D:\ИСХОДНИКИ ФУРИОНА\Furion 1.711\Release\Furion hack.pdb
Behavioral task
behavioral1
Sample
Furion hack.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Furion hack.dll
Resource
win10v2004-20240226-en
General
-
Target
Furion hack.dll
-
Size
1.6MB
-
MD5
9fc74cc98e0bacb9e74d948893e3c7ec
-
SHA1
596261d84472f0ef28927b4c632d88fa1364d276
-
SHA256
d81568cef8b6c2452dabceb1c1b75c1959f3afe6ee7690007598e35ed0fee4ed
-
SHA512
370e3304a9f897e31bd5763461c2e0cd5f949d0db4d1989cd7c5ba66e88bfb73e57733a99f0d198f8af4fdb7a918e31e80b0b8b5a66e2a77c179ad62d68db51e
-
SSDEEP
24576:1BhPDYl1Rwy1Zxt168IYQK0HSoga7DH2GS3FmSYTQ4rds:ruX1bSSop7DfS3ITrds
Malware Config
Signatures
-
Detect Lumma Stealer payload V4 1 IoCs
resource yara_rule sample family_lumma_v4 -
Lumma family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Furion hack.dll
Files
-
Furion hack.dll.dll windows:6 windows x86 arch:x86
8c675e33aa00e4c3ce09f8e1b10ee371
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
K32GetMappedFileNameA
FreeLibraryAndExitThread
Sleep
VirtualQueryEx
SetPriorityClass
GetModuleHandleA
OpenProcess
GetLastError
DisableThreadLibraryCalls
CreateThread
GetCurrentProcessId
CreateDirectoryA
FormatMessageA
GlobalAlloc
GlobalLock
GlobalUnlock
MultiByteToWideChar
QueryPerformanceFrequency
QueryPerformanceCounter
MoveFileA
TerminateProcess
VirtualQuery
GetProcAddress
GetTickCount
FindFirstFileA
SetLastError
FindNextFileA
FindClose
GetFileAttributesA
DeleteFileA
SetFileAttributesA
RemoveDirectoryA
FlushInstructionCache
SetEndOfFile
WriteConsoleW
HeapSize
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
DeleteFileW
GetTimeZoneInformation
ReadConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetCurrentProcess
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
GetFileType
GetStdHandle
ReadFile
GetModuleHandleExW
ExitProcess
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
LoadLibraryExW
GetModuleFileNameW
InterlockedFlushSList
RtlUnwind
FreeLibrary
GetProcessHeap
InitializeSListHead
GetStartupInfoW
RaiseException
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetSystemTimeAsFileTime
VirtualProtect
CompareStringW
GetModuleFileNameA
CloseHandle
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
GetCurrentThreadId
OpenThread
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
GetModuleHandleW
CreateToolhelp32Snapshot
Thread32First
Thread32Next
VirtualAlloc
VirtualFree
LocalFree
GetLocaleInfoEx
CreateDirectoryW
CreateFileW
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
AreFileApisANSI
GetFileInformationByHandleEx
WideCharToMultiByte
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
user32
SetWindowLongA
EnumWindows
IsWindowVisible
GetWindow
GetCursorPos
SetClipboardData
GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
CallWindowProcA
GetWindowThreadProcessId
GetKeyState
MessageBoxA
GetAsyncKeyState
SendMessageA
ShowCursor
shell32
ShellExecuteA
oleaut32
VariantClear
opengl32
glPolygonMode
glEnable
glLineWidth
glDisable
glDepthFunc
glFogi
glFogfv
glFogf
glClearColor
glClear
glGetIntegerv
glPushAttrib
glOrtho
glPixelStorei
glPushMatrix
glDrawElements
glColorPointer
glTexImage2D
glTexCoordPointer
glDeleteTextures
glTexParameteri
glLoadIdentity
glBlendFunc
glMatrixMode
glDisableClientState
glScissor
glVertexPointer
glGenTextures
glBindTexture
glPopAttrib
glEnableClientState
glViewport
glPopMatrix
ws2_32
WSACleanup
imm32
ImmSetCompositionWindow
ImmGetContext
Sections
.text Size: 983KB - Virtual size: 982KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 270KB - Virtual size: 269KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 318KB - Virtual size: 765KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ