591034a71642cb049fe5ddca40d10bc0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

591034a71642cb049fe5ddca40d10bc0N.exe
Size

40KB
MD5

591034a71642cb049fe5ddca40d10bc0
SHA1

cc8672cfe75701b375131188fde3d2f97bc9d83f
SHA256

ae1f3048b4c5badd5c37a6c16535ec4172a4301fbfe2daf604d47bbcc8b22f38
SHA512

92f16947e8289e390d32ee8351dc6f96b69138496f519fcde393bdef4df39e71ea031fe8d204c82df506f2adddd1b69b497dc3727fdcf9e4914439bb5b1986ee
SSDEEP

384:ZhymaZGRPemDXhyPn3z086OLoO4dHz3QwIbtj6IgLP/pykqtqHyPJyhqkDod63CY:Wmau/k3zKO8BTIELnaO38BKu/huj9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
591034a71642cb049fe5ddca40d10bc0N.exe

Files

591034a71642cb049fe5ddca40d10bc0N.exe
.dll windows:4 windows x86 arch:x86

60aab24032ed9b3dc08433d058bf4e10

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libcairo-2

cairo_close_path
cairo_fill
cairo_font_face_destroy
cairo_font_options_copy
cairo_font_options_create
cairo_font_options_destroy
cairo_font_options_equal
cairo_font_options_get_hint_metrics
cairo_font_options_hash
cairo_font_options_merge
cairo_ft_font_face_create_for_pattern
cairo_ft_font_options_substitute
cairo_ft_scaled_font_lock_face
cairo_ft_scaled_font_unlock_face
cairo_get_current_point
cairo_get_matrix
cairo_get_target
cairo_glyph_path
cairo_has_current_point
cairo_line_to
cairo_matrix_init
cairo_matrix_init_identity
cairo_matrix_init_rotate
cairo_matrix_multiply
cairo_matrix_scale
cairo_matrix_transform_distance
cairo_move_to
cairo_new_path
cairo_new_sub_path
cairo_rectangle
cairo_rel_line_to
cairo_restore
cairo_save
cairo_scaled_font_create
cairo_scaled_font_destroy
cairo_scaled_font_extents
cairo_scaled_font_get_ctm
cairo_scaled_font_get_font_options
cairo_scaled_font_glyph_extents
cairo_scaled_font_status
cairo_scaled_font_text_extents
cairo_set_line_cap
cairo_set_line_join
cairo_set_line_width
cairo_set_miter_limit
cairo_set_scaled_font
cairo_set_source_rgb
cairo_show_glyphs
cairo_show_text
cairo_stroke
cairo_surface_get_font_options
cairo_text_path
cairo_win32_font_face_create_for_logfontw
cairo_win32_scaled_font_done_font
cairo_win32_scaled_font_get_metrics_factor
cairo_win32_scaled_font_select_font

libfontconfig-1

FcConfigSubstitute
FcDefaultSubstitute
FcPatternGetDouble
FcPatternGetMatrix

libfreetype-6

FT_Done_FreeType
FT_Init_FreeType

libglib-2.0-0

g_free
g_intern_static_string
g_log
g_malloc
g_malloc0
g_once_init_enter_impl
g_once_init_leave
g_quark_from_static_string
g_return_if_fail_warning
g_slice_alloc
g_slice_alloc0
g_slice_free1
g_slist_foreach
g_slist_free
g_slist_prepend
g_snprintf
g_static_mutex_get_mutex_impl
g_thread_functions_for_glib_use
g_threads_got_initialized
g_utf8_strlen

libgobject-2.0-0

g_object_get_qdata
g_object_new
g_object_ref
g_object_set_qdata_full
g_object_unref
g_type_add_interface_static
g_type_check_class_cast
g_type_check_instance_cast
g_type_check_instance_is_a
g_type_class_peek_parent
g_type_init
g_type_interface_add_prerequisite
g_type_interface_peek
g_type_register_static
g_type_register_static_simple

libpango-1.0-0

pango_context_get_language
pango_context_get_matrix
pango_context_get_type
pango_context_new
pango_context_set_font_map
pango_context_set_language
pango_context_set_matrix
pango_font_describe
pango_font_describe_with_absolute_size
pango_font_description_free
pango_font_description_get_gravity
pango_font_description_get_size
pango_font_description_get_size_is_absolute
pango_font_description_set_absolute_size
pango_font_description_set_family_static
pango_font_description_to_string
pango_font_description_unset_fields
pango_font_get_font_map
pango_font_get_glyph_extents
pango_font_get_type
pango_font_map_get_type
pango_font_map_load_font
pango_font_metrics_new
pango_font_metrics_ref
pango_font_metrics_unref
pango_gravity_to_rotation
pango_language_get_sample_string
pango_layout_context_changed
pango_layout_get_context
pango_layout_get_extents
pango_layout_get_lines_readonly
pango_layout_get_type
pango_layout_new
pango_layout_set_font_description
pango_layout_set_text
pango_matrix_get_font_scale_factor
pango_quantize_line_geometry
pango_renderer_activate
pango_renderer_deactivate
pango_renderer_draw_glyphs
pango_renderer_draw_layout
pango_renderer_draw_layout_line
pango_renderer_get_color
pango_renderer_get_layout
pango_renderer_get_type
pango_renderer_set_color
pango_script_get_sample_language
pango_units_from_double

libpangoft2-1.0-0

pango_fc_font_create_metrics_for_context
pango_fc_font_get_type
pango_fc_font_map_cache_clear
pango_fc_font_map_get_type

libpangowin32-1.0-0

_pango_win32_font_get_type
_pango_win32_font_map_get_type
_pango_win32_fontmap_cache_remove
_pango_win32_make_matching_logfontw
pango_win32_get_dc

gdi32

GetDeviceCaps

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__setusermatherr
_amsg_exit
_errno
_initterm
_iob
_unlock
_lock
abort
calloc
fprintf
free
fwrite
memcmp
realloc
strlen
strncmp
tan
vfprintf

Exports

Exports

pango_cairo_context_get_font_options
pango_cairo_context_get_resolution
pango_cairo_context_get_shape_renderer
pango_cairo_context_set_font_options
pango_cairo_context_set_resolution
pango_cairo_context_set_shape_renderer
pango_cairo_create_context
pango_cairo_create_layout
pango_cairo_error_underline_path
pango_cairo_font_get_scaled_font
pango_cairo_font_get_type
pango_cairo_font_map_create_context
pango_cairo_font_map_get_default
pango_cairo_font_map_get_font_type
pango_cairo_font_map_get_resolution
pango_cairo_font_map_get_type
pango_cairo_font_map_new
pango_cairo_font_map_new_for_font_type
pango_cairo_font_map_set_default
pango_cairo_font_map_set_resolution
pango_cairo_glyph_string_path
pango_cairo_layout_line_path
pango_cairo_layout_path
pango_cairo_renderer_get_type
pango_cairo_show_error_underline
pango_cairo_show_glyph_string
pango_cairo_show_layout
pango_cairo_show_layout_line
pango_cairo_update_context
pango_cairo_update_layout

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1016B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

60aab24032ed9b3dc08433d058bf4e10

Headers

DLL Characteristics

File Characteristics

Imports

libcairo-2

libfontconfig-1

libfreetype-6

libglib-2.0-0

libgobject-2.0-0

libpango-1.0-0

libpangoft2-1.0-0

libpangowin32-1.0-0

gdi32

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 23KB - Virtual size: 22KB

.data Size: 512B - Virtual size: 136B

.rdata Size: 3KB - Virtual size: 3KB

.bss Size: - Virtual size: 1016B

.edata Size: 1KB - Virtual size: 1KB

.idata Size: 8KB - Virtual size: 7KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 23KB - Virtual size: 22KB

.data
Size: 512B - Virtual size: 136B

.rdata
Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 1016B

.edata
Size: 1KB - Virtual size: 1KB

.idata
Size: 8KB - Virtual size: 7KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.reloc
Size: 1KB - Virtual size: 1KB