sfbrename-cli-1[.]0[.]0-win64[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

sfbrename-cli-1.0.0-win64.zip
Size

2.3MB
MD5

6b199a43ebe03576cb4d37364b3cedce
SHA1

fd82caeeb1c1689cac9beec56d04933a9a53ae7f
SHA256

e68d23feaf21b116b0bdeb7c667f8fb547a58f53437dd9e3f9141b5afc6dddcd
SHA512

bb50bc753126d1a5a1b3892b4aa52ebaa44c7aa6b769399f8f01b573ef12ca978cae4f01578bf1d2c49bd062586d94c4d889485a4162aac0ec2df679b4bdaad3
SSDEEP

49152:3p8rsUBWmAJ/vB614nVRkefSStzfxIIK8dF9CpBSlUNOOHTm:5KjaJX24nVBaQs8L9CpBSlUNOOHTm

Score

3^/10

Malware Config

Signatures

Unsigned PE 11 IoCs

Checks for missing Authenticode signature.

resource
unpack001/sfbrename-cli-1.0.0-win64/gdbus.exe
unpack001/sfbrename-cli-1.0.0-win64/libffi-7.dll
unpack001/sfbrename-cli-1.0.0-win64/libgio-2.0-0.dll
unpack001/sfbrename-cli-1.0.0-win64/libglib-2.0-0.dll
unpack001/sfbrename-cli-1.0.0-win64/libgmodule-2.0-0.dll
unpack001/sfbrename-cli-1.0.0-win64/libgobject-2.0-0.dll
unpack001/sfbrename-cli-1.0.0-win64/libiconv-2.dll
unpack001/sfbrename-cli-1.0.0-win64/libintl-8.dll
unpack001/sfbrename-cli-1.0.0-win64/libpcre-1.dll
unpack001/sfbrename-cli-1.0.0-win64/sfbrename.exe
unpack001/sfbrename-cli-1.0.0-win64/zlib1.dll

Files

sfbrename-cli-1.0.0-win64.zip
.zip

Password: infected
sfbrename-cli-1.0.0-win64/LICENSE
sfbrename-cli-1.0.0-win64/gdbus.exe
.exe windows:4 windows x64 arch:x64

Password: infected

77feeaee50aa36cdd5e06f441ac2abd1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

libintl-8

libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_gettext
libintl_setlocale
libintl_textdomain

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
GetStartupInfoA
InitializeCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
__C_specific_handler

msvcrt

__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_commode
_fileno
_fmode
_initterm
_onexit
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
signal
strlen
strncmp
strrchr
strtol
vfprintf

libgio-2.0-0

g_bus_get_sync
g_bus_unwatch_name
g_bus_watch_name_on_connection
g_dbus_connection_call_sync
g_dbus_connection_emit_signal
g_dbus_connection_flush_sync
g_dbus_connection_get_unique_name
g_dbus_connection_new_for_address_sync
g_dbus_connection_signal_subscribe
g_dbus_connection_signal_unsubscribe
g_dbus_error_quark
g_dbus_interface_info_lookup_method
g_dbus_is_interface_name
g_dbus_is_member_name
g_dbus_is_name
g_dbus_is_unique_name
g_dbus_node_info_lookup_interface
g_dbus_node_info_new_for_xml
g_dbus_node_info_unref
g_io_error_quark
g_win32_run_session_bus

libglib-2.0-0

_glib_get_locale_dir
g_ascii_table
g_assertion_message_expr
g_error_free
g_error_matches
g_free
g_hash_table_add
g_hash_table_get_keys
g_hash_table_insert
g_hash_table_lookup
g_hash_table_new_full
g_hash_table_unref
g_list_free
g_list_sort
g_log_writer_supports_color
g_main_context_iteration
g_main_loop_new
g_main_loop_run
g_main_loop_unref
g_option_context_add_group
g_option_context_add_main_entries
g_option_context_free
g_option_context_get_help
g_option_context_new
g_option_context_parse
g_option_context_set_description
g_option_context_set_help_enabled
g_option_context_set_ignore_unknown_options
g_option_context_set_summary
g_option_group_add_entries
g_option_group_new
g_option_group_set_translation_domain
g_path_get_basename
g_print
g_printerr
g_ptr_array_add
g_ptr_array_new_with_free_func
g_ptr_array_unref
g_set_error
g_shell_parse_argv
g_source_remove
g_str_equal
g_str_has_prefix
g_str_hash
g_strcmp0
g_strdup
g_strdup_printf
g_string_append
g_string_append_len
g_string_free
g_string_insert_c
g_string_new
g_strndup
g_timeout_add_seconds
g_variant_builder_add_value
g_variant_builder_clear
g_variant_builder_end
g_variant_builder_init
g_variant_get
g_variant_is_object_path
g_variant_is_of_type
g_variant_iter_free
g_variant_iter_loop
g_variant_iter_next_value
g_variant_new
g_variant_parse
g_variant_parse_error_print_context
g_variant_print
g_variant_ref
g_variant_ref_sink
g_variant_type_checked_
g_variant_type_dup_string
g_variant_type_free
g_variant_type_get_string_length
g_variant_type_new
g_variant_type_peek_string
g_variant_unref

libgobject-2.0-0

g_object_unref

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 544B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
sfbrename-cli-1.0.0-win64/libffi-7.dll
.dll windows:4 windows x64 arch:x64

Password: infected

6b539304435d48771cc36f5f9462fabf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
GetSystemInfo
InitializeCriticalSection
LeaveCriticalSection
Sleep
TlsGetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery

msvcrt

__iob_func
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
free
fwrite
memcpy
realloc
strlen
strncmp
vfprintf

Exports

Exports

ffi_call
ffi_call_go
ffi_call_win64
ffi_closure_alloc
ffi_closure_free
ffi_closure_win64
ffi_closure_win64_inner
ffi_data_to_code_pointer
ffi_get_struct_offsets
ffi_go_closure_win64
ffi_java_ptrarray_to_raw
ffi_java_raw_call
ffi_java_raw_size
ffi_java_raw_to_ptrarray
ffi_prep_cif
ffi_prep_cif_core
ffi_prep_cif_machdep
ffi_prep_cif_var
ffi_prep_closure
ffi_prep_closure_loc
ffi_prep_go_closure
ffi_prep_java_raw_closure
ffi_prep_java_raw_closure_loc
ffi_prep_raw_closure
ffi_prep_raw_closure_loc
ffi_ptrarray_to_raw
ffi_raw_call
ffi_raw_size
ffi_raw_to_ptrarray
ffi_type_complex_double
ffi_type_complex_float
ffi_type_complex_longdouble
ffi_type_double
ffi_type_float
ffi_type_longdouble
ffi_type_pointer
ffi_type_sint16
ffi_type_sint32
ffi_type_sint64
ffi_type_sint8
ffi_type_uint16
ffi_type_uint32
ffi_type_uint64
ffi_type_uint8
ffi_type_void

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
sfbrename-cli-1.0.0-win64/libgio-2.0-0.dll
.dll windows:4 windows x64 arch:x64

Password: infected

f026ece3a8b3f4d50987ad88bb29e80f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

ConvertSidToStringSidA
CopySid
GetCurrentHwProfileA
GetFileSecurityW
GetLengthSid
GetSecurityDescriptorGroup
GetSecurityDescriptorOwner
GetTokenInformation
IsValidSid
LookupAccountSidW
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegLoadMUIStringW
RegNotifyChangeKeyValue
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW

dnsapi

DnsFree
DnsQuery_A

libintl-8

libintl_bind_textdomain_codeset
libintl_fprintf
libintl_gettext
libintl_ngettext

iphlpapi

CancelMibChangeNotify2
GetAdaptersAddresses
GetIpForwardTable2
NotifyRouteChange2
if_nametoindex

kernel32

AllocConsole
AssignProcessToJobObject
CancelIo
CloseHandle
CreateEventA
CreateFileMappingA
CreateFileW
CreateJobObjectW
CreateMemoryResourceNotification
CreateMutexA
CreateProcessW
CreateThread
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitThread
ExpandEnvironmentStringsW
FlushFileBuffers
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetDiskFreeSpaceExW
GetDriveTypeW
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandleEx
GetFinalPathNameByHandleW
GetLastError
GetLogicalDrives
GetLongPathNameW
GetModuleHandleExA
GetModuleHandleW
GetOverlappedResult
GetProcAddress
GetProcessId
GetShortPathNameW
GetStdHandle
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemWow64DirectoryW
GetTickCount
GetVolumeInformationW
GetVolumePathNameW
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFree
MapViewOfFile
MultiByteToWideChar
OpenFileMappingA
OpenProcess
QueryMemoryResourceNotification
ReadDirectoryChangesW
ReadFile
ReleaseMutex
SetConsoleTitleW
SetEvent
SetFileInformationByHandle
SetFilePointerEx
SetFileTime
SetInformationJobObject
Sleep
TerminateProcess
TlsGetValue
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
WriteFile

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_close
_errno
_fileno
_get_osfhandle
_getch
_initterm
_lock
_lseeki64
_pipe
_read
_snwprintf
_strdup
_stricmp
_unlock
_wcsdup
_wcsicmp
_wcsnicmp
abort
atoi
calloc
fclose
fflush
fgetwc
fopen
fread
free
freopen
fwrite
iswctype
_write
localeconv
malloc
mbstowcs
memchr
memcmp
memcpy
memmove
memset
raise
realloc
sprintf
strchr
strcmp
strcpy
strcspn
strlen
strncmp
strncpy
strrchr
strstr
strtol
strtoul
towlower
vfprintf
ungetwc
wcscat
wcschr
wcscmp
wcscpy
wcslen
wcsrchr
wcstol
wcstoul

ole32

CoCreateInstance
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize

shell32

SHBindToParent
SHCreateShellItemArrayFromIDLists
SHFileOperationW
SHGetDesktopFolder
SHParseDisplayName

shlwapi

SHLoadIndirectString
StrRetToStrW

user32

DispatchMessageA
GetMessageA
PostQuitMessage
TranslateMessage

ws2_32

WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAGetLastError
WSAIoctl
WSARecv
WSARecvFrom
WSASend
WSASendTo
WSASetLastError
WSAStartup
WSAWaitForMultipleEvents
accept
bind
closesocket
connect
gethostbyaddr
gethostbyname
getpeername
getservbyname
getservbyport
getsockname
getsockopt
htonl
htons
inet_addr
inet_ntoa
inet_ntop
inet_pton
ioctlsocket
listen
ntohs
recv
send
setsockopt
shutdown
socket

zlib1

deflate
deflateEnd
deflateInit2_
deflateInit_
deflateReset
deflateSetHeader
inflate
inflateEnd
inflateGetHeader
inflateInit2_
inflateInit_
inflateReset

libglib-2.0-0

g_access
g_array_append_vals
g_array_free
g_array_insert_vals
g_array_new
g_array_remove_index
g_array_set_size
g_array_sort
g_ascii_strcasecmp
g_ascii_strdown
g_ascii_strncasecmp
g_ascii_strtoll
g_ascii_table
g_ascii_tolower
g_ascii_xdigit_value
g_assertion_message_cmpnum
g_assertion_message_error
g_assertion_message_expr
g_atomic_ref_count_dec
g_atomic_ref_count_inc
g_base64_encode
g_build_filename
g_build_filename_valist
g_build_path
g_byte_array_append
g_byte_array_free
g_byte_array_new
g_byte_array_ref
g_byte_array_set_size
g_byte_array_sized_new
g_byte_array_unref
g_bytes_equal
g_bytes_get_data
g_bytes_get_size
g_bytes_hash
g_bytes_new
g_bytes_new_from_bytes
g_bytes_new_static
g_bytes_new_take
g_bytes_new_with_free_func
g_bytes_ref
g_bytes_unref
g_canonicalize_filename
g_checksum_free
g_checksum_get_digest
g_checksum_get_string
g_checksum_new
g_checksum_update
g_child_watch_source_new
g_chmod
g_clear_error
g_close
g_compute_checksum_for_string
g_cond_broadcast
g_cond_clear
g_cond_init
g_cond_signal
g_cond_wait
g_cond_wait_until
g_convert
g_convert_error_quark
g_datalist_clear
g_datalist_id_set_data_full
g_date_time_add
g_date_time_add_seconds
g_date_time_get_microsecond
g_date_time_new_from_iso8601
g_date_time_new_from_unix_utc
g_date_time_to_unix
g_date_time_unref
g_dcgettext
g_dgettext
g_dir_close
g_dir_open
g_dir_read_name
g_direct_equal
g_direct_hash
g_dngettext
g_environ_getenv
g_environ_setenv
g_environ_unsetenv
g_error_copy
g_error_free
g_error_matches
g_error_new
g_error_new_literal
g_error_new_valist
g_file_error_quark
g_file_get_contents
g_file_open_tmp
g_file_set_contents_full
g_file_test
g_filename_display_basename
g_filename_display_name
g_filename_from_uri
g_filename_from_utf8
g_filename_to_uri
g_filename_to_utf8
g_free
g_fsync
g_get_current_dir
g_get_environ
g_get_filename_charsets
g_get_home_dir
g_get_monotonic_time
g_get_prgname
g_get_real_time
g_get_user_cache_dir
g_get_user_config_dir
g_get_user_data_dir
g_get_user_special_dir
g_getenv
g_hash_table_add
g_hash_table_contains
g_hash_table_destroy
g_hash_table_foreach
g_hash_table_foreach_remove
g_hash_table_get_keys
g_hash_table_get_keys_as_array
g_hash_table_get_values
g_hash_table_insert
g_hash_table_iter_init
g_hash_table_iter_next
g_hash_table_iter_remove
g_hash_table_lookup
g_hash_table_lookup_extended
g_hash_table_new
g_hash_table_new_full
g_hash_table_ref
g_hash_table_remove
g_hash_table_remove_all
g_hash_table_replace
g_hash_table_size
g_hash_table_steal_all
g_hash_table_unref
g_hostname_is_ip_address
g_hostname_is_non_ascii
g_hostname_to_ascii
g_iconv
g_iconv_close
g_iconv_open
g_idle_add
g_idle_add_full
g_idle_source_new
g_int_hash
g_intern_static_string
g_intern_string
g_io_channel_read_line
g_io_channel_set_close_on_unref
g_io_channel_shutdown
g_io_channel_unix_new
g_io_channel_unref
g_key_file_free
g_key_file_get_groups
g_key_file_get_keys
g_key_file_get_value
g_key_file_load_from_data
g_key_file_load_from_file
g_key_file_new
g_key_file_remove_group
g_key_file_remove_key
g_key_file_set_value
g_key_file_to_data
g_key_file_unref
g_list_append
g_list_concat
g_list_copy_deep
g_list_delete_link
g_list_find
g_list_find_custom
g_list_foreach
g_list_free
g_list_free_full
g_list_insert_sorted
g_list_length
g_list_prepend
g_list_remove
g_list_remove_link
g_list_reverse
g_list_sort
g_list_sort_with_data
g_locale_from_utf8
g_log
g_log_set_debug_enabled
g_lstat
g_main_context_acquire
g_main_context_default
g_main_context_get_thread_default
g_main_context_invoke
g_main_context_invoke_full
g_main_context_iteration
g_main_context_new
g_main_context_pop_thread_default
g_main_context_push_thread_default
g_main_context_ref
g_main_context_ref_thread_default
g_main_context_release
g_main_context_unref
g_main_current_source
g_main_loop_new
g_main_loop_quit
g_main_loop_run
g_main_loop_unref
g_malloc
g_malloc0
g_malloc0_n
g_malloc_n
g_mapped_file_get_bytes
g_mapped_file_get_contents
g_mapped_file_get_length
g_mapped_file_new
g_mapped_file_unref
g_markup_collect_attributes
g_markup_error_quark
g_markup_parse_context_end_parse
g_markup_parse_context_free
g_markup_parse_context_get_element_stack
g_markup_parse_context_get_position
g_markup_parse_context_new
g_markup_parse_context_parse
g_markup_printf_escaped
g_memdup2
g_mkdir
g_mkdir_with_parents
g_mkstemp_full
g_mutex_clear
g_mutex_init
g_mutex_lock
g_mutex_unlock
g_node_children_foreach
g_node_destroy
g_node_insert_before
g_node_n_children
g_node_new
g_node_traverse
g_once_impl
g_once_init_enter
g_once_init_leave
g_open
g_option_context_add_group
g_option_context_free
g_option_context_new
g_option_context_parse_strv
g_option_context_set_description
g_option_context_set_help_enabled
g_option_context_set_ignore_unknown_options
g_option_context_set_main_group
g_option_context_set_summary
g_option_group_add_entries
g_option_group_new
g_option_group_set_translation_domain
g_option_group_unref
g_parse_debug_string
g_path_get_basename
g_path_get_dirname
g_path_is_absolute
g_path_skip_root
g_poll
g_prefix_error
g_print
g_printerr
g_private_get
g_private_set
g_propagate_error
g_propagate_prefixed_error
g_ptr_array_add
g_ptr_array_foreach
g_ptr_array_free
g_ptr_array_insert
g_ptr_array_new
g_ptr_array_new_full
g_ptr_array_new_with_free_func
g_ptr_array_remove
g_ptr_array_remove_index
g_ptr_array_remove_index_fast
g_ptr_array_sized_new
g_ptr_array_sort
g_ptr_array_unref
g_quark_from_static_string
g_quark_from_string
g_quark_to_string
g_quark_try_string
g_queue_clear
g_queue_free_full
g_queue_get_length
g_queue_init
g_queue_is_empty
g_queue_new
g_queue_pop_head
g_queue_push_tail
g_queue_remove
g_random_int
g_random_int_range
g_realloc
g_realloc_n
g_rec_mutex_lock
g_rec_mutex_unlock
g_ref_count_dec
g_ref_count_inc
g_ref_count_init
g_regex_new
g_regex_replace_literal
g_regex_split
g_remove
g_rename
g_return_if_fail_warning
g_rmdir
g_rw_lock_reader_lock
g_rw_lock_reader_unlock
g_rw_lock_writer_lock
g_rw_lock_writer_unlock
g_sequence_append
g_sequence_free
g_sequence_get
g_sequence_get_begin_iter
g_sequence_get_end_iter
g_sequence_get_iter_at_pos
g_sequence_get_length
g_sequence_insert_before
g_sequence_insert_sorted
g_sequence_is_empty
g_sequence_iter_get_position
g_sequence_iter_is_end
g_sequence_iter_move
g_sequence_iter_next
g_sequence_iter_prev
g_sequence_new
g_sequence_remove
g_sequence_remove_range
g_sequence_sort
g_sequence_sort_changed
g_set_error
g_set_error_literal
g_set_prgname
g_setenv
g_shell_parse_argv
g_shell_quote
g_slice_alloc
g_slice_copy
g_slice_free1
g_slist_append
g_slist_concat
g_slist_delete_link
g_slist_free
g_slist_free_1
g_slist_free_full
g_slist_last
g_slist_length
g_slist_prepend
g_slist_remove
g_snprintf
g_source_add_child_source
g_source_add_poll
g_source_attach
g_source_destroy
g_source_get_context
g_source_get_ready_time
g_source_get_time
g_source_is_destroyed
g_source_new
g_source_ref
g_source_remove
g_source_remove_poll
g_source_set_callback
g_source_set_dispose_function
g_source_set_name
g_source_set_priority
g_source_set_ready_time
g_source_set_static_name
g_source_unref
g_spawn_async
g_spawn_async_with_pipes_and_fds
g_spawn_check_wait_status
g_spawn_close_pid
g_spawn_command_line_async
g_spawn_error_quark
g_stat
g_str_equal
g_str_has_prefix
g_str_has_suffix
g_str_hash
g_strchomp
g_strchug
g_strcmp0
g_strconcat
g_strdup
g_strdup_printf
g_strdup_vprintf
g_strdupv
g_strerror
g_strfreev
g_string_append
g_string_append_len
g_string_append_printf
g_string_append_uri_escaped
g_string_free
g_string_insert
g_string_insert_c
g_string_new
g_string_prepend
g_string_prepend_c
g_string_set_size
g_string_sized_new
g_strjoin
g_strjoinv
g_strlcpy
g_strndup
g_strrstr_len
g_strsplit
g_strstr_len
g_strv_contains
g_strv_length
g_thread_new
g_thread_pool_free
g_thread_pool_move_to_front
g_thread_pool_new
g_thread_pool_push
g_thread_pool_set_max_threads
g_thread_pool_set_sort_function
g_thread_pool_unprocessed
g_thread_self
g_thread_yield
g_time_zone_new_local
g_time_zone_unref
g_timeout_add
g_timeout_source_new
g_timeout_source_new_seconds
g_tree_foreach
g_tree_insert
g_tree_lookup
g_tree_lookup_extended
g_tree_new_full
g_tree_nnodes
g_tree_remove
g_tree_unref
g_try_malloc
g_try_realloc
g_unlink
g_unsetenv
g_uri_escape_string
g_uri_is_valid
g_uri_join
g_uri_parse_scheme
g_uri_split_network
g_uri_split_with_user
g_uri_unescape_segment
g_uri_unescape_string
g_usleep
g_utf16_to_utf8
g_utf8_casefold
g_utf8_get_char
g_utf8_skip
g_utf8_to_utf16
g_utf8_validate
g_variant_builder_add
g_variant_builder_add_value
g_variant_builder_clear
g_variant_builder_close
g_variant_builder_end
g_variant_builder_init
g_variant_builder_new
g_variant_builder_open
g_variant_builder_unref
g_variant_byteswap
g_variant_check_format_string
g_variant_classify
g_variant_compare
g_variant_dict_end
g_variant_dict_insert_value
g_variant_dict_new
g_variant_dict_unref
g_variant_dup_bytestring
g_variant_dup_bytestring_array
g_variant_dup_objv
g_variant_dup_string
g_variant_dup_strv
g_variant_equal
g_variant_get
g_variant_get_boolean
g_variant_get_byte
g_variant_get_bytestring
g_variant_get_child
g_variant_get_child_value
g_variant_get_data
g_variant_get_data_as_bytes
g_variant_get_double
g_variant_get_fixed_array
g_variant_get_handle
g_variant_get_int16
g_variant_get_int32
g_variant_get_int64
g_variant_get_normal_form
g_variant_get_size
g_variant_get_string
g_variant_get_strv
g_variant_get_type
g_variant_get_type_string
g_variant_get_uint16
g_variant_get_uint32
g_variant_get_uint64

libgmodule-2.0-0

g_module_close
g_module_error
g_module_open_full
g_module_supported
g_module_symbol

libgobject-2.0-0

g_array_get_type
g_boxed_copy
g_boxed_free
g_boxed_type_register_static
g_byte_array_get_type
g_bytes_get_type
g_cclosure_marshal_VOID__VOID
g_cclosure_marshal_generic
g_cclosure_new
g_closure_invoke
g_closure_ref
g_closure_set_marshal
g_closure_sink
g_closure_unref
g_date_time_get_type
g_enum_get_value
g_enum_get_value_by_nick
g_enum_register_static
g_error_get_type
g_flags_get_first_value
g_flags_get_value_by_nick
g_flags_register_static
g_io_condition_get_type
g_object_add_weak_pointer
g_object_class_find_property
g_object_class_install_properties
g_object_class_install_property
g_object_class_override_property
g_object_freeze_notify
g_object_get
g_object_get_data
g_object_get_property
g_object_get_qdata
g_object_interface_install_property
g_object_new
g_object_new_valist
g_object_newv
g_object_notify
g_object_ref
g_object_remove_weak_pointer
g_object_replace_qdata
g_object_run_dispose
g_object_set
g_object_set_data
g_object_set_data_full
g_object_set_property
g_object_set_qdata
g_object_set_qdata_full
g_object_thaw_notify
g_object_unref
g_object_weak_ref
g_object_weak_unref
g_param_spec_boolean
g_param_spec_boxed
g_param_spec_enum
g_param_spec_flags
g_param_spec_gtype
g_param_spec_int
g_param_spec_object
g_param_spec_pointer
g_param_spec_string
g_param_spec_uint
g_param_spec_ulong
g_param_spec_variant
g_ptr_array_get_type
g_signal_accumulator_first_wins
g_signal_accumulator_true_handled
g_signal_connect_closure_by_id
g_signal_connect_data
g_signal_connect_object
g_signal_emit
g_signal_emit_by_name
g_signal_emitv
g_signal_handler_disconnect
g_signal_handler_find
g_signal_handler_is_connected
g_signal_handlers_disconnect_matched
g_signal_has_handler_pending
g_signal_lookup
g_signal_new
g_signal_set_va_marshaller
g_source_set_dummy_callback
g_strv_get_type
g_type_add_instance_private
g_type_add_interface_static
g_type_check_class_cast
g_type_check_instance_cast
g_type_check_instance_is_a
g_type_check_instance_is_fundamentally_a
g_type_check_value_holds
g_type_children
g_type_class_adjust_private_offset
g_type_class_peek
g_type_class_peek_parent
g_type_class_peek_static
g_type_class_ref
g_type_class_unref
g_type_default_interface_peek
g_type_ensure
g_type_from_name
g_type_fundamental
g_type_interface_add_prerequisite
g_type_interface_peek
g_type_interface_peek_parent
g_type_is_a
g_type_module_get_type
g_type_module_unuse
g_type_module_use
g_type_name
g_type_name_from_instance
g_type_register_static_simple
g_value_copy
g_value_dup_boxed
g_value_dup_object
g_value_dup_string
g_value_dup_variant
g_value_get_boolean
g_value_get_boxed
g_value_get_double
g_value_get_enum
g_value_get_flags
g_value_get_gtype
g_value_get_int
g_value_get_int64
g_value_get_object
g_value_get_pointer
g_value_get_schar
g_value_get_string
g_value_get_uchar
g_value_get_uint
g_value_get_uint64
g_value_get_ulong
g_value_get_variant
g_value_init
g_value_peek_pointer
g_value_set_boolean
g_value_set_boxed
g_value_set_double
g_value_set_enum
g_value_set_flags
g_value_set_gtype
g_value_set_int
g_value_set_int64
g_value_set_object
g_value_set_pointer
g_value_set_schar
g_value_set_static_string
g_value_set_string
g_value_set_uchar
g_value_set_uint
g_value_set_uint64
g_value_set_ulong
g_value_set_variant
g_value_take_boxed
g_value_take_object
g_value_take_string
g_value_take_variant
g_value_unset
g_variant_dict_get_type
g_variant_type_get_gtype
g_weak_ref_clear
g_weak_ref_get
g_weak_ref_init
g_weak_ref_set

Exports

Exports

g_action_activate
g_action_change_state
g_action_get_enabled
g_action_get_name
g_action_get_parameter_type
g_action_get_state
g_action_get_state_hint
g_action_get_state_type
g_action_get_type
g_action_group_action_added
g_action_group_action_enabled_changed
g_action_group_action_removed
g_action_group_action_state_changed
g_action_group_activate_action
g_action_group_change_action_state
g_action_group_get_action_enabled
g_action_group_get_action_parameter_type
g_action_group_get_action_state
g_action_group_get_action_state_hint
g_action_group_get_action_state_type
g_action_group_get_type
g_action_group_has_action
g_action_group_list_actions
g_action_group_query_action
g_action_map_add_action
g_action_map_add_action_entries
g_action_map_get_type
g_action_map_lookup_action
g_action_map_remove_action
g_action_name_is_valid
g_action_parse_detailed_name
g_action_print_detailed_name
g_app_info_add_supports_type
g_app_info_can_delete
g_app_info_can_remove_supports_type
g_app_info_create_flags_get_type
g_app_info_create_from_commandline
g_app_info_delete
g_app_info_dup
g_app_info_equal
g_app_info_get_all
g_app_info_get_all_for_type
g_app_info_get_commandline
g_app_info_get_default_for_type
g_app_info_get_default_for_uri_scheme
g_app_info_get_description
g_app_info_get_display_name
g_app_info_get_executable
g_app_info_get_fallback_for_type
g_app_info_get_icon
g_app_info_get_id
g_app_info_get_name
g_app_info_get_recommended_for_type
g_app_info_get_supported_types
g_app_info_get_type
g_app_info_launch
g_app_info_launch_default_for_uri
g_app_info_launch_default_for_uri_async
g_app_info_launch_default_for_uri_finish
g_app_info_launch_uris
g_app_info_launch_uris_async
g_app_info_launch_uris_finish
g_app_info_monitor_get
g_app_info_monitor_get_type
g_app_info_remove_supports_type
g_app_info_reset_type_associations
g_app_info_set_as_default_for_extension
g_app_info_set_as_default_for_type
g_app_info_set_as_last_used_for_type
g_app_info_should_show
g_app_info_supports_files
g_app_info_supports_uris
g_app_launch_context_get_display
g_app_launch_context_get_environment
g_app_launch_context_get_startup_notify_id
g_app_launch_context_get_type
g_app_launch_context_launch_failed
g_app_launch_context_new
g_app_launch_context_setenv
g_app_launch_context_unsetenv
g_application_activate
g_application_add_main_option
g_application_add_main_option_entries
g_application_add_option_group
g_application_bind_busy_property
g_application_command_line_create_file_for_arg
g_application_command_line_get_arguments
g_application_command_line_get_cwd
g_application_command_line_get_environ
g_application_command_line_get_exit_status
g_application_command_line_get_is_remote
g_application_command_line_get_options_dict
g_application_command_line_get_platform_data
g_application_command_line_get_stdin
g_application_command_line_get_type
g_application_command_line_getenv
g_application_command_line_print
g_application_command_line_printerr
g_application_command_line_set_exit_status
g_application_flags_get_type
g_application_get_application_id
g_application_get_dbus_connection
g_application_get_dbus_object_path
g_application_get_default
g_application_get_flags
g_application_get_inactivity_timeout
g_application_get_is_busy
g_application_get_is_registered
g_application_get_is_remote
g_application_get_resource_base_path
g_application_get_type
g_application_hold
g_application_id_is_valid
g_application_mark_busy
g_application_new
g_application_open
g_application_quit
g_application_register
g_application_release
g_application_run
g_application_send_notification
g_application_set_action_group
g_application_set_application_id
g_application_set_default
g_application_set_flags
g_application_set_inactivity_timeout
g_application_set_option_context_description
g_application_set_option_context_parameter_string
g_application_set_option_context_summary
g_application_set_resource_base_path
g_application_unbind_busy_property
g_application_unmark_busy
g_application_withdraw_notification
g_ask_password_flags_get_type
g_async_initable_get_type
g_async_initable_init_async
g_async_initable_init_finish
g_async_initable_new_async
g_async_initable_new_finish
g_async_initable_new_valist_async
g_async_initable_newv_async
g_async_result_get_source_object
g_async_result_get_type
g_async_result_get_user_data
g_async_result_is_tagged
g_async_result_legacy_propagate_error
g_buffered_input_stream_fill
g_buffered_input_stream_fill_async
g_buffered_input_stream_fill_finish
g_buffered_input_stream_get_available
g_buffered_input_stream_get_buffer_size
g_buffered_input_stream_get_type
g_buffered_input_stream_new
g_buffered_input_stream_new_sized
g_buffered_input_stream_peek
g_buffered_input_stream_peek_buffer
g_buffered_input_stream_read_byte
g_buffered_input_stream_set_buffer_size
g_buffered_output_stream_get_auto_grow
g_buffered_output_stream_get_buffer_size
g_buffered_output_stream_get_type
g_buffered_output_stream_new
g_buffered_output_stream_new_sized
g_buffered_output_stream_set_auto_grow
g_buffered_output_stream_set_buffer_size
g_bus_get
g_bus_get_finish
g_bus_get_sync
g_bus_name_owner_flags_get_type
g_bus_name_watcher_flags_get_type
g_bus_own_name
g_bus_own_name_on_connection
g_bus_own_name_on_connection_with_closures
g_bus_own_name_with_closures
g_bus_type_get_type
g_bus_unown_name
g_bus_unwatch_name
g_bus_watch_name
g_bus_watch_name_on_connection
g_bus_watch_name_on_connection_with_closures
g_bus_watch_name_with_closures
g_bytes_icon_get_bytes
g_bytes_icon_get_type
g_bytes_icon_new
g_cancellable_cancel
g_cancellable_connect
g_cancellable_disconnect
g_cancellable_get_current
g_cancellable_get_fd
g_cancellable_get_type
g_cancellable_is_cancelled
g_cancellable_make_pollfd
g_cancellable_new
g_cancellable_pop_current
g_cancellable_push_current
g_cancellable_release_fd
g_cancellable_reset
g_cancellable_set_error_if_cancelled
g_cancellable_source_new
g_charset_converter_get_num_fallbacks
g_charset_converter_get_type
g_charset_converter_get_use_fallback
g_charset_converter_new
g_charset_converter_set_use_fallback
g_content_type_can_be_executable
g_content_type_equals
g_content_type_from_mime_type
g_content_type_get_description
g_content_type_get_generic_icon_name
g_content_type_get_icon
g_content_type_get_mime_dirs
g_content_type_get_mime_type
g_content_type_get_symbolic_icon
g_content_type_guess
g_content_type_guess_for_tree
g_content_type_is_a
g_content_type_is_mime_type
g_content_type_is_unknown
g_content_type_set_mime_dirs
g_content_types_get_registered
g_converter_convert
g_converter_flags_get_type
g_converter_get_type
g_converter_input_stream_get_converter
g_converter_input_stream_get_type
g_converter_input_stream_new
g_converter_output_stream_get_converter
g_converter_output_stream_get_type
g_converter_output_stream_new
g_converter_reset
g_converter_result_get_type
g_credentials_get_native
g_credentials_get_type
g_credentials_is_same_user
g_credentials_new
g_credentials_set_native
g_credentials_to_string
g_credentials_type_get_type
g_data_input_stream_get_byte_order
g_data_input_stream_get_newline_type
g_data_input_stream_get_type
g_data_input_stream_new
g_data_input_stream_read_byte
g_data_input_stream_read_int16
g_data_input_stream_read_int32
g_data_input_stream_read_int64
g_data_input_stream_read_line
g_data_input_stream_read_line_async
g_data_input_stream_read_line_finish
g_data_input_stream_read_line_finish_utf8
g_data_input_stream_read_line_utf8
g_data_input_stream_read_uint16
g_data_input_stream_read_uint32
g_data_input_stream_read_uint64
g_data_input_stream_read_until
g_data_input_stream_read_until_async
g_data_input_stream_read_until_finish
g_data_input_stream_read_upto
g_data_input_stream_read_upto_async
g_data_input_stream_read_upto_finish
g_data_input_stream_set_byte_order
g_data_input_stream_set_newline_type
g_data_output_stream_get_byte_order
g_data_output_stream_get_type
g_data_output_stream_new
g_data_output_stream_put_byte
g_data_output_stream_put_int16
g_data_output_stream_put_int32
g_data_output_stream_put_int64
g_data_output_stream_put_string
g_data_output_stream_put_uint16
g_data_output_stream_put_uint32
g_data_output_stream_put_uint64
g_data_output_stream_set_byte_order
g_data_stream_byte_order_get_type
g_data_stream_newline_type_get_type
g_datagram_based_condition_check
g_datagram_based_condition_wait
g_datagram_based_create_source
g_datagram_based_get_type
g_datagram_based_receive_messages
g_datagram_based_send_messages
g_dbus_action_group_get
g_dbus_action_group_get_type
g_dbus_address_escape_value
g_dbus_address_get_for_bus_sync
g_dbus_address_get_stream
g_dbus_address_get_stream_finish
g_dbus_address_get_stream_sync
g_dbus_annotation_info_get_type
g_dbus_annotation_info_lookup
g_dbus_annotation_info_ref
g_dbus_annotation_info_unref
g_dbus_arg_info_get_type
g_dbus_arg_info_ref
g_dbus_arg_info_unref
g_dbus_auth_observer_allow_mechanism
g_dbus_auth_observer_authorize_authenticated_peer
g_dbus_auth_observer_get_type
g_dbus_auth_observer_new
g_dbus_call_flags_get_type
g_dbus_capability_flags_get_type
g_dbus_connection_add_filter
g_dbus_connection_call
g_dbus_connection_call_finish
g_dbus_connection_call_sync
g_dbus_connection_close
g_dbus_connection_close_finish
g_dbus_connection_close_sync
g_dbus_connection_emit_signal
g_dbus_connection_export_action_group
g_dbus_connection_export_menu_model
g_dbus_connection_flags_get_type
g_dbus_connection_flush
g_dbus_connection_flush_finish
g_dbus_connection_flush_sync
g_dbus_connection_get_capabilities
g_dbus_connection_get_exit_on_close
g_dbus_connection_get_flags
g_dbus_connection_get_guid
g_dbus_connection_get_last_serial
g_dbus_connection_get_peer_credentials
g_dbus_connection_get_stream
g_dbus_connection_get_type
g_dbus_connection_get_unique_name
g_dbus_connection_is_closed
g_dbus_connection_new
g_dbus_connection_new_finish
g_dbus_connection_new_for_address
g_dbus_connection_new_for_address_finish
g_dbus_connection_new_for_address_sync
g_dbus_connection_new_sync
g_dbus_connection_register_object
g_dbus_connection_register_object_with_closures
g_dbus_connection_register_subtree
g_dbus_connection_remove_filter
g_dbus_connection_send_message
g_dbus_connection_send_message_with_reply
g_dbus_connection_send_message_with_reply_finish
g_dbus_connection_send_message_with_reply_sync
g_dbus_connection_set_exit_on_close
g_dbus_connection_signal_subscribe
g_dbus_connection_signal_unsubscribe
g_dbus_connection_start_message_processing
g_dbus_connection_unexport_action_group
g_dbus_connection_unexport_menu_model
g_dbus_connection_unregister_object
g_dbus_connection_unregister_subtree
g_dbus_error_encode_gerror
g_dbus_error_get_remote_error
g_dbus_error_get_type
g_dbus_error_is_remote_error
g_dbus_error_new_for_dbus_error
g_dbus_error_quark
g_dbus_error_register_error
g_dbus_error_register_error_domain
g_dbus_error_set_dbus_error
g_dbus_error_set_dbus_error_valist
g_dbus_error_strip_remote_error
g_dbus_error_unregister_error
g_dbus_escape_object_path
g_dbus_escape_object_path_bytestring
g_dbus_generate_guid
g_dbus_gvalue_to_gvariant
g_dbus_gvariant_to_gvalue
g_dbus_interface_dup_object
g_dbus_interface_get_info
g_dbus_interface_get_object
g_dbus_interface_get_type
g_dbus_interface_info_cache_build
g_dbus_interface_info_cache_release
g_dbus_interface_info_generate_xml
g_dbus_interface_info_get_type
g_dbus_interface_info_lookup_method
g_dbus_interface_info_lookup_property
g_dbus_interface_info_lookup_signal
g_dbus_interface_info_ref
g_dbus_interface_info_unref
g_dbus_interface_set_object
g_dbus_interface_skeleton_export
g_dbus_interface_skeleton_flags_get_type
g_dbus_interface_skeleton_flush
g_dbus_interface_skeleton_get_connection
g_dbus_interface_skeleton_get_connections
g_dbus_interface_skeleton_get_flags
g_dbus_interface_skeleton_get_info
g_dbus_interface_skeleton_get_object_path
g_dbus_interface_skeleton_get_properties
g_dbus_interface_skeleton_get_type
g_dbus_interface_skeleton_get_vtable
g_dbus_interface_skeleton_has_connection
g_dbus_interface_skeleton_set_flags
g_dbus_interface_skeleton_unexport
g_dbus_interface_skeleton_unexport_from_connection
g_dbus_is_address
g_dbus_is_error_name
g_dbus_is_guid
g_dbus_is_interface_name
g_dbus_is_member_name
g_dbus_is_name
g_dbus_is_supported_address
g_dbus_is_unique_name
g_dbus_menu_model_get
g_dbus_menu_model_get_type
g_dbus_message_byte_order_get_type
g_dbus_message_bytes_needed
g_dbus_message_copy
g_dbus_message_flags_get_type
g_dbus_message_get_arg0
g_dbus_message_get_body
g_dbus_message_get_byte_order
g_dbus_message_get_destination
g_dbus_message_get_error_name
g_dbus_message_get_flags
g_dbus_message_get_header
g_dbus_message_get_header_fields
g_dbus_message_get_interface
g_dbus_message_get_locked
g_dbus_message_get_member
g_dbus_message_get_message_type
g_dbus_message_get_num_unix_fds
g_dbus_message_get_path
g_dbus_message_get_reply_serial
g_dbus_message_get_sender
g_dbus_message_get_serial
g_dbus_message_get_signature
g_dbus_message_get_type
g_dbus_message_header_field_get_type
g_dbus_message_lock
g_dbus_message_new
g_dbus_message_new_from_blob
g_dbus_message_new_method_call
g_dbus_message_new_method_error
g_dbus_message_new_method_error_literal
g_dbus_message_new_method_error_valist
g_dbus_message_new_method_reply
g_dbus_message_new_signal
g_dbus_message_print
g_dbus_message_set_body
g_dbus_message_set_byte_order
g_dbus_message_set_destination
g_dbus_message_set_error_name
g_dbus_message_set_flags
g_dbus_message_set_header
g_dbus_message_set_interface
g_dbus_message_set_member
g_dbus_message_set_message_type
g_dbus_message_set_num_unix_fds
g_dbus_message_set_path
g_dbus_message_set_reply_serial
g_dbus_message_set_sender
g_dbus_message_set_serial
g_dbus_message_set_signature
g_dbus_message_to_blob
g_dbus_message_to_gerror
g_dbus_message_type_get_type
g_dbus_method_info_get_type
g_dbus_method_info_ref
g_dbus_method_info_unref
g_dbus_method_invocation_get_connection
g_dbus_method_invocation_get_interface_name
g_dbus_method_invocation_get_message
g_dbus_method_invocation_get_method_info
g_dbus_method_invocation_get_method_name
g_dbus_method_invocation_get_object_path
g_dbus_method_invocation_get_parameters
g_dbus_method_invocation_get_property_info
g_dbus_method_invocation_get_sender
g_dbus_method_invocation_get_type
g_dbus_method_invocation_get_user_data
g_dbus_method_invocation_return_dbus_error
g_dbus_method_invocation_return_error
g_dbus_method_invocation_return_error_literal
g_dbus_method_invocation_return_error_valist
g_dbus_method_invocation_return_gerror
g_dbus_method_invocation_return_value
g_dbus_method_invocation_take_error
g_dbus_node_info_generate_xml
g_dbus_node_info_get_type
g_dbus_node_info_lookup_interface
g_dbus_node_info_new_for_xml
g_dbus_node_info_ref
g_dbus_node_info_unref
g_dbus_object_get_interface
g_dbus_object_get_interfaces
g_dbus_object_get_object_path
g_dbus_object_get_type
g_dbus_object_manager_client_flags_get_type
g_dbus_object_manager_client_get_connection
g_dbus_object_manager_client_get_flags
g_dbus_object_manager_client_get_name
g_dbus_object_manager_client_get_name_owner
g_dbus_object_manager_client_get_type
g_dbus_object_manager_client_new
g_dbus_object_manager_client_new_finish
g_dbus_object_manager_client_new_for_bus
g_dbus_object_manager_client_new_for_bus_finish
g_dbus_object_manager_client_new_for_bus_sync
g_dbus_object_manager_client_new_sync
g_dbus_object_manager_get_interface

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 333KB - Virtual size: 333KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
sfbrename-cli-1.0.0-win64/libglib-2.0-0.dll
.dll windows:4 windows x64 arch:x64

Password: infected

066af275cb1aa1eb6cc1ddaf2dc40f22

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

GetUserNameW
RegCloseKey
RegLoadMUIStringW
RegOpenKeyExW
RegQueryValueExW

libintl-8

libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_dcgettext
libintl_dgettext
libintl_dngettext
libintl_gettext
libintl_sprintf
libintl_textdomain

kernel32

AcquireSRWLockExclusive
AcquireSRWLockShared
AddVectoredExceptionHandler
AllocConsole
AttachConsole
CloseHandle
CreateEventA
CreateEventW
CreateFileMappingA
CreateFileW
CreateProcessW
DebugBreak
DeleteCriticalSection
DeviceIoControl
DuplicateHandle
EnterCriticalSection
ExpandEnvironmentStringsW
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineW
GetComputerNameW
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetDateFormatW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetExitCodeProcess
GetExitCodeThread
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetNativeSystemInfo
GetProcAddress
GetProcessAffinityMask
GetShortPathNameW
GetStdHandle
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadLocale
GetThreadPriority
GetTimeFormatW
GetTimeZoneInformation
GetVersion
GetWindowsDirectoryW
InitializeConditionVariable
InitializeCriticalSection
InitializeSRWLock
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidCodePage
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFree
MapViewOfFile
MoveFileExW
MultiByteToWideChar
OutputDebugStringA
PeekConsoleInputA
PeekNamedPipe
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleInputA
ReadFile
ReleaseSRWLockExclusive
ReleaseSRWLockShared
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
SetConsoleMode
SetEnvironmentVariableW
SetEvent
SetThreadPriority
Sleep
SleepConditionVariableSRW
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
TryEnterCriticalSection
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForMultipleObjectsEx
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteFile

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_aligned_free
_aligned_malloc
_amsg_exit
_beginthreadex
_chdir
_chsize
_close
_close
_commit
_dup
_dup2
_endthreadex
_errno
_exit
_fdopen
_findclose
_fileno
_fmode
_fstat64
_get_osfhandle
_getdrive
_getpid
_gmtime64
_initterm
_isatty
_kbhit
_localtime64
_lock
_lseeki64
_mktime64
_open_osfhandle
_pipe
_read
_setmode
_snwprintf_s
_stricmp
_strdup
_strnicmp
_ui64toa_s
_unlock
_vscprintf
_vsnprintf
_waccess
_wchdir
_wchmod
_wcsicmp
_wfindfirst64
_wfindnext64
_wfopen
_wfreopen
_wfullpath
_wmkdir
_wopen
_wputenv
_wremove
_wrmdir
_wspawnv
_wspawnve
_wspawnvp
_wspawnvpe
_wunlink
_wutime64
abort
atoi
atol
bsearch
calloc
exit
fclose
feof
ferror
fflush
fputc
fputs
fread
free
freopen
fwrite
getenv
islower
isupper
iswctype
_write
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
realloc
setlocale
strcat
strchr
strcmp
strcoll
strcpy
strcspn
strerror
strftime
strlen
strncmp
strncpy
strncpy_s
strpbrk
strrchr
strspn
strstr
strtol
strtoul
swprintf_s
strxfrm
tolower
toupper
vfprintf
wcscat
wcschr
wcscmp
wcscpy
wcslen
wcsncmp
wcsspn
wcstol
wcstoul
wctomb

ole32

CoTaskMemFree

shell32

CommandLineToArgvW
SHGetKnownFolderPath

user32

IsWindow
MessageBoxW
MsgWaitForMultipleObjectsEx
PeekMessageA
PostMessageA

ws2_32

WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAGetLastError
WSASetEvent
closesocket
getsockopt
ioctlsocket
recv
send

libpcre-1

pcre_compile2
pcre_config
pcre_dfa_exec
pcre_exec
pcre_free
pcre_fullinfo
pcre_get_stringnumber
pcre_get_stringtable_entries
pcre_study

Exports

Exports

__glib_assert_msg
_glib_get_locale_dir
g_abort
g_access
g_aligned_alloc
g_aligned_alloc0
g_aligned_free
g_allocator_free
g_allocator_new
g_array_append_vals
g_array_binary_search
g_array_copy
g_array_free
g_array_get_element_size
g_array_insert_vals
g_array_new
g_array_prepend_vals
g_array_ref
g_array_remove_index
g_array_remove_index_fast
g_array_remove_range
g_array_set_clear_func
g_array_set_size
g_array_sized_new
g_array_sort
g_array_sort_with_data
g_array_steal
g_array_unref
g_ascii_digit_value
g_ascii_dtostr
g_ascii_formatd
g_ascii_strcasecmp
g_ascii_strdown
g_ascii_string_to_signed
g_ascii_string_to_unsigned
g_ascii_strncasecmp
g_ascii_strtod
g_ascii_strtoll
g_ascii_strtoull
g_ascii_strup
g_ascii_table
g_ascii_tolower
g_ascii_toupper
g_ascii_xdigit_value
g_assert_warning
g_assertion_message
g_assertion_message_cmpnum
g_assertion_message_cmpstr
g_assertion_message_cmpstrv
g_assertion_message_error
g_assertion_message_expr
g_async_queue_length
g_async_queue_length_unlocked
g_async_queue_lock
g_async_queue_new
g_async_queue_new_full
g_async_queue_pop
g_async_queue_pop_unlocked
g_async_queue_push
g_async_queue_push_front
g_async_queue_push_front_unlocked
g_async_queue_push_sorted
g_async_queue_push_sorted_unlocked
g_async_queue_push_unlocked
g_async_queue_ref
g_async_queue_ref_unlocked
g_async_queue_remove
g_async_queue_remove_unlocked
g_async_queue_sort
g_async_queue_sort_unlocked
g_async_queue_timed_pop
g_async_queue_timed_pop_unlocked
g_async_queue_timeout_pop
g_async_queue_timeout_pop_unlocked
g_async_queue_try_pop
g_async_queue_try_pop_unlocked
g_async_queue_unlock
g_async_queue_unref
g_async_queue_unref_and_unlock
g_atexit
g_atomic_int_add
g_atomic_int_and
g_atomic_int_compare_and_exchange
g_atomic_int_dec_and_test
g_atomic_int_exchange_and_add
g_atomic_int_get
g_atomic_int_inc
g_atomic_int_or
g_atomic_int_set
g_atomic_int_xor
g_atomic_pointer_add
g_atomic_pointer_and
g_atomic_pointer_compare_and_exchange
g_atomic_pointer_get
g_atomic_pointer_or
g_atomic_pointer_set
g_atomic_pointer_xor
g_atomic_rc_box_acquire
g_atomic_rc_box_alloc
g_atomic_rc_box_alloc0
g_atomic_rc_box_dup
g_atomic_rc_box_get_size
g_atomic_rc_box_release
g_atomic_rc_box_release_full
g_atomic_ref_count_compare
g_atomic_ref_count_dec
g_atomic_ref_count_inc
g_atomic_ref_count_init
g_base64_decode
g_base64_decode_inplace
g_base64_decode_step
g_base64_encode
g_base64_encode_close
g_base64_encode_step
g_basename
g_bit_lock
g_bit_nth_lsf
g_bit_nth_msf
g_bit_storage
g_bit_trylock
g_bit_unlock
g_blow_chunks
g_bookmark_file_add_application
g_bookmark_file_add_group
g_bookmark_file_error_quark
g_bookmark_file_free
g_bookmark_file_get_added
g_bookmark_file_get_added_date_time
g_bookmark_file_get_app_info
g_bookmark_file_get_application_info
g_bookmark_file_get_applications
g_bookmark_file_get_description
g_bookmark_file_get_groups
g_bookmark_file_get_icon
g_bookmark_file_get_is_private
g_bookmark_file_get_mime_type
g_bookmark_file_get_modified
g_bookmark_file_get_modified_date_time
g_bookmark_file_get_size
g_bookmark_file_get_title
g_bookmark_file_get_uris
g_bookmark_file_get_visited
g_bookmark_file_get_visited_date_time
g_bookmark_file_has_application
g_bookmark_file_has_group
g_bookmark_file_has_item
g_bookmark_file_load_from_data
g_bookmark_file_load_from_data_dirs
g_bookmark_file_load_from_file
g_bookmark_file_move_item
g_bookmark_file_new
g_bookmark_file_remove_application
g_bookmark_file_remove_group
g_bookmark_file_remove_item
g_bookmark_file_set_added
g_bookmark_file_set_added_date_time
g_bookmark_file_set_app_info
g_bookmark_file_set_application_info
g_bookmark_file_set_description
g_bookmark_file_set_groups
g_bookmark_file_set_icon
g_bookmark_file_set_is_private
g_bookmark_file_set_mime_type
g_bookmark_file_set_modified
g_bookmark_file_set_modified_date_time
g_bookmark_file_set_title
g_bookmark_file_set_visited
g_bookmark_file_set_visited_date_time
g_bookmark_file_to_data
g_bookmark_file_to_file
g_build_filename
g_build_filename_valist
g_build_filenamev
g_build_path
g_build_pathv
g_byte_array_append
g_byte_array_free
g_byte_array_free_to_bytes
g_byte_array_new
g_byte_array_new_take
g_byte_array_prepend
g_byte_array_ref
g_byte_array_remove_index
g_byte_array_remove_index_fast
g_byte_array_remove_range
g_byte_array_set_size
g_byte_array_sized_new
g_byte_array_sort
g_byte_array_sort_with_data
g_byte_array_steal
g_byte_array_unref
g_bytes_compare
g_bytes_equal
g_bytes_get_data
g_bytes_get_region
g_bytes_get_size
g_bytes_hash
g_bytes_new
g_bytes_new_from_bytes
g_bytes_new_static
g_bytes_new_take
g_bytes_new_with_free_func
g_bytes_ref
g_bytes_unref
g_bytes_unref_to_array
g_bytes_unref_to_data
g_cache_destroy
g_cache_insert
g_cache_key_foreach
g_cache_new
g_cache_remove
g_cache_value_foreach
g_canonicalize_filename
g_chdir
g_checksum_copy
g_checksum_free
g_checksum_get_digest
g_checksum_get_string
g_checksum_new
g_checksum_reset
g_checksum_type_get_length
g_checksum_update
g_child_watch_add
g_child_watch_add_full
g_child_watch_funcs
g_child_watch_source_new
g_chmod
g_clear_error
g_clear_handle_id
g_clear_list
g_clear_pointer
g_clear_slist
g_close
g_completion_add_items
g_completion_clear_items
g_completion_complete
g_completion_complete_utf8
g_completion_free
g_completion_new
g_completion_remove_items
g_completion_set_compare
g_compute_checksum_for_bytes
g_compute_checksum_for_data
g_compute_checksum_for_string
g_compute_hmac_for_bytes
g_compute_hmac_for_data
g_compute_hmac_for_string
g_cond_broadcast
g_cond_clear
g_cond_free
g_cond_init
g_cond_new
g_cond_signal
g_cond_timed_wait
g_cond_wait
g_cond_wait_until
g_convert
g_convert_error_quark
g_convert_with_fallback
g_convert_with_iconv
g_creat
g_datalist_clear
g_datalist_foreach
g_datalist_get_data
g_datalist_get_flags
g_datalist_id_dup_data
g_datalist_id_get_data
g_datalist_id_remove_no_notify
g_datalist_id_replace_data
g_datalist_id_set_data_full
g_datalist_init
g_datalist_set_flags
g_datalist_unset_flags
g_dataset_destroy
g_dataset_foreach
g_dataset_id_get_data
g_dataset_id_remove_no_notify
g_dataset_id_set_data_full
g_date_add_days
g_date_add_months
g_date_add_years
g_date_clamp
g_date_clear
g_date_compare
g_date_copy
g_date_days_between
g_date_free
g_date_get_day
g_date_get_day_of_year
g_date_get_days_in_month
g_date_get_iso8601_week_of_year
g_date_get_julian
g_date_get_monday_week_of_year
g_date_get_monday_weeks_in_year
g_date_get_month
g_date_get_sunday_week_of_year
g_date_get_sunday_weeks_in_year
g_date_get_weekday
g_date_get_year
g_date_is_first_of_month
g_date_is_last_of_month
g_date_is_leap_year
g_date_new
g_date_new_dmy
g_date_new_julian
g_date_order
g_date_set_day
g_date_set_dmy
g_date_set_julian
g_date_set_month
g_date_set_parse
g_date_set_time
g_date_set_time_t
g_date_set_time_val
g_date_set_year
g_date_strftime
g_date_subtract_days
g_date_subtract_months
g_date_subtract_years
g_date_time_add
g_date_time_add_days
g_date_time_add_full
g_date_time_add_hours
g_date_time_add_minutes
g_date_time_add_months
g_date_time_add_seconds
g_date_time_add_weeks
g_date_time_add_years
g_date_time_compare
g_date_time_difference
g_date_time_equal
g_date_time_format
g_date_time_format_iso8601
g_date_time_get_day_of_month
g_date_time_get_day_of_week
g_date_time_get_day_of_year
g_date_time_get_hour
g_date_time_get_microsecond
g_date_time_get_minute
g_date_time_get_month
g_date_time_get_second
g_date_time_get_seconds
g_date_time_get_timezone
g_date_time_get_timezone_abbreviation
g_date_time_get_utc_offset
g_date_time_get_week_numbering_year
g_date_time_get_week_of_year
g_date_time_get_year
g_date_time_get_ymd
g_date_time_hash
g_date_time_is_daylight_savings
g_date_time_new
g_date_time_new_from_iso8601
g_date_time_new_from_timeval_local
g_date_time_new_from_timeval_utc
g_date_time_new_from_unix_local
g_date_time_new_from_unix_utc
g_date_time_new_local
g_date_time_new_now
g_date_time_new_now_local
g_date_time_new_now_utc
g_date_time_new_utc
g_date_time_ref
g_date_time_to_local
g_date_time_to_timeval
g_date_time_to_timezone
g_date_time_to_unix
g_date_time_to_utc
g_date_time_unref
g_date_to_struct_tm
g_date_valid
g_date_valid_day
g_date_valid_dmy
g_date_valid_julian
g_date_valid_month
g_date_valid_weekday
g_date_valid_year
g_dcgettext
g_dgettext
g_dir_close
g_dir_make_tmp
g_dir_open
g_dir_open_utf8
g_dir_read_name
g_dir_read_name_utf8
g_dir_rewind
g_direct_equal
g_direct_hash
g_dngettext
g_double_equal
g_double_hash
g_dpgettext
g_dpgettext2
g_environ_getenv
g_environ_setenv
g_environ_unsetenv
g_error_copy
g_error_domain_register
g_error_domain_register_static
g_error_free
g_error_matches
g_error_new
g_error_new_literal
g_error_new_valist
g_file_error_from_errno
g_file_error_quark
g_file_get_contents
g_file_get_contents_utf8
g_file_open_tmp
g_file_open_tmp_utf8
g_file_read_link
g_file_set_contents
g_file_set_contents_full
g_file_test
g_file_test_utf8
g_filename_display_basename
g_filename_display_name
g_filename_from_uri
g_filename_from_uri_utf8
g_filename_from_utf8
g_filename_from_utf8_utf8
g_filename_to_uri
g_filename_to_uri_utf8
g_filename_to_utf8
g_filename_to_utf8_utf8
g_find_program_in_path
g_fopen
g_format_size
g_format_size_for_display
g_format_size_full
g_fprintf
g_free
g_freopen
g_fsync
g_get_application_name
g_get_charset
g_get_codeset
g_get_console_charset
g_get_current_dir
g_get_current_dir_utf8
g_get_current_time
g_get_environ
g_get_filename_charsets
g_get_home_dir
g_get_host_name
g_get_language_names
g_get_language_names_with_category
g_get_locale_variants
g_get_monotonic_time
g_get_num_processors
g_get_os_info
g_get_prgname
g_get_real_name
g_get_real_time
g_get_system_config_dirs
g_get_system_data_dirs
g_get_tmp_dir
g_get_user_cache_dir
g_get_user_config_dir
g_get_user_data_dir
g_get_user_name
g_get_user_runtime_dir
g_get_user_special_dir
g_get_user_state_dir
g_getenv
g_getenv_utf8
g_hash_table_add
g_hash_table_contains
g_hash_table_destroy
g_hash_table_find
g_hash_table_foreach
g_hash_table_foreach_remove
g_hash_table_foreach_steal
g_hash_table_get_keys
g_hash_table_get_keys_as_array
g_hash_table_get_values
g_hash_table_insert
g_hash_table_iter_get_hash_table
g_hash_table_iter_init
g_hash_table_iter_next
g_hash_table_iter_remove
g_hash_table_iter_replace
g_hash_table_iter_steal
g_hash_table_lookup
g_hash_table_lookup_extended
g_hash_table_new
g_hash_table_new_full
g_hash_table_new_similar
g_hash_table_ref
g_hash_table_remove
g_hash_table_remove_all
g_hash_table_replace
g_hash_table_size
g_hash_table_steal
g_hash_table_steal_all
g_hash_table_steal_extended
g_hash_table_unref
g_hmac_copy
g_hmac_get_digest
g_hmac_get_string

Sections

.text
Size: 673KB - Virtual size: 672KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 497KB - Virtual size: 497KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
sfbrename-cli-1.0.0-win64/libgmodule-2.0-0.dll
.dll windows:4 windows x64 arch:x64

Password: infected

091d631a146d75a6475ab596df0d4842

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libintl-8

DllMain

kernel32

CloseHandle
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
Module32First
Module32Next
SetThreadErrorMode
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__iob_func
_amsg_exit
_close
_errno
_initterm
_lock
_unlock
abort
calloc
free
fwrite
realloc
strcmp
strlen
strncmp
strrchr
vfprintf

libglib-2.0-0

g_ascii_strcasecmp
g_assertion_message_expr
g_file_test
g_filename_display_name
g_free
g_getenv
g_malloc
g_open
g_parse_debug_string
g_path_get_dirname
g_private_get
g_private_replace
g_quark_from_static_string
g_rec_mutex_lock
g_rec_mutex_unlock
g_return_if_fail_warning
g_scanner_destroy
g_scanner_eof
g_scanner_get_next_token
g_scanner_input_file
g_scanner_new
g_scanner_scope_add_symbol
g_set_error_literal
g_str_has_suffix
g_strconcat
g_strdup
g_strdup_printf
g_strdup_vprintf
g_thread_yield
g_utf8_to_utf16
g_win32_error_message

Exports

Exports

g_module_build_path
g_module_close
g_module_error
g_module_error_quark
g_module_make_resident
g_module_name
g_module_name_utf8
g_module_open
g_module_open_full
g_module_open_utf8
g_module_supported
g_module_symbol

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 336B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 395B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
sfbrename-cli-1.0.0-win64/libgobject-2.0-0.dll
.dll windows:4 windows x64 arch:x64

Password: infected

b0a6618116156d40b48cade08cd04d93

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libffi-7

ffi_call
ffi_prep_cif
ffi_type_double
ffi_type_float
ffi_type_pointer
ffi_type_sint32
ffi_type_sint64
ffi_type_uint32
ffi_type_uint64
ffi_type_void

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__iob_func
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
exit
free
fwrite
memcmp
memcpy
memmove
memset
qsort
realloc
strcat
strchr
strcmp
strlen
strncmp
strncpy
vfprintf

libglib-2.0-0

g_array_append_vals
g_array_free
g_array_new
g_array_ref
g_array_unref
g_assertion_message_expr
g_atomic_rc_box_acquire
g_atomic_rc_box_alloc0
g_atomic_rc_box_release_full
g_byte_array_ref
g_byte_array_unref
g_bytes_ref
g_bytes_unref
g_checksum_copy
g_checksum_free
g_child_watch_funcs
g_datalist_clear
g_datalist_get_data
g_datalist_get_flags
g_datalist_id_dup_data
g_datalist_id_get_data
g_datalist_id_remove_no_notify
g_datalist_id_replace_data
g_datalist_id_set_data_full
g_datalist_set_flags
g_datalist_unset_flags
g_date_copy
g_date_free
g_date_time_ref
g_date_time_unref
g_direct_hash
g_error_copy
g_error_free
g_free
g_getenv
g_hash_table_add
g_hash_table_contains
g_hash_table_foreach
g_hash_table_insert
g_hash_table_lookup
g_hash_table_new
g_hash_table_ref
g_hash_table_remove
g_hash_table_unref
g_hook_alloc
g_hook_destroy
g_hook_destroy_link
g_hook_first_valid
g_hook_insert_before
g_hook_list_clear
g_hook_list_init
g_hook_next_valid
g_idle_funcs
g_intern_static_string
g_intern_string
g_io_channel_ref
g_io_channel_unref
g_io_watch_funcs
g_key_file_ref
g_key_file_unref
g_list_free
g_list_prepend
g_log
g_main_context_ref
g_main_context_unref
g_main_loop_ref
g_main_loop_unref
g_malloc
g_malloc0
g_malloc0_n
g_malloc_n
g_mapped_file_ref
g_mapped_file_unref
g_markup_parse_context_ref
g_markup_parse_context_unref
g_match_info_ref
g_match_info_unref
g_memdup2
g_mutex_clear
g_mutex_init
g_mutex_lock
g_mutex_unlock
g_nullify_pointer
g_once_init_enter
g_once_init_leave
g_option_group_ref
g_option_group_unref
g_parse_debug_string
g_pattern_spec_copy
g_pattern_spec_free
g_ptr_array_add
g_ptr_array_new_with_free_func
g_ptr_array_ref
g_ptr_array_remove_index
g_ptr_array_steal
g_ptr_array_steal_index_fast
g_ptr_array_unref
g_qsort_with_data
g_quark_from_static_string
g_quark_from_string
g_quark_to_string
g_quark_try_string
g_realloc
g_realloc_n
g_rec_mutex_clear
g_rec_mutex_init
g_rec_mutex_lock
g_rec_mutex_unlock
g_regex_ref
g_regex_unref
g_return_if_fail_warning
g_rw_lock_reader_lock
g_rw_lock_reader_unlock
g_rw_lock_writer_lock
g_rw_lock_writer_unlock
g_slice_alloc
g_slice_alloc0
g_slice_free1
g_slist_append
g_slist_copy
g_slist_delete_link
g_slist_find
g_slist_free
g_slist_length
g_slist_prepend
g_slist_remove
g_slist_sort
g_source_destroy
g_source_ref
g_source_set_callback_indirect
g_source_unref
g_str_equal
g_str_hash
g_strcmp0
g_strconcat
g_strdup
g_strdup_printf
g_strdupv
g_strescape
g_strfreev
g_string_append
g_string_append_printf
g_string_free
g_string_new
g_string_new_len
g_thread_ref
g_thread_unref
g_time_zone_ref
g_time_zone_unref
g_timeout_funcs
g_tree_ref
g_tree_unref
g_unichar_validate
g_uri_ref
g_uri_unref
g_variant_builder_ref
g_variant_builder_unref
g_variant_classify
g_variant_compare
g_variant_dict_ref
g_variant_dict_unref
g_variant_equal
g_variant_get_type
g_variant_is_of_type
g_variant_ref_sink
g_variant_take_ref
g_variant_type_copy
g_variant_type_equal
g_variant_type_free
g_variant_unref
glib__private__
glib_gettext

Exports

Exports

g_array_get_type
g_binding_dup_source
g_binding_dup_target
g_binding_flags_get_type
g_binding_get_flags
g_binding_get_source
g_binding_get_source_property
g_binding_get_target
g_binding_get_target_property
g_binding_get_type
g_binding_group_bind
g_binding_group_bind_full
g_binding_group_bind_with_closures
g_binding_group_dup_source
g_binding_group_get_type
g_binding_group_new
g_binding_group_set_source
g_binding_unbind
g_boxed_copy
g_boxed_free
g_boxed_type_register_static
g_byte_array_get_type
g_bytes_get_type
g_cclosure_marshal_BOOLEAN__BOXED_BOXED
g_cclosure_marshal_BOOLEAN__BOXED_BOXEDv
g_cclosure_marshal_BOOLEAN__FLAGS
g_cclosure_marshal_BOOLEAN__FLAGSv
g_cclosure_marshal_STRING__OBJECT_POINTER
g_cclosure_marshal_STRING__OBJECT_POINTERv
g_cclosure_marshal_VOID__BOOLEAN
g_cclosure_marshal_VOID__BOOLEANv
g_cclosure_marshal_VOID__BOXED
g_cclosure_marshal_VOID__BOXEDv
g_cclosure_marshal_VOID__CHAR
g_cclosure_marshal_VOID__CHARv
g_cclosure_marshal_VOID__DOUBLE
g_cclosure_marshal_VOID__DOUBLEv
g_cclosure_marshal_VOID__ENUM
g_cclosure_marshal_VOID__ENUMv
g_cclosure_marshal_VOID__FLAGS
g_cclosure_marshal_VOID__FLAGSv
g_cclosure_marshal_VOID__FLOAT
g_cclosure_marshal_VOID__FLOATv
g_cclosure_marshal_VOID__INT
g_cclosure_marshal_VOID__INTv
g_cclosure_marshal_VOID__LONG
g_cclosure_marshal_VOID__LONGv
g_cclosure_marshal_VOID__OBJECT
g_cclosure_marshal_VOID__OBJECTv
g_cclosure_marshal_VOID__PARAM
g_cclosure_marshal_VOID__PARAMv
g_cclosure_marshal_VOID__POINTER
g_cclosure_marshal_VOID__POINTERv
g_cclosure_marshal_VOID__STRING
g_cclosure_marshal_VOID__STRINGv
g_cclosure_marshal_VOID__UCHAR
g_cclosure_marshal_VOID__UCHARv
g_cclosure_marshal_VOID__UINT
g_cclosure_marshal_VOID__UINT_POINTER
g_cclosure_marshal_VOID__UINT_POINTERv
g_cclosure_marshal_VOID__UINTv
g_cclosure_marshal_VOID__ULONG
g_cclosure_marshal_VOID__ULONGv
g_cclosure_marshal_VOID__VARIANT
g_cclosure_marshal_VOID__VARIANTv
g_cclosure_marshal_VOID__VOID
g_cclosure_marshal_VOID__VOIDv
g_cclosure_marshal_generic
g_cclosure_marshal_generic_va
g_cclosure_new
g_cclosure_new_object
g_cclosure_new_object_swap
g_cclosure_new_swap
g_checksum_get_type
g_clear_object
g_clear_signal_handler
g_closure_add_finalize_notifier
g_closure_add_invalidate_notifier
g_closure_add_marshal_guards
g_closure_get_type
g_closure_invalidate
g_closure_invoke
g_closure_new_object
g_closure_new_simple
g_closure_ref
g_closure_remove_finalize_notifier
g_closure_remove_invalidate_notifier
g_closure_set_marshal
g_closure_set_meta_marshal
g_closure_sink
g_closure_unref
g_date_get_type
g_date_time_get_type
g_enum_complete_type_info
g_enum_get_value
g_enum_get_value_by_name
g_enum_get_value_by_nick
g_enum_register_static
g_enum_to_string
g_error_get_type
g_flags_complete_type_info
g_flags_get_first_value
g_flags_get_value_by_name
g_flags_get_value_by_nick
g_flags_register_static
g_flags_to_string
g_gstring_get_type
g_gtype_get_type
g_hash_table_get_type
g_initially_unowned_get_type
g_io_channel_get_type
g_io_condition_get_type
g_key_file_get_type
g_main_context_get_type
g_main_loop_get_type
g_mapped_file_get_type
g_markup_parse_context_get_type
g_match_info_get_type
g_normalize_mode_get_type
g_object_add_toggle_ref
g_object_add_weak_pointer
g_object_bind_property
g_object_bind_property_full
g_object_bind_property_with_closures
g_object_class_find_property
g_object_class_install_properties
g_object_class_install_property
g_object_class_list_properties
g_object_class_override_property
g_object_compat_control
g_object_connect
g_object_disconnect
g_object_dup_data
g_object_dup_qdata
g_object_force_floating
g_object_freeze_notify
g_object_get
g_object_get_data
g_object_get_property
g_object_get_qdata
g_object_get_type
g_object_get_valist
g_object_getv
g_object_interface_find_property
g_object_interface_install_property
g_object_interface_list_properties
g_object_is_floating
g_object_new
g_object_new_valist
g_object_new_with_properties
g_object_newv
g_object_notify
g_object_notify_by_pspec
g_object_ref
g_object_ref_sink
g_object_remove_toggle_ref
g_object_remove_weak_pointer
g_object_replace_data
g_object_replace_qdata
g_object_run_dispose
g_object_set
g_object_set_data
g_object_set_data_full
g_object_set_property
g_object_set_qdata
g_object_set_qdata_full
g_object_set_valist
g_object_setv
g_object_steal_data
g_object_steal_qdata
g_object_take_ref
g_object_thaw_notify
g_object_unref
g_object_watch_closure
g_object_weak_ref
g_object_weak_unref
g_option_group_get_type
g_param_spec_boolean
g_param_spec_boxed
g_param_spec_char
g_param_spec_double
g_param_spec_enum
g_param_spec_flags
g_param_spec_float
g_param_spec_get_blurb
g_param_spec_get_default_value
g_param_spec_get_name
g_param_spec_get_name_quark
g_param_spec_get_nick
g_param_spec_get_qdata
g_param_spec_get_redirect_target
g_param_spec_gtype
g_param_spec_int
g_param_spec_int64
g_param_spec_internal
g_param_spec_is_valid_name
g_param_spec_long
g_param_spec_object
g_param_spec_override
g_param_spec_param
g_param_spec_pointer
g_param_spec_pool_insert
g_param_spec_pool_list
g_param_spec_pool_list_owned
g_param_spec_pool_lookup
g_param_spec_pool_new
g_param_spec_pool_remove
g_param_spec_ref
g_param_spec_ref_sink
g_param_spec_set_qdata
g_param_spec_set_qdata_full
g_param_spec_sink
g_param_spec_steal_qdata
g_param_spec_string
g_param_spec_types
g_param_spec_uchar
g_param_spec_uint
g_param_spec_uint64
g_param_spec_ulong
g_param_spec_unichar
g_param_spec_unref
g_param_spec_value_array
g_param_spec_variant
g_param_type_register_static
g_param_value_convert
g_param_value_defaults
g_param_value_set_default
g_param_value_validate
g_param_values_cmp
g_pattern_spec_get_type
g_pointer_type_register_static
g_pollfd_get_type
g_ptr_array_get_type
g_regex_get_type
g_signal_accumulator_first_wins
g_signal_accumulator_true_handled
g_signal_add_emission_hook
g_signal_chain_from_overridden
g_signal_chain_from_overridden_handler
g_signal_connect_closure
g_signal_connect_closure_by_id
g_signal_connect_data
g_signal_connect_object
g_signal_emit
g_signal_emit_by_name
g_signal_emit_valist
g_signal_emitv
g_signal_get_invocation_hint
g_signal_group_block
g_signal_group_connect
g_signal_group_connect_after
g_signal_group_connect_data
g_signal_group_connect_object
g_signal_group_connect_swapped
g_signal_group_dup_target
g_signal_group_get_type
g_signal_group_new
g_signal_group_set_target
g_signal_group_unblock
g_signal_handler_block
g_signal_handler_disconnect
g_signal_handler_find
g_signal_handler_is_connected
g_signal_handler_unblock
g_signal_handlers_block_matched
g_signal_handlers_destroy
g_signal_handlers_disconnect_matched
g_signal_handlers_unblock_matched
g_signal_has_handler_pending
g_signal_is_valid_name
g_signal_list_ids
g_signal_lookup
g_signal_name
g_signal_new
g_signal_new_class_handler
g_signal_new_valist
g_signal_newv
g_signal_override_class_closure
g_signal_override_class_handler
g_signal_parse_name
g_signal_query
g_signal_remove_emission_hook
g_signal_set_va_marshaller
g_signal_stop_emission
g_signal_stop_emission_by_name
g_signal_type_cclosure_new
g_source_get_type
g_source_set_closure
g_source_set_dummy_callback
g_strdup_value_contents
g_strv_get_type
g_thread_get_type
g_time_zone_get_type
g_tree_get_type
g_type_add_class_cache_func
g_type_add_class_private
g_type_add_instance_private
g_type_add_interface_check
g_type_add_interface_dynamic
g_type_add_interface_static
g_type_check_class_cast
g_type_check_class_is_a
g_type_check_instance
g_type_check_instance_cast
g_type_check_instance_is_a
g_type_check_instance_is_fundamentally_a
g_type_check_is_value_type
g_type_check_value
g_type_check_value_holds
g_type_children
g_type_class_add_private
g_type_class_adjust_private_offset
g_type_class_get_instance_private_offset
g_type_class_get_private
g_type_class_peek
g_type_class_peek_parent
g_type_class_peek_static
g_type_class_ref
g_type_class_unref
g_type_class_unref_uncached
g_type_create_instance
g_type_default_interface_peek
g_type_default_interface_ref
g_type_default_interface_unref
g_type_depth
g_type_ensure
g_type_free_instance
g_type_from_name
g_type_fundamental
g_type_fundamental_next
g_type_get_instance_count
g_type_get_plugin
g_type_get_qdata
g_type_get_type_registration_serial
g_type_init
g_type_init_with_debug_flags
g_type_instance_get_private
g_type_interface_add_prerequisite
g_type_interface_get_plugin
g_type_interface_instantiatable_prerequisite
g_type_interface_peek
g_type_interface_peek_parent
g_type_interface_prerequisites
g_type_interfaces
g_type_is_a
g_type_module_add_interface
g_type_module_get_type
g_type_module_register_enum
g_type_module_register_flags
g_type_module_register_type
g_type_module_set_name
g_type_module_unuse
g_type_module_use
g_type_name
g_type_name_from_class
g_type_name_from_instance
g_type_next_base
g_type_parent
g_type_plugin_complete_interface_info
g_type_plugin_complete_type_info
g_type_plugin_get_type
g_type_plugin_unuse
g_type_plugin_use
g_type_qname
g_type_query
g_type_register_dynamic
g_type_register_fundamental
g_type_register_static
g_type_register_static_simple
g_type_remove_class_cache_func
g_type_remove_interface_check
g_type_set_qdata
g_type_test_flags
g_type_value_table_peek
g_unicode_break_type_get_type
g_unicode_script_get_type
g_unicode_type_get_type
g_uri_get_type
g_value_array_append
g_value_array_copy
g_value_array_free
g_value_array_get_nth
g_value_array_get_type
g_value_array_insert
g_value_array_new
g_value_array_prepend
g_value_array_remove
g_value_array_sort
g_value_array_sort_with_data
g_value_copy
g_value_dup_boxed
g_value_dup_object
g_value_dup_param
g_value_dup_string
g_value_dup_variant
g_value_fits_pointer
g_value_get_boolean
g_value_get_boxed
g_value_get_char
g_value_get_double
g_value_get_enum
g_value_get_flags
g_value_get_float
g_value_get_gtype
g_value_get_int
g_value_get_int64
g_value_get_long
g_value_get_object
g_value_get_param
g_value_get_pointer
g_value_get_schar
g_value_get_string
g_value_get_type
g_value_get_uchar
g_value_get_uint
g_value_get_uint64
g_value_get_ulong
g_value_get_variant
g_value_init
g_value_init_from_instance
g_value_peek_pointer
g_value_register_transform_func
g_value_reset
g_value_set_boolean
g_value_set_boxed
g_value_set_boxed_take_ownership
g_value_set_char
g_value_set_double
g_value_set_enum
g_value_set_flags
g_value_set_float
g_value_set_gtype
g_value_set_instance
g_value_set_int
g_value_set_int64
g_value_set_interned_string
g_value_set_long
g_value_set_object
g_value_set_object_take_ownership
g_value_set_param
g_value_set_param_take_ownership
g_value_set_pointer
g_value_set_schar
g_value_set_static_boxed
g_value_set_static_string
g_value_set_string
g_value_set_string_take_ownership
g_value_set_uchar
g_value_set_uint
g_value_set_uint64
g_value_set_ulong
g_value_set_variant
g_value_take_boxed
g_value_take_object
g_value_take_param
g_value_take_string
g_value_take_variant
g_value_transform
g_value_type_compatible
g_value_type_transformable
g_value_unset
g_variant_builder_get_type
g_variant_dict_get_type
g_variant_get_gtype
g_variant_type_get_gtype
g_weak_ref_clear
g_weak_ref_get
g_weak_ref_init
g_weak_ref_set

Sections

.text
Size: 197KB - Virtual size: 197KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
sfbrename-cli-1.0.0-win64/libiconv-2.dll
.dll windows:4 windows x64 arch:x64

Password: infected

b7b2a901b7a215d882242e1046df2775

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetACP
GetLastError
GetModuleFileNameA
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_strdup
_unlock
abort
calloc
fputc
free
fwrite
localeconv
malloc
memcpy
memset
qsort
realloc
setlocale
strchr
strcmp
strcpy
strerror
strlen
strncmp
strrchr
vfprintf
wcslen

Exports

Exports

_imp___libiconv_version
_libiconv_version
iconv_canonicalize
libiconv
libiconv_close
libiconv_open
libiconv_open_into
libiconv_relocate
libiconv_relocate2
libiconv_set_relocation_prefix
libiconvctl
libiconvlist
locale_charset

Sections

.text
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 938KB - Virtual size: 938KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 411B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
sfbrename-cli-1.0.0-win64/libintl-8.dll
.dll windows:4 windows x64 arch:x64

Password: infected

c8c6d9d2254c5b5e2cd0e5c6a4024dce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libiconv-2

libiconv
libiconv_open
libiconv_set_relocation_prefix

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

kernel32

CloseHandle
CreateEventA
DeleteCriticalSection
EnterCriticalSection
EnumResourceLanguagesA
EnumSystemLocalesA
GetACP
GetCurrentThreadId
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetThreadLocale
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetEvent
Sleep
TlsGetValue
TryEnterCriticalSection
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_close
_errno
_fstat64
_initterm
_lock
_open
_read
_stricmp
_strdup
_unlock
_wcsdup
_wgetcwd
_wopen
abort
bsearch
calloc
fclose
feof
fgets
fopen
fputc
fputwc
free
fwprintf
fwrite
getenv
isalnum
isalpha
isspace
localeconv
malloc
mbstowcs
memcpy
memset
putc
qsort
realloc
setlocale
strchr
strcmp
strcpy
strcspn
strerror
strlen
strncmp
strncpy
strrchr
strstr
strtoul
tolower
vfprintf
wcschr
wcscmp
wcscpy
wcslen

Exports

Exports

DllMain
__imp_gl_get_setlocale_null_lock
__imp_libintl_version
__printf__
_nl_expand_alias
_nl_explode_name
_nl_find_domain
_nl_find_msg
_nl_language_preferences_default
_nl_load_domain
_nl_locale_name
_nl_locale_name_canonicalize
_nl_locale_name_default
_nl_locale_name_environ
_nl_locale_name_from_win32_LANGID
_nl_locale_name_from_win32_LCID
_nl_locale_name_posix
_nl_locale_name_thread
_nl_locale_name_thread_unsafe
_nl_log_untranslated
_nl_make_l10nflist
_nl_msg_cat_cntr
_nl_normalize_codeset
_nl_state_lock
bind_textdomain_codeset
bindtextdomain
dcgettext
dcngettext
dgettext
dngettext
gettext
gl_get_setlocale_null_lock
glwthread_mutex_destroy
glwthread_mutex_init
glwthread_mutex_lock
glwthread_mutex_trylock
glwthread_mutex_unlock
glwthread_once
glwthread_recmutex_destroy
glwthread_recmutex_init
glwthread_recmutex_lock
glwthread_recmutex_trylock
glwthread_recmutex_unlock
glwthread_rwlock_destroy
glwthread_rwlock_init
glwthread_rwlock_rdlock
glwthread_rwlock_tryrdlock
glwthread_rwlock_trywrlock
glwthread_rwlock_unlock
glwthread_rwlock_wrlock
libintl_asprintf
libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_dcgettext
libintl_dcigettext
libintl_dcngettext
libintl_dgettext
libintl_dngettext
libintl_fprintf
libintl_fwprintf
libintl_gettext
libintl_gettext_extract_plural
libintl_gettext_free_exp
libintl_gettext_germanic_plural
libintl_gettextparse
libintl_hash_string
libintl_ngettext
libintl_nl_current_default_domain
libintl_nl_default_default_domain
libintl_nl_default_dirname
libintl_nl_domain_bindings
libintl_relocate
libintl_relocate2
libintl_set_relocation_prefix
libintl_setlocale
libintl_snprintf
libintl_sprintf
libintl_swprintf
libintl_textdomain
libintl_vasnprintf
libintl_vasnwprintf
libintl_vasprintf
libintl_version
libintl_vfprintf
libintl_vfwprintf
libintl_vprintf
libintl_vsnprintf
libintl_vsprintf
libintl_vswprintf
libintl_vwprintf
libintl_wbindtextdomain
libintl_wprintf
locale_charset
ngettext
setlocale_null
setlocale_null_r
textdomain
xmax
xsum
xsum3
xsum4

Sections

.text
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
sfbrename-cli-1.0.0-win64/libpcre-1.dll
.dll windows:4 windows x64 arch:x64

67b728d22b4f6e95f5492c80868c686d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
LeaveCriticalSection
Sleep
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__iob_func
_amsg_exit
_initterm
_lock
_unlock
abort
calloc
free
fwrite
isalnum
isalpha
iscntrl
isgraph
islower
isprint
ispunct
isspace
isupper
isxdigit
malloc
memcmp
memcpy
memmove
memset
realloc
strchr
strcmp
strlen
strncmp
tolower
toupper
vfprintf

Exports

Exports

_pcre_OP_lengths
_pcre_default_tables
_pcre_find_bracket
_pcre_hspace_list
_pcre_is_newline
_pcre_ord2utf
_pcre_ucd_caseless_sets
_pcre_ucd_records
_pcre_ucd_stage1
_pcre_ucd_stage2
_pcre_ucp_gbtable
_pcre_ucp_gentype
_pcre_utf8_table1
_pcre_utf8_table1_size
_pcre_utf8_table2
_pcre_utf8_table3
_pcre_utf8_table4
_pcre_utt
_pcre_utt_names
_pcre_utt_size
_pcre_valid_utf
_pcre_vspace_list
_pcre_was_newline
_pcre_xclass
pcre_assign_jit_stack
pcre_callout
pcre_compile
pcre_compile2
pcre_config
pcre_copy_named_substring
pcre_copy_substring
pcre_dfa_exec
pcre_exec
pcre_free
pcre_free_study
pcre_free_substring
pcre_free_substring_list
pcre_fullinfo
pcre_get_named_substring
pcre_get_stringnumber
pcre_get_stringtable_entries
pcre_get_substring
pcre_get_substring_list
pcre_jit_free_unused_memory
pcre_jit_stack_alloc
pcre_jit_stack_free
pcre_maketables
pcre_malloc
pcre_pattern_to_host_byte_order
pcre_refcount
pcre_stack_free
pcre_stack_guard
pcre_stack_malloc
pcre_study
pcre_version

Sections

.text
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 272B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
sfbrename-cli-1.0.0-win64/sfbrename.exe
.exe windows:4 windows x64 arch:x64

ecdfb29a2cf601ceff9f2f60e8aa1f41

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

libgio-2.0-0

g_application_add_main_option_entries
g_application_get_type
g_application_new
g_application_run
g_application_set_option_context_parameter_string
g_application_set_option_context_summary
g_file_peek_path

libglib-2.0-0

g_clear_error
g_free
g_malloc
g_print
g_printerr
g_regex_new
g_regex_replace
g_regex_unref
g_utf8_offset_to_pointer
g_utf8_strdown
g_utf8_strlen
g_utf8_strreverse
g_utf8_strup
g_utf8_validate

libgobject-2.0-0

g_object_unref
g_signal_connect_data
g_type_check_instance_cast

kernel32

CreateSymbolicLinkW
DeleteCriticalSection
EnterCriticalSection
GetFileAttributesA
GetLastError
GetStartupInfoA
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte
__C_specific_handler

msvcrt

___lc_codepage_func
___mb_cur_max_func
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_close
_commode
_creat
_errno
_findclose
_findfirst64
_findnext64
_fmode
_fstat64
_fullpath
_initterm
_lseek
_onexit
_mkdir
_open
_read
_stat64
_stricmp
abort
calloc
exit
fprintf
fputc
free
fwrite
getc
islower
isspace
isupper
isxdigit
_write
localeconv
malloc
memchr
memcpy
memmove
memset
realloc
rename
signal
strcmp
strcpy
strerror
strlen
strncmp
strncpy
strstr
strtol
strtoul
tolower
toupper
ungetc
vfprintf
wcslen

shell32

StrStrIA

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
sfbrename-cli-1.0.0-win64/zlib1.dll
.dll windows:4 windows x64 arch:x64

338524559a7e39d9692f5f9c54c22a50

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_close
_errno
_initterm
_lock
_lseeki64
_open
_read
_unlock
_wopen
abort
calloc
fputc
free
fwrite
_write
localeconv
malloc
memchr
memcpy
memmove
memset
realloc
strerror
strlen
strncmp
vfprintf
wcslen
wcstombs

Exports

Exports

_dist_code
_length_code
_tr_align
_tr_flush_bits
_tr_flush_block
_tr_init
_tr_stored_block
_tr_tally
adler32
adler32_combine
adler32_combine64
adler32_z
compress
compress2
compressBound
crc32
crc32_combine
crc32_combine64
crc32_combine_gen
crc32_combine_gen64
crc32_combine_op
crc32_z
deflate
deflateBound
deflateCopy
deflateEnd
deflateGetDictionary
deflateInit2_
deflateInit_
deflateParams
deflatePending
deflatePrime
deflateReset
deflateResetKeep
deflateSetDictionary
deflateSetHeader
deflateTune
deflate_copyright
get_crc_table
gz_error
gzbuffer
gzclearerr
gzclose
gzclose_r
gzclose_w
gzdirect
gzdopen
gzeof
gzerror
gzflush
gzfread
gzfwrite
gzgetc
gzgetc_
gzgets
gzoffset
gzoffset64
gzopen
gzopen64
gzopen_w
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzseek64
gzsetparams
gztell
gztell64
gzungetc
gzvprintf
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCodesUsed
inflateCopy
inflateEnd
inflateGetDictionary
inflateGetHeader
inflateInit2_
inflateInit_
inflateMark
inflatePrime
inflateReset
inflateReset2
inflateResetKeep
inflateSetDictionary
inflateSync
inflateSyncPoint
inflateUndermine
inflateValidate
inflate_copyright
inflate_fast
inflate_table
uncompress
uncompress2
zError
z_errmsg
zcalloc
zcfree
zlibCompileFlags
zlibVersion

Sections

.text
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

77feeaee50aa36cdd5e06f441ac2abd1

Headers

DLL Characteristics

File Characteristics

Imports

libintl-8

kernel32

msvcrt

libgio-2.0-0

libglib-2.0-0

libgobject-2.0-0

Sections

.text Size: 25KB - Virtual size: 25KB

.data Size: 512B - Virtual size: 192B

.rdata Size: 8KB - Virtual size: 8KB

.pdata Size: 1024B - Virtual size: 816B

.xdata Size: 1024B - Virtual size: 748B

.bss Size: - Virtual size: 544B

.idata Size: 6KB - Virtual size: 6KB

.CRT Size: 512B - Virtual size: 96B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 272B

Password: infected

6b539304435d48771cc36f5f9462fabf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 18KB - Virtual size: 18KB

.data Size: 512B - Virtual size: 160B

.rdata Size: 2KB - Virtual size: 2KB

.pdata Size: 1024B - Virtual size: 864B

.xdata Size: 1024B - Virtual size: 672B

.bss Size: - Virtual size: 1KB

.edata Size: 1KB - Virtual size: 1KB

.idata Size: 1024B - Virtual size: 1004B

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 512B - Virtual size: 108B

Password: infected

f026ece3a8b3f4d50987ad88bb29e80f

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

dnsapi

libintl-8

iphlpapi

kernel32

msvcrt

ole32

shell32

shlwapi

user32

ws2_32

zlib1

libglib-2.0-0

libgmodule-2.0-0

libgobject-2.0-0

Exports

Exports

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.data Size: 1024B - Virtual size: 1008B

.rdata Size: 333KB - Virtual size: 333KB

.pdata Size: 61KB - Virtual size: 60KB

.text
Size: 25KB - Virtual size: 25KB

.data
Size: 512B - Virtual size: 192B

.rdata
Size: 8KB - Virtual size: 8KB

.pdata
Size: 1024B - Virtual size: 816B

.xdata
Size: 1024B - Virtual size: 748B

.bss
Size: - Virtual size: 544B

.idata
Size: 6KB - Virtual size: 6KB

.CRT
Size: 512B - Virtual size: 96B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 272B

.text
Size: 18KB - Virtual size: 18KB

.data
Size: 512B - Virtual size: 160B

.rdata
Size: 2KB - Virtual size: 2KB

.pdata
Size: 1024B - Virtual size: 864B

.xdata
Size: 1024B - Virtual size: 672B

.bss
Size: - Virtual size: 1KB

.edata
Size: 1KB - Virtual size: 1KB

.idata
Size: 1024B - Virtual size: 1004B

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 512B - Virtual size: 108B

.text
Size: 1.0MB - Virtual size: 1.0MB

.data
Size: 1024B - Virtual size: 1008B

.rdata
Size: 333KB - Virtual size: 333KB

.pdata
Size: 61KB - Virtual size: 60KB

.xdata
Size: 60KB - Virtual size: 60KB

.bss
Size: - Virtual size: 11KB

.edata
Size: 77KB - Virtual size: 76KB

.idata
Size: 41KB - Virtual size: 40KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 1024B - Virtual size: 864B

.reloc
Size: 3KB - Virtual size: 2KB

.text
Size: 673KB - Virtual size: 672KB

.data
Size: 4KB - Virtual size: 3KB

.rdata
Size: 497KB - Virtual size: 497KB

.pdata
Size: 30KB - Virtual size: 29KB

.xdata
Size: 29KB - Virtual size: 28KB

.bss
Size: - Virtual size: 6KB

.edata
Size: 55KB - Virtual size: 55KB

.idata
Size: 10KB - Virtual size: 10KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 1024B - Virtual size: 928B

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 10KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 160B

.rdata
Size: 2KB - Virtual size: 2KB

.pdata
Size: 1024B - Virtual size: 600B

.xdata
Size: 512B - Virtual size: 448B

.bss
Size: - Virtual size: 336B

.edata
Size: 512B - Virtual size: 395B

.idata
Size: 3KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 1024B - Virtual size: 880B

.reloc
Size: 512B - Virtual size: 96B