fdProxy.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fdProxy.dll
Resource
win10v2004-20240426-en
General
-
Target
fdProxy.dll
-
Size
28KB
-
MD5
9d99426056b475b681091e11e9f5401b
-
SHA1
8bbcfc2e38e17dca5ab8cca5321822b5ff8b64b2
-
SHA256
34e4cab19449a23c19a6101130dbecdf24c1b9f6230372fb2d5f9ed2710cae94
-
SHA512
252872b53f7e2f1d37e22810a632807eeb0f185347f3266fd1ba0a10a448f9c6587e3428535e7216e8c3b4ed13eae664e993e9739134e38ecd253c470eaf3ca6
-
SSDEEP
384:J9Hy8mY/TeCoTSgzQIcpor5KFYW+XWh5uSo:/Hy0TeRSNrW8F0/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdProxy.dll
Files
-
fdProxy.dll.dll regsvr32 windows:10 windows x86 arch:x86
055c5f5c04287b517a013a2177c3f05f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
api-ms-win-core-crt-l2-1-0
_initterm
_initterm_e
oleaut32
BSTR_UserMarshal
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserFree
BSTR_UserUnmarshal
BSTR_UserSize
LPSAFEARRAY_UserSize
BSTR_UserFree
rpcrt4
NdrStubForwardingFunction
NdrCStdStubBuffer2_Release
CStdStubBuffer_Invoke
CStdStubBuffer_Connect
NdrCStdStubBuffer_Release
NdrStubCall2
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_IsIIDSupported
NdrDllUnregisterProxy
NdrDllRegisterProxy
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
NdrDllGetClassObject
NdrOleFree
NdrOleAllocate
NdrDllCanUnloadNow
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_AddRef
api-ms-win-core-com-midlproxystub-l1-1-0
ObjectStublessClient8
ObjectStublessClient10
ObjectStublessClient6
CStdStubBuffer2_QueryInterface
ObjectStublessClient5
ObjectStublessClient13
ObjectStublessClient7
ObjectStublessClient9
CStdStubBuffer2_Disconnect
ObjectStublessClient3
CStdStubBuffer2_Connect
CStdStubBuffer2_CountRefs
ObjectStublessClient4
ObjectStublessClient11
ObjectStublessClient12
NdrProxyForwardingFunction3
api-ms-win-core-libraryloader-l1-2-0
DisableThreadLibraryCalls
api-ms-win-core-heap-l1-1-0
HeapFree
GetProcessHeap
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-processthreads-l1-1-0
GetCurrentThreadId
TerminateProcess
GetCurrentProcessId
GetCurrentProcess
api-ms-win-core-sysinfo-l1-1-0
GetTickCount
GetSystemTimeAsFileTime
api-ms-win-core-util-l1-1-0
DecodePointer
EncodePointer
api-ms-win-core-errorhandling-l1-1-0
SetUnhandledExceptionFilter
UnhandledExceptionFilter
api-ms-win-core-crt-l1-1-0
_except_handler4_common
memcmp
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ