FNGNMDConv[.]dll | Triage

Sharing

General

Target

FNGNMDConv.dll
Size

31KB
MD5

b96772f7e3b79cfe50072ad13b3197f3
SHA1

3a24baee5cba59812ba8c01679269973d6e84623
SHA256

95c3d6ea56994e17bb9ac565517e546350a37687ed7a69c98e1eee81013e8e41
SHA512

39bdeb073f2d4d2e08363a4fef91735d1df52520c0581ec966370fe510ea7cd0c7e1fae628fd1e1346444069b56d477cfc7910dc570dc322f0e16e7b4fd09eb7
SSDEEP

192:XdLQF/djm+mSokA5+Nlw5OHxTJU/u0sU5ZVznlYJL/eCuH5NIDLTBO4bpMaJANUg:XdLdEQA3wWTJUuUzGqCm+LTBfuL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FNGNMDConv.dll

Files

FNGNMDConv.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ