress
jpeg_start_decompress
jpeg_start_output
jpeg_std_error
jpeg_stdio_dest
jpeg_write_scanlines

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryW
MultiByteToWideChar
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

_fdopen
_fileno
__dllonexit
__iob_func
__mb_cur_max
_amsg_exit
_errno
_initterm
_lock
_lseek
_onexit
_setjmp
_unlock
abort
atoi
bsearch
calloc
ceil
fclose
feof
ferror
fflush
fgets
floor
fputc
fread
free
fscanf
fseek
fwrite
getc
getenv
localeconv
longjmp
malloc
memcmp
memcpy
memmove
memset
rewind
setlocale
signal
sscanf
strchr
strcmp
strcpy
strerror
strlen
strncat
strncmp
strncpy
strrchr
strtol
wcslen

libpng15-15

png_create_info_struct
png_create_read_struct_2
png_create_write_struct
png_destroy_read_struct
png_destroy_write_struct
png_error
png_get_IHDR
png_get_bit_depth
png_get_channels
png_get_error_ptr
png_get_iCCP
png_get_io_ptr
png_get_progressive_ptr
png_get_text
png_get_valid
png_init_io
png_process_data
png_progressive_combine_row
png_read_end
png_read_image
png_read_info
png_read_update_info
png_set_IHDR
png_set_compression_level
png_set_expand
png_set_gray_to_rgb
png_set_iCCP
png_set_interlace_handling
png_set_longjmp_fn
png_set_packing
png_set_progressive_read_fn
png_set_sBIT
png_set_shift
png_set_strip_16
png_set_text
png_set_write_fn
png_write_end
png_write_info
png_write_rows

libtiff-5

TIFFClientOpen
TIFFClose
TIFFFdOpen
TIFFGetField
TIFFIsCODECConfigured
TIFFReadRGBAImageOriented
TIFFSetErrorHandler
TIFFSetField
TIFFSetWarningHandler
TIFFWriteScanline

Exports

Exports

gdk_colorspace_get_type
gdk_interp_type_get_type
gdk_pixbuf_add_alpha
gdk_pixbuf_alpha_mode_get_type
gdk_pixbuf_animation_get_height
gdk_pixbuf_animation_get_iter
gdk_pixbuf_animation_get_static_image
gdk_pixbuf_animation_get_type
gdk_pixbuf_animation_get_width
gdk_pixbuf_animation_is_static_image
gdk_pixbuf_animation_iter_advance
gdk_pixbuf_animation_iter_get_delay_time
gdk_pixbuf_animation_iter_get_pixbuf
gdk_pixbuf_animation_iter_get_type
gdk_pixbuf_animation_iter_on_currently_loading_frame
gdk_pixbuf_animation_new_from_file
gdk_pixbuf_animation_new_from_file_utf8
gdk_pixbuf_animation_ref
gdk_pixbuf_animation_unref
gdk_pixbuf_apply_embedded_orientation
gdk_pixbuf_composite
gdk_pixbuf_composite_color
gdk_pixbuf_composite_color_simple
gdk_pixbuf_copy
gdk_pixbuf_copy_area
gdk_pixbuf_error_get_type
gdk_pixbuf_error_quark
gdk_pixbuf_fill
gdk_pixbuf_flip
gdk_pixbuf_format_copy
gdk_pixbuf_format_free
gdk_pixbuf_format_get_description
gdk_pixbuf_format_get_extensions
gdk_pixbuf_format_get_license
gdk_pixbuf_format_get_mime_types
gdk_pixbuf_format_get_name
gdk_pixbuf_format_get_type
gdk_pixbuf_format_is_disabled
gdk_pixbuf_format_is_scalable
gdk_pixbuf_format_is_writable
gdk_pixbuf_format_set_disabled
gdk_pixbuf_from_pixdata
gdk_pixbuf_get_bits_per_sample
gdk_pixbuf_get_byte_length
gdk_pixbuf_get_colorspace
gdk_pixbuf_get_file_info
gdk_pixbuf_get_formats
gdk_pixbuf_get_has_alpha
gdk_pixbuf_get_height
gdk_pixbuf_get_n_channels
gdk_pixbuf_get_option
gdk_pixbuf_get_pixels
gdk_pixbuf_get_pixels_with_length
gdk_pixbuf_get_rowstride
gdk_pixbuf_get_type
gdk_pixbuf_get_width
gdk_pixbuf_gettext
gdk_pixbuf_loader_close
gdk_pixbuf_loader_get_animation
gdk_pixbuf_loader_get_format
gdk_pixbuf_loader_get_pixbuf
gdk_pixbuf_loader_get_type
gdk_pixbuf_loader_new
gdk_pixbuf_loader_new_with_mime_type
gdk_pixbuf_loader_new_with_type
gdk_pixbuf_loader_set_size
gdk_pixbuf_loader_write
gdk_pixbuf_major_version
gdk_pixbuf_micro_version
gdk_pixbuf_minor_version
gdk_pixbuf_new
gdk_pixbuf_new_from_data
gdk_pixbuf_new_from_file
gdk_pixbuf_new_from_file_at_scale
gdk_pixbuf_new_from_file_at_scale_utf8
gdk_pixbuf_new_from_file_at_size
gdk_pixbuf_new_from_file_at_size_utf8
gdk_pixbuf_new_from_file_utf8
gdk_pixbuf_new_from_inline
gdk_pixbuf_new_from_resource
gdk_pixbuf_new_from_resource_at_scale
gdk_pixbuf_new_from_stream
gdk_pixbuf_new_from_stream_async
gdk_pixbuf_new_from_stream_at_scale
gdk_pixbuf_new_from_stream_at_scale_async
gdk_pixbuf_new_from_stream_finish
gdk_pixbuf_new_from_xpm_data
gdk_pixbuf_new_subpixbuf
gdk_pixbuf_non_anim_get_type
gdk_pixbuf_non_anim_new
gdk_pixbuf_ref
gdk_pixbuf_rotate_simple
gdk_pixbuf_rotation_get_type
gdk_pixbuf_saturate_and_pixelate
gdk_pixbuf_save
gdk_pixbuf_save_to_buffer
gdk_pixbuf_save_to_bufferv
gdk_pixbuf_save_to_callback
gdk_pixbuf_save_to_callbackv
gdk_pixbuf_save_to_stream
gdk_pixbuf_save_to_stream_async
gdk_pixbuf_save_to_stream_finish
gdk_pixbuf_save_utf8
gdk_pixbuf_savev
gdk_pixbuf_savev_utf8
gdk_pixbuf_scale
gdk_pixbuf_scale_simple
gdk_pixbuf_scaled_anim_get_type
gdk_pixbuf_scaled_anim_iter_get_type
gdk_pixbuf_set_option
gdk_pixbuf_simple_anim_add_frame
gdk_pixbuf_simple_anim_get_loop
gdk_pixbuf_simple_anim_get_type
gdk_pixbuf_simple_anim_iter_get_type
gdk_pixbuf_simple_anim_new
gdk_pixbuf_simple_anim_set_loop
gdk_pixbuf_unref
gdk_pixbuf_version
gdk_pixdata_deserialize
gdk_pixdata_from_pixbuf
gdk_pixdata_serialize
gdk_pixdata_to_csource

Sections

.text
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a4c17c7850e4ede471b81b72b40a44d

Headers

File Characteristics

Imports

libgio-2.0-0

libglib-2.0-0

libgmodule-2.0-0

libgobject-2.0-0

libintl-8

libjasper-1

libjpeg-8

kernel32

msvcrt

libpng15-15

libtiff-5

Exports

Exports

Sections

.text Size: 178KB - Virtual size: 177KB

.data Size: 3KB - Virtual size: 3KB

.rdata Size: 39KB - Virtual size: 39KB

.pdata Size: 7KB - Virtual size: 6KB

.xdata Size: 7KB - Virtual size: 6KB

.bss Size: - Virtual size: 5KB

.edata Size: 5KB - Virtual size: 4KB

.idata Size: 13KB - Virtual size: 13KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 72B

.rsrc Size: 1024B - Virtual size: 1004B

.reloc Size: 512B - Virtual size: 364B

/4 Size: 512B - Virtual size: 36B

.text
Size: 178KB - Virtual size: 177KB

.data
Size: 3KB - Virtual size: 3KB

.rdata
Size: 39KB - Virtual size: 39KB

.pdata
Size: 7KB - Virtual size: 6KB

.xdata
Size: 7KB - Virtual size: 6KB

.bss
Size: - Virtual size: 5KB

.edata
Size: 5KB - Virtual size: 4KB

.idata
Size: 13KB - Virtual size: 13KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 72B

.rsrc
Size: 1024B - Virtual size: 1004B

.reloc
Size: 512B - Virtual size: 364B

/4
Size: 512B - Virtual size: 36B