5da7268575cb3edc0bc37a60402be8fcec4ae7d4f55fdf364a07ee44f0f5c9d4N

Sharing

Copy URL Twitter E-mail

General

Target

5da7268575cb3edc0bc37a60402be8fcec4ae7d4f55fdf364a07ee44f0f5c9d4N
Size

135KB
MD5

8969b018e3601044b16c9c8a581f3570
SHA1

a398a43f3b4e11348c019e12655716d4f09f7f29
SHA256

5da7268575cb3edc0bc37a60402be8fcec4ae7d4f55fdf364a07ee44f0f5c9d4
SHA512

ac563dbd8d853cb89a94f33e0ea8811cc4cb113737bdd4ab477936b441fb28cda2e20c7c5839aea9fd2ef94ed6c6e4b0af4db7d1ff42399005e801f0f9ebf8e8
SSDEEP

3072:80An37MmN5GvtPrh5pmYxOhe1e4fnLQ7/p6j2pgj7j07FznPd36ZdxFulYU1bROi:80wNEvtzh5FLizkZdxsJ1bh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5da7268575cb3edc0bc37a60402be8fcec4ae7d4f55fdf364a07ee44f0f5c9d4N

Files

5da7268575cb3edc0bc37a60402be8fcec4ae7d4f55fdf364a07ee44f0f5c9d4N
.dll windows:4 windows x86 arch:x86

b7a3c65297fa0e051dc573310bec201c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libpango-1.0-0

pango_context_get_font_map
pango_context_get_language
pango_context_get_matrix
pango_context_set_language
pango_coverage_get
pango_coverage_new
pango_coverage_ref
pango_coverage_set
pango_coverage_unref
pango_find_map
pango_font_describe_with_absolute_size
pango_font_description_copy
pango_font_description_copy_static
pango_font_description_equal
pango_font_description_free
pango_font_description_get_family
pango_font_description_get_gravity
pango_font_description_get_size
pango_font_description_get_size_is_absolute
pango_font_description_get_stretch
pango_font_description_get_style
pango_font_description_get_weight
pango_font_description_hash
pango_font_description_new
pango_font_description_set_absolute_size
pango_font_description_set_family
pango_font_description_set_gravity
pango_font_description_set_size
pango_font_description_set_stretch
pango_font_description_set_style
pango_font_description_set_variant
pango_font_description_set_weight
pango_font_description_to_string
pango_font_description_unset_fields
pango_font_face_get_type
pango_font_family_get_type
pango_font_get_coverage
pango_font_get_glyph_extents
pango_font_get_metrics
pango_font_get_type
pango_font_map_create_context
pango_font_map_get_type
pango_font_map_load_fontset
pango_font_metrics_new
pango_font_metrics_ref
pango_font_metrics_unref
pango_fontset_foreach
pango_fontset_get_type
pango_glyph_string_set_size
pango_gravity_get_type
pango_language_from_string
pango_language_get_sample_string
pango_language_matches
pango_layout_get_context
pango_layout_get_extents
pango_layout_get_lines_readonly
pango_layout_get_type
pango_layout_new
pango_layout_set_font_description
pango_layout_set_text
pango_map_get_engine
pango_matrix_get_font_scale_factor
pango_module_register
pango_quantize_line_geometry
pango_renderer_draw_glyphs
pango_renderer_draw_layout
pango_renderer_draw_layout_line
pango_renderer_get_type
pango_renderer_set_matrix
pango_script_for_unichar
pango_version

libfontconfig-1

FcCharSetFirstPage
FcCharSetHasChar
FcCharSetNextPage
FcConfigSubstitute
FcDefaultSubstitute
FcFontList
FcFontMatch
FcFontRenderPrepare
FcFontSetDestroy
FcFontSort
FcFreeTypeCharIndex
FcMatrixMultiply
FcObjectSetAdd
FcObjectSetBuild
FcObjectSetCreate
FcObjectSetDestroy
FcPatternAddDouble
FcPatternAddMatrix
FcPatternAddString
FcPatternBuild
FcPatternCreate
FcPatternDel
FcPatternDestroy
FcPatternDuplicate
FcPatternEqual
FcPatternGet
FcPatternGetBool
FcPatternGetCharSet
FcPatternGetDouble
FcPatternGetInteger
FcPatternGetMatrix
FcPatternGetString
FcPatternHash
FcPatternReference

libfreetype-6

FT_Done_Face
FT_Done_FreeType
FT_Get_First_Char
FT_Get_Kerning
FT_Get_Next_Char
FT_Get_Sfnt_Table
FT_Init_FreeType
FT_Load_Glyph
FT_Load_Sfnt_Table
FT_New_Face
FT_Render_Glyph
FT_Set_Char_Size
FT_Set_Charmap
FT_Set_Transform
FT_Vector_Transform

libglib-2.0-0

g_array_append_vals
g_array_free
g_array_new
g_array_sort
g_ascii_strcasecmp
g_assertion_message_expr
g_atomic_int_add
g_atomic_int_exchange_and_add
g_free
g_get_prgname
g_hash_table_destroy
g_hash_table_foreach
g_hash_table_foreach_remove
g_hash_table_insert
g_hash_table_lookup
g_hash_table_new
g_hash_table_new_full
g_hash_table_remove
g_intern_static_string
g_list_prepend
g_list_remove_link
g_log
g_malloc
g_malloc0
g_malloc_n
g_memdup
g_once_init_enter_impl
g_once_init_leave
g_ptr_array_add
g_ptr_array_free
g_ptr_array_new
g_quark_from_static_string
g_quark_from_string
g_queue_free
g_queue_new
g_queue_pop_tail
g_queue_push_head_link
g_realloc_n
g_return_if_fail_warning
g_slice_alloc
g_slice_alloc0
g_slice_free1
g_slist_append
g_slist_delete_link
g_slist_foreach
g_slist_free
g_slist_prepend
g_sprintf
g_static_mutex_get_mutex_impl
g_static_mutex_init
g_str_equal
g_str_hash
g_strdup
g_strfreev
g_strsplit
g_thread_functions_for_glib_use
g_threads_got_initialized
g_unichar_combining_class
g_unichar_get_mirror_char
g_unichar_get_script
g_unichar_iswide
g_unichar_iszerowidth
g_unichar_type
g_utf8_get_char
g_utf8_skip

libgobject-2.0-0

g_enum_get_value
g_enum_get_value_by_nick
g_object_add_weak_pointer
g_object_class_install_property
g_object_get_qdata
g_object_new
g_object_ref
g_object_remove_weak_pointer
g_object_set
g_object_set_qdata_full
g_object_unref
g_param_spec_object
g_param_spec_pointer
g_type_check_instance_is_a
g_type_class_add_private
g_type_class_peek_parent
g_type_class_ref
g_type_init
g_type_instance_get_private
g_type_name
g_type_register_static
g_type_register_static_simple
g_value_get_object
g_value_get_pointer
g_value_set_object
g_value_set_pointer

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
_assert
_errno
_iob
_winmajor
abort
bsearch
calloc
ceil
fflush
floor
free
fwrite
malloc
memcpy
realloc
sqrt
strchr
strcmp
strncmp
vfprintf

Exports

Exports

pango_fc_decoder_get_charset
pango_fc_decoder_get_glyph
pango_fc_decoder_get_type
pango_fc_font_create_base_metrics_for_context
pango_fc_font_description_from_pattern
pango_fc_font_get_glyph
pango_fc_font_get_raw_extents
pango_fc_font_get_type
pango_fc_font_get_unknown_glyph
pango_fc_font_has_char
pango_fc_font_kern_glyphs
pango_fc_font_key_get_context_key
pango_fc_font_key_get_matrix
pango_fc_font_key_get_pattern
pango_fc_font_lock_face
pango_fc_font_map_add_decoder_find_func
pango_fc_font_map_cache_clear
pango_fc_font_map_create_context
pango_fc_font_map_find_decoder
pango_fc_font_map_get_type
pango_fc_font_map_shutdown
pango_fc_font_unlock_face
pango_fc_fontset_key_get_absolute_size
pango_fc_fontset_key_get_context_key
pango_fc_fontset_key_get_description
pango_fc_fontset_key_get_language
pango_fc_fontset_key_get_matrix
pango_fc_fontset_key_get_resolution
pango_ft2_font_get_coverage
pango_ft2_font_get_face
pango_ft2_font_get_kerning
pango_ft2_font_get_type
pango_ft2_font_map_create_context
pango_ft2_font_map_for_display
pango_ft2_font_map_get_type
pango_ft2_font_map_new
pango_ft2_font_map_set_default_substitute
pango_ft2_font_map_set_resolution
pango_ft2_font_map_substitute_changed
pango_ft2_get_context
pango_ft2_get_unknown_glyph
pango_ft2_render
pango_ft2_render_layout
pango_ft2_render_layout_line
pango_ft2_render_layout_line_subpixel
pango_ft2_render_layout_subpixel
pango_ft2_render_transformed
pango_ft2_renderer_get_type
pango_ft2_shutdown_display
pango_ot_buffer_add_glyph
pango_ot_buffer_clear
pango_ot_buffer_destroy
pango_ot_buffer_get_glyphs
pango_ot_buffer_new
pango_ot_buffer_output
pango_ot_buffer_set_rtl
pango_ot_buffer_set_zero_width_marks
pango_ot_info_find_feature
pango_ot_info_find_language
pango_ot_info_find_script
pango_ot_info_get
pango_ot_info_get_type
pango_ot_info_list_features
pango_ot_info_list_languages
pango_ot_info_list_scripts
pango_ot_ruleset_add_feature
pango_ot_ruleset_description_copy
pango_ot_ruleset_description_equal
pango_ot_ruleset_description_free
pango_ot_ruleset_description_hash
pango_ot_ruleset_get_feature_count
pango_ot_ruleset_get_for_description
pango_ot_ruleset_get_type
pango_ot_ruleset_maybe_add_feature
pango_ot_ruleset_maybe_add_features
pango_ot_ruleset_new
pango_ot_ruleset_new_for
pango_ot_ruleset_new_from_description
pango_ot_ruleset_position
pango_ot_ruleset_substitute
pango_ot_tag_from_language
pango_ot_tag_from_script
pango_ot_tag_to_language
pango_ot_tag_to_script

Sections

.text
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 492B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7a3c65297fa0e051dc573310bec201c

Headers

File Characteristics

Imports

libpango-1.0-0

libfontconfig-1

libfreetype-6

libglib-2.0-0

libgobject-2.0-0

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 103KB - Virtual size: 102KB

.data Size: 512B - Virtual size: 120B

.rdata Size: 13KB - Virtual size: 12KB

/4 Size: 512B - Virtual size: 4B

.bss Size: - Virtual size: 492B

.edata Size: 3KB - Virtual size: 3KB

.idata Size: 9KB - Virtual size: 8KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 1024B - Virtual size: 904B

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 103KB - Virtual size: 102KB

.data
Size: 512B - Virtual size: 120B

.rdata
Size: 13KB - Virtual size: 12KB

/4
Size: 512B - Virtual size: 4B

.bss
Size: - Virtual size: 492B

.edata
Size: 3KB - Virtual size: 3KB

.idata
Size: 9KB - Virtual size: 8KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 1024B - Virtual size: 904B

.reloc
Size: 3KB - Virtual size: 2KB