6e81fd8e285329147e355bc6b57a4460N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

6e81fd8e285329147e355bc6b57a4460N.exe
Size

203KB
MD5

6e81fd8e285329147e355bc6b57a4460
SHA1

b29d3ffbdb1e2e4b7588d1d0ab50655703be0641
SHA256

f186017617a577b92f2a6f80491c29304c0a16064343730d016e21a6fe849fda
SHA512

2c0a38cbeb63d994f7bea60f0dc22aeb71101fb968deb6edf70bfc38b579b640e16c4416d3f730a9b2876647d3953af027c2c176a0f0626650e4f2f3b77cc944
SSDEEP

3072:Fl6AWxiR+/77ecyo9JAvvA1GqUmCcCbZbmLd14OKsn:uAK3qcyoqYGz64psn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e81fd8e285329147e355bc6b57a4460N.exe

Files

6e81fd8e285329147e355bc6b57a4460N.exe
.dll windows:4 windows x64 arch:x64

5d016a6e07151bd1f557ce84ec8c40f6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

libpango-1.0-0

pango_context_changed
pango_context_get_matrix
pango_context_get_type
pango_context_set_language
pango_context_set_matrix
pango_font_describe
pango_font_describe_with_absolute_size
pango_font_description_free
pango_font_description_get_gravity
pango_font_description_get_size
pango_font_description_get_size_is_absolute
pango_font_description_set_absolute_size
pango_font_description_set_family_static
pango_font_description_to_string
pango_font_description_unset_fields
pango_font_get_font_map
pango_font_get_glyph_extents
pango_font_get_type
pango_font_map_create_context
pango_font_map_get_type
pango_font_map_load_font
pango_font_metrics_new
pango_font_metrics_ref
pango_font_metrics_unref
pango_glyph_item_iter_init_start
pango_glyph_item_iter_next_cluster
pango_gravity_get_type
pango_gravity_to_rotation
pango_language_get_sample_string
pango_layout_get_context
pango_layout_get_extents
pango_layout_get_lines_readonly
pango_layout_get_type
pango_layout_new
pango_layout_set_font_description
pango_layout_set_text
pango_matrix_get_font_scale_factor
pango_quantize_line_geometry
pango_renderer_activate
pango_renderer_deactivate
pango_renderer_draw_glyph_item
pango_renderer_draw_glyphs
pango_renderer_draw_layout
pango_renderer_draw_layout_line
pango_renderer_get_alpha
pango_renderer_get_color
pango_renderer_get_layout
pango_renderer_get_type
pango_renderer_set_color
pango_script_get_sample_language
pango_units_from_double

libpangoft2-1.0-0

pango_fc_font_create_base_metrics_for_context
pango_fc_font_get_type
pango_fc_font_key_get_context_key
pango_fc_font_key_get_matrix
pango_fc_font_key_get_pattern
pango_fc_font_map_cache_clear
pango_fc_font_map_get_type
pango_fc_fontset_key_get_context_key

libpangowin32-1.0-0

_pango_win32_font_get_type
_pango_win32_font_map_get_type
_pango_win32_fontmap_cache_remove
_pango_win32_make_matching_logfontw
pango_win32_get_dc

libcairo-2

cairo_close_path
cairo_fill
cairo_font_face_destroy
cairo_font_face_status
cairo_font_options_copy
cairo_font_options_create
cairo_font_options_destroy
cairo_font_options_equal
cairo_font_options_get_hint_metrics
cairo_font_options_hash
cairo_font_options_merge
cairo_ft_font_face_create_for_pattern
cairo_ft_font_options_substitute
cairo_ft_scaled_font_lock_face
cairo_ft_scaled_font_unlock_face
cairo_get_current_point
cairo_get_matrix
cairo_get_target
cairo_glyph_path
cairo_has_current_point
cairo_identity_matrix
cairo_line_to
cairo_matrix_init
cairo_matrix_init_identity
cairo_matrix_init_rotate
cairo_matrix_multiply
cairo_matrix_scale
cairo_matrix_transform_distance
cairo_move_to
cairo_new_path
cairo_new_sub_path
cairo_rectangle
cairo_rel_line_to
cairo_restore
cairo_save
cairo_scaled_font_create
cairo_scaled_font_destroy
cairo_scaled_font_extents
cairo_scaled_font_get_ctm
cairo_scaled_font_get_font_matrix
cairo_scaled_font_get_font_options
cairo_scaled_font_glyph_extents
cairo_scaled_font_status
cairo_scaled_font_text_extents
cairo_set_line_cap
cairo_set_line_join
cairo_set_line_width
cairo_set_miter_limit
cairo_set_scaled_font
cairo_set_source_rgba
cairo_show_glyphs
cairo_show_text
cairo_show_text_glyphs
cairo_status_to_string
cairo_stroke
cairo_surface_get_font_options
cairo_surface_has_show_text_glyphs
cairo_text_path
cairo_translate
cairo_user_to_device_distance
cairo_win32_font_face_create_for_logfontw
cairo_win32_scaled_font_done_font
cairo_win32_scaled_font_get_metrics_factor
cairo_win32_scaled_font_select_font

libfontconfig-1

FcConfigSubstitute
FcDefaultSubstitute
FcMatrixMultiply
FcPatternGetDouble
FcPatternGetMatrix
FcPatternGetString

libfreetype-6

FT_Done_FreeType
FT_Init_FreeType

libglib-2.0-0

g_assertion_message_expr
g_free
g_intern_static_string
g_log
g_malloc0_n
g_malloc_n
g_mutex_trylock
g_mutex_unlock
g_once_init_enter
g_once_init_leave
g_private_get
g_private_replace
g_quark_from_static_string
g_return_if_fail_warning
g_slice_alloc
g_slice_alloc0
g_slice_free1
g_slist_foreach
g_slist_free
g_slist_prepend
g_snprintf
g_unichar_iswide
g_unichar_iszerowidth
g_utf8_get_char
g_utf8_skip
g_utf8_strlen

libgobject-2.0-0

g_enum_get_value_by_nick
g_object_add_weak_pointer
g_object_get_qdata
g_object_new
g_object_ref
g_object_replace_qdata
g_object_set_qdata_full
g_object_unref
g_type_add_interface_static
g_type_check_instance_is_a
g_type_class_adjust_private_offset
g_type_class_peek_parent
g_type_class_ref
g_type_interface_add_prerequisite
g_type_interface_peek
g_type_register_static_simple

gdi32

GetDeviceCaps

libintl-8

DllMain

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__iob_func
__setusermatherr
_amsg_exit
_errno
_initterm
_lock
_unlock
abort
calloc
free
fwrite
getenv
memcmp
realloc
strcmp
strlen
strncmp
tan
vfprintf

Exports

Exports

_pango_cairo_fc_font_map_get_library
_pango_cairo_fc_font_new
pango_cairo_context_get_font_options
pango_cairo_context_get_resolution
pango_cairo_context_get_shape_renderer
pango_cairo_context_set_font_options
pango_cairo_context_set_resolution
pango_cairo_context_set_shape_renderer
pango_cairo_create_context
pango_cairo_create_layout
pango_cairo_error_underline_path
pango_cairo_fc_font_get_type
pango_cairo_fc_font_map_get_type
pango_cairo_font_get_scaled_font
pango_cairo_font_get_type
pango_cairo_font_map_create_context
pango_cairo_font_map_get_default
pango_cairo_font_map_get_font_type
pango_cairo_font_map_get_resolution
pango_cairo_font_map_get_type
pango_cairo_font_map_new
pango_cairo_font_map_new_for_font_type
pango_cairo_font_map_set_default
pango_cairo_font_map_set_resolution
pango_cairo_glyph_string_path
pango_cairo_layout_line_path
pango_cairo_layout_path
pango_cairo_renderer_get_type
pango_cairo_show_error_underline
pango_cairo_show_glyph_item
pango_cairo_show_glyph_string
pango_cairo_show_layout
pango_cairo_show_layout_line
pango_cairo_update_context
pango_cairo_update_layout
pango_cairo_win32_font_map_get_type

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 512B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 1024B - Virtual size: 1001B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5d016a6e07151bd1f557ce84ec8c40f6

Headers

File Characteristics

Imports

libpango-1.0-0

libpangoft2-1.0-0

libpangowin32-1.0-0

libcairo-2

libfontconfig-1

libfreetype-6

libglib-2.0-0

libgobject-2.0-0

gdi32

libintl-8

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 41KB - Virtual size: 40KB

.data Size: 512B - Virtual size: 160B

.rdata Size: 5KB - Virtual size: 4KB

.pdata Size: 2KB - Virtual size: 2KB

.xdata Size: 2KB - Virtual size: 2KB

.bss Size: - Virtual size: 512B

.edata Size: 2KB - Virtual size: 1KB

.idata Size: 10KB - Virtual size: 9KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 1024B - Virtual size: 864B

.reloc Size: 512B - Virtual size: 96B

/4 Size: 1024B - Virtual size: 976B

/19 Size: 31KB - Virtual size: 30KB

/31 Size: 6KB - Virtual size: 6KB

/45 Size: 8KB - Virtual size: 8KB

/57 Size: 2KB - Virtual size: 2KB

/70 Size: 1024B - Virtual size: 1001B

/81 Size: 13KB - Virtual size: 13KB

/92 Size: 2KB - Virtual size: 2KB

.text
Size: 41KB - Virtual size: 40KB

.data
Size: 512B - Virtual size: 160B

.rdata
Size: 5KB - Virtual size: 4KB

.pdata
Size: 2KB - Virtual size: 2KB

.xdata
Size: 2KB - Virtual size: 2KB

.bss
Size: - Virtual size: 512B

.edata
Size: 2KB - Virtual size: 1KB

.idata
Size: 10KB - Virtual size: 9KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 1024B - Virtual size: 864B

.reloc
Size: 512B - Virtual size: 96B

/4
Size: 1024B - Virtual size: 976B

/19
Size: 31KB - Virtual size: 30KB

/31
Size: 6KB - Virtual size: 6KB

/45
Size: 8KB - Virtual size: 8KB

/57
Size: 2KB - Virtual size: 2KB

/70
Size: 1024B - Virtual size: 1001B

/81
Size: 13KB - Virtual size: 13KB

/92
Size: 2KB - Virtual size: 2KB