FLEngine_x64[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

FLEngine_x64.dll
Size

46.2MB
MD5

f0a7959a5cc973396c206aef72e5d7c7
SHA1

ded76f58d38c3099d7a542235b3012829f68bc99
SHA256

adbbd384d74cd7b2248cc731bebf6ca646b080912ebab02ec6f5a61c37784377
SHA512

2690247d76a92ab4fcbb53a6b40ccbdf1b1751515174580f64aea61eb21309f7a61da454626f9efb694bc8f490ef040062e4c469fa12cc143bd0d2f94195ac69
SSDEEP

786432:cMPyr9gZLJVaMXQGXUA04E0vvtPqXtwYAZcCVjS4rrfZlOgSk3l:BPyr6ZLJd5kA0X0vYXtNkcm/3dSk1

Score

1^/10

Malware Config

Signatures

Files

FLEngine_x64.dll
.dll windows x64

4491297441ae637d9d2b8de2b1e49419

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/07/2020, 00:00

Not After

12/07/2023, 12:00

Subject

CN=Image Line,O=Image Line,L=Gent,C=BE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

c3:ea:4f:56:7b:a1:57:e6:5c:0e:d4:95:e1:d9:74:24:60:fe:a7:24:76:1b:fd:ea:91:10:c5:5c:6c:7e:b4:40
Signer

Actual PE Digest

c3:ea:4f:56:7b:a1:57:e6:5c:0e:d4:95:e1:d9:74:24:60:fe:a7:24:76:1b:fd:ea:91:10:c5:5c:6c:7e:b4:40

Digest Algorithm

sha256

PE Digest Matches

false

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

shlwapi

PathUnExpandEnvStringsW

version

GetFileVersionInfoSizeW

user32

CopyImage
GetProcessWindowStation
GetUserObjectInformationW

oleaut32

SafeArrayPutElement

netapi32

NetWkstaGetInfo

advapi32

RegSetValueExW

msvcrt

memcpy

kernel32

GetVersion
GetVersionExW
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

wintrust

WinVerifyTrust

shfolder

SHGetFolderPathW

crypt32

CertGetNameStringW

gdi32

Pie

mpr

WNetEnumResourceW

winmm

timeEndPeriod

oleacc

LresultFromObject

wininet

InternetCloseHandle

winspool.drv

DocumentPropertiesW

comdlg32

ChooseColorW

comctl32

FlatSB_SetScrollInfo

shell32

DragQueryFileW

imagehlp

ImageRvaToVa

ole32

CreateDataAdviseHolder

msacm32

acmStreamSize

dsound

DirectSoundEnumerateA

Exports

Exports

CreateFruityInstance
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 12.0MB - Virtual size: 12.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1.2MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 189B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xda0
Size: 414KB - Virtual size: 414KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 477KB - Virtual size: 476KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xda1
Size: 27.3MB - Virtual size: 27.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.xda2
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 415KB - Virtual size: 414KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4491297441ae637d9d2b8de2b1e49419

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03Certificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

c3:ea:4f:56:7b:a1:57:e6:5c:0e:d4:95:e1:d9:74:24:60:fe:a7:24:76:1b:fd:ea:91:10:c5:5c:6c:7e:b4:40Signer

Headers

File Characteristics

Imports

shlwapi

version

user32

oleaut32

netapi32

advapi32

msvcrt

kernel32

wintrust

shfolder

crypt32

gdi32

mpr

winmm

oleacc

wininet

winspool.drv

comdlg32

comctl32

shell32

imagehlp

ole32

msacm32

dsound

Exports

Exports

Sections

.text Size: 12.0MB - Virtual size: 12.0MB

.data Size: 1.4MB - Virtual size: 1.4MB

.bss Size: - Virtual size: 1.2MB

.idata Size: 25KB - Virtual size: 25KB

.didata Size: 4KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 189B

.rdata Size: 512B - Virtual size: 69B

.xda0 Size: 414KB - Virtual size: 414KB

.pdata Size: 477KB - Virtual size: 476KB

.xda1 Size: 27.3MB - Virtual size: 27.3MB

.xda2 Size: 2.6MB - Virtual size: 2.6MB

.reloc Size: 415KB - Virtual size: 414KB

.rsrc Size: 1.5MB - Virtual size: 1.5MB

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

0e:f0:b5:64:c9:6b:3a:d7:b5:95:35:1d:97:1f:b6:03
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

c3:ea:4f:56:7b:a1:57:e6:5c:0e:d4:95:e1:d9:74:24:60:fe:a7:24:76:1b:fd:ea:91:10:c5:5c:6c:7e:b4:40
Signer

.text
Size: 12.0MB - Virtual size: 12.0MB

.data
Size: 1.4MB - Virtual size: 1.4MB

.bss
Size: - Virtual size: 1.2MB

.idata
Size: 25KB - Virtual size: 25KB

.didata
Size: 4KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 189B

.rdata
Size: 512B - Virtual size: 69B

.xda0
Size: 414KB - Virtual size: 414KB

.pdata
Size: 477KB - Virtual size: 476KB

.xda1
Size: 27.3MB - Virtual size: 27.3MB

.xda2
Size: 2.6MB - Virtual size: 2.6MB

.reloc
Size: 415KB - Virtual size: 414KB

.rsrc
Size: 1.5MB - Virtual size: 1.5MB