FfYIJfx[.]dat[.]dll

Resubmissions

27/04/2023, 15:17

230427-sn8zwaad3y 3

31/03/2023, 14:29

230331-rt355sbb69 10

31/03/2023, 14:16

230331-rk413sbb9t 3

Sharing

Copy URL Twitter E-mail

General

Target

FfYIJfx.dat.dll
Size

276KB
MD5

35886785d255217c90ac1ad00a91d983
SHA1

d98c8159dac6f16e1c227dd6d81f7d2d46cb6865
SHA256

2d101cb5e071b57f48d93ad4cf1caa07199693d8073802209e6bf6e5a9188eb9
SHA512

7626b80f3d9d8fb3c024c898c427119ea5d64ab7019958dadd5fba1210b408933919eb97a303942f9801e76d21845556329b8a419dd5f9ccba4445b52938b20e
SSDEEP

6144:tIp4Y1c1tGUGHGJksYOFGwTwRqWzUTMfVHqpdtIO:tIp4Y1vHGJNtF5TwRqWzU9dN

Score

1^/10

Malware Config

Signatures

Files

FfYIJfx.dat.dll
.dll windows x86

db8fd5361891a3741dbe3981eae330f2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateEventA
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemInfo
GetTickCount
GetVersion
GlobalMemoryStatus
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetEvent
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WaitForSingleObject

msvcrt

_amsg_exit
_beginthreadex
_initterm
_iob
_lock
_unlock
abort
calloc
free
fwrite
malloc
memcmp
memcpy
memmove
memset
realloc
strlen
strncmp
vfprintf

Exports

Exports

Uzma_alone_decoder
Uzma_alone_encoder
Uzma_auto_decoder
Uzma_block_buffer_bound
Uzma_block_buffer_decode
Uzma_block_buffer_encode
Uzma_block_compressed_size
Uzma_block_decoder
Uzma_block_encoder
Uzma_block_header_decode
Uzma_block_header_encode
Uzma_block_header_size
Uzma_block_total_size
Uzma_block_uncomp_encode
Uzma_block_unpadded_size
Uzma_check_is_supported
Uzma_check_size
Uzma_code
Uzma_cputhreads
Uzma_crc32
Uzma_crc64
Uzma_easy_buffer_encode
Uzma_easy_decoder_memusage
Uzma_easy_encoder
Uzma_easy_encoder_memusage
Uzma_end
Uzma_filter_decoder_is_supported
Uzma_filter_encoder_is_supported
Uzma_filter_flags_decode
Uzma_filter_flags_encode
Uzma_filter_flags_size
Uzma_filters_copy
Uzma_filters_update
Uzma_get_check
Uzma_get_progress
Uzma_index_append
Uzma_index_block_count
Uzma_index_buffer_decode
Uzma_index_buffer_encode
Uzma_index_cat
Uzma_index_checks
Uzma_index_decoder
Uzma_index_dup
Uzma_index_encoder
Uzma_index_end
Uzma_index_file_size
Uzma_index_hash_append
Uzma_index_hash_decode
Uzma_index_hash_end
Uzma_index_hash_init
Uzma_index_hash_size
Uzma_index_init
Uzma_index_iter_init
Uzma_index_iter_locate
Uzma_index_iter_next
Uzma_index_iter_rewind
Uzma_index_memusage
Uzma_index_memused
Uzma_index_size
Uzma_index_stream_count
Uzma_index_stream_flags
Uzma_index_stream_padding
Uzma_index_stream_size
Uzma_index_total_size
Uzma_index_uncompressed_size
Uzma_lzma_preset
Uzma_memlimit_get
Uzma_memlimit_set
Uzma_memusage
Uzma_mf_is_supported
Uzma_mode_is_supported
Uzma_physmem
Uzma_properties_decode
Uzma_properties_encode
Uzma_properties_size
Uzma_raw_buffer_decode
Uzma_raw_buffer_encode
Uzma_raw_decoder
Uzma_raw_decoder_memusage
Uzma_raw_encoder
Uzma_raw_encoder_memusage
Uzma_stream_buffer_bound
Uzma_stream_buffer_decode
Uzma_stream_buffer_encode
Uzma_stream_decoder
Uzma_stream_encoder
Uzma_stream_encoder_mt
Uzma_stream_encoder_mt_memusage
Uzma_stream_flags_compare
Uzma_stream_footer_decode
Uzma_stream_footer_encode
Uzma_stream_header_decode
Uzma_stream_header_encode
Uzma_version_number
Uzma_version_string
Uzma_vli_decode
Uzma_vli_encode
X555

Sections

.text
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 140B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

db8fd5361891a3741dbe3981eae330f2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 105KB - Virtual size: 105KB

.data Size: 512B - Virtual size: 40B

.rdata Size: 30KB - Virtual size: 30KB

/4 Size: 21KB - Virtual size: 20KB

.bss Size: - Virtual size: 140B

.edata Size: 3KB - Virtual size: 3KB

.idata Size: 1KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 108KB - Virtual size: 105KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 105KB - Virtual size: 105KB

.data
Size: 512B - Virtual size: 40B

.rdata
Size: 30KB - Virtual size: 30KB

/4
Size: 21KB - Virtual size: 20KB

.bss
Size: - Virtual size: 140B

.edata
Size: 3KB - Virtual size: 3KB

.idata
Size: 1KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 108KB - Virtual size: 105KB

.reloc
Size: 2KB - Virtual size: 1KB