faq[.]dll | Triage

General

Target

faq.dll
Size

9KB
MD5

0bfda3f6de92c0c9f2780c425914fa1b
SHA1

553b00e4b9a8a20bc6c6744e90cbfe24344fe0d8
SHA256

39cf47d37df681b75b52a71f528f2c70fc3ae2bb73dfba0b370887a90943cd75
SHA512

8d7cf06df581a27d7bd33b65f596a7e64c241feefe8423cae7afe8eda76d00ac794822f8f695905c6f9704b4e446b9a3cc8c907515fc7f5ac4a1bbe9d40cd397
SSDEEP

192:cGOwdpPalSUyTK5cOTOJwBJkIpgTGM2/waU:cGlpW2K56JwBJkcgTG9

Score

N/A

Malware Config

Signatures

Files

faq.dll
.dll windows x86

cbf457246dc40ba4ab0887c228577ae1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc71

ord2838
ord2540
ord2646
ord2533
ord3718
ord3719
ord3709
ord2644
ord3949
ord4481
ord4261
ord3333
ord566
ord757
ord3830
ord764
ord2714
ord4307
ord765
ord315
ord1037
ord1206
ord1208
ord1098
ord371
ord1120
ord1201
ord1175
ord1177
ord314
ord1209
ord1084
ord1092
ord2835
ord2731
ord2537
ord5566
ord5213
ord5230
ord4568
ord3948
ord2248
ord5226
ord5224
ord2931
ord1920
ord3832
ord5382
ord6219
ord5102
ord1010
ord3806
ord5583
ord2018
ord2063
ord4326
ord6276
ord3801
ord6278
ord4014
ord4038
ord3683
ord1167
ord581

msvcr71

_onexit
malloc
free
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
__CppXcptFilter
__dllonexit
__security_error_handler
memset
??2@YAPAXI@Z
__CxxFrameHandler

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
LocalFree
GetVersionExA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cbf457246dc40ba4ab0887c228577ae1

Headers

File Characteristics

Imports

mfc71

msvcr71

kernel32

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 856B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 856B

.reloc
Size: 1KB - Virtual size: 1KB