fdWCN.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fdWCN.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fdWCN.dll
Resource
win10v2004-20240426-en
General
-
Target
fdWCN.dll
-
Size
80KB
-
MD5
516beb000047f7647f265bc8a71d8c19
-
SHA1
dd879e1e14fce691cb5ab0cfcff700f60922a687
-
SHA256
d5f46e7cce1549469db9406529746c0a41c70e1e13d5c2dc0e5ffba24284c802
-
SHA512
4ecf88464e1423fd122268da29e48298578c690cc752b5e13aa287e7adab4f84195cb88972ac8e8981b62abd4d418a80e04b563ee0a5ec33a1acbb9ac598c0c0
-
SSDEEP
1536:SxFnGL5vt6SJFZXJpWtbDqyhkwGGwrSCPAFdxein+6OCfzCi:SxoL5vRnJebDqyhgGweC42Y+jCLCi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdWCN.dll
Files
-
fdWCN.dll.dll windows:6 windows x86 arch:x86
ef36e7157758e7e0008b152b19b5f31a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_XcptFilter
swprintf_s
wcscat_s
memcpy
__CxxFrameHandler3
_CxxThrowException
_vsnwprintf
wcscpy_s
vswprintf_s
memmove_s
memcpy_s
??0exception@@QAE@ABQBD@Z
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
_onexit
_lock
__dllonexit
_unlock
_except_handler4_common
??1type_info@@UAE@XZ
_amsg_exit
_initterm
_purecall
_callnewh
free
malloc
atol
??0exception@@QAE@XZ
??0exception@@QAE@ABV0@@Z
ntdll
EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
EtwRegisterTraceGuidsW
EtwUnregisterTraceGuids
EtwTraceMessage
api-ms-win-core-localregistry-l1-1-0
RegGetValueW
ole32
CoCreateInstance
PropVariantClear
CoTaskMemFree
IIDFromString
CoGetObject
StringFromGUID2
CreateStreamOnHGlobal
oleaut32
SysFreeString
SysAllocString
kernel32
InitializeSRWLock
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
CreateFileW
LocalFree
CloseHandle
GetFileSizeEx
ReadFile
FormatMessageW
GetSystemDirectoryW
LoadLibraryExW
GetModuleFileNameW
SetLastError
LoadLibraryW
GetFileAttributesW
GetModuleHandleW
GetModuleHandleA
GlobalFree
lstrcmpW
OutputDebugStringA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
Sleep
GlobalAlloc
SetThreadpoolTimer
GetVersion
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
RaiseException
EnterCriticalSection
LeaveCriticalSection
DisableThreadLibraryCalls
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
GetProcAddress
GetTickCount64
GetLastError
CreateThreadpoolTimer
WideCharToMultiByte
DelayLoadFailureHook
LoadLibraryExA
Exports
Exports
DllCanUnloadNow
DllGetClassObject
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ