fdWNet.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fdWNet.dll
Resource
win10v2004-20240508-en
General
-
Target
fdWNet.dll
-
Size
24KB
-
MD5
eafef379ae001de685c953064bf46ab6
-
SHA1
f19e3f8118adeeb8f62df60c62a200bb6ca58109
-
SHA256
f4d07f006a39c77f0c8e17bf3c49ee49b76be758d6033903afd46cdffd085dd9
-
SHA512
ceda7164a1a7703f3c729c5f894bebca19e85a32edf909b3962d62f7d6e04e24fed92ef96e0cdd3a7184f42bd3924c34b4216c20ce3393d5d2e5c2b666fce7be
-
SSDEEP
384:NdpyJrpsKDOxNnsb3Be19cuGl544V4BHc6g/8xsF+4mxE4o1hghznWzDWrQLfUzo:A9sKDOHJ1m44V4BZfOZhhLd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdWNet.dll
Files
-
fdWNet.dll.dll regsvr32 windows:10 windows x86 arch:x86
71023f0e2b01c1d7ef87a9384652b1d4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_callnewh
_XcptFilter
_amsg_exit
_initterm
_except_handler4_common
_lock
_unlock
__dllonexit
_onexit
memmove
realloc
free
wcschr
malloc
memset
atl
ord18
ord32
ord16
ord21
ord30
ord57
ord23
ord15
api-ms-win-eventing-classicprovider-l1-1-0
GetTraceEnableFlags
TraceMessage
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceEnableLevel
GetTraceLoggerHandle
kernel32
Sleep
MultiByteToWideChar
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
UnhandledExceptionFilter
GlobalAlloc
QueueUserWorkItem
GetComputerNameW
GetLastError
InitializeCriticalSectionAndSpinCount
CloseHandle
WaitForSingleObject
DisableThreadLibraryCalls
GetModuleFileNameW
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
GlobalFree
CreateEventW
ole32
PropVariantClear
CoTaskMemAlloc
CoTaskMemFree
PropVariantCopy
CLSIDFromString
mpr
WNetGetResourceParentW
WNetGetProviderNameW
WNetOpenEnumW
WNetEnumResourceW
WNetCloseEnum
WNetGetLastErrorW
iphlpapi
GetAdaptersAddresses
ConvertInterfaceIndexToLuid
GetBestInterfaceEx
ws2_32
GetAddrInfoW
FreeAddrInfoW
WSAGetLastError
WSAStartup
WSACleanup
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ