fb5fae3df92ef8f1987e2ab91fb9a08f04ca614ffb12bc8a0612fe0b6b1bf66e | Triage

Submit
Reports

Overview

overview

1

Static

static

fb5fae3df9...6e.dll

windows7-x64

1

fb5fae3df9...6e.dll

windows10-2004-x64

1

Sharing

Static task

static1

Behavioral task

behavioral1

Sample

fb5fae3df92ef8f1987e2ab91fb9a08f04ca614ffb12bc8a0612fe0b6b1bf66e.dll

Resource

win7-20220812-en

windows7-x64

1 signatures

150 seconds

Behavioral task

behavioral2

Sample

fb5fae3df92ef8f1987e2ab91fb9a08f04ca614ffb12bc8a0612fe0b6b1bf66e.dll

Resource

win10v2004-20220812-en

windows10-2004-x64

1 signatures

150 seconds

General

Target

fb5fae3df92ef8f1987e2ab91fb9a08f04ca614ffb12bc8a0612fe0b6b1bf66e
Size

19KB
MD5

f58d1d4c09a0390b2956edb9c7f03ac4
SHA1

313f1d76ada308664b4deada79997b948ff16eab
SHA256

fb5fae3df92ef8f1987e2ab91fb9a08f04ca614ffb12bc8a0612fe0b6b1bf66e
SHA512

60b92a56ba9b8737b21d40f5d1a7c475b849a51fffe2d6fd77e366d9e42f4dab5f7f80e43ceb43f648af2a5bf950d1add67545604c230e50825e02022bad3aa7
SSDEEP

384:jQNm+awSIqEy+xng67fXsCZejfY1YhJpJgLa0MpHr:MNjSIhy4fXsfrvjgLa1

Score

N/A

Malware Config

Signatures

Files

fb5fae3df92ef8f1987e2ab91fb9a08f04ca614ffb12bc8a0612fe0b6b1bf66e
.dll windows x86

609dac6fa124cfbbed7bd3faf1278c52

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle

shell32

ord680

advapi32

RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegNotifyChangeKeyValue

user32

UnhookWindowsHookEx
SetWindowsHookExA
SetWindowTextA
MessageBoxA
GetWindowTextA
GetFocus
GetClassNameA
FindWindowA
EnumChildWindows
CharLowerBuffA
CallWindowProcA
CallNextHookEx
wsprintfA
SendMessageA

kernel32

FreeLibrary
GetLastError
lstrcpynA
lstrlenA
lstrcpyA
lstrcmpA
lstrcatA
VirtualProtect
VirtualFree
VirtualAlloc
Sleep
RtlFillMemory
LoadLibraryA
GetVolumeInformationA
ExitThread
GetTempPathA
GetSystemInfo
GetProcAddress
GetModuleHandleA
CloseHandle
CreateThread
ExitProcess
GetModuleFileNameA

shlwapi

StrToIntA
StrStrA

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.