C:\onegit\pango\wntmsci12.pro\misc\build\pango-1.28.3\pango\pangolo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
virussign.com_79fe3a409c1bd4cc02c57c9cfb283d90.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
virussign.com_79fe3a409c1bd4cc02c57c9cfb283d90.dll
Resource
win10v2004-20240508-en
General
-
Target
virussign.com_79fe3a409c1bd4cc02c57c9cfb283d90.vir
-
Size
272KB
-
MD5
79fe3a409c1bd4cc02c57c9cfb283d90
-
SHA1
ae05a5ce536af75295f93bed23a2c62ae7d09477
-
SHA256
d80cf3a15e9809038380f312feb5e2683a7dee76590b2d9f87d2acd4a2b2e6a7
-
SHA512
824e20e877df50774f1290c7fe002a95fc75959b292f7086bead3ed33d8dbb98e9c43c9d9c8f8cfeaba8d556d7b60929deafb00325a13e5d87fe6839c38faffa
-
SSDEEP
3072:nLKmFRVfWi8nrD7fewBKiNZ2B5Ztc/aY6XL0oLppYAKTB1433yH8wyhnPvqGb0:nLKmFX2rXGwBBG5/+gL/YHynnPSGb0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource virussign.com_79fe3a409c1bd4cc02c57c9cfb283d90.vir
Files
-
virussign.com_79fe3a409c1bd4cc02c57c9cfb283d90.vir.dll windows:5 windows x86 arch:x86
d2bfe73e2d6729681c5551532a680d2c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
gliblo
g_list_foreach
g_list_reverse
g_hash_table_insert
g_hash_table_lookup
g_strconcat
g_array_set_size
g_slist_append
g_slist_concat
g_intern_string
g_slist_alloc
g_slist_free_1
g_list_copy
g_unichar_get_mirror_char
g_strdup_printf
g_ascii_xdigit_value
g_unichar_isprint
g_quark_from_string
g_hash_table_new_full
g_direct_hash
g_hash_table_destroy
g_unichar_iszerowidth
g_malloc0_n
g_realloc_n
g_malloc
g_ptr_array_new
g_ptr_array_free
g_ptr_array_add
g_utf8_pointer_to_offset
g_slist_copy
g_slist_foreach
g_set_error
g_markup_error_quark
g_markup_parse_context_get_position
g_slist_delete_link
g_printerr
g_markup_parse_context_free
g_markup_parse_context_end_parse
g_markup_parse_context_parse
g_markup_parse_context_new
g_win32_getlocale
g_malloc0
g_hash_table_lookup_extended
g_array_free
g_array_append_vals
g_utf8_validate
g_error_free
g_slist_nth
g_utf8_prev_char
g_list_delete_link
g_utf8_offset_to_pointer
g_slice_copy
g_unichar_get_script
g_string_truncate
g_getenv_utf8
g_get_home_dir_utf8
g_key_file_get_value
g_key_file_get_keys
g_key_file_get_groups
g_key_file_free
g_file_error_quark
g_key_file_load_from_file
g_key_file_new
g_win32_get_package_installation_directory_of_module
g_str_has_suffix
g_ascii_strdown
g_strerror
g_list_append
g_list_concat
g_slice_free_chain_with_offset
g_str_equal
g_str_hash
g_hash_table_new
g_fopen
g_quark_to_string
g_build_filename
g_array_new
g_list_prepend
g_list_remove_link
g_list_free_1
g_memdup
g_realloc
g_atomic_int_exchange_and_add
g_atomic_int_add
g_slice_alloc0
g_once_init_enter_impl
g_once_init_leave
g_ascii_tolower
g_string_append_printf
g_string_insert_c
g_string_new
g_string_append
g_ascii_dtostr
g_string_free
g_ascii_strtod
g_ascii_table
g_strndup
g_strsplit
g_strchug
g_strchomp
g_strjoinv
g_strfreev
g_slice_free1
g_ascii_strcasecmp
g_strdup
g_intern_static_string
g_slist_prepend
g_slist_reverse
g_list_length
g_list_free
g_slice_alloc
g_unichar_iswide
g_free
g_slist_length
g_malloc_n
g_slist_free
g_utf8_strlen
g_quark_from_static_string
g_log
g_utf8_get_char
g_unichar_break_type
g_utf8_skip
g_unichar_type
g_unichar_isspace
g_assertion_message_expr
g_string_append_len
g_assertion_message
gobjectlo
g_type_qname
g_type_name
g_type_class_unref
g_type_instance_get_private
g_type_class_add_private
g_enum_get_value
g_object_get_data
g_object_set_data_full
g_object_ref
g_object_unref
g_type_module_use
g_type_class_ref
g_enum_get_value_by_nick
g_object_new
g_type_init
g_type_register_static
g_type_check_instance_cast
g_object_get_qdata
g_object_set_qdata_full
g_type_module_get_type
g_type_check_class_cast
g_type_check_instance_is_a
g_type_class_peek_parent
g_type_register_static_simple
g_boxed_type_register_static
g_flags_register_static
g_enum_register_static
g_type_module_unuse
gmodulelo
g_module_open_utf8
g_module_error
g_module_symbol
g_module_close
msvcr90
bsearch
strcmp
fclose
strchr
strtol
abs
strncmp
strlen
getc
_errno
ferror
_encode_pointer
_malloc_crt
free
memcpy
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
memset
memmove
fabs
cos
sin
sqrt
ceil
floor
getenv
strpbrk
strstr
qsort
_encoded_null
ungetc
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
Exports
Exports
pango_alignment_get_type
pango_attr_background_new
pango_attr_fallback_new
pango_attr_family_new
pango_attr_font_desc_new
pango_attr_foreground_new
pango_attr_gravity_hint_new
pango_attr_gravity_new
pango_attr_iterator_copy
pango_attr_iterator_destroy
pango_attr_iterator_get
pango_attr_iterator_get_attrs
pango_attr_iterator_get_font
pango_attr_iterator_next
pango_attr_iterator_range
pango_attr_language_new
pango_attr_letter_spacing_new
pango_attr_list_change
pango_attr_list_copy
pango_attr_list_filter
pango_attr_list_get_iterator
pango_attr_list_get_type
pango_attr_list_insert
pango_attr_list_insert_before
pango_attr_list_new
pango_attr_list_ref
pango_attr_list_splice
pango_attr_list_unref
pango_attr_rise_new
pango_attr_scale_new
pango_attr_shape_new
pango_attr_shape_new_with_data
pango_attr_size_new
pango_attr_size_new_absolute
pango_attr_stretch_new
pango_attr_strikethrough_color_new
pango_attr_strikethrough_new
pango_attr_style_new
pango_attr_type_get_name
pango_attr_type_get_type
pango_attr_type_register
pango_attr_underline_color_new
pango_attr_underline_new
pango_attr_variant_new
pango_attr_weight_new
pango_attribute_copy
pango_attribute_destroy
pango_attribute_equal
pango_attribute_init
pango_bidi_type_for_unichar
pango_break
pango_color_copy
pango_color_free
pango_color_get_type
pango_color_parse
pango_color_to_string
pango_config_key_get
pango_context_get_base_dir
pango_context_get_base_gravity
pango_context_get_font_description
pango_context_get_font_map
pango_context_get_gravity
pango_context_get_gravity_hint
pango_context_get_language
pango_context_get_matrix
pango_context_get_metrics
pango_context_get_type
pango_context_list_families
pango_context_load_font
pango_context_load_fontset
pango_context_new
pango_context_set_base_dir
pango_context_set_base_gravity
pango_context_set_font_description
pango_context_set_font_map
pango_context_set_gravity_hint
pango_context_set_language
pango_context_set_matrix
pango_coverage_copy
pango_coverage_from_bytes
pango_coverage_get
pango_coverage_level_get_type
pango_coverage_max
pango_coverage_new
pango_coverage_ref
pango_coverage_set
pango_coverage_to_bytes
pango_coverage_unref
pango_default_break
pango_ellipsize_mode_get_type
pango_engine_get_type
pango_engine_lang_get_type
pango_engine_shape_get_type
pango_extents_to_pixels
pango_find_base_dir
pango_find_map
pango_find_paragraph_boundary
pango_font_describe
pango_font_describe_with_absolute_size
pango_font_description_better_match
pango_font_description_copy
pango_font_description_copy_static
pango_font_description_equal
pango_font_description_free
pango_font_description_from_string
pango_font_description_get_family
pango_font_description_get_gravity
pango_font_description_get_set_fields
pango_font_description_get_size
pango_font_description_get_size_is_absolute
pango_font_description_get_stretch
pango_font_description_get_style
pango_font_description_get_type
pango_font_description_get_variant
pango_font_description_get_weight
pango_font_description_hash
pango_font_description_merge
pango_font_description_merge_static
pango_font_description_new
pango_font_description_set_absolute_size
pango_font_description_set_family
pango_font_description_set_family_static
pango_font_description_set_gravity
pango_font_description_set_size
pango_font_description_set_stretch
pango_font_description_set_style
pango_font_description_set_variant
pango_font_description_set_weight
pango_font_description_to_filename
pango_font_description_to_string
pango_font_description_unset_fields
pango_font_descriptions_free
pango_font_face_describe
pango_font_face_get_face_name
pango_font_face_get_type
pango_font_face_is_synthesized
pango_font_face_list_sizes
pango_font_family_get_name
pango_font_family_get_type
pango_font_family_is_monospace
pango_font_family_list_faces
pango_font_find_shaper
pango_font_get_coverage
pango_font_get_font_map
pango_font_get_glyph_extents
pango_font_get_metrics
pango_font_get_type
pango_font_map_create_context
pango_font_map_get_shape_engine_type
pango_font_map_get_type
pango_font_map_list_families
pango_font_map_load_font
pango_font_map_load_fontset
pango_font_mask_get_type
pango_font_metrics_get_approximate_char_width
pango_font_metrics_get_approximate_digit_width
pango_font_metrics_get_ascent
pango_font_metrics_get_descent
pango_font_metrics_get_strikethrough_position
pango_font_metrics_get_strikethrough_thickness
pango_font_metrics_get_type
pango_font_metrics_get_underline_position
pango_font_metrics_get_underline_thickness
pango_font_metrics_new
pango_font_metrics_ref
pango_font_metrics_unref
pango_fontset_foreach
pango_fontset_get_font
pango_fontset_get_metrics
pango_fontset_get_type
pango_fontset_simple_append
pango_fontset_simple_get_type
pango_fontset_simple_new
pango_fontset_simple_size
pango_get_lib_subdirectory
pango_get_log_attrs
pango_get_mirror_char
pango_get_sysconf_subdirectory
pango_glyph_item_apply_attrs
pango_glyph_item_copy
pango_glyph_item_free
pango_glyph_item_get_logical_widths
pango_glyph_item_get_type
pango_glyph_item_iter_copy
pango_glyph_item_iter_free
pango_glyph_item_iter_get_type
pango_glyph_item_iter_init_end
pango_glyph_item_iter_init_start
pango_glyph_item_iter_next_cluster
pango_glyph_item_iter_prev_cluster
pango_glyph_item_letter_space
pango_glyph_item_split
pango_glyph_string_copy
pango_glyph_string_extents
pango_glyph_string_extents_range
pango_glyph_string_free
pango_glyph_string_get_logical_widths
pango_glyph_string_get_type
pango_glyph_string_get_width
pango_glyph_string_index_to_x
pango_glyph_string_new
pango_glyph_string_set_size
pango_glyph_string_x_to_index
pango_gravity_get_for_matrix
pango_gravity_get_for_script
pango_gravity_get_for_script_and_width
pango_gravity_get_type
pango_gravity_hint_get_type
pango_gravity_to_rotation
pango_is_zero_width
pango_item_copy
pango_item_free
pango_item_get_type
pango_item_new
pango_item_split
pango_itemize
pango_itemize_with_base_dir
pango_language_from_string
pango_language_get_default
pango_language_get_sample_string
pango_language_get_scripts
pango_language_get_type
pango_language_includes_script
pango_language_matches
pango_language_to_string
pango_layout_context_changed
pango_layout_copy
pango_layout_get_alignment
pango_layout_get_attributes
pango_layout_get_auto_dir
pango_layout_get_baseline
pango_layout_get_context
pango_layout_get_cursor_pos
pango_layout_get_ellipsize
pango_layout_get_extents
pango_layout_get_font_description
pango_layout_get_height
pango_layout_get_indent
pango_layout_get_iter
pango_layout_get_justify
pango_layout_get_line
pango_layout_get_line_count
pango_layout_get_line_readonly
pango_layout_get_lines
pango_layout_get_lines_readonly
pango_layout_get_log_attrs
pango_layout_get_pixel_extents
pango_layout_get_pixel_size
pango_layout_get_single_paragraph_mode
pango_layout_get_size
pango_layout_get_spacing
pango_layout_get_tabs
pango_layout_get_text
pango_layout_get_type
pango_layout_get_unknown_glyphs_count
pango_layout_get_width
pango_layout_get_wrap
pango_layout_index_to_line_x
pango_layout_index_to_pos
pango_layout_is_ellipsized
pango_layout_is_wrapped
pango_layout_iter_at_last_line
pango_layout_iter_copy
pango_layout_iter_free
pango_layout_iter_get_baseline
pango_layout_iter_get_char_extents
pango_layout_iter_get_cluster_extents
pango_layout_iter_get_index
pango_layout_iter_get_layout
pango_layout_iter_get_layout_extents
pango_layout_iter_get_line
pango_layout_iter_get_line_extents
pango_layout_iter_get_line_readonly
pango_layout_iter_get_line_yrange
pango_layout_iter_get_run
pango_layout_iter_get_run_extents
pango_layout_iter_get_run_readonly
pango_layout_iter_get_type
pango_layout_iter_next_char
pango_layout_iter_next_cluster
pango_layout_iter_next_line
pango_layout_iter_next_run
pango_layout_line_get_extents
pango_layout_line_get_pixel_extents
pango_layout_line_get_type
pango_layout_line_get_x_ranges
pango_layout_line_index_to_x
pango_layout_line_ref
pango_layout_line_unref
pango_layout_line_x_to_index
pango_layout_move_cursor_visually
pango_layout_new
pango_layout_set_alignment
pango_layout_set_attributes
pango_layout_set_auto_dir
pango_layout_set_ellipsize
pango_layout_set_font_description
pango_layout_set_height
pango_layout_set_indent
pango_layout_set_justify
pango_layout_set_markup
pango_layout_set_markup_with_accel
pango_layout_set_single_paragraph_mode
pango_layout_set_spacing
pango_layout_set_tabs
pango_layout_set_text
pango_layout_set_width
pango_layout_set_wrap
pango_layout_xy_to_index
pango_log2vis_get_embedding_levels
pango_lookup_aliases
pango_map_get_engine
pango_map_get_engines
pango_matrix_concat
pango_matrix_copy
pango_matrix_free
pango_matrix_get_font_scale_factor
pango_matrix_get_type
pango_matrix_rotate
pango_matrix_scale
pango_matrix_transform_distance
pango_matrix_transform_pixel_rectangle
pango_matrix_transform_point
pango_matrix_transform_rectangle
pango_matrix_translate
pango_module_register
pango_parse_enum
pango_parse_markup
pango_parse_stretch
pango_parse_style
pango_parse_variant
pango_parse_weight
pango_quantize_line_geometry
pango_read_line
pango_render_part_get_type
pango_renderer_activate
pango_renderer_deactivate
pango_renderer_draw_error_underline
pango_renderer_draw_glyph
pango_renderer_draw_glyph_item
pango_renderer_draw_glyphs
pango_renderer_draw_layout
pango_renderer_draw_layout_line
pango_renderer_draw_rectangle
pango_renderer_draw_trapezoid
pango_renderer_get_color
pango_renderer_get_layout
pango_renderer_get_layout_line
pango_renderer_get_matrix
pango_renderer_get_type
pango_renderer_part_changed
pango_renderer_set_color
pango_renderer_set_matrix
pango_reorder_items
pango_scan_int
pango_scan_string
pango_scan_word
pango_script_for_unichar
pango_script_get_sample_language
pango_script_get_type
pango_script_iter_free
pango_script_iter_get_range
pango_script_iter_new
pango_script_iter_next
pango_shape
pango_skip_space
pango_split_file_list
pango_stretch_get_type
pango_style_get_type
pango_tab_align_get_type
pango_tab_array_copy
pango_tab_array_free
pango_tab_array_get_positions_in_pixels
pango_tab_array_get_size
pango_tab_array_get_tab
pango_tab_array_get_tabs
pango_tab_array_get_type
pango_tab_array_new
pango_tab_array_new_with_positions
pango_tab_array_resize
pango_tab_array_set_tab
pango_trim_string
pango_underline_get_type
pango_unichar_direction
pango_units_from_double
pango_units_to_double
pango_variant_get_type
pango_version
pango_version_check
pango_version_string
pango_weight_get_type
pango_wrap_mode_get_type
Sections
.text Size: 145KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 42KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ