Static task
static1
General
-
Target
FxsFuncs.asi
-
Size
383KB
-
MD5
ee46f5ff58308beb8764df09535c5eb4
-
SHA1
2a1bfff2da0df1502592cdb499d9eb2aeb481a45
-
SHA256
9ebb41fa73fbc72d9a13ae346735516993fc4ffe04fc0c2e786ab52ca7cfb810
-
SHA512
73b865228eb68b06831d7b9c8795f2c06fe66e0a57e0ba0e62ea58fa1facb765abf849685ba32e0daecdb714a71e03a662ee1abb767f6eadd832bd1deddfdf9b
-
SSDEEP
6144:dcFS5AP83s0kYXxoAvcFpGiK+IiAqrouKSAIOAOFkMs:eFU3uAvKYiK+hAqs1nXs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource FxsFuncs.asi
Files
-
FxsFuncs.asi.dll windows:5 windows x86 arch:x86
20eb3a6acbfa0dcc0087bd77c7c54332
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleFileNameA
VirtualProtect
GetModuleHandleA
GetModuleHandleExA
HeapSize
GetLastError
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RtlUnwind
InterlockedFlushSList
RaiseException
FreeLibrary
LoadLibraryExW
GetStdHandle
GetFileType
GetModuleFileNameW
GetModuleHandleExW
WriteConsoleW
ExitProcess
HeapAlloc
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
HeapFree
CloseHandle
GetACP
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadFile
ReadConsoleW
SetFilePointerEx
OutputDebugStringW
WaitForSingleObjectEx
CreateThread
HeapReAlloc
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
CreateFileW
SetEndOfFile
Sections
.text Size: 268KB - Virtual size: 267KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ