Static task
static1
Behavioral task
behavioral1
Sample
fe.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fe.dll
Resource
win10v2004-20220812-en
General
-
Target
fe.dll
-
Size
1.3MB
-
MD5
fec9cb4ad1e6229f876e1874a873a98e
-
SHA1
3b4692e9e6904edbe1e37edae15573db2e53386b
-
SHA256
7502affbbb6086a020fe2ffe7b079e7ccf8e7fb11d48960561826054b2e0c1fe
-
SHA512
65cd21e6e5c8a084384ac99c3401148aed6fc774006e4ed2d8ca6145d6a910574f7dfc8418d7715e369c5454b9305a2ce095efa4d648ff6fc05f6751048aea96
-
SSDEEP
24576:dBRD8gmn6aztiL+rPowXKg9HHlLNtsODbheU154:hDwNtb7/Kg9x7NeU15
Malware Config
Signatures
Files
-
fe.dll.dll windows x86
c9ec03d1eaad4e1692358ca05ade2cf2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
DefDriverProc
secur32
InitializeSecurityContextW
kernel32
lstrcmpiA
DeleteFiber
GetOverlappedResult
ExitProcess
FindFirstVolumeW
GetConsoleCP
GetSystemPowerStatus
GetProcessHeap
GetSystemDefaultUILanguage
GetThreadLocale
EnumTimeFormatsA
DeleteFileA
GetCurrentConsoleFont
GetModuleHandleA
OutputDebugStringA
LoadLibraryExW
GetModuleFileNameA
GetBinaryTypeA
WaitForSingleObjectEx
GetBinaryTypeW
GetLogicalDriveStringsW
GetConsoleMode
VirtualProtectEx
winspool.drv
DeletePrinterDriverExW
msvcrt
mbtowc
fgetws
fputws
fwrite
oleaut32
LoadRegTypeLi
advapi32
DeleteAce
GetFileSecurityW
gdi32
GetTextExtentPointA
GetOutlineTextMetricsA
GetCharWidthA
ExcludeClipRect
shell32
ExtractIconExA
user32
GetMenuItemInfoA
GetClipboardSequenceNumber
GetClipboardFormatNameA
DrawStateA
IsWindowVisible
GetRawInputDeviceInfoW
Sections
.text Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 916KB - Virtual size: 914KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 228KB - Virtual size: 227KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ