56f76f08d8bde2d7e93a792320e24a00N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

56f76f08d8bde2d7e93a792320e24a00N.exe
Size

485KB
MD5

56f76f08d8bde2d7e93a792320e24a00
SHA1

47107baa999227f6400aa4d4ed5c98a84256c7e9
SHA256

f3fee4101a2afecb50b2a8f8dae68c28ccadd00dc79903730c78a7cac51a3657
SHA512

13b79ececada72fa3ddbe9eb4cc77622b7af74f65e7dfb1b7d3c2962fe7bf7eb8f6b789f4b9add7bb525475f4389d41755b378ba4a97e7d33656dfda34f4bebc
SSDEEP

6144:y7hrXkrW9wrGik2zzAD6lMX6WmmPsfVUXNiK+EmKDXgYJJK16d6kRb+BWVLo01:+73zTmm0xEAs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56f76f08d8bde2d7e93a792320e24a00N.exe

Files

56f76f08d8bde2d7e93a792320e24a00N.exe
.dll windows:4 windows x64 arch:x64

43f8c6ac594af31a1ad6ffd020cf4f70

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

libsynfig-0

_ZN6synfig12Target_Cairo10next_frameERNS_4TimeE
_ZN6synfig12Target_Cairo6renderEPNS_16ProgressCallbackE
_ZN6synfig12Target_CairoC2Ev
_ZN6synfig13CairoImporter4bookB5cxx11Ev
_ZN6synfig13CairoImporterC2ERKNS_10FileSystem10IdentifierE
_ZN6synfig13CairoImporterD2Ev
_ZN6synfig14check_version_Eyyyyy
_ZN6synfig15Target_Scanline10next_frameERNS_4TimeE
_ZN6synfig15Target_Scanline6renderEPNS_16ProgressCallbackE
_ZN6synfig15Target_ScanlineC2Ev
_ZN6synfig20color_to_pixelformatEPhPKNS_5ColorEjPKNS_5GammaEiiii
_ZN6synfig4Type12deinitializeEv
_ZN6synfig4Type17OperationBookBaseC2Ev
_ZN6synfig4Type17OperationBookBaseD2Ev
_ZN6synfig4infoEPKcz
_ZN6synfig5errorEPKcz
_ZN6synfig5errorERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN6synfig6Target10set_canvasEN3etl6handleINS_6CanvasEEE
_ZN6synfig6Target4bookB5cxx11Ev
_ZN6synfig6Target8ext_bookB5cxx11Ev
_ZN6synfig7warningEPKcz
_ZN6synfig7warningERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN6synfig8Importer4bookB5cxx11Ev
_ZN6synfig8Importer9get_frameERKNS_8RendDescERKNS_4TimeE
_ZN6synfig8ImporterC2ERKNS_10FileSystem10IdentifierE
_ZN6synfig8ImporterD2Ev
_ZNK6synfig10FileSystem10Identifier15get_read_streamEv
_ZNK6synfig8RendDesc13get_frame_endEv
_ZNK6synfig8RendDesc15get_frame_startEv
_ZNK6synfig8RendDesc5get_hEv
_ZNK6synfig8RendDesc5get_wEv
_ZNK6synfig8RendDesc9get_x_resEv
_ZNK6synfig8RendDesc9get_y_resEv
_ZTVN6synfig15Target_ScanlineE
_ZTVN6synfig6TargetE

libcairo-2

cairo_create
cairo_destroy
cairo_get_group_target
cairo_get_target
cairo_image_surface_create
cairo_image_surface_create_from_png_stream
cairo_mask_surface
cairo_paint
cairo_push_group_with_content
cairo_set_source_rgb
cairo_status_to_string
cairo_surface_destroy
cairo_surface_reference
cairo_surface_status
cairo_surface_write_to_png

libpng16-16

png_create_info_struct
png_create_read_struct
png_create_write_struct
png_destroy_read_struct
png_destroy_write_struct
png_get_IHDR
png_get_PLTE
png_get_bit_depth
png_get_color_type
png_get_error_ptr
png_get_gAMA
png_get_image_height
png_get_image_width
png_get_io_ptr
png_get_rowbytes
png_get_tRNS
png_init_io
png_read_end
png_read_image
png_read_info
png_read_update_info
png_set_IHDR
png_set_filter
png_set_gAMA
png_set_longjmp_fn
png_set_pHYs
png_set_packing
png_set_read_fn
png_set_sig_bytes
png_set_text
png_sig_cmp
png_write_end
png_write_info
png_write_info_before_PLTE
png_write_row

libsigc-2.0-0

_ZN4sigc11signal_baseD2Ev

libglib-2.0-0

g_fopen

libgcc_s_seh-1

_Unwind_Resume

libstdc++-6

_ZNKSt5ctypeIcE13_M_widen_initEv
_ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE5rfindEcy
_ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE7compareEPKc
_ZNSi4readEPcx
_ZNSo3putEc
_ZNSo5flushEv
_ZNSo9_M_insertImEERSoT_
_ZNSo9_M_insertIyEERSoT_
_ZNSolsEi
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE10_M_disposeEv
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE10_M_replaceEyyPKcy
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE14_M_replace_auxEyyyc
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_appendEPKcy
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_assignERKS4_
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_createERyy
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEC1EPKcRKS3_
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEED1Ev
_ZNSt8ios_base4InitC1Ev
_ZNSt8ios_base4InitD1Ev
_ZSt16__ostream_insertIcSt11char_traitsIcEERSt13basic_ostreamIT_T0_ES6_PKS3_x
_ZSt16__throw_bad_castv
_ZSt18_Rb_tree_decrementPSt18_Rb_tree_node_base
_ZSt18_Rb_tree_incrementPSt18_Rb_tree_node_base
_ZSt19__throw_logic_errorPKc
_ZSt24__throw_out_of_range_fmtPKcz
_ZSt28_Rb_tree_rebalance_for_erasePSt18_Rb_tree_node_baseRS_
_ZSt29_Rb_tree_insert_and_rebalancebPSt18_Rb_tree_node_baseS0_RS_
_ZSt4cout
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZdaPv
_ZdlPvy
_Znay
_Znwy
__cxa_allocate_exception
__cxa_free_exception
__cxa_throw
__cxa_throw_bad_array_new_length
__gxx_personality_seh0

libintl-8

DllMain
libintl_dgettext

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
__setusermatherr
_amsg_exit
_errno
_initterm
_lock
_setjmp
_unlock
abort
calloc
fclose
fputc
fread
free
fwrite
localeconv
malloc
memcmp
memcpy
memset
realloc
strerror
strlen
strncmp
vfprintf
wcslen
longjmp

Exports

Exports

_ZGVN6synfig4Type13OperationBookIPFNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEPKvEE8instanceE
_ZGVN6synfig4Type13OperationBookIPFPvPKvS4_EE8instanceE
_ZGVN6synfig4Type13OperationBookIPFPvvEE8instanceE
_ZGVN6synfig4Type13OperationBookIPFRKSt6vectorINS_9ValueBaseESaIS3_EEPKvEE8instanceE
_ZGVN6synfig4Type13OperationBookIPFRKdPKvEE8instanceE
_ZGVN6synfig4Type13OperationBookIPFbPKvS3_EE8instanceE
_ZGVN6synfig4Type13OperationBookIPFvPKvEE8instanceE
_ZGVN6synfig4Type13OperationBookIPFvPvPKvEE8instanceE
_ZGVN6synfig4Type13OperationBookIPFvPvRKdEE8instanceE
_ZN14cairo_png_mptr13read_callbackEPvPhj
_ZN14cairo_png_mptr30supports_file_system_wrapper__E
_ZN14cairo_png_mptr5ext__E
_ZN14cairo_png_mptr6createERKN6synfig10FileSystem10IdentifierE
_ZN14cairo_png_mptr6name__E
_ZN14cairo_png_mptr8cvs_id__E
_ZN14cairo_png_mptr9get_frameERP14_cairo_surfaceRKN6synfig8RendDescENS3_4TimeEPNS3_16ProgressCallbackE
_ZN14cairo_png_mptr9get_frameERP14_cairo_surfaceRKN6synfig8RendDescENS3_4TimeERbRjS9_S9_S9_PNS3_16ProgressCallbackE
_ZN14cairo_png_mptr9version__E
_ZN14cairo_png_mptrC1ERKN6synfig10FileSystem10IdentifierE
_ZN14cairo_png_mptrC2ERKN6synfig10FileSystem10IdentifierE
_ZN14cairo_png_mptrD0Ev
_ZN14cairo_png_mptrD1Ev
_ZN14cairo_png_mptrD2Ev
_ZN14cairo_png_trgt11put_surfaceEP14_cairo_surfacePN6synfig16ProgressCallbackE
_ZN14cairo_png_trgt13set_rend_descEPN6synfig8RendDescE
_ZN14cairo_png_trgt14obtain_surfaceERP14_cairo_surface
_ZN14cairo_png_trgt5ext__E
_ZN14cairo_png_trgt6createEPKcRKN6synfig11TargetParamE
_ZN14cairo_png_trgt6name__E
_ZN14cairo_png_trgt8cvs_id__E
_ZN14cairo_png_trgt9version__E
_ZN14cairo_png_trgtC1EPKcRKN6synfig11TargetParamE
_ZN14cairo_png_trgtC2EPKcRKN6synfig11TargetParamE
_ZN14cairo_png_trgtD0Ev
_ZN14cairo_png_trgtD1Ev
_ZN14cairo_png_trgtD2Ev
_ZN16mod_png_modclass4DescEv
_ZN16mod_png_modclass4NameEv
_ZN16mod_png_modclass6AuthorEv
_ZN16mod_png_modclass7VersionEv
_ZN16mod_png_modclass9CopyrightEv
_ZN16mod_png_modclassC1EPN6synfig16ProgressCallbackE
_ZN16mod_png_modclassC2EPN6synfig16ProgressCallbackE
_ZN16mod_png_modclassD0Ev
_ZN16mod_png_modclassD1Ev
_ZN20png_trgt_spritesheet11start_frameEPN6synfig16ProgressCallbackE
_ZN20png_trgt_spritesheet12end_scanlineEv
_ZN20png_trgt_spritesheet13load_png_fileEv
_ZN20png_trgt_spritesheet13png_out_errorEP14png_struct_defPKc
_ZN20png_trgt_spritesheet13read_png_fileEv
_ZN20png_trgt_spritesheet13set_rend_descEPN6synfig8RendDescE
_ZN20png_trgt_spritesheet14start_scanlineEi
_ZN20png_trgt_spritesheet14write_png_fileEv
_ZN20png_trgt_spritesheet15png_out_warningEP14png_struct_defPKc
_ZN20png_trgt_spritesheet5ext__E
_ZN20png_trgt_spritesheet6createEPKcRKN6synfig11TargetParamE
_ZN20png_trgt_spritesheet6name__E
_ZN20png_trgt_spritesheet8cvs_id__E
_ZN20png_trgt_spritesheet9end_frameEv
_ZN20png_trgt_spritesheet9version__E
_ZN20png_trgt_spritesheetC1EPKcRKN6synfig11TargetParamE
_ZN20png_trgt_spritesheetC2EPKcRKN6synfig11TargetParamE
_ZN20png_trgt_spritesheetD0Ev
_ZN20png_trgt_spritesheetD1Ev
_ZN20png_trgt_spritesheetD2Ev
_ZN3etl10vstrprintfB5cxx11EPKcPc
_ZN3etl23filename_sans_extensionERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN3etl7dirnameERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN3etl8basenameERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZN3etl9strprintfB5cxx11EPKcz
_ZN6synfig13CairoImporter11is_animatedEv
_ZN6synfig15Target_ScanlineD2Ev
_ZN6synfig4Type13OperationBookIPFNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEPKvEE11remove_typeEj
_ZN6synfig4Type13OperationBookIPFNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEPKvEE8instanceE
_ZN6synfig4Type13OperationBookIPFNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEPKvEE9set_aliasEPNS0_17OperationBookBaseE
_ZN6synfig4Type13OperationBookIPFNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEPKvEED0Ev
_ZN6synfig4Type13OperationBookIPFNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEPKvEED1Ev
_ZN6synfig4Type13OperationBookIPFPvPKvS4_EE11remove_typeEj
_ZN6synfig4Type13OperationBookIPFPvPKvS4_EE8instanceE
_ZN6synfig4Type13OperationBookIPFPvPKvS4_EE9set_aliasEPNS0_17OperationBookBaseE
_ZN6synfig4Type13OperationBookIPFPvPKvS4_EED0Ev
_ZN6synfig4Type13OperationBookIPFPvPKvS4_EED1Ev
_ZN6synfig4Type13OperationBookIPFPvvEE11remove_typeEj
_ZN6synfig4Type13OperationBookIPFPvvEE8instanceE
_ZN6synfig4Type13OperationBookIPFPvvEE9set_aliasEPNS0_17OperationBookBaseE
_ZN6synfig4Type13OperationBookIPFPvvEED0Ev
_ZN6synfig4Type13OperationBookIPFPvvEED1Ev
_ZN6synfig4Type13OperationBookIPFRKSt6vectorINS_9ValueBaseESaIS3_EEPKvEE11remove_typeEj
_ZN6synfig4Type13OperationBookIPFRKSt6vectorINS_9ValueBaseESaIS3_EEPKvEE8instanceE
_ZN6synfig4Type13OperationBookIPFRKSt6vectorINS_9ValueBaseESaIS3_EEPKvEE9set_aliasEPNS0_17OperationBookBaseE
_ZN6synfig4Type13OperationBookIPFRKSt6vectorINS_9ValueBaseESaIS3_EEPKvEED0Ev
_ZN6synfig4Type13OperationBookIPFRKSt6vectorINS_9ValueBaseESaIS3_EEPKvEED1Ev
_ZN6synfig4Type13OperationBookIPFRKdPKvEE11remove_typeEj
_ZN6synfig4Type13OperationBookIPFRKdPKvEE8instanceE
_ZN6synfig4Type13OperationBookIPFRKdPKvEE9set_aliasEPNS0_17OperationBookBaseE
_ZN6synfig4Type13OperationBookIPFRKdPKvEED0Ev
_ZN6synfig4Type13OperationBookIPFRKdPKvEED1Ev
_ZN6synfig4Type13OperationBookIPFbPKvS3_EE11remove_typeEj
_ZN6synfig4Type13OperationBookIPFbPKvS3_EE8instanceE
_ZN6synfig4Type13OperationBookIPFbPKvS3_EE9set_aliasEPNS0_17OperationBookBaseE
_ZN6synfig4Type13OperationBookIPFbPKvS3_EED0Ev
_ZN6synfig4Type13OperationBookIPFbPKvS3_EED1Ev
_ZN6synfig4Type13OperationBookIPFvPKvEE11remove_typeEj
_ZN6synfig4Type13OperationBookIPFvPKvEE8instanceE
_ZN6synfig4Type13OperationBookIPFvPKvEE9set_aliasEPNS0_17OperationBookBaseE
_ZN6synfig4Type13OperationBookIPFvPKvEED0Ev
_ZN6synfig4Type13OperationBookIPFvPKvEED1Ev
_ZN6synfig4Type13OperationBookIPFvPvPKvEE11remove_typeEj
_ZN6synfig4Type13OperationBookIPFvPvPKvEE8instanceE
_ZN6synfig4Type13OperationBookIPFvPvPKvEE9set_aliasEPNS0_17OperationBookBaseE
_ZN6synfig4Type13OperationBookIPFvPvPKvEED0Ev
_ZN6synfig4Type13OperationBookIPFvPvPKvEED1Ev
_ZN6synfig4Type13OperationBookIPFvPvRKdEE11remove_typeEj
_ZN6synfig4Type13OperationBookIPFvPvRKdEE8instanceE
_ZN6synfig4Type13OperationBookIPFvPvRKdEE9set_aliasEPNS0_17OperationBookBaseE
_ZN6synfig4Type13OperationBookIPFvPvRKdEED0Ev
_ZN6synfig4Type13OperationBookIPFvPvRKdEED1Ev
_ZN6synfig6Module11destructor_Ev
_ZN6synfig6Target4initEPNS_16ProgressCallbackE
_ZN6synfig8Importer11is_animatedEv
_ZN6synfig8Importer9get_frameERNS_7SurfaceERKNS_8RendDescENS_4TimeERbRjS8_S8_S8_PNS_16ProgressCallbackE
_ZN8png_mptr13png_out_errorEP14png_struct_defPKc
_ZN8png_mptr13read_callbackEP14png_struct_defPhy
_ZN8png_mptr15png_out_warningEP14png_struct_defPKc
_ZN8png_mptr30supports_file_system_wrapper__E
_ZN8png_mptr5ext__E
_ZN8png_mptr6createERKN6synfig10FileSystem10IdentifierE
_ZN8png_mptr6name__E
_ZN8png_mptr8cvs_id__E
_ZN8png_mptr9get_frameERN6synfig7SurfaceERKNS0_8RendDescENS0_4TimeEPNS0_16ProgressCallbackE
_ZN8png_mptr9version__E
_ZN8png_mptrC1ERKN6synfig10FileSystem10IdentifierE
_ZN8png_mptrC2ERKN6synfig10FileSystem10IdentifierE
_ZN8png_mptrD0Ev
_ZN8png_mptrD1Ev
_ZN8png_mptrD2Ev
_ZN8png_trgt11start_frameEPN6synfig16ProgressCallbackE
_ZN8png_trgt12end_scanlineEv
_ZN8png_trgt13png_out_errorEP14png_struct_defPKc
_ZN8png_trgt13set_rend_descEPN6synfig8RendDescE
_ZN8png_trgt14start_scanlineEi
_ZN8png_trgt15png_out_warningEP14png_struct_defPKc
_ZN8png_trgt5ext__E
_ZN8png_trgt6createEPKcRKN6synfig11TargetParamE
_ZN8png_trgt6name__E
_ZN8png_trgt8cvs_id__E
_ZN8png_trgt9end_frameEv
_ZN8png_trgt9version__E
_ZN8png_trgtC1EPKcRKN6synfig11TargetParamE
_ZN8png_trgtC2EPKcRKN6synfig11TargetParamE
_ZN8png_trgtD0Ev
_ZN8png_trgtD1Ev
_ZN8png_trgtD2Ev
_ZNK20png_trgt_spritesheet28get_image_size_error_messageB5cxx11Ev
_ZNK20png_trgt_spritesheet30is_final_image_size_acceptableEv
_ZNK3etl13shared_object14unref_inactiveEv
_ZNK3etl13shared_object3refEv
_ZNK3etl13shared_object5unrefEv
_ZNKSt5ctypeIcE8do_widenEc
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEPKvEEESt10_Select1stISI_ESt4lessIS2_ESaISI_EE24_M_get_insert_unique_posERS4_
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEPKvEEESt10_Select1stISI_ESt4lessIS2_ESaISI_EE29_M_get_insert_hint_unique_posESt23_Rb_tree_const_iteratorISI_ERS4_
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEPKvEEESt10_Select1stISI_ESt4lessIS2_ESaISI_EE8_M_eraseEPSt13_Rb_tree_nodeISI_E
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFPvPKvS9_EEESt10_Select1stISD_ESt4lessIS2_ESaISD_EE24_M_get_insert_unique_posERS4_
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFPvPKvS9_EEESt10_Select1stISD_ESt4lessIS2_ESaISD_EE29_M_get_insert_hint_unique_posESt23_Rb_tree_const_iteratorISD_ERS4_
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFPvPKvS9_EEESt10_Select1stISD_ESt4lessIS2_ESaISD_EE8_M_eraseEPSt13_Rb_tree_nodeISD_E
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFPvvEEESt10_Select1stISB_ESt4lessIS2_ESaISB_EE24_M_get_insert_unique_posERS4_
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFPvvEEESt10_Select1stISB_ESt4lessIS2_ESaISB_EE29_M_get_insert_hint_unique_posESt23_Rb_tree_const_iteratorISB_ERS4_
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFPvvEEESt10_Select1stISB_ESt4lessIS2_ESaISB_EE8_M_eraseEPSt13_Rb_tree_nodeISB_E
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFRKSt6vectorINS0_9ValueBaseESaIS8_EEPKvEEESt10_Select1stISI_ESt4lessIS2_ESaISI_EE24_M_get_insert_unique_posERS4_
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFRKSt6vectorINS0_9ValueBaseESaIS8_EEPKvEEESt10_Select1stISI_ESt4lessIS2_ESaISI_EE29_M_get_insert_hint_unique_posESt23_Rb_tree_const_iteratorISI_ERS4_
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFRKSt6vectorINS0_9ValueBaseESaIS8_EEPKvEEESt10_Select1stISI_ESt4lessIS2_ESaISI_EE8_M_eraseEPSt13_Rb_tree_nodeISI_E
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFRKdPKvEEESt10_Select1stISE_ESt4lessIS2_ESaISE_EE24_M_get_insert_unique_posERS4_
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFRKdPKvEEESt10_Select1stISE_ESt4lessIS2_ESaISE_EE29_M_get_insert_hint_unique_posESt23_Rb_tree_const_iteratorISE_ERS4_
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFRKdPKvEEESt10_Select1stISE_ESt4lessIS2_ESaISE_EE8_M_eraseEPSt13_Rb_tree_nodeISE_E
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFbPKvS8_EEESt10_Select1stISC_ESt4lessIS2_ESaISC_EE24_M_get_insert_unique_posERS4_
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFbPKvS8_EEESt10_Select1stISC_ESt4lessIS2_ESaISC_EE29_M_get_insert_hint_unique_posESt23_Rb_tree_const_iteratorISC_ERS4_
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFbPKvS8_EEESt10_Select1stISC_ESt4lessIS2_ESaISC_EE8_M_eraseEPSt13_Rb_tree_nodeISC_E
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFvPKvEEESt10_Select1stISC_ESt4lessIS2_ESaISC_EE24_M_get_insert_unique_posERS4_
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFvPKvEEESt10_Select1stISC_ESt4lessIS2_ESaISC_EE29_M_get_insert_hint_unique_posESt23_Rb_tree_const_iteratorISC_ERS4_
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFvPKvEEESt10_Select1stISC_ESt4lessIS2_ESaISC_EE8_M_eraseEPSt13_Rb_tree_nodeISC_E
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFvPvPKvEEESt10_Select1stISD_ESt4lessIS2_ESaISD_EE24_M_get_insert_unique_posERS4_
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFvPvPKvEEESt10_Select1stISD_ESt4lessIS2_ESaISD_EE29_M_get_insert_hint_unique_posESt23_Rb_tree_const_iteratorISD_ERS4_
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFvPvPKvEEESt10_Select1stISD_ESt4lessIS2_ESaISD_EE8_M_eraseEPSt13_Rb_tree_nodeISD_E
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFvPvRKdEEESt10_Select1stISD_ESt4lessIS2_ESaISD_EE24_M_get_insert_unique_posERS4_
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFvPvRKdEEESt10_Select1stISD_ESt4lessIS2_ESaISD_EE29_M_get_insert_hint_unique_posESt23_Rb_tree_const_iteratorISD_ERS4_
_ZNSt8_Rb_treeIN6synfig9Operation11DescriptionESt4pairIKS2_S3_IPNS0_4TypeEPFvPvRKdEEESt10_Select1stISD_ESt4lessIS2_ESaISD_EE8_M_eraseEPSt13_Rb_tree_nodeISD_E
_ZNSt8_Rb_treeINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_N6synfig13CairoImporter9BookEntryEESt10_Select1stISB_ESt4lessIS5_ESaISB_EE24_M_get_insert_unique_posERS7_
_ZNSt8_Rb_treeINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_N6synfig13CairoImporter9BookEntryEESt10_Select1stISB_ESt4lessIS5_ESaISB_EE29_M_get_insert_hint_unique_posESt23_Rb_tree_const_iteratorISB_ERS7_
_ZNSt8_Rb_treeINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_N6synfig6Target9BookEntryEESt10_Select1stISB_ESt4lessIS5_ESaISB_EE24_M_get_insert_unique_posERS7_
_ZNSt8_Rb_treeINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_N6synfig6Target9BookEntryEESt10_Select1stISB_ESt4lessIS5_ESaISB_EE29_M_get_insert_hint_unique_posESt23_Rb_tree_const_iteratorISB_ERS7_
_ZNSt8_Rb_treeINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_N6synfig8Importer9BookEntryEESt10_Select1stISB_ESt4lessIS5_ESaISB_EE24_M_get_insert_unique_posERS7_
_ZNSt8_Rb_treeINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_N6synfig8Importer9BookEntryEESt10_Select1stISB_ESt4lessIS5_ESaISB_EE29_M_get_insert_hint_unique_posESt23_Rb_tree_const_iteratorISB_ERS7_
_ZNSt8_Rb_treeINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_S5_ESt10_Select1stIS8_ESt4lessIS5_ESaIS8_EE24_M_get_insert_unique_posERS7_
_ZNSt8_Rb_treeINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEESt4pairIKS5_S5_ESt10_Select1stIS8_ESt4lessIS5_ESaIS8_EE29_M_get_insert_hint_unique_posESt23_Rb_tree_const_iteratorIS8_ERS7_
_ZTI14cairo_png_mptr
_ZTI14cairo_png_trgt
_ZTI16mod_png_modclass
_ZTI20png_trgt_spritesheet
_ZTI8png_mptr
_ZTI8png_trgt
_ZTIN3etl13shared_objectE
_ZTIN6synfig12Target_CairoE
_ZTIN6synfig13CairoImporterE
_ZTIN6synfig15Target_ScanlineE
_ZTIN6synfig4Type13OperationBookIPFNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEPKvEEE
_ZTIN6synfig4Type13OperationBookIPFPvPKvS4_EEE
_ZTIN6synfig4Type13OperationBookIPFPvvEEE
_ZTIN6synfig4Type13OperationBookIPFRKSt6vectorINS_9ValueBaseESaIS3_EEPKvEEE
_ZTIN6synfig4Type13OperationBookIPFRKdPKvEEE
_ZTIN6synfig4Type13OperationBookIPFbPKvS3_EEE
_ZTIN6synfig4Type13OperationBookIPFvPKvEEE
_ZTIN6synfig4Type13OperationBookIPFvPvPKvEEE
_ZTIN6synfig4Type13OperationBookIPFvPvRKdEEE
_ZTIN6synfig4Type17OperationBookBaseE
_ZTIN6synfig6ModuleE
_ZTIN6synfig6TargetE
_ZTIN6synfig8ImporterE
_ZTINSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZTS14cairo_png_mptr
_ZTS14cairo_png_trgt
_ZTS16mod_png_modclass
_ZTS20png_trgt_spritesheet
_ZTS8png_mptr
_ZTS8png_trgt
_ZTSN3etl13shared_objectE
_ZTSN6synfig12Target_CairoE
_ZTSN6synfig13CairoImporterE
_ZTSN6synfig15Target_ScanlineE
_ZTSN6synfig4Type13OperationBookIPFNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEPKvEEE
_ZTSN6synfig4Type13OperationBookIPFPvPKvS4_EEE
_ZTSN6synfig4Type13OperationBookIPFPvvEEE
_ZTSN6synfig4Type13OperationBookIPFRKSt6vectorINS_9ValueBaseESaIS3_EEPKvEEE
_ZTSN6synfig4Type13OperationBookIPFRKdPKvEEE
_ZTSN6synfig4Type13OperationBookIPFbPKvS3_EEE
_ZTSN6synfig4Type13OperationBookIPFvPKvEEE
_ZTSN6synfig4Type13OperationBookIPFvPvPKvEEE
_ZTSN6synfig4Type13OperationBookIPFvPvRKdEEE
_ZTSN6synfig4Type17OperationBookBaseE
_ZTSN6synfig6ModuleE
_ZTSN6synfig6TargetE
_ZTSN6synfig8ImporterE
_ZTSNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEE
_ZTV14cairo_png_mptr
_ZTV14cairo_png_trgt
_ZTV16mod_png_modclass
_ZTV20png_trgt_spritesheet
_ZTV8png_mptr
_ZTV8png_trgt
_ZTVN6synfig4Type13OperationBookIPFNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEEPKvEEE
_ZTVN6synfig4Type13OperationBookIPFPvPKvS4_EEE
_ZTVN6synfig4Type13OperationBookIPFPvvEEE
_ZTVN6synfig4Type13OperationBookIPFRKSt6vectorINS_9ValueBaseESaIS3_EEPKvEEE
_ZTVN6synfig4Type13OperationBookIPFRKdPKvEEE
_ZTVN6synfig4Type13OperationBookIPFbPKvS3_EEE
_ZTVN6synfig4Type13OperationBookIPFvPKvEEE
_ZTVN6synfig4Type13OperationBookIPFvPvPKvEEE
_ZTVN6synfig4Type13OperationBookIPFvPvRKdEEE
mod_png_LTX_new_instance

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43f8c6ac594af31a1ad6ffd020cf4f70

Headers

File Characteristics

Imports

libsynfig-0

libcairo-2

libpng16-16

libsigc-2.0-0

libglib-2.0-0

libgcc_s_seh-1

libstdc++-6

libintl-8

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 100KB - Virtual size: 100KB

.data Size: 1KB - Virtual size: 1KB

.rdata Size: 9KB - Virtual size: 9KB

.pdata Size: 3KB - Virtual size: 3KB

.xdata Size: 5KB - Virtual size: 5KB

.bss Size: - Virtual size: 2KB

.edata Size: 19KB - Virtual size: 18KB

.idata Size: 9KB - Virtual size: 8KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 1024B - Virtual size: 532B

/4 Size: 1KB - Virtual size: 1KB

/19 Size: 62KB - Virtual size: 61KB

/31 Size: 11KB - Virtual size: 11KB

/45 Size: 30KB - Virtual size: 30KB

/57 Size: 6KB - Virtual size: 5KB

/70 Size: 2KB - Virtual size: 1KB

/81 Size: 77KB - Virtual size: 76KB

/92 Size: 6KB - Virtual size: 5KB

.text
Size: 100KB - Virtual size: 100KB

.data
Size: 1KB - Virtual size: 1KB

.rdata
Size: 9KB - Virtual size: 9KB

.pdata
Size: 3KB - Virtual size: 3KB

.xdata
Size: 5KB - Virtual size: 5KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 19KB - Virtual size: 18KB

.idata
Size: 9KB - Virtual size: 8KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 1024B - Virtual size: 532B

/4
Size: 1KB - Virtual size: 1KB

/19
Size: 62KB - Virtual size: 61KB

/31
Size: 11KB - Virtual size: 11KB

/45
Size: 30KB - Virtual size: 30KB

/57
Size: 6KB - Virtual size: 5KB

/70
Size: 2KB - Virtual size: 1KB

/81
Size: 77KB - Virtual size: 76KB

/92
Size: 6KB - Virtual size: 5KB