Flarial1[.]20[.]60[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

Flarial1.20.60.dll
Size

1.7MB
MD5

8276e890a5e41af7749df4507d41b684
SHA1

6e2521299d3bd287ad74d6e40f5a2343a7f266b9
SHA256

cf39031a76297aa460d428d6f27ab96b53a7a73fb179a0267322cb67fc782e17
SHA512

1e876c62b0d4054062699ab1743264ee3e28633e242f22a87971e1493eb7aa16f6aa0fda8b1a88e014552adf37ad4eb33c6a7f6bb9d0f99ea88d8023cc3a5e22
SSDEEP

24576:3FF4E7R+KWsf5tECd3sGlPXSiAj35h0lhSMXlx9:3FF4KRnWAjEw3sG9iiAjwr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Flarial1.20.60.dll

Files

Flarial1.20.60.dll
.dll windows:6 windows x64 arch:x64

54cf8b89157ebab98d8353b9fca53230

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

urlmon

URLDownloadToFileW

dwrite

DWriteCreateFactory

d3d11

D3D11On12CreateDevice

d2d1

ord2
ord1
ord8

wininet

InternetCheckConnectionA

kernel32

SetEndOfFile
WriteConsoleW
HeapSize
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetModuleHandleA
GetProcAddress
Sleep
CreateThread
FreeLibraryAndExitThread
CreateFileA
CloseHandle
GetCurrentProcess
VirtualQuery
K32GetModuleInformation
VirtualProtect
GlobalMemoryStatusEx
GlobalUnlock
GlobalLock
FlushInstructionCache
HeapCreate
HeapDestroy
HeapReAlloc
HeapFree
GetCurrentProcessId
GetCurrentThreadId
OpenThread
GetThreadContext
SetThreadContext
SuspendThread
ResumeThread
GetModuleHandleW
CreateToolhelp32Snapshot
Thread32First
Thread32Next
VirtualAlloc
VirtualFree
GetSystemInfo
GetTimeZoneInformation
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
ReadFile
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
GetFileType
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
HeapAlloc
GetLocaleInfoW
LCMapStringW
CompareStringW
QueryPerformanceCounter
QueryPerformanceFrequency
FormatMessageA
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetFileInformationByHandle
AreFileApisANSI
GetLastError
GetFileInformationByHandleEx
MultiByteToWideChar
WideCharToMultiByte
LocalFree
GetLocaleInfoEx
WaitForSingleObjectEx
RtlUnwind
GetExitCodeThread
GetNativeSystemInfo
CreateThreadpoolWork
SubmitThreadpoolWork
WaitForThreadpoolWorkCallbacks
CloseThreadpoolWork
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
LCMapStringEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
IsProcessorFeaturePresent
GetStringTypeW
GetCPInfo
IsDebuggerPresent
RaiseException
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
InitializeSListHead
GetProcessHeap
FreeLibrary
RtlPcToFileHeader
RtlUnwindEx
InterlockedFlushSList
GetModuleFileNameW
LoadLibraryExW
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitThread
GetModuleHandleExW
ExitProcess
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree

user32

DefWindowProcA
UnregisterClassA
RegisterClassExA
GetClipboardData
CloseClipboard
OpenClipboard
GetDpiForSystem
FindWindowA
SetCursorPos
GetWindowRect
GetClientRect
DestroyWindow
CreateWindowExA

gdi32

AddFontResourceA

ole32

CoCreateInstance
CoInitializeEx

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 319KB - Virtual size: 318KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 312KB - Virtual size: 798KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

54cf8b89157ebab98d8353b9fca53230

Headers

DLL Characteristics

File Characteristics

Imports

urlmon

dwrite

d3d11

d2d1

wininet

kernel32

user32

gdi32

ole32

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 319KB - Virtual size: 318KB

.data Size: 312KB - Virtual size: 798KB

.pdata Size: 31KB - Virtual size: 30KB

_RDATA Size: 512B - Virtual size: 500B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 319KB - Virtual size: 318KB

.data
Size: 312KB - Virtual size: 798KB

.pdata
Size: 31KB - Virtual size: 30KB

_RDATA
Size: 512B - Virtual size: 500B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 4KB - Virtual size: 4KB